@serve.zone/gitops 2.13.1

package/dist_ts/cache/classes.secrets.scan.service.js

@@ -0,0 +1,237 @@
+import { logger } from '../logging.js';
+import { CachedSecret } from './documents/classes.cached.secret.js';
+import { TTL } from './classes.cached.document.js';
+/**
+ * Centralized secrets scanning service. Fetches all secrets from all
+ * connections and upserts them into the CachedSecret collection.
+ */
+export class SecretsScanService {
+    lastScanTimestamp = 0;
+    lastScanResult = null;
+    isScanning = false;
+    connectionManager;
+    constructor(connectionManager) {
+        this.connectionManager = connectionManager;
+    }
+    /**
+     * Upsert a single secret into the cache. If a doc with the same composite ID
+     * already exists, update it in place; otherwise insert a new one.
+     */
+    async upsertSecret(secret) {
+        const id = CachedSecret.buildId(secret.connectionId, secret.scope, secret.scopeId, secret.key);
+        const existing = await CachedSecret.getInstance({ id });
+        if (existing) {
+            existing.value = secret.value;
+            existing.protected = secret.protected;
+            existing.masked = secret.masked;
+            existing.environment = secret.environment;
+            existing.scopeName = secret.scopeName;
+            existing.setTTL(TTL.HOURS_24);
+            await existing.save();
+        }
+        else {
+            const doc = CachedSecret.fromISecret(secret);
+            await doc.save();
+        }
+    }
+    /**
+     * Save an array of secrets to cache using upsert logic.
+     * Best-effort: individual failures are silently ignored.
+     */
+    async saveSecrets(secrets) {
+        for (const secret of secrets) {
+            try {
+                await this.upsertSecret(secret);
+            }
+            catch {
+                // Best-effort caching
+            }
+        }
+    }
+    /**
+     * Full scan: iterate all connections, fetch all projects+groups,
+     * fetch all secrets per entity, upsert CachedSecret docs.
+     */
+    async fullScan() {
+        if (this.isScanning) {
+            return {
+                connectionsScanned: 0,
+                secretsFound: 0,
+                errors: ['Scan already in progress'],
+                durationMs: 0,
+            };
+        }
+        this.isScanning = true;
+        const startTime = Date.now();
+        const errors = [];
+        let totalSecrets = 0;
+        let connectionsScanned = 0;
+        try {
+            const connections = this.connectionManager.getConnections();
+            for (const conn of connections) {
+                if (conn.status === 'paused')
+                    continue;
+                try {
+                    const provider = this.connectionManager.getProvider(conn.id);
+                    connectionsScanned++;
+                    // Scan project secrets
+                    try {
+                        const projects = await provider.getProjects();
+                        for (let i = 0; i < projects.length; i += 5) {
+                            const batch = projects.slice(i, i + 5);
+                            const results = await Promise.allSettled(batch.map(async (p) => {
+                                const secrets = await provider.getProjectSecrets(p.id);
+                                return secrets.map((s) => ({
+                                    ...s,
+                                    scope: 'project',
+                                    scopeId: p.id,
+                                    scopeName: p.fullPath || p.name,
+                                    connectionId: conn.id,
+                                }));
+                            }));
+                            for (const result of results) {
+                                if (result.status === 'fulfilled') {
+                                    for (const secret of result.value) {
+                                        try {
+                                            await this.upsertSecret(secret);
+                                            totalSecrets++;
+                                        }
+                                        catch (err) {
+                                            errors.push(`Save secret ${secret.key}: ${err}`);
+                                        }
+                                    }
+                                }
+                                else {
+                                    errors.push(`Fetch project secrets: ${result.reason}`);
+                                }
+                            }
+                        }
+                    }
+                    catch (err) {
+                        errors.push(`Fetch projects for ${conn.id}: ${err}`);
+                    }
+                    // Scan group secrets
+                    try {
+                        const groups = await provider.getGroups();
