@shipfox/api-secrets 2.0.0

package/dist/metrics/instance.js

@@ -0,0 +1,151 @@
+import { instanceMetrics } from '@shipfox/node-opentelemetry';
+import { DekUnwrapError, DekWrapError, KekVersionStrandedError, NamespaceValidationError, SecretBatchDuplicateKeyError, SecretBatchScopeMismatchError, SecretDecryptionError, SecretKeyValidationError, SecretNotFoundError, SecretValueTooLargeError, UnknownSecretStoreError, VariableNotFoundError, WorkspaceSecretCapExceededError } from '#core/errors.js';
+const meter = instanceMetrics.getMeter('secrets');
+const operationCount = meter.createCounter('secrets_operation', {
+    description: 'Secrets module operation attempts by resource, surface, scope, and outcome'
+});
+const operationDuration = meter.createHistogram('secrets_operation_duration', {
+    description: 'Secrets module operation duration',
+    unit: 'ms',
+    advice: {
+        explicitBucketBoundaries: [
+            1,
+            5,
+            10,
+            25,
+            50,
+            100,
+            250,
+            500,
+            1000,
+            2500,
+            5000
+        ]
+    }
+});
+const entriesMutatedCount = meter.createCounter('secrets_entries_mutated', {
+    description: 'Secret and variable entries mutated by operation, effect, and surface'
+});
+const dekAccessCount = meter.createCounter('secrets_dek_access', {
+    description: 'Plaintext data-encryption key access attempts by outcome'
+});
+const dekAccessDuration = meter.createHistogram('secrets_dek_access_duration', {
+    description: 'Plaintext data-encryption key access duration',
+    unit: 'ms',
+    advice: {
+        explicitBucketBoundaries: [
+            0,
+            1,
+            5,
+            10,
+            25,
+            50,
+            100,
+            250,
+            500,
+            1000
+        ]
+    }
+});
+const kekRotationCount = meter.createCounter('secrets_kek_rotation', {
+    description: 'Workspace data-key KEK rotation outcomes'
+});
+const kekRotationDuration = meter.createHistogram('secrets_kek_rotation_duration', {
+    description: 'Workspace data-key KEK rotation duration',
+    unit: 'ms',
+    advice: {
+        explicitBucketBoundaries: [
+            10,
+            50,
+            100,
+            250,
+            500,
+            1000,
+            2500,
+            5000,
+            10000,
+            30000
+        ]
+    }
+});
+function recordMetric(record) {
+    try {
+        record();
+    } catch  {
+    // Metrics must not affect secret storage outcomes.
+    }
+}
+export function operationScope(params) {
+    return params.projectId ? 'project' : 'workspace';
+}
+export function classifySecretsOperationError(error) {
+    if (error instanceof SecretNotFoundError || error instanceof VariableNotFoundError) {
+        return 'not_found';
+    }
+    if (error instanceof WorkspaceSecretCapExceededError) return 'cap_exceeded';
+    if (error instanceof SecretValueTooLargeError) return 'value_too_large';
+    if (error instanceof SecretDecryptionError) return 'decryption_failed';
+    if (error instanceof DekUnwrapError || error instanceof DekWrapError) return 'crypto_failed';
+    if (error instanceof NamespaceValidationError || error instanceof SecretKeyValidationError || error instanceof SecretBatchDuplicateKeyError || error instanceof SecretBatchScopeMismatchError || error instanceof UnknownSecretStoreError) {
+        return 'validation_failed';
+    }
+    return 'failure';
+}
+export function recordSecretsOperation(params) {
+    recordMetric(()=>{
+        const labels = {
+            resource: params.resource,
+            operation: params.operation,
+            surface: params.surface,
+            scope: params.scope,
+            outcome: params.outcome
+        };
+        operationCount.add(1, labels);
+        operationDuration.record(params.durationMs, labels);
+    });
+}
+export function recordSecretsEntriesMutated(params) {
+    if (params.count <= 0) return;
+    recordMetric(()=>entriesMutatedCount.add(params.count, {
+            resource: params.resource,
+            operation: params.operation,
+            effect: params.effect,
+            surface: params.surface
+        }));
+}
+export function recordSecretsDekAccess(params) {
+    recordMetric(()=>{
+        dekAccessCount.add(1, {
+            outcome: params.outcome
+        });
+        dekAccessDuration.record(params.durationMs, {
+            outcome: params.outcome
+        });
+    });
+}
+export function classifyDekAccessError(error) {
+    if (error instanceof DekUnwrapError) return 'unwrap_failed';
+    if (error instanceof DekWrapError) return 'wrap_failed';
+    return 'failure';
+}
+export function recordSecretsKekRotation(params) {
+    const count = params.count ?? 1;
+    if (count <= 0 && params.durationMs === undefined) return;
+    recordMetric(()=>{
+        if (count > 0) kekRotationCount.add(count, {
+            outcome: params.outcome
+        });
+        if (params.durationMs !== undefined) {
+            kekRotationDuration.record(params.durationMs, {
+                outcome: params.outcome
+            });
+        }
+    });
+}
+export function classifyKekRotationError(error) {
+    if (error instanceof KekVersionStrandedError) return 'stranded';
+    if (error instanceof DekUnwrapError || error instanceof DekWrapError) return 'failure';
+    return 'failure';
+}
+
+//# sourceMappingURL=instance.js.map

