@prairielearn/config 3.2.1 → 4.0.1

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @prairielearn/config
 
+## 4.0.1
+
+### Patch Changes
+
+- f929a68: Replace lodash with es-toolkit
+
+## 4.0.0
+
+### Major Changes
+
+- 3914bb4: Upgrade to Node 24
+
+### Patch Changes
+
+- Updated dependencies [3914bb4]
+  - @prairielearn/aws-imds@3.0.0
+
 ## 3.2.1
 
 ### Patch Changes

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,CAAC,cAAc,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CACnE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc;;EAI7D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAS/D;AAED;;;GAGG;AACH,KAAK,oBAAoB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CAChD,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,wBAAgB,mBAAmB,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAC7D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GACtE,YAAY,CAed;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAoC3E;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAiBnD;AAED,qBAAa,YAAY,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,cAAc,CAAkB;IAExC,YAAY,MAAM,EAAE,MAAM,EAOzB;IAEK,eAAe,CAAC,OAAO,GAAE,YAAY,EAAO,iBAWjD;IAED,KAAK,SAEJ;IAED,IAAI,MAAM,qBAET;CACF","sourcesContent":["import { DescribeTagsCommand, EC2Client } from '@aws-sdk/client-ec2';\nimport { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';\nimport fs from 'fs-extra';\nimport _ from 'lodash';\nimport { z } from 'zod';\n\nimport { fetchInstanceHostname, fetchInstanceIdentity } from '@prairielearn/aws-imds';\n\ntype AbstractConfig = Record<string, unknown>;\n\nexport interface ConfigSource {\n  load: (existingConfig: AbstractConfig) => Promise<AbstractConfig>;\n}\n\nexport function makeLiteralConfigSource(config: AbstractConfig) {\n  return {\n    load: async () => config,\n  };\n}\n\nexport function makeFileConfigSource(path: string): ConfigSource {\n  return {\n    load: async () => {\n      if (!(await fs.pathExists(path))) return {};\n\n      const config = await fs.readJson(path);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\n/**\n * Extracts keys from T where string is assignable to the value type.\n * This ensures we only map environment variables to fields that accept strings.\n */\ntype StringAssignableKeys<T> = {\n  [K in keyof T]: string extends T[K] ? K : never;\n}[keyof T];\n\nexport function makeEnvConfigSource<Schema extends z.ZodTypeAny>(\n  mapping: Partial<Record<StringAssignableKeys<z.infer<Schema>>, string>>,\n): ConfigSource {\n  return {\n    load: async () => {\n      const config: Record<string, string> = {};\n\n      for (const [key, envVar] of Object.entries(mapping) as [string, string][]) {\n        const value = process.env[envVar];\n        if (value !== undefined) {\n          config[key] = value;\n        }\n      }\n\n      return config;\n    },\n  };\n}\n\nexport function makeSecretsManagerConfigSource(tagKey: string): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const identity = await fetchInstanceIdentity();\n\n      // We disable the ESLint rule here because we don't care about sharing\n      // configs between clients in this case. We only want to share configs\n      // to avoid spamming the IMDS API when creating lots of clients, but\n      // this client will only be used once, typically at application startup.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const ec2Client = new EC2Client({ region: identity.region });\n      const tags = await ec2Client.send(\n        new DescribeTagsCommand({\n          Filters: [{ Name: 'resource-id', Values: [identity.instanceId] }],\n        }),\n      );\n\n      const secretId = tags.Tags?.find((tag) => tag.Key === tagKey)?.Value;\n      if (!secretId) return {};\n\n      // As above, we don't care about sharing configs between clients.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const secretsManagerClient = new SecretsManagerClient({ region: identity.region });\n      const secretValue = await secretsManagerClient.send(\n        new GetSecretValueCommand({ SecretId: secretId }),\n      );\n      if (!secretValue.SecretString) return {};\n\n      const config = JSON.parse(secretValue.SecretString);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\nexport function makeImdsConfigSource(): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const hostname = await fetchInstanceHostname();\n      const identity = await fetchInstanceIdentity();\n\n      return {\n        hostname,\n        instanceId: identity.instanceId,\n        awsRegion: identity.region,\n      };\n    },\n  };\n}\n\nexport class ConfigLoader<Schema extends z.ZodTypeAny> {\n  private readonly schema: Schema;\n  private resolvedConfig: z.infer<Schema>;\n\n  constructor(schema: Schema) {\n    this.schema = schema;\n\n    // Get the default values from the schema. This ensures that all values\n    // have defaults, and also allows us to override nested defaults with\n    // `_.merge()` in `loadAndValidate()`.