+                        for (let i = 0; i < groups.length; i += 5) {
+                            const batch = groups.slice(i, i + 5);
+                            const results = await Promise.allSettled(batch.map(async (g) => {
+                                const secrets = await provider.getGroupSecrets(g.id);
+                                return secrets.map((s) => ({
+                                    ...s,
+                                    scope: 'group',
+                                    scopeId: g.id,
+                                    scopeName: g.fullPath || g.name,
+                                    connectionId: conn.id,
+                                }));
+                            }));
+                            for (const result of results) {
+                                if (result.status === 'fulfilled') {
+                                    for (const secret of result.value) {
+                                        try {
+                                            await this.upsertSecret(secret);
+                                            totalSecrets++;
+                                        }
+                                        catch (err) {
+                                            errors.push(`Save secret ${secret.key}: ${err}`);
+                                        }
+                                    }
+                                }
+                                else {
+                                    errors.push(`Fetch group secrets: ${result.reason}`);
+                                }
+                            }
+                        }
+                    }
+                    catch (err) {
+                        errors.push(`Fetch groups for ${conn.id}: ${err}`);
+                    }
+                }
+                catch (err) {
+                    errors.push(`Connection ${conn.id}: ${err}`);
+                }
+            }
+        }
+        finally {
+            this.isScanning = false;
+        }
+        const result = {
+            connectionsScanned,
+            secretsFound: totalSecrets,
+            errors,
+            durationMs: Date.now() - startTime,
+        };
+        this.lastScanTimestamp = Date.now();
+        this.lastScanResult = result;
+        logger.info(`Secrets scan complete: ${totalSecrets} secrets from ${connectionsScanned} connections in ${result.durationMs}ms` +
+            (errors.length > 0 ? ` (${errors.length} errors)` : ''));
+        return result;
+    }
+    /**
+     * Scan a single entity: delete existing cached secrets for that entity,
+     * fetch fresh from provider, and save to cache.
+     */
+    async scanEntity(connectionId, scope, scopeId, scopeName) {
+        try {
+            // Delete existing cached secrets for this entity
+            const existing = await CachedSecret.getInstances({
+                connectionId,
+                scope,
+                scopeId,
+            });
+            for (const doc of existing) {
+                await doc.delete();
+            }
+            // Fetch fresh from provider
+            const provider = this.connectionManager.getProvider(connectionId);
+            const secrets = scope === 'project'
+                ? await provider.getProjectSecrets(scopeId)
+                : await provider.getGroupSecrets(scopeId);
+            // Save to cache
+            for (const s of secrets) {
+                const doc = CachedSecret.fromISecret({
+                    ...s,
+                    scope,
+                    scopeId,
+                    scopeName: scopeName || s.scopeName || '',
+                    connectionId,
+                });
+                await doc.save();
+            }
+        }
+        catch (err) {
+            logger.error(`scanEntity failed for ${connectionId}/${scope}/${scopeId}: ${err}`);
+        }
+    }
+    /**
+     * Get cached secrets matching the filter criteria.
+     */
+    async getCachedSecrets(filter) {
+        // deno-lint-ignore no-explicit-any
+        const query = {
+            connectionId: filter.connectionId,
+            scope: filter.scope,
+        };
+        if (filter.scopeId) {
+            query.scopeId = filter.scopeId;
+        }
+        const docs = await CachedSecret.getInstances(query);
+        // Filter out expired docs
+        const now = Date.now();
+        return docs
+            .filter((d) => d.expiresAt > now)
+            .map((d) => d.toISecret());
+    }
+    /**
+     * Check if non-expired cached data exists for the given connection+scope.
+     */
+    async hasCachedData(connectionId, scope) {
+        const docs = await CachedSecret.getInstances({
+            connectionId,
+            scope,
+            expiresAt: { $gt: Date.now() },
+        });
+        return docs.length > 0;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/cache/documents/classes.cached.project.d.ts