package/dist/metrics/instance.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/metrics/instance.ts"],"sourcesContent":["import {instanceMetrics} from '@shipfox/node-opentelemetry';\nimport {\n  DekUnwrapError,\n  DekWrapError,\n  KekVersionStrandedError,\n  NamespaceValidationError,\n  SecretBatchDuplicateKeyError,\n  SecretBatchScopeMismatchError,\n  SecretDecryptionError,\n  SecretKeyValidationError,\n  SecretNotFoundError,\n  SecretValueTooLargeError,\n  UnknownSecretStoreError,\n  VariableNotFoundError,\n  WorkspaceSecretCapExceededError,\n} from '#core/errors.js';\n\nconst meter = instanceMetrics.getMeter('secrets');\n\nexport type SecretsMetricResource = 'secret' | 'variable';\nexport type SecretsMetricOperation = 'get' | 'get_namespace' | 'set' | 'delete' | 'list';\nexport type SecretsMetricSurface = 'internal' | 'management';\nexport type SecretsMetricScope = 'workspace' | 'project';\nexport type SecretsOperationOutcome =\n  | 'success'\n  | 'not_found'\n  | 'validation_failed'\n  | 'cap_exceeded'\n  | 'value_too_large'\n  | 'decryption_failed'\n  | 'crypto_failed'\n  | 'failure';\nexport type SecretsMutationEffect = 'created' | 'updated' | 'deleted';\nexport type SecretsDekAccessOutcome =\n  | 'cache_hit'\n  | 'cache_expired'\n  | 'db_unwrapped'\n  | 'generated'\n  | 'unwrap_failed'\n  | 'wrap_failed'\n  | 'failure';\nexport type SecretsKekRotationOutcome =\n  | 'rotated'\n  | 'skipped_current'\n  | 'skipped_race'\n  | 'none'\n  | 'stranded'\n  | 'failure';\n\nconst operationCount = meter.createCounter<{\n  resource: SecretsMetricResource;\n  operation: SecretsMetricOperation;\n  surface: SecretsMetricSurface;\n  scope: SecretsMetricScope;\n  outcome: SecretsOperationOutcome;\n}>('secrets_operation', {\n  description: 'Secrets module operation attempts by resource, surface, scope, and outcome',\n});\n\nconst operationDuration = meter.createHistogram<{\n  resource: SecretsMetricResource;\n  operation: SecretsMetricOperation;\n  surface: SecretsMetricSurface;\n  scope: SecretsMetricScope;\n  outcome: SecretsOperationOutcome;\n}>('secrets_operation_duration', {\n  description: 'Secrets module operation duration',\n  unit: 'ms',\n  advice: {explicitBucketBoundaries: [1, 5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000]},\n});\n\nconst entriesMutatedCount = meter.createCounter<{\n  resource: SecretsMetricResource;\n  operation: 'set' | 'delete';\n  effect: SecretsMutationEffect;\n  surface: SecretsMetricSurface;\n}>('secrets_entries_mutated', {\n  description: 'Secret and variable entries mutated by operation, effect, and surface',\n});\n\nconst dekAccessCount = meter.createCounter<{outcome: SecretsDekAccessOutcome}>(\n  'secrets_dek_access',\n  {description: 'Plaintext data-encryption key access attempts by outcome'},\n);\n\nconst dekAccessDuration = meter.createHistogram<{outcome: SecretsDekAccessOutcome}>(\n  'secrets_dek_access_duration',\n  {\n    description: 'Plaintext data-encryption key access duration',\n    unit: 'ms',\n    advice: {explicitBucketBoundaries: [0, 1, 5, 10, 25, 50, 100, 250, 500, 1000]},\n  },\n);\n\nconst kekRotationCount = meter.createCounter<{outcome: SecretsKekRotationOutcome}>(\n  'secrets_kek_rotation',\n  {description: 'Workspace data-key KEK rotation outcomes'},\n);\n\nconst kekRotationDuration = meter.createHistogram<{outcome: SecretsKekRotationOutcome}>(\n  'secrets_kek_rotation_duration',\n  {\n    description: 'Workspace data-key KEK rotation duration',\n    unit: 'ms',\n    advice: {explicitBucketBoundaries: [10, 50, 100, 250, 500, 1000, 2500, 5000, 10000, 30000]},\n  },\n);\n\nfunction recordMetric(record: () => void): void {\n  try {\n    record();\n  } catch {\n    // Metrics must not affect secret storage outcomes.\n  }\n}\n\nexport function operationScope(params: {\n  projectId?: string | null | undefined;\n}): SecretsMetricScope {\n  return params.projectId ? 'project' : 'workspace';\n}\n\nexport function classifySecretsOperationError(error: unknown): SecretsOperationOutcome {\n  if (error instanceof SecretNotFoundError || error instanceof VariableNotFoundError) {\n    return 'not_found';\n  }\n  if (error instanceof WorkspaceSecretCapExceededError) return 'cap_exceeded';\n  if (error instanceof SecretValueTooLargeError) return 'value_too_large';\n  if (error instanceof SecretDecryptionError) return 'decryption_failed';\n  if (error instanceof DekUnwrapError || error instanceof DekWrapError) return 'crypto_failed';\n  if (\n    error instanceof NamespaceValidationError ||\n    error instanceof SecretKeyValidationError ||\n    error instanceof SecretBatchDuplicateKeyError ||\n    error instanceof SecretBatchScopeMismatchError ||\n    error instanceof UnknownSecretStoreError\n  ) {\n    return 'validation_failed';\n  }\n  return 'failure';\n}\n\nexport function recordSecretsOperation(params: {\n  resource: SecretsMetricResource;\n  operation: SecretsMetricOperation;\n  surface: SecretsMetricSurface;\n  scope: SecretsMetricScope;\n  outcome: SecretsOperationOutcome;\n  durationMs: number;\n}): void {\n  recordMetric(() => {\n    const labels = {\n      resource: params.resource,\n      operation: params.operation,\n      surface: params.surface,\n      scope: params.scope,\n      outcome: params.outcome,\n    };\n    operationCount.add(1, labels);\n    operationDuration.record(params.durationMs, labels);\n  });\n}\n\nexport function recordSecretsEntriesMutated(params: {\n  resource: