@replayio/app-building 1.13.0 → 1.14.0

package/dist/secrets.d.ts

@@ -3,6 +3,11 @@ export interface InfisicalConfig {
     projectId: string;
     environment: string;
 }
+/**
+ * Log in to Infisical using Universal Auth (Client ID + Client Secret).
+ * Returns a short-lived access token (default 30 day TTL).
+ */
+export declare function infisicalLogin(clientId: string, clientSecret: string): Promise<string>;
 /**
  * Fetch secrets from an Infisical folder path.
  * Returns a key-value record of secret names to values.
@@ -23,7 +28,9 @@ export declare function fetchBranchSecrets(config: InfisicalConfig, branch: stri
  */
 export declare function resolveContainerSecrets(config: InfisicalConfig): Promise<Record<string, string>>;
 /**
- * Extract Infisical config from environment variables.
- * Throws if any required Infisical var is missing.
+ * Extract Infisical config from environment variables and log in.
+ * Reads INFISICAL_CLIENT_ID, INFISICAL_CLIENT_SECRET, INFISICAL_PROJECT_ID,
+ * and INFISICAL_ENVIRONMENT from the env vars.
+ * Throws if any required var is missing.
  */
-export declare function getInfisicalConfig(envVars: Record<string, string>): InfisicalConfig;
+export declare function getInfisicalConfig(envVars: Record<string, string>): Promise<InfisicalConfig>;

package/dist/secrets.js

@@ -12,6 +12,23 @@ function getRequiredSecretKeys() {
         .filter((l) => l && l.includes("="))
         .map((l) => l.split("=")[0].trim());
 }
+/**
+ * Log in to Infisical using Universal Auth (Client ID + Client Secret).
+ * Returns a short-lived access token (default 30 day TTL).
+ */
+export async function infisicalLogin(clientId, clientSecret) {
+    const res = await fetch(`${INFISICAL_API_BASE}/api/v1/auth/universal-auth/login`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ clientId, clientSecret }),
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`Infisical login failed → ${res.status}: ${body}`);
+    }
+    const data = (await res.json());
+    return data.accessToken;
+}
 async function infisicalFetch(path, config) {
     const res = await fetch(`${INFISICAL_API_BASE}${path}`, {
         headers: {
@@ -76,20 +93,25 @@ export async function resolveContainerSecrets(config) {
     return secrets;
 }
 /**
- * Extract Infisical config from environment variables.
- * Throws if any required Infisical var is missing.
+ * Extract Infisical config from environment variables and log in.
+ * Reads INFISICAL_CLIENT_ID, INFISICAL_CLIENT_SECRET, INFISICAL_PROJECT_ID,
+ * and INFISICAL_ENVIRONMENT from the env vars.
+ * Throws if any required var is missing.
  */
-export function getInfisicalConfig(envVars) {
-    const token = envVars.INFISICAL_TOKEN;
+export async function getInfisicalConfig(envVars) {
+    const clientId = envVars.INFISICAL_CLIENT_ID;
+    const clientSecret = envVars.INFISICAL_CLIENT_SECRET;
     const projectId = envVars.INFISICAL_PROJECT_ID;
     const environment = envVars.INFISICAL_ENVIRONMENT;
     const missing = [
-        !token && "INFISICAL_TOKEN",
+        !clientId && "INFISICAL_CLIENT_ID",
+        !clientSecret && "INFISICAL_CLIENT_SECRET",
         !projectId && "INFISICAL_PROJECT_ID",
         !environment && "INFISICAL_ENVIRONMENT",
     ].filter(Boolean);
     if (missing.length > 0) {
         throw new Error(`Missing Infisical config in .env: ${missing.join(", ")}`);
     }
-    return { token: token, projectId: projectId, environment: environment };
+    const token = await infisicalLogin(clientId, clientSecret);
+    return { token, projectId: projectId, environment: environment };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@replayio/app-building",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Library for managing agentic app-building containers",
   "type": "module",
   "exports": {