@@ -0,0 +1,13 @@
+import { CachedDocument } from '../classes.cached.document.js';
+/**
+ * Cached project data from git providers. TTL: 5 minutes.
+ */
+export declare class CachedProject extends CachedDocument<CachedProject> {
+    id: string;
+    connectionId: string;
+    projectName: string;
+    projectUrl: string;
+    description: string;
+    defaultBranch: string;
+    constructor();
+}

package/dist_ts/cache/documents/classes.cached.project.js

@@ -0,0 +1,101 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import * as plugins from '../../plugins.js';
+import { CacheDb } from '../classes.cachedb.js';
+import { CachedDocument, TTL } from '../classes.cached.document.js';
+/**
+ * Cached project data from git providers. TTL: 5 minutes.
+ */
+let CachedProject = (() => {
+    let _classDecorators = [plugins.smartdata.Collection(() => CacheDb.getInstance().getDb())];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = CachedDocument;
+    let _id_decorators;
+    let _id_initializers = [];
+    let _id_extraInitializers = [];
+    let _connectionId_decorators;
+    let _connectionId_initializers = [];
+    let _connectionId_extraInitializers = [];
+    let _projectName_decorators;
+    let _projectName_initializers = [];
+    let _projectName_extraInitializers = [];
+    let _projectUrl_decorators;
+    let _projectUrl_initializers = [];
+    let _projectUrl_extraInitializers = [];
+    let _description_decorators;
+    let _description_initializers = [];
+    let _description_extraInitializers = [];
+    let _defaultBranch_decorators;
+    let _defaultBranch_initializers = [];
+    let _defaultBranch_extraInitializers = [];
+    var CachedProject = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _id_decorators = [plugins.smartdata.unI()];
+            _connectionId_decorators = [plugins.smartdata.svDb()];
+            _projectName_decorators = [plugins.smartdata.svDb()];
+            _projectUrl_decorators = [plugins.smartdata.svDb()];
+            _description_decorators = [plugins.smartdata.svDb()];
+            _defaultBranch_decorators = [plugins.smartdata.svDb()];
+            __esDecorate(null, null, _id_decorators, { kind: "field", name: "id", static: false, private: false, access: { has: obj => "id" in obj, get: obj => obj.id, set: (obj, value) => { obj.id = value; } }, metadata: _metadata }, _id_initializers, _id_extraInitializers);
+            __esDecorate(null, null, _connectionId_decorators, { kind: "field", name: "connectionId", static: false, private: false, access: { has: obj => "connectionId" in obj, get: obj => obj.connectionId, set: (obj, value) => { obj.connectionId = value; } }, metadata: _metadata }, _connectionId_initializers, _connectionId_extraInitializers);
+            __esDecorate(null, null, _projectName_decorators, { kind: "field", name: "projectName", static: false, private: false, access: { has: obj => "projectName" in obj, get: obj => obj.projectName, set: (obj, value) => { obj.projectName = value; } }, metadata: _metadata }, _projectName_initializers, _projectName_extraInitializers);
+            __esDecorate(null, null, _projectUrl_decorators, { kind: "field", name: "projectUrl", static: false, private: false, access: { has: obj => "projectUrl" in obj, get: obj => obj.projectUrl, set: (obj, value) => { obj.projectUrl = value; } }, metadata: _metadata }, _projectUrl_initializers, _projectUrl_extraInitializers);
+            __esDecorate(null, null, _description_decorators, { kind: "field", name: "description", static: false, private: false, access: { has: obj => "description" in obj, get: obj => obj.description, set: (obj, value) => { obj.description = value; } }, metadata: _metadata }, _description_initializers, _description_extraInitializers);
+            __esDecorate(null, null, _defaultBranch_decorators, { kind: "field", name: "defaultBranch", static: false, private: false, access: { has: obj => "defaultBranch" in obj, get: obj => obj.defaultBranch, set: (obj, value) => { obj.defaultBranch = value; } }, metadata: _metadata }, _defaultBranch_initializers, _defaultBranch_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            CachedProject = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        id = __runInitializers(this, _id_initializers, '');
+        connectionId = (__runInitializers(this, _id_extraInitializers), __runInitializers(this, _connectionId_initializers, ''));
+        projectName = (__runInitializers(this, _connectionId_extraInitializers), __runInitializers(this, _projectName_initializers, ''));
+        projectUrl = (__runInitializers(this, _projectName_extraInitializers), __runInitializers(this, _projectUrl_initializers, ''));
+        description = (__runInitializers(this, _projectUrl_extraInitializers), __runInitializers(this, _description_initializers, ''));
+        defaultBranch = (__runInitializers(this, _description_extraInitializers), __runInitializers(this, _defaultBranch_initializers, ''));
+        constructor() {
+            super();
+            __runInitializers(this, _defaultBranch_extraInitializers);
+            this.setTTL(TTL.MINUTES_5);
+        }
+    };
+    return CachedProject = _classThis;
+})();
+export { CachedProject };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/cache/documents/classes.cached.secret.d.ts