SecretsMetricResource;\n  operation: 'set' | 'delete';\n  effect: SecretsMutationEffect;\n  surface: SecretsMetricSurface;\n  count: number;\n}): void {\n  if (params.count <= 0) return;\n\n  recordMetric(() =>\n    entriesMutatedCount.add(params.count, {\n      resource: params.resource,\n      operation: params.operation,\n      effect: params.effect,\n      surface: params.surface,\n    }),\n  );\n}\n\nexport function recordSecretsDekAccess(params: {\n  outcome: SecretsDekAccessOutcome;\n  durationMs: number;\n}): void {\n  recordMetric(() => {\n    dekAccessCount.add(1, {outcome: params.outcome});\n    dekAccessDuration.record(params.durationMs, {outcome: params.outcome});\n  });\n}\n\nexport function classifyDekAccessError(error: unknown): SecretsDekAccessOutcome {\n  if (error instanceof DekUnwrapError) return 'unwrap_failed';\n  if (error instanceof DekWrapError) return 'wrap_failed';\n  return 'failure';\n}\n\nexport function recordSecretsKekRotation(params: {\n  outcome: SecretsKekRotationOutcome;\n  count?: number | undefined;\n  durationMs?: number | undefined;\n}): void {\n  const count = params.count ?? 1;\n  if (count <= 0 && params.durationMs === undefined) return;\n\n  recordMetric(() => {\n    if (count > 0) kekRotationCount.add(count, {outcome: params.outcome});\n    if (params.durationMs !== undefined) {\n      kekRotationDuration.record(params.durationMs, {outcome: params.outcome});\n    }\n  });\n}\n\nexport function classifyKekRotationError(error: unknown): SecretsKekRotationOutcome {\n  if (error instanceof KekVersionStrandedError) return 'stranded';\n  if (error instanceof DekUnwrapError || error instanceof DekWrapError) return 'failure';\n  return 'failure';\n}\n"],"names":["instanceMetrics","DekUnwrapError","DekWrapError","KekVersionStrandedError","NamespaceValidationError","SecretBatchDuplicateKeyError","SecretBatchScopeMismatchError","SecretDecryptionError","SecretKeyValidationError","SecretNotFoundError","SecretValueTooLargeError","UnknownSecretStoreError","VariableNotFoundError","WorkspaceSecretCapExceededError","meter","getMeter","operationCount","createCounter","description","operationDuration","createHistogram","unit","advice","explicitBucketBoundaries","entriesMutatedCount","dekAccessCount","dekAccessDuration","kekRotationCount","kekRotationDuration","recordMetric","record","operationScope","params","projectId","classifySecretsOperationError","error","recordSecretsOperation","labels","resource","operation","surface","scope","outcome","add","durationMs","recordSecretsEntriesMutated","count","effect","recordSecretsDekAccess","classifyDekAccessError","recordSecretsKekRotation","undefined","classifyKekRotationError"],"mappings":"AAAA,SAAQA,eAAe,QAAO,8BAA8B;AAC5D,SACEC,cAAc,EACdC,YAAY,EACZC,uBAAuB,EACvBC,wBAAwB,EACxBC,4BAA4B,EAC5BC,6BAA6B,EAC7BC,qBAAqB,EACrBC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,uBAAuB,EACvBC,qBAAqB,EACrBC,+BAA+B,QAC1B,kBAAkB;AAEzB,MAAMC,QAAQd,gBAAgBe,QAAQ,CAAC;AAgCvC,MAAMC,iBAAiBF,MAAMG,aAAa,CAMvC,qBAAqB;IACtBC,aAAa;AACf;AAEA,MAAMC,oBAAoBL,MAAMM,eAAe,CAM5C,8BAA8B;IAC/BF,aAAa;IACbG,MAAM;IACNC,QAAQ;QAACC,0BAA0B;YAAC;YAAG;YAAG;YAAI;YAAI;YAAI;YAAK;YAAK;YAAK;YAAM;YAAM;SAAK;IAAA;AACxF;AAEA,MAAMC,sBAAsBV,MAAMG,aAAa,CAK5C,2BAA2B;IAC5BC,aAAa;AACf;AAEA,MAAMO,iBAAiBX,MAAMG,aAAa,CACxC,sBACA;IAACC,aAAa;AAA0D;AAG1E,MAAMQ,oBAAoBZ,MAAMM,eAAe,CAC7C,+BACA;IACEF,aAAa;IACbG,MAAM;IACNC,QAAQ;QAACC,0BAA0B;YAAC;YAAG;YAAG;YAAG;YAAI;YAAI;YAAI;YAAK;YAAK;YAAK;SAAK;IAAA;AAC/E;AAGF,MAAMI,mBAAmBb,MAAMG,aAAa,CAC1C,wBACA;IAACC,aAAa;AAA0C;AAG1D,MAAMU,sBAAsBd,MAAMM,eAAe,CAC/C,iCACA;IACEF,aAAa;IACbG,MAAM;IACNC,QAAQ;QAACC,0BAA0B;YAAC;YAAI;YAAI;YAAK;YAAK;YAAK;YAAM;YAAM;YAAM;YAAO;SAAM;IAAA;AAC5F;AAGF,SAASM,aAAaC,MAAkB;IACtC,IAAI;QACFA;IACF,EAAE,OAAM;IACN,mDAAmD;IACrD;AACF;AAEA,OAAO,SAASC,eAAeC,MAE9B;IACC,OAAOA,OAAOC,SAAS,GAAG,YAAY;AACxC;AAEA,OAAO,SAASC,8BAA8BC,KAAc;IAC1D,IAAIA,iBAAiB1B,uBAAuB0B,iBAAiBvB,uBAAuB;QAClF,OAAO;IACT;IACA,IAAIuB,iBAAiBtB,iCAAiC,OAAO;IAC7D,IAAIsB,iBAAiBzB,0BAA0B,OAAO;IACtD,IAAIyB,iBAAiB5B,uBAAuB,OAAO;IACnD,IAAI4B,iBAAiBlC,kBAAkBkC,iBAAiBjC,cAAc,OAAO;IAC7E,IACEiC,iBAAiB/B,4BACjB+B,iBAAiB3B,4BACjB2B,iBAAiB9B,gCACjB8B,iBAAiB7B,iCACjB6B,iBAAiBxB,yBACjB;QACA,OAAO;IACT;IACA,OAAO;AACT;AAEA,OAAO,SAASyB,uBAAuBJ,MAOtC;IACCH,aAAa;QACX,MAAMQ,SAAS;YACbC,UAAUN,OAAOM,QAAQ;YACzBC,WAAWP,OAAOO,SAAS;YAC3BC,SAASR,OAAOQ,OAAO;YACvBC,OAAOT,OAAOS,KAAK;YACnBC,SAASV,OAAOU,OAAO;QACzB;QACA1B,eAAe2B,GAAG,CAAC,GAAGN;QACtBlB,kBAAkBW,MAAM,CAACE,OAAOY,UAAU,EAAEP;IAC9C;AACF;AAEA,OAAO,SAASQ,4BAA4Bb,MAM3C;IACC,IAAIA,OAAOc,KAAK,IAAI,GAAG;IAEvBjB,aAAa,IACXL,oBAAoBmB,GAAG,CAACX,OAAOc,KAAK,EAAE;YACpCR,UAAUN,OAAOM,QAAQ;YACzBC,WAAWP,OAAOO,SAAS;YAC3BQ,QAAQf,OAAOe,MAAM;YACrBP,SAASR,OAAOQ,OAAO;QACzB;AAEJ;AAEA,OAAO,SAASQ,uBAAuBhB,MAGtC;IACCH,aAAa;QACXJ,eAAekB,GAAG,CAAC,GAAG;YAACD,SAASV,OAAOU,OAAO;QAAA;QAC9ChB,kBAAkBI,MAAM,CAACE,OAAOY,UAAU,EAAE;YAACF,SAASV,OAAOU,OAAO;QAAA;IACtE;AACF;AAEA,OAAO,SAASO,uBAAuBd,KAAc;IACnD,IAAIA,iBAAiBlC,gBAAgB,OAAO;IAC5C,IAAIkC,iBAAiBjC,cAAc,OAAO;IAC1C,OAAO;AACT;AAEA,OAAO,SAASgD,yBAAyBlB,MAIxC;IACC,MAAMc,QAAQd,OAAOc,KAAK,IAAI;IAC9B,IAAIA,SAAS,KAAKd,OAAOY,UAAU,KAAKO,WAAW;IAEnDtB,aAAa;QACX,IAAIiB,QAAQ,GAAGnB,iBAAiBgB,GAAG,CAACG,OAAO;YAACJ,SAASV,OAAOU,OAAO;QAAA;QACnE,IAAIV,OAAOY,UAAU,KAAKO,WAAW;YACnCvB,oBAAoBE,MAAM,CAACE,OAAOY,UAAU,EAAE;gBAACF,SAASV,OAAOU,OAAO;YAAA;QACxE;IACF;AACF;AAEA,OAAO,SAASU,yBAAyBjB,KAAc;IACrD,IAAIA,iBAAiBhC,yBAAyB,OAAO;IACrD,IAAIgC,iBAAiBlC,kBAAkBkC,iBAAiBjC,cAAc,OAAO;IAC7E,OAAO;AACT"}