\n    this.resolvedConfig = schema.parse({});\n  }\n\n  async loadAndValidate(sources: ConfigSource[] = []) {\n    let config = this.schema.parse({});\n    // If the config setting is an array, override instead of merge\n    const mergeRule = (_obj: any, src: any) => (Array.isArray(src) ? src : undefined);\n\n    for (const source of sources) {\n      config = _.mergeWith(config, await source.load(config), mergeRule);\n    }\n\n    const parsedConfig = this.schema.parse(config);\n    _.mergeWith(this.resolvedConfig, parsedConfig, mergeRule);\n  }\n\n  reset() {\n    this.resolvedConfig = this.schema.parse({});\n  }\n\n  get config() {\n    return this.resolvedConfig;\n  }\n}\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,CAAC,cAAc,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CACnE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc;;EAI7D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAS/D;AAED;;;GAGG;AACH,KAAK,oBAAoB,CAAC,CAAC,IAAI;KAC5B,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CAChD,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,wBAAgB,mBAAmB,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAC7D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GACtE,YAAY,CAed;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAoC3E;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAiBnD;AAED,qBAAa,YAAY,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,cAAc,CAAkB;IAExC,YAAY,MAAM,EAAE,MAAM,EAOzB;IAEK,eAAe,CAAC,OAAO,GAAE,YAAY,EAAO,iBAWjD;IAED,KAAK,SAEJ;IAED,IAAI,MAAM,qBAET;CACF","sourcesContent":["import { DescribeTagsCommand, EC2Client } from '@aws-sdk/client-ec2';\nimport { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';\nimport { mergeWith } from 'es-toolkit';\nimport fs from 'fs-extra';\nimport { z } from 'zod';\n\nimport { fetchInstanceHostname, fetchInstanceIdentity } from '@prairielearn/aws-imds';\n\ntype AbstractConfig = Record<string, unknown>;\n\nexport interface ConfigSource {\n  load: (existingConfig: AbstractConfig) => Promise<AbstractConfig>;\n}\n\nexport function makeLiteralConfigSource(config: AbstractConfig) {\n  return {\n    load: async () => config,\n  };\n}\n\nexport function makeFileConfigSource(path: string): ConfigSource {\n  return {\n    load: async () => {\n      if (!(await fs.pathExists(path))) return {};\n\n      const config = await fs.readJson(path);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\n/**\n * Extracts keys from T where string is assignable to the value type.\n * This ensures we only map environment variables to fields that accept strings.\n */\ntype StringAssignableKeys<T> = {\n  [K in keyof T]: string extends T[K] ? K : never;\n}[keyof T];\n\nexport function makeEnvConfigSource<Schema extends z.ZodTypeAny>(\n  mapping: Partial<Record<StringAssignableKeys<z.infer<Schema>>, string>>,\n): ConfigSource {\n  return {\n    load: async () => {\n      const config: Record<string, string> = {};\n\n      for (const [key, envVar] of Object.entries(mapping) as [string, string][]) {\n        const value = process.env[envVar];\n        if (value !== undefined) {\n          config[key] = value;\n        }\n      }\n\n      return config;\n    },\n  };\n}\n\nexport function makeSecretsManagerConfigSource(tagKey: string): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const identity = await fetchInstanceIdentity();\n\n      // We disable the ESLint rule here because we don't care about sharing\n      // configs between clients in this case. We only want to share configs\n      // to avoid spamming the IMDS API when creating lots of clients, but\n      // this client will only be used once, typically at application startup.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const ec2Client = new EC2Client({ region: identity.region });\n      const tags = await ec2Client.send(\n        new DescribeTagsCommand({\n          Filters: [{ Name: 'resource-id', Values: [identity.instanceId] }],\n        }),\n      );\n\n      const secretId = tags.Tags?.find((tag) => tag.Key === tagKey)?.Value;\n      if (!secretId) return {};\n\n      // As above, we don't care about sharing configs between clients.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const secretsManagerClient = new SecretsManagerClient({ region: identity.region });\n      const secretValue = await secretsManagerClient.send(\n        new GetSecretValueCommand({ SecretId: secretId }),\n      );\n      if (!secretValue.SecretString) return {};\n\n      const config = JSON.parse(secretValue.SecretString);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\nexport function makeImdsConfigSource(): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const hostname = await fetchInstanceHostname();\n      const identity = await fetchInstanceIdentity();\n\n      return {\n        hostname,\n        instanceId: identity.instanceId,\n        awsRegion: identity.region,\n      };\n    },\n  };\n}\n\nexport class ConfigLoader<Schema extends z.ZodTypeAny> {\n  private readonly schema: Schema;\n  private resolvedConfig: z.infer<Schema>;\n\n  constructor(schema: Schema) {\n    this.schema = schema;\n\n    // Get the default values from the schema. This ensures that all values\n    // have defaults, and also allows us to override nested defaults with\n    // `_.merge()` in `loadAndValidate()`.\n    this.resolvedConfig = schema.parse({});\n  }\n\n  async loadAndValidate(sources: ConfigSource[] = []) {\n    let config = this.schema.parse({});\n    // If the config setting is an array, override instead of merge\n    const mergeRule = (_obj: any, src: any) => (Array.isArray(src) ? src : undefined);\n\n    for (const source of sources) {\n      config = mergeWith(config, await source.load(config), mergeRule);\n    }\n\n    const parsedConfig = this.schema.parse(config);\n    mergeWith(this.resolvedConfig, parsedConfig, mergeRule);\n  }\n\n  reset() {\n    this.resolvedConfig = this.schema.parse({});\n  }\n\n  get config() {\n    return this.resolvedConfig;\n  }\n}\n"]}