@@ -0,0 +1,24 @@
+import { CachedDocument } from '../classes.cached.document.js';
+import type { ISecret } from '../../../dist_ts_interfaces/data/secret.js';
+/**
+ * Cached secret data from git providers. TTL: 24 hours.
+ */
+export declare class CachedSecret extends CachedDocument<CachedSecret> {
+    id: string;
+    connectionId: string;
+    scope: 'project' | 'group';
+    scopeId: string;
+    scopeName: string;
+    key: string;
+    value: string;
+    protected: boolean;
+    masked: boolean;
+    environment: string;
+    constructor();
+    /** Build the composite unique ID */
+    static buildId(connectionId: string, scope: string, scopeId: string, key: string): string;
+    /** Create a CachedSecret from an ISecret */
+    static fromISecret(secret: ISecret): CachedSecret;
+    /** Convert back to ISecret */
+    toISecret(): ISecret;
+}

package/dist_ts/cache/documents/classes.cached.secret.js

@@ -0,0 +1,158 @@
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import * as plugins from '../../plugins.js';
+import { CacheDb } from '../classes.cachedb.js';
+import { CachedDocument, TTL } from '../classes.cached.document.js';
+/**
+ * Cached secret data from git providers. TTL: 24 hours.
+ */
+let CachedSecret = (() => {
+    let _classDecorators = [plugins.smartdata.Collection(() => CacheDb.getInstance().getDb())];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    let _classSuper = CachedDocument;
+    let _id_decorators;
+    let _id_initializers = [];
+    let _id_extraInitializers = [];
+    let _connectionId_decorators;
+    let _connectionId_initializers = [];
+    let _connectionId_extraInitializers = [];
+    let _scope_decorators;
+    let _scope_initializers = [];
+    let _scope_extraInitializers = [];
+    let _scopeId_decorators;
+    let _scopeId_initializers = [];
+    let _scopeId_extraInitializers = [];
+    let _scopeName_decorators;
+    let _scopeName_initializers = [];
+    let _scopeName_extraInitializers = [];
+    let _key_decorators;
+    let _key_initializers = [];
+    let _key_extraInitializers = [];
+    let _value_decorators;
+    let _value_initializers = [];
+    let _value_extraInitializers = [];
+    let _protected_decorators;
+    let _protected_initializers = [];
+    let _protected_extraInitializers = [];
+    let _masked_decorators;
+    let _masked_initializers = [];
+    let _masked_extraInitializers = [];
+    let _environment_decorators;
+    let _environment_initializers = [];
+    let _environment_extraInitializers = [];
+    var CachedSecret = class extends _classSuper {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _id_decorators = [plugins.smartdata.unI()];
+            _connectionId_decorators = [plugins.smartdata.svDb()];
+            _scope_decorators = [plugins.smartdata.svDb()];
+            _scopeId_decorators = [plugins.smartdata.svDb()];
+            _scopeName_decorators = [plugins.smartdata.svDb()];
+            _key_decorators = [plugins.smartdata.svDb()];
+            _value_decorators = [plugins.smartdata.svDb()];
+            _protected_decorators = [plugins.smartdata.svDb()];
+            _masked_decorators = [plugins.smartdata.svDb()];
+            _environment_decorators = [plugins.smartdata.svDb()];
+            __esDecorate(null, null, _id_decorators, { kind: "field", name: "id", static: false, private: false, access: { has: obj => "id" in obj, get: obj => obj.id, set: (obj, value) => { obj.id = value; } }, metadata: _metadata }, _id_initializers, _id_extraInitializers);
+            __esDecorate(null, null, _connectionId_decorators, { kind: "field", name: "connectionId", static: false, private: false, access: { has: obj => "connectionId" in obj, get: obj => obj.connectionId, set: (obj, value) => { obj.connectionId = value; } }, metadata: _metadata }, _connectionId_initializers, _connectionId_extraInitializers);
+            __esDecorate(null, null, _scope_decorators, { kind: "field", name: "scope", static: false, private: false, access: { has: obj => "scope" in obj, get: obj => obj.scope, set: (obj, value) => { obj.scope = value; } }, metadata: _metadata }, _scope_initializers, _scope_extraInitializers);
+            __esDecorate(null, null, _scopeId_decorators, { kind: "field", name: "scopeId", static: false, private: false, access: { has: obj => "scopeId" in obj, get: obj => obj.scopeId, set: (obj, value) => { obj.scopeId = value; } }, metadata: _metadata }, _scopeId_initializers, _scopeId_extraInitializers);
+            __esDecorate(null, null, _scopeName_decorators, { kind: "field", name: "scopeName", static: false, private: false, access: { has: obj => "scopeName" in obj, get: obj => obj.scopeName, set: (obj, value) => { obj.scopeName = value; } }, metadata: _metadata }, _scopeName_initializers, _scopeName_extraInitializers);
