@partrocks/secrets 0.1.3 → 0.1.4

package/dist/index.d.ts

@@ -1,8 +1,13 @@
 import { type ClientOptions } from "./request.js";
 export { PartRocksError } from "./error.js";
 export type { ClientOptions } from "./request.js";
+export type SecretsConfig = {
+    entries: Record<string, string>;
+};
 export declare function createSecrets(options: ClientOptions): {
-    getConfig: () => Promise<{
-        entries: Record<string, string>;
-    }>;
+    getConfig: () => Promise<SecretsConfig>;
+    get: (name: string) => Promise<string>;
+    require: (name: string) => Promise<string>;
+    refresh: () => Promise<SecretsConfig>;
+    invalidate: () => void;
 };

package/dist/index.js

@@ -1,8 +1,53 @@
 import { createRequest } from "./request.js";
+import { PartRocksError } from "./error.js";
 export { PartRocksError } from "./error.js";
+const DEFAULT_CACHE_TTL_MS = 60_000;
+function cacheTtlMs(options) {
+    const ttl = options.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
+    if (!Number.isFinite(ttl) || ttl < 0) {
+        throw new RangeError("cacheTtlMs must be a finite non-negative number");
+    }
+    return ttl;
+}
 export function createSecrets(options) {
     const request = createRequest(options);
+    const ttl = cacheTtlMs(options);
+    let cache;
+    let refreshing;
+    const fetchConfig = () => request("GET", "/api/v1/config");
+    function refresh() {
+        refreshing ??= fetchConfig()
+            .then((config) => {
+            cache = {
+                config: { entries: { ...config.entries } },
+                expiresAt: Date.now() + ttl,
+            };
+            return { entries: { ...cache.config.entries } };
+        })
+            .finally(() => {
+            refreshing = undefined;
+        });
+        return refreshing;
+    }
+    async function cachedConfig() {
+        if (ttl > 0 && cache !== undefined && Date.now() < cache.expiresAt) {
+            return cache.config;
+        }
+        return refresh();
+    }
     return {
-        getConfig: () => request("GET", "/api/v1/config"),
+        getConfig: fetchConfig,
+        get: async (name) => (await cachedConfig()).entries[name],
+        require: async (name) => {
+            const value = (await cachedConfig()).entries[name];
+            if (value === undefined) {
+                throw new PartRocksError(`Secret "${name}" is not set.`, "missing_secret", 404);
+            }
+            return value;
+        },
+        refresh,
+        invalidate: () => {
+            cache = undefined;
+        },
     };
 }

package/dist/request.d.ts

@@ -1,6 +1,7 @@
 export type ClientOptions = {
     apiKey: string;
     baseUrl?: string | null;
+    cacheTtlMs?: number | null;
 };
 export type RequestOptions = {
     body?: unknown;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@partrocks/secrets",
-    "version": "0.1.3",
+    "version": "0.1.4",
     "description": "Server-side PartRocks Secrets client",
     "type": "module",
     "license": "MIT",