package/dist/index.js

@@ -1,7 +1,7 @@
 import { DescribeTagsCommand, EC2Client } from '@aws-sdk/client-ec2';
 import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { mergeWith } from 'es-toolkit';
 import fs from 'fs-extra';
-import _ from 'lodash';
 import { z } from 'zod';
 import { fetchInstanceHostname, fetchInstanceIdentity } from '@prairielearn/aws-imds';
 export function makeLiteralConfigSource(config) {
@@ -94,10 +94,10 @@ export class ConfigLoader {
         // If the config setting is an array, override instead of merge
         const mergeRule = (_obj, src) => (Array.isArray(src) ? src : undefined);
         for (const source of sources) {
-            config = _.mergeWith(config, await source.load(config), mergeRule);
+            config = mergeWith(config, await source.load(config), mergeRule);
         }
         const parsedConfig = this.schema.parse(config);
-        _.mergeWith(this.resolvedConfig, parsedConfig, mergeRule);
+        mergeWith(this.resolvedConfig, parsedConfig, mergeRule);
     }
     reset() {
         this.resolvedConfig = this.schema.parse({});

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,CAAC,MAAM,QAAQ,CAAC;AACvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAQtF,MAAM,UAAU,uBAAuB,CAAC,MAAsB,EAAE;IAC9D,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;KACzB,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAgB;IAC/D,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,CACpD;KACF,CAAC;AAAA,CACH;AAUD,MAAM,UAAU,mBAAmB,CACjC,OAAuE,EACzD;IACd,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,MAAM,GAA2B,EAAE,CAAC;YAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAuB,EAAE,CAAC;gBAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC;QAAA,CACf;KACF,CAAC;AAAA,CACH;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAc,EAAgB;IAC3E,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;gBACtE,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAE/C,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;aAClE,CAAC,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC;YACrE,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAEzB,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,IAAI,CACjD,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAClD,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,YAAY;gBAAE,OAAO,EAAE,CAAC;YAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,CACpD;KACF,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,GAAiB;IACnD,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;gBACtE,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAE/C,OAAO;gBACL,QAAQ;gBACR,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM;aAC3B,CAAC;QAAA,CACH;KACF,CAAC;AAAA,CACH;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAS;IACxB,cAAc,CAAkB;IAExC,YAAY,MAAc,EAAE;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,uEAAuE;QACvE,qEAAqE;QACrE,sCAAsC;QACtC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAA,CACxC;IAED,KAAK,CAAC,eAAe,CAAC,OAAO,GAAmB,EAAE,EAAE;QAClD,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnC,+DAA+D;QAC/D,MAAM,SAAS,GAAG,CAAC,IAAS,EAAE,GAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAElF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAAA,CAC3D;IAED,KAAK,GAAG;QACN,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAA,CAC7C;IAED,IAAI,MAAM,GAAG;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAAA,CAC5B;CACF","sourcesContent":["import { DescribeTagsCommand, EC2Client } from '@aws-sdk/client-ec2';\nimport { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';\nimport fs from 'fs-extra';\nimport _ from 'lodash';\nimport { z } from 'zod';\n\nimport { fetchInstanceHostname, fetchInstanceIdentity } from '@prairielearn/aws-imds';\n\ntype AbstractConfig = Record<string, unknown>;\n\nexport interface ConfigSource {\n  load: (existingConfig: AbstractConfig) => Promise<AbstractConfig>;\n}\n\nexport function makeLiteralConfigSource(config: AbstractConfig) {\n  return {\n    load: async () => config,\n  };\n}\n\nexport function makeFileConfigSource(path: string): ConfigSource {\n  return {\n    load: async () => {\n      if (!(await fs.pathExists(path))) return {};\n\n      const config = await fs.readJson(path);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\n/**\n * Extracts keys from T where string is assignable to the value type.\n * This ensures we only map environment variables to fields that accept strings.\n */\ntype StringAssignableKeys<T> = {\n  [K in keyof T]: string extends T[K] ? K : never;\n}[keyof T];\n\nexport function makeEnvConfigSource<Schema extends z.ZodTypeAny>(\n  mapping: Partial<Record<StringAssignableKeys<z.infer<Schema>>, string>>,\n): ConfigSource {\n  return {\n    load: async () => {\n      const config: Record<string, string> = {};\n\n      for (const [key, envVar] of Object.entries(mapping) as [string, string][]) {\n        const value = process.env[envVar];\n        if (value !