+            __esDecorate(null, null, _key_decorators, { kind: "field", name: "key", static: false, private: false, access: { has: obj => "key" in obj, get: obj => obj.key, set: (obj, value) => { obj.key = value; } }, metadata: _metadata }, _key_initializers, _key_extraInitializers);
+            __esDecorate(null, null, _value_decorators, { kind: "field", name: "value", static: false, private: false, access: { has: obj => "value" in obj, get: obj => obj.value, set: (obj, value) => { obj.value = value; } }, metadata: _metadata }, _value_initializers, _value_extraInitializers);
+            __esDecorate(null, null, _protected_decorators, { kind: "field", name: "protected", static: false, private: false, access: { has: obj => "protected" in obj, get: obj => obj.protected, set: (obj, value) => { obj.protected = value; } }, metadata: _metadata }, _protected_initializers, _protected_extraInitializers);
+            __esDecorate(null, null, _masked_decorators, { kind: "field", name: "masked", static: false, private: false, access: { has: obj => "masked" in obj, get: obj => obj.masked, set: (obj, value) => { obj.masked = value; } }, metadata: _metadata }, _masked_initializers, _masked_extraInitializers);
+            __esDecorate(null, null, _environment_decorators, { kind: "field", name: "environment", static: false, private: false, access: { has: obj => "environment" in obj, get: obj => obj.environment, set: (obj, value) => { obj.environment = value; } }, metadata: _metadata }, _environment_initializers, _environment_extraInitializers);
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            CachedSecret = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        id = __runInitializers(this, _id_initializers, '');
+        connectionId = (__runInitializers(this, _id_extraInitializers), __runInitializers(this, _connectionId_initializers, ''));
+        scope = (__runInitializers(this, _connectionId_extraInitializers), __runInitializers(this, _scope_initializers, 'project'));
+        scopeId = (__runInitializers(this, _scope_extraInitializers), __runInitializers(this, _scopeId_initializers, ''));
+        scopeName = (__runInitializers(this, _scopeId_extraInitializers), __runInitializers(this, _scopeName_initializers, ''));
+        key = (__runInitializers(this, _scopeName_extraInitializers), __runInitializers(this, _key_initializers, ''));
+        value = (__runInitializers(this, _key_extraInitializers), __runInitializers(this, _value_initializers, ''));
+        protected = (__runInitializers(this, _value_extraInitializers), __runInitializers(this, _protected_initializers, false));
+        masked = (__runInitializers(this, _protected_extraInitializers), __runInitializers(this, _masked_initializers, false));
+        environment = (__runInitializers(this, _masked_extraInitializers), __runInitializers(this, _environment_initializers, ''));
+        constructor() {
+            super();
+            __runInitializers(this, _environment_extraInitializers);
+            this.setTTL(TTL.HOURS_24);
+        }
+        /** Build the composite unique ID */
+        static buildId(connectionId, scope, scopeId, key) {
+            return `${connectionId}:${scope}:${scopeId}:${key}`;
+        }
+        /** Create a CachedSecret from an ISecret */
+        static fromISecret(secret) {
+            const doc = new CachedSecret();
+            doc.id = CachedSecret.buildId(secret.connectionId, secret.scope, secret.scopeId, secret.key);
+            doc.connectionId = secret.connectionId;
+            doc.scope = secret.scope;
+            doc.scopeId = secret.scopeId;
+            doc.scopeName = secret.scopeName;
+            doc.key = secret.key;
+            doc.value = secret.value;
+            doc.protected = secret.protected;
+            doc.masked = secret.masked;
+            doc.environment = secret.environment;
+            return doc;
+        }
+        /** Convert back to ISecret */
+        toISecret() {
+            return {
+                connectionId: this.connectionId,
+                scope: this.scope,
+                scopeId: this.scopeId,
+                scopeName: this.scopeName,
+                key: this.key,
+                value: this.value,
+                protected: this.protected,
+                masked: this.masked,
+                environment: this.environment,
+            };
+        }
+    };
+    return CachedSecret = _classThis;
+})();
+export { CachedSecret };
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/cache/documents/index.d.ts