package/dist/metrics/service.d.ts

@@ -0,0 +1,2 @@
+export declare function registerSecretsServiceMetrics(): void;
+//# sourceMappingURL=service.d.ts.map

package/dist/metrics/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/metrics/service.ts"],"names":[],"mappings":"AAGA,wBAAgB,6BAA6B,IAAI,IAAI,CAepD"}

package/dist/metrics/service.js

@@ -0,0 +1,21 @@
+import { getServiceMetricsProvider } from '@shipfox/node-opentelemetry';
+import { countPublicEntriesByResource } from '#db/index.js';
+export function registerSecretsServiceMetrics() {
+    const meter = getServiceMetricsProvider().getMeter('secrets');
+    const publicEntries = meter.createObservableGauge('secrets_public_entries', {
+        description: 'Public secret and variable entries currently stored, excluding system namespaces'
+    });
+    meter.addBatchObservableCallback(async (observer)=>{
+        const counts = await countPublicEntriesByResource();
+        observer.observe(publicEntries, counts.secrets, {
+            resource: 'secret'
+        });
+        observer.observe(publicEntries, counts.variables, {
+            resource: 'variable'
+        });
+    }, [
+        publicEntries
+    ]);
+}
+
+//# sourceMappingURL=service.js.map

package/dist/metrics/service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/metrics/service.ts"],"sourcesContent":["import {getServiceMetricsProvider} from '@shipfox/node-opentelemetry';\nimport {countPublicEntriesByResource} from '#db/index.js';\n\nexport function registerSecretsServiceMetrics(): void {\n  const meter = getServiceMetricsProvider().getMeter('secrets');\n\n  const publicEntries = meter.createObservableGauge('secrets_public_entries', {\n    description: 'Public secret and variable entries currently stored, excluding system namespaces',\n  });\n\n  meter.addBatchObservableCallback(\n    async (observer) => {\n      const counts = await countPublicEntriesByResource();\n      observer.observe(publicEntries, counts.secrets, {resource: 'secret'});\n      observer.observe(publicEntries, counts.variables, {resource: 'variable'});\n    },\n    [publicEntries],\n  );\n}\n"],"names":["getServiceMetricsProvider","countPublicEntriesByResource","registerSecretsServiceMetrics","meter","getMeter","publicEntries","createObservableGauge","description","addBatchObservableCallback","observer","counts","observe","secrets","resource","variables"],"mappings":"AAAA,SAAQA,yBAAyB,QAAO,8BAA8B;AACtE,SAAQC,4BAA4B,QAAO,eAAe;AAE1D,OAAO,SAASC;IACd,MAAMC,QAAQH,4BAA4BI,QAAQ,CAAC;IAEnD,MAAMC,gBAAgBF,MAAMG,qBAAqB,CAAC,0BAA0B;QAC1EC,aAAa;IACf;IAEAJ,MAAMK,0BAA0B,CAC9B,OAAOC;QACL,MAAMC,SAAS,MAAMT;QACrBQ,SAASE,OAAO,CAACN,eAAeK,OAAOE,OAAO,EAAE;YAACC,UAAU;QAAQ;QACnEJ,SAASE,OAAO,CAACN,eAAeK,OAAOI,SAAS,EAAE;YAACD,UAAU;QAAU;IACzE,GACA;QAACR;KAAc;AAEnB"}