== undefined) {\n          config[key] = value;\n        }\n      }\n\n      return config;\n    },\n  };\n}\n\nexport function makeSecretsManagerConfigSource(tagKey: string): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const identity = await fetchInstanceIdentity();\n\n      // We disable the ESLint rule here because we don't care about sharing\n      // configs between clients in this case. We only want to share configs\n      // to avoid spamming the IMDS API when creating lots of clients, but\n      // this client will only be used once, typically at application startup.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const ec2Client = new EC2Client({ region: identity.region });\n      const tags = await ec2Client.send(\n        new DescribeTagsCommand({\n          Filters: [{ Name: 'resource-id', Values: [identity.instanceId] }],\n        }),\n      );\n\n      const secretId = tags.Tags?.find((tag) => tag.Key === tagKey)?.Value;\n      if (!secretId) return {};\n\n      // As above, we don't care about sharing configs between clients.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const secretsManagerClient = new SecretsManagerClient({ region: identity.region });\n      const secretValue = await secretsManagerClient.send(\n        new GetSecretValueCommand({ SecretId: secretId }),\n      );\n      if (!secretValue.SecretString) return {};\n\n      const config = JSON.parse(secretValue.SecretString);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\nexport function makeImdsConfigSource(): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const hostname = await fetchInstanceHostname();\n      const identity = await fetchInstanceIdentity();\n\n      return {\n        hostname,\n        instanceId: identity.instanceId,\n        awsRegion: identity.region,\n      };\n    },\n  };\n}\n\nexport class ConfigLoader<Schema extends z.ZodTypeAny> {\n  private readonly schema: Schema;\n  private resolvedConfig: z.infer<Schema>;\n\n  constructor(schema: Schema) {\n    this.schema = schema;\n\n    // Get the default values from the schema. This ensures that all values\n    // have defaults, and also allows us to override nested defaults with\n    // `_.merge()` in `loadAndValidate()`.\n    this.resolvedConfig = schema.parse({});\n  }\n\n  async loadAndValidate(sources: ConfigSource[] = []) {\n    let config = this.schema.parse({});\n    // If the config setting is an array, override instead of merge\n    const mergeRule = (_obj: any, src: any) => (Array.isArray(src) ? src : undefined);\n\n    for (const source of sources) {\n      config = _.mergeWith(config, await source.load(config), mergeRule);\n    }\n\n    const parsedConfig = this.schema.parse(config);\n    _.mergeWith(this.resolvedConfig, parsedConfig, mergeRule);\n  }\n\n  reset() {\n    this.resolvedConfig = this.schema.parse({});\n  }\n\n  get config() {\n    return this.resolvedConfig;\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAQtF,MAAM,UAAU,uBAAuB,CAAC,MAAsB,EAAE;IAC9D,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;KACzB,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAgB;IAC/D,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,CACpD;KACF,CAAC;AAAA,CACH;AAUD,MAAM,UAAU,mBAAmB,CACjC,OAAuE,EACzD;IACd,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,MAAM,GAA2B,EAAE,CAAC;YAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAuB,EAAE,CAAC;gBAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC;QAAA,CACf;KACF,CAAC;AAAA,CACH;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAc,EAAgB;IAC3E,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;gBACtE,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAE/C,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;aAClE,CAAC,CACH,CAAC;YAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC;YACrE,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAEzB,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,IAAI,CACjD,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAClD,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,YAAY;gBAAE,OAAO,EAAE,CAAC;YAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,CACpD;KACF,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,GAAiB;IACnD,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;gBACtE,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAE/C,OAAO;gBACL,QAAQ;gBACR,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM;aAC3B,CAAC;QAAA,CACH;KACF,CAAC;AAAA,CACH;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAS;IACxB,cAAc,CAAkB;IAExC,YAAY,MAAc,EAAE;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,uEAAuE;QACvE,qEAAqE;QACrE,sCAAsC;QACtC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAA,CACxC;IAED,KAAK,CAAC,eAAe,CAAC,OAAO,GAAmB,EAAE,EAAE;QAClD,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnC,+DAA+D;QAC/D,MAAM,SAAS,GAAG,CAAC,IAAS,EAAE,GAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAElF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAAA,CACzD;IAED,KAAK,GAAG;QACN,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAA,CAC7C;IAED,IAAI,MAAM,GAAG;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAAA,CAC5B;CACF","sourcesContent":["import { DescribeTagsCommand, EC2Client } from '@aws-sdk/client-ec2';\nimport { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';\nimport { mergeWith } from 'es-toolkit';\nimport fs from 'fs-extra';\nimport { z } from 'zod';\n\nimport { fetchInstanceHostname, fetchInstanceIdentity } from '@prairielearn/aws-imds';\n\ntype AbstractConfig = Record<string, unknown>;\n\nexport interface ConfigSource {\n  load: (existingConfig: AbstractConfig) => Promise<AbstractConfig>;\n}\n\nexport function makeLiteralConfigSource(config: AbstractConfig) {\n  return {\n    load: async () => config,\n  };\n}\n\nexport function makeFileConfigSource(path: string): ConfigSource {\n  return {\n    load: async () => {\n      if (!(await fs.pathExists(path))) return {};\n\n      const config = await fs.readJson(path);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\n/**\n * Extracts keys from T where string is assignable to the value type.\n * This ensures we only map environment variables to fields that accept strings.\n */\ntype StringAssignableKeys<T> = {\n  [K in keyof T]: string extends T[K] ? K : never;\n}[keyof T];\n\nexport function makeEnvConfigSource<Schema extends z.ZodTypeAny>(\n  mapping: Partial<Record<StringAssignableKeys<z.infer<Schema>>, string>>,\n): ConfigSource {\n  return {\n    load: async () => {\n      const config: Record<string, string> = {};\n\n      for (const [key, envVar] of Object.entries(mapping) as [string, string][]) {\n        const value = process.env[envVar];\n        if (value !== undefined) {\n          config[key] = value;\n        }\n      }\n\n      return config;\n    },\n  };\n}\n\nexport function makeSecretsManagerConfigSource(tagKey: string): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const identity = await fetchInstanceIdentity();\n\n      // We disable the ESLint rule here because we don't care about sharing\n      // configs between clients in this case. We only want to share configs\n      // to avoid spamming the IMDS API when creating lots of clients, but\n      // this client will only be used once, typically at application startup.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const ec2Client = new EC2Client({ region: identity.region });\n      const tags = await ec2Client.send(\n        new DescribeTagsCommand({\n          Filters: [{ Name: 'resource-id', Values: [identity.instanceId] }],\n        }),\n      );\n\n      const secretId = tags.Tags?.find((tag) => tag.Key === tagKey)?.Value;\n      if (!secretId) return {};\n\n      // As above, we don't care about sharing configs between clients.\n      // eslint-disable-next-line @prairielearn/aws-client-shared-config\n      const secretsManagerClient = new SecretsManagerClient({ region: identity.region });\n      const secretValue = await secretsManagerClient.send(\n        new GetSecretValueCommand({ SecretId: secretId }),\n      );\n      if (!secretValue.SecretString) return {};\n\n      const config = JSON.parse(secretValue.SecretString);\n      return z.record(z.string(), z.any()).parse(config);\n    },\n  };\n}\n\nexport function makeImdsConfigSource(): ConfigSource {\n  return {\n    load: async (existingConfig) => {\n      if (!existingConfig.runningInEc2 && !process.env.CONFIG_LOAD_FROM_AWS) {\n        return {};\n      }\n\n      const hostname = await fetchInstanceHostname();\n      const identity = await fetchInstanceIdentity();\n\n      return {\n        hostname,\n        instanceId: identity.instanceId,\n        awsRegion: identity.region,\n      };\n    },\n  };\n}\n\nexport class ConfigLoader<Schema extends z.ZodTypeAny> {\n  private readonly schema: Schema;\n  private resolvedConfig: z.infer<Schema>;\n\n  constructor(schema: Schema) {\n    this.schema = schema;\n\n    // Get the default values from the schema. This ensures that all values\n    // have defaults, and also allows us to override nested defaults with\n    // `_.merge()` in `loadAndValidate()`.\n    this.resolvedConfig = schema.parse({});\n  }\n\n  async loadAndValidate(sources: ConfigSource[] = []) {\n    let config = this.schema.parse({});\n    // If the config setting is an array, override instead of merge\n    const mergeRule = (_obj: any, src: any) => (Array.isArray(src) ? src : undefined);\n\n    for (const source of sources) {\n      config = mergeWith(config, await source.load(config), mergeRule);\n    }\n\n    const parsedConfig = this.schema.parse(config);\n    mergeWith(this.resolvedConfig, parsedConfig, mergeRule);\n  }\n\n  reset() {\n    this.resolvedConfig = this.schema.parse({});\n  }\n\n  get config() {\n    return this.resolvedConfig;\n  }\n}\n"]}