@@ -0,0 +1,2 @@
+export { CachedProject } from './classes.cached.project.js';
+export { CachedSecret } from './classes.cached.secret.js';

package/dist_ts/cache/documents/index.js

@@ -0,0 +1,3 @@
+export { CachedProject } from './classes.cached.project.js';
+export { CachedSecret } from './classes.cached.secret.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi90cy9jYWNoZS9kb2N1bWVudHMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxFQUFFLGFBQWEsRUFBRSxNQUFNLDZCQUE2QixDQUFDO0FBQzVELE9BQU8sRUFBRSxZQUFZLEVBQUUsTUFBTSw0QkFBNEIsQ0FBQyJ9

package/dist_ts/cache/index.d.ts

@@ -0,0 +1,7 @@
+export { CacheDb } from './classes.cachedb.js';
+export type { ICacheDbOptions } from './classes.cachedb.js';
+export { CachedDocument, TTL } from './classes.cached.document.js';
+export { CacheCleaner } from './classes.cache.cleaner.js';
+export { SecretsScanService } from './classes.secrets.scan.service.js';
+export type { IScanResult } from './classes.secrets.scan.service.js';
+export * from './documents/index.js';

package/dist_ts/cache/index.js

@@ -0,0 +1,6 @@
+export { CacheDb } from './classes.cachedb.js';
+export { CachedDocument, TTL } from './classes.cached.document.js';
+export { CacheCleaner } from './classes.cache.cleaner.js';
+export { SecretsScanService } from './classes.secrets.scan.service.js';
+export * from './documents/index.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9jYWNoZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsT0FBTyxFQUFFLE1BQU0sc0JBQXNCLENBQUM7QUFFL0MsT0FBTyxFQUFFLGNBQWMsRUFBRSxHQUFHLEVBQUUsTUFBTSw4QkFBOEIsQ0FBQztBQUNuRSxPQUFPLEVBQUUsWUFBWSxFQUFFLE1BQU0sNEJBQTRCLENBQUM7QUFDMUQsT0FBTyxFQUFFLGtCQUFrQixFQUFFLE1BQU0sbUNBQW1DLENBQUM7QUFFdkUsY0FBYyxzQkFBc0IsQ0FBQyJ9

package/dist_ts/classes/actionlog.d.ts

@@ -0,0 +1,19 @@
+import type * as interfaces from '../../dist_ts_interfaces/index.js';
+import type { StorageManager } from '../storage/index.js';
+/**
+ * Persists and queries action log entries via StorageManager.
+ * Entries are stored as individual JSON files keyed by timestamp-id.
+ */
+export declare class ActionLog {
+    private storageManager;
+    constructor(storageManager: StorageManager);
+    append(entry: Omit<interfaces.data.IActionLogEntry, 'id' | 'timestamp'>): Promise<interfaces.data.IActionLogEntry>;
+    query(opts?: {
+        limit?: number;
+        offset?: number;
+        entityType?: interfaces.data.TActionEntity;
+    }): Promise<{
+        entries: interfaces.data.IActionLogEntry[];
+        total: number;
+    }>;
+}