package/dist/presentation/dto/index.d.ts

@@ -0,0 +1,2 @@
+export { toSecretDto, toVariableDto, toVariableListItemDto } from './management.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/presentation/dto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAE,aAAa,EAAE,qBAAqB,EAAC,MAAM,iBAAiB,CAAC"}

package/dist/presentation/dto/index.js

@@ -0,0 +1,3 @@
+export { toSecretDto, toVariableDto, toVariableListItemDto } from './management.js';
+
+//# sourceMappingURL=index.js.map

package/dist/presentation/dto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/dto/index.ts"],"sourcesContent":["export {toSecretDto, toVariableDto, toVariableListItemDto} from './management.js';\n"],"names":["toSecretDto","toVariableDto","toVariableListItemDto"],"mappings":"AAAA,SAAQA,WAAW,EAAEC,aAAa,EAAEC,qBAAqB,QAAO,kBAAkB"}

package/dist/presentation/dto/management.d.ts

@@ -0,0 +1,7 @@
+import type { SecretDto, VariableDto, VariableListItemDto } from '@shipfox/api-secrets-dto';
+import type { SecretManagementRow, VariableManagementListRow } from '#db/index.js';
+import type { SecretVariable } from '#db/schema/variables.js';
+export declare function toSecretDto(secret: SecretManagementRow): SecretDto;
+export declare function toVariableDto(variable: SecretVariable): VariableDto;
+export declare function toVariableListItemDto(variable: VariableManagementListRow): VariableListItemDto;
+//# sourceMappingURL=management.d.ts.map

package/dist/presentation/dto/management.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/management.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAC,MAAM,0BAA0B,CAAC;AAC1F,OAAO,KAAK,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AACjF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAE5D,wBAAgB,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAQlE;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,WAAW,CASnE;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,mBAAmB,CAU9F"}

package/dist/presentation/dto/management.js

@@ -0,0 +1,32 @@
+export function toSecretDto(secret) {
+    return {
+        key: secret.key,
+        project_id: secret.projectId,
+        created_at: secret.createdAt.toISOString(),
+        updated_at: secret.updatedAt.toISOString(),
+        last_edited_by: secret.lastEditedBy
+    };
+}
+export function toVariableDto(variable) {
+    return {
+        key: variable.key,
+        project_id: variable.projectId,
+        value: variable.value,
+        created_at: variable.createdAt.toISOString(),
+        updated_at: variable.updatedAt.toISOString(),
+        last_edited_by: variable.lastEditedBy
+    };
+}
+export function toVariableListItemDto(variable) {
+    return {
+        key: variable.key,
+        project_id: variable.projectId,
+        value: variable.value,
+        value_truncated: variable.valueTruncated,
+        created_at: variable.createdAt.toISOString(),
+        updated_at: variable.updatedAt.toISOString(),
+        last_edited_by: variable.lastEditedBy
+    };
+}
+
+//# sourceMappingURL=management.js.map

package/dist/presentation/dto/management.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/dto/management.ts"],"sourcesContent":["import type {SecretDto, VariableDto, VariableListItemDto} from '@shipfox/api-secrets-dto';\nimport type {SecretManagementRow, VariableManagementListRow} from '#db/index.js';\nimport type {SecretVariable} from '#db/schema/variables.js';\n\nexport function toSecretDto(secret: SecretManagementRow): SecretDto {\n  return {\n    key: secret.key,\n    project_id: secret.projectId,\n    created_at: secret.createdAt.toISOString(),\n    updated_at: secret.updatedAt.toISOString(),\n    last_edited_by: secret.lastEditedBy,\n  };\n}\n\nexport function toVariableDto(variable: SecretVariable): VariableDto {\n  return {\n    key: variable.key,\n    project_id: variable.projectId,\n    value: variable.value,\n    created_at: variable.createdAt.toISOString(),\n    updated_at: variable.updatedAt.toISOString(),\n    last_edited_by: variable.lastEditedBy,\n  };\n}\n\nexport function toVariableListItemDto(variable: VariableManagementListRow): VariableListItemDto {\n  return {\n    key: variable.key,\n    project_id: variable.projectId,\n    value: variable.value,\n    value_truncated: variable.valueTruncated,\n    created_at: variable.createdAt.toISOString(),\n    updated_at: variable.updatedAt.toISOString(),\n    last_edited_by: variable.lastEditedBy,\n  };\n}\n"],"names":["toSecretDto","secret","key","project_id","projectId","created_at","createdAt","toISOString","updated_at","updatedAt","last_edited_by","lastEditedBy","toVariableDto","variable","value","toVariableListItemDto","value_truncated","valueTruncated"],"mappings":"AAIA,OAAO,SAASA,YAAYC,MAA2B;IACrD,OAAO;QACLC,KAAKD,OAAOC,GAAG;QACfC,YAAYF,OAAOG,SAAS;QAC5BC,YAAYJ,OAAOK,SAAS,CAACC,WAAW;QACxCC,YAAYP,OAAOQ,SAAS,CAACF,WAAW;QACxCG,gBAAgBT,OAAOU,YAAY;IACrC;AACF;AAEA,OAAO,SAASC,cAAcC,QAAwB;IACpD,OAAO;QACLX,KAAKW,SAASX,GAAG;QACjBC,YAAYU,SAAST,SAAS;QAC9BU,OAAOD,SAASC,KAAK;QACrBT,YAAYQ,SAASP,SAAS,CAACC,WAAW;QAC1CC,YAAYK,SAASJ,SAAS,CAACF,WAAW;QAC1CG,gBAAgBG,SAASF,YAAY;IACvC;AACF;AAEA,OAAO,SAASI,sBAAsBF,QAAmC;IACvE,OAAO;QACLX,KAAKW,SAASX,GAAG;QACjBC,YAAYU,SAAST,SAAS;QAC9BU,OAAOD,SAASC,KAAK;QACrBE,iBAAiBH,SAASI,cAAc;QACxCZ,YAAYQ,SAASP,SAAS,CAACC,WAAW;QAC1CC,YAAYK,SAASJ,SAAS,CAACF,WAAW;QAC1CG,gBAAgBG,SAASF,YAAY;IACvC;AACF"}