package/package.json

@@ -1,12 +1,15 @@
 {
   "name": "@prairielearn/config",
-  "version": "3.2.1",
+  "version": "4.0.1",
   "type": "module",
   "repository": {
     "type": "git",
     "url": "https://github.com/PrairieLearn/PrairieLearn.git",
     "directory": "packages/config"
   },
+  "engines": {
+    "node": ">=24.0.0"
+  },
   "main": "dist/index.js",
   "scripts": {
     "build": "tsgo",
@@ -14,18 +17,17 @@
     "test": "vitest run --coverage"
   },
   "dependencies": {
-    "@aws-sdk/client-ec2": "^3.966.0",
-    "@aws-sdk/client-secrets-manager": "^3.966.0",
-    "@prairielearn/aws-imds": "^2.0.24",
+    "@aws-sdk/client-ec2": "^3.969.0",
+    "@aws-sdk/client-secrets-manager": "^3.969.0",
+    "@prairielearn/aws-imds": "^3.0.0",
+    "es-toolkit": "^1.43.0",
     "fs-extra": "^11.3.3",
-    "lodash": "^4.17.21",
     "zod": "^3.25.76"
   },
   "devDependencies": {
     "@prairielearn/tsconfig": "^0.0.0",
     "@types/fs-extra": "^11.0.4",
-    "@types/lodash": "^4.17.23",
-    "@types/node": "^22.19.5",
+    "@types/node": "^24.10.9",
     "@typescript/native-preview": "^7.0.0-dev.20260106.1",
     "@vitest/coverage-v8": "^4.0.17",
     "tmp-promise": "^3.0.3",

package/src/index.ts

@@ -1,7 +1,7 @@
 import { DescribeTagsCommand, EC2Client } from '@aws-sdk/client-ec2';
 import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import { mergeWith } from 'es-toolkit';
 import fs from 'fs-extra';
-import _ from 'lodash';
 import { z } from 'zod';
 
 import { fetchInstanceHostname, fetchInstanceIdentity } from '@prairielearn/aws-imds';
@@ -132,11 +132,11 @@ export class ConfigLoader<Schema extends z.ZodTypeAny> {
     const mergeRule = (_obj: any, src: any) => (Array.isArray(src) ? src : undefined);
 
     for (const source of sources) {
-      config = _.mergeWith(config, await source.load(config), mergeRule);
+      config = mergeWith(config, await source.load(config), mergeRule);
     }
 
     const parsedConfig = this.schema.parse(config);
-    _.mergeWith(this.resolvedConfig, parsedConfig, mergeRule);
+    mergeWith(this.resolvedConfig, parsedConfig, mergeRule);
   }
 
   reset() {