package/dist/presentation/e2eRoutes/create-secret.d.ts

@@ -0,0 +1,2 @@
+export declare const createE2eSecretRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=create-secret.d.ts.map

package/dist/presentation/e2eRoutes/create-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-secret.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/create-secret.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,oBAAoB,iDAsB/B,CAAC"}

package/dist/presentation/e2eRoutes/create-secret.js

@@ -0,0 +1,34 @@
+import { e2eCreateSecretBodySchema, e2eCreateSecretResponseSchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { setManagedSecrets } from '#core/index.js';
+import { toSecretDto } from '#presentation/dto/index.js';
+import { translateManagementError } from '#presentation/routes/errors.js';
+export const createE2eSecretRoute = defineRoute({
+    method: 'POST',
+    path: '/secret',
+    description: 'Create a workspace secret for E2E tests.',
+    schema: {
+        body: e2eCreateSecretBodySchema,
+        response: {
+            201: e2eCreateSecretResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request, reply)=>{
+        const secret = (await setManagedSecrets({
+            workspaceId: request.body.workspace_id,
+            actorId: request.body.actor_id,
+            projectId: request.body.project_id,
+            entries: [
+                {
+                    key: request.body.key,
+                    value: request.body.value
+                }
+            ]
+        }))[0];
+        reply.code(201);
+        return toSecretDto(secret);
+    }
+});
+
+//# sourceMappingURL=create-secret.js.map

package/dist/presentation/e2eRoutes/create-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/create-secret.ts"],"sourcesContent":["import {e2eCreateSecretBodySchema, e2eCreateSecretResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {setManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport {translateManagementError} from '#presentation/routes/errors.js';\n\ntype ManagedSecret = Awaited<ReturnType<typeof setManagedSecrets>>[number];\n\nexport const createE2eSecretRoute = defineRoute({\n  method: 'POST',\n  path: '/secret',\n  description: 'Create a workspace secret for E2E tests.',\n  schema: {\n    body: e2eCreateSecretBodySchema,\n    response: {201: e2eCreateSecretResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request, reply) => {\n    const secret = (\n      await setManagedSecrets({\n        workspaceId: request.body.workspace_id,\n        actorId: request.body.actor_id,\n        projectId: request.body.project_id,\n        entries: [{key: request.body.key, value: request.body.value}],\n      })\n    )[0] as ManagedSecret;\n\n    reply.code(201);\n    return toSecretDto(secret);\n  },\n});\n"],"names":["e2eCreateSecretBodySchema","e2eCreateSecretResponseSchema","defineRoute","setManagedSecrets","toSecretDto","translateManagementError","createE2eSecretRoute","method","path","description","schema","body","response","errorHandler","handler","request","reply","secret","workspaceId","workspace_id","actorId","actor_id","projectId","project_id","entries","key","value","code"],"mappings":"AAAA,SAAQA,yBAAyB,EAAEC,6BAA6B,QAAO,2BAA2B;AAClG,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,iBAAiB,QAAO,iBAAiB;AACjD,SAAQC,WAAW,QAAO,6BAA6B;AACvD,SAAQC,wBAAwB,QAAO,iCAAiC;AAIxE,OAAO,MAAMC,uBAAuBJ,YAAY;IAC9CK,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMX;QACNY,UAAU;YAAC,KAAKX;QAA6B;IAC/C;IACAY,cAAcR;IACdS,SAAS,OAAOC,SAASC;QACvB,MAAMC,SAAS,AACb,CAAA,MAAMd,kBAAkB;YACtBe,aAAaH,QAAQJ,IAAI,CAACQ,YAAY;YACtCC,SAASL,QAAQJ,IAAI,CAACU,QAAQ;YAC9BC,WAAWP,QAAQJ,IAAI,CAACY,UAAU;YAClCC,SAAS;gBAAC;oBAACC,KAAKV,QAAQJ,IAAI,CAACc,GAAG;oBAAEC,OAAOX,QAAQJ,IAAI,CAACe,KAAK;gBAAA;aAAE;QAC/D,EAAC,CACF,CAAC,EAAE;QAEJV,MAAMW,IAAI,CAAC;QACX,OAAOvB,YAAYa;IACrB;AACF,GAAG"}

package/dist/presentation/e2eRoutes/create-variable.d.ts

@@ -0,0 +1,2 @@
+export declare const createE2eVariableRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=create-variable.d.ts.map

package/dist/presentation/e2eRoutes/create-variable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/create-variable.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,sBAAsB,iDAsBjC,CAAC"}

package/dist/presentation/e2eRoutes/create-variable.js

@@ -0,0 +1,34 @@
+import { e2eCreateVariableBodySchema, e2eCreateVariableResponseSchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { setManagedVariables } from '#core/index.js';
+import { toVariableDto } from '#presentation/dto/index.js';
+import { translateManagementError } from '#presentation/routes/errors.js';
+export const createE2eVariableRoute = defineRoute({
+    method: 'POST',
+    path: '/variable',
+    description: 'Create a workspace variable for E2E tests.',
+    schema: {
+        body: e2eCreateVariableBodySchema,
+        response: {
+            201: e2eCreateVariableResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request, reply)=>{
+        const variable = (await setManagedVariables({
+            workspaceId: request.body.workspace_id,
+            actorId: request.body.actor_id,
+            projectId: request.body.project_id,
+            entries: [
+                {
+                    key: request.body.key,
+                    value: request.body.value
+                }
+            ]
+        }))[0];
+        reply.code(201);
+        return toVariableDto(variable);
+    }
+});
+
+//# sourceMappingURL=create-variable.js.map

package/dist/presentation/e2eRoutes/create-variable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/create-variable.ts"],"sourcesContent":["import {\n  e2eCreateVariableBodySchema,\n  e2eCreateVariableResponseSchema,\n} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {setManagedVariables} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport {translateManagementError} from '#presentation/routes/errors.js';\n\ntype ManagedVariable = Awaited<ReturnType<typeof setManagedVariables>>[number];\n\nexport const createE2eVariableRoute = defineRoute({\n  method: 'POST',\n  path: '/variable',\n  description: 'Create a workspace variable for E2E tests.',\n  schema: {\n    body: e2eCreateVariableBodySchema,\n    response: {201: e2eCreateVariableResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request, reply) => {\n    const variable = (\n      await setManagedVariables({\n        workspaceId: request.body.workspace_id,\n        actorId: request.body.actor_id,\n        projectId: request.body.project_id,\n        entries: [{key: request.body.key, value: request.body.value}],\n      })\n    )[0] as ManagedVariable;\n\n    reply.code(201);\n    return toVariableDto(variable);\n  },\n});\n"],"names":["e2eCreateVariableBodySchema","e2eCreateVariableResponseSchema","defineRoute","setManagedVariables","toVariableDto","translateManagementError","createE2eVariableRoute","method","path","description","schema","body","response","errorHandler","handler","request","reply","variable","workspaceId","workspace_id","actorId","actor_id","projectId","project_id","entries","key","value","code"],"mappings":"AAAA,SACEA,2BAA2B,EAC3BC,+BAA+B,QAC1B,2BAA2B;AAClC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,wBAAwB,QAAO,iCAAiC;AAIxE,OAAO,MAAMC,yBAAyBJ,YAAY;IAChDK,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMX;QACNY,UAAU;YAAC,KAAKX;QAA+B;IACjD;IACAY,cAAcR;IACdS,SAAS,OAAOC,SAASC;QACvB,MAAMC,WAAW,AACf,CAAA,MAAMd,oBAAoB;YACxBe,aAAaH,QAAQJ,IAAI,CAACQ,YAAY;YACtCC,SAASL,QAAQJ,IAAI,CAACU,QAAQ;YAC9BC,WAAWP,QAAQJ,IAAI,CAACY,UAAU;YAClCC,SAAS;gBAAC;oBAACC,KAAKV,QAAQJ,IAAI,CAACc,GAAG;oBAAEC,OAAOX,QAAQJ,IAAI,CAACe,KAAK;gBAAA;aAAE;QAC/D,EAAC,CACF,CAAC,EAAE;QAEJV,MAAMW,IAAI,CAAC;QACX,OAAOvB,cAAca;IACvB;AACF,GAAG"}

package/dist/presentation/e2eRoutes/index.d.ts

@@ -0,0 +1,3 @@
+import type { RouteGroup } from '@shipfox/node-fastify';
+export declare const secretsE2eRoutes: RouteGroup;
+//# sourceMappingURL=index.d.ts.map

package/dist/presentation/e2eRoutes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAItD,eAAO,MAAM,gBAAgB,EAAE,UAG9B,CAAC"}

package/dist/presentation/e2eRoutes/index.js

@@ -0,0 +1,11 @@
+import { createE2eSecretRoute } from './create-secret.js';
+import { createE2eVariableRoute } from './create-variable.js';
+export const secretsE2eRoutes = {
+    prefix: '/secrets',
+    routes: [
+        createE2eSecretRoute,
+        createE2eVariableRoute
+    ]
+};
+
+//# sourceMappingURL=index.js.map

package/dist/presentation/e2eRoutes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/index.ts"],"sourcesContent":["import type {RouteGroup} from '@shipfox/node-fastify';\nimport {createE2eSecretRoute} from './create-secret.js';\nimport {createE2eVariableRoute} from './create-variable.js';\n\nexport const secretsE2eRoutes: RouteGroup = {\n  prefix: '/secrets',\n  routes: [createE2eSecretRoute, createE2eVariableRoute],\n};\n"],"names":["createE2eSecretRoute","createE2eVariableRoute","secretsE2eRoutes","prefix","routes"],"mappings":"AACA,SAAQA,oBAAoB,QAAO,qBAAqB;AACxD,SAAQC,sBAAsB,QAAO,uBAAuB;AAE5D,OAAO,MAAMC,mBAA+B;IAC1CC,QAAQ;IACRC,QAAQ;QAACJ;QAAsBC;KAAuB;AACxD,EAAE"}

package/dist/presentation/routes/auth.d.ts

@@ -0,0 +1,16 @@
+import type { FastifyRequest } from 'fastify';
+export interface ManagementAccess {
+    workspaceId: string;
+    userId: string;
+}
+export declare function requireManagementRead(params: {
+    request: FastifyRequest;
+    workspaceId: string;
+    projectId?: string | undefined;
+}): Promise<ManagementAccess>;
+export declare function requireManagementWrite(params: {
+    request: FastifyRequest;
+    workspaceId: string;
+    projectId?: string | undefined;
+}): Promise<ManagementAccess>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/presentation/routes/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAa5B;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B"}

package/dist/presentation/routes/auth.js

@@ -0,0 +1,42 @@
+import { requireWorkspaceAccess } from '@shipfox/api-auth-context';
+import { requireProjectForWorkspace } from '@shipfox/api-projects';
+import { ClientError } from '@shipfox/node-fastify';
+export async function requireManagementRead(params) {
+    const membership = requireWorkspaceAccess({
+        request: params.request,
+        workspaceId: params.workspaceId
+    });
+    if (params.projectId) {
+        await requireProjectForWorkspace({
+            workspaceId: params.workspaceId,
+            projectId: params.projectId
+        });
+    }
+    return {
+        workspaceId: params.workspaceId,
+        userId: membership.userId
+    };
+}
+export async function requireManagementWrite(params) {
+    const membership = requireWorkspaceAccess({
+        request: params.request,
+        workspaceId: params.workspaceId
+    });
+    if (membership.role !== 'admin') {
+        throw new ClientError('Workspace admin role required', 'forbidden', {
+            status: 403
+        });
+    }
+    if (params.projectId) {
+        await requireProjectForWorkspace({
+            workspaceId: params.workspaceId,
+            projectId: params.projectId
+        });
+    }
+    return {
+        workspaceId: params.workspaceId,
+        userId: membership.userId
+    };
+}
+
+//# sourceMappingURL=auth.js.map

package/dist/presentation/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/auth.ts"],"sourcesContent":["import {requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {requireProjectForWorkspace} from '@shipfox/api-projects';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\n\nexport interface ManagementAccess {\n  workspaceId: string;\n  userId: string;\n}\n\nexport async function requireManagementRead(params: {\n  request: FastifyRequest;\n  workspaceId: string;\n  projectId?: string | undefined;\n}): Promise<ManagementAccess> {\n  const membership = requireWorkspaceAccess({\n    request: params.request,\n    workspaceId: params.workspaceId,\n  });\n  if (params.projectId) {\n    await requireProjectForWorkspace({\n      workspaceId: params.workspaceId,\n      projectId: params.projectId,\n    });\n  }\n\n  return {workspaceId: params.workspaceId, userId: membership.userId};\n}\n\nexport async function requireManagementWrite(params: {\n  request: FastifyRequest;\n  workspaceId: string;\n  projectId?: string | undefined;\n}): Promise<ManagementAccess> {\n  const membership = requireWorkspaceAccess({\n    request: params.request,\n    workspaceId: params.workspaceId,\n  });\n  if (membership.role !== 'admin') {\n    throw new ClientError('Workspace admin role required', 'forbidden', {status: 403});\n  }\n  if (params.projectId) {\n    await requireProjectForWorkspace({\n      workspaceId: params.workspaceId,\n      projectId: params.projectId,\n    });\n  }\n\n  return {workspaceId: params.workspaceId, userId: membership.userId};\n}\n"],"names":["requireWorkspaceAccess","requireProjectForWorkspace","ClientError","requireManagementRead","params","membership","request","workspaceId","projectId","userId","requireManagementWrite","role","status"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,4BAA4B;AACjE,SAAQC,0BAA0B,QAAO,wBAAwB;AACjE,SAAQC,WAAW,QAAO,wBAAwB;AAQlD,OAAO,eAAeC,sBAAsBC,MAI3C;IACC,MAAMC,aAAaL,uBAAuB;QACxCM,SAASF,OAAOE,OAAO;QACvBC,aAAaH,OAAOG,WAAW;IACjC;IACA,IAAIH,OAAOI,SAAS,EAAE;QACpB,MAAMP,2BAA2B;YAC/BM,aAAaH,OAAOG,WAAW;YAC/BC,WAAWJ,OAAOI,SAAS;QAC7B;IACF;IAEA,OAAO;QAACD,aAAaH,OAAOG,WAAW;QAAEE,QAAQJ,WAAWI,MAAM;IAAA;AACpE;AAEA,OAAO,eAAeC,uBAAuBN,MAI5C;IACC,MAAMC,aAAaL,uBAAuB;QACxCM,SAASF,OAAOE,OAAO;QACvBC,aAAaH,OAAOG,WAAW;IACjC;IACA,IAAIF,WAAWM,IAAI,KAAK,SAAS;QAC/B,MAAM,IAAIT,YAAY,iCAAiC,aAAa;YAACU,QAAQ;QAAG;IAClF;IACA,IAAIR,OAAOI,SAAS,EAAE;QACpB,MAAMP,2BAA2B;YAC/BM,aAAaH,OAAOG,WAAW;YAC/BC,WAAWJ,OAAOI,SAAS;QAC7B;IACF;IAEA,OAAO;QAACD,aAAaH,OAAOG,WAAW;QAAEE,QAAQJ,WAAWI,MAAM;IAAA;AACpE"}

package/dist/presentation/routes/batch-secrets.d.ts

@@ -0,0 +1,2 @@
+export declare const batchSecretsRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=batch-secrets.d.ts.map

package/dist/presentation/routes/batch-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/batch-secrets.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,iDAuB5B,CAAC"}

package/dist/presentation/routes/batch-secrets.js

@@ -0,0 +1,44 @@
+import { batchSecretsBodySchema, batchSecretsResponseSchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { setManagedSecrets } from '#core/index.js';
+import { toSecretDto } from '#presentation/dto/index.js';
+import { requireManagementWrite } from './auth.js';
+import { translateManagementError } from './errors.js';
+import { secretWarnings } from './warnings.js';
+export const batchSecretsRoute = defineRoute({
+    method: 'POST',
+    path: '/secrets::batch',
+    description: 'Create or update multiple user-managed secrets in one scope.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid()
+        }),
+        body: batchSecretsBodySchema,
+        response: {
+            200: batchSecretsResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId } = request.params;
+        const { project_id: projectId, entries } = request.body;
+        const access = await requireManagementWrite({
+            request,
+            workspaceId,
+            projectId
+        });
+        const secrets = await setManagedSecrets({
+            workspaceId,
+            projectId,
+            actorId: access.userId,
+            entries
+        });
+        return {
+            secrets: secrets.map(toSecretDto),
+            warnings: secretWarnings(entries)
+        };
+    }
+});
+
+//# sourceMappingURL=batch-secrets.js.map

package/dist/presentation/routes/batch-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/batch-secrets.ts"],"sourcesContent":["import {batchSecretsBodySchema, batchSecretsResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {secretWarnings} from './warnings.js';\n\nexport const batchSecretsRoute = defineRoute({\n  method: 'POST',\n  path: '/secrets::batch',\n  description: 'Create or update multiple user-managed secrets in one scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    body: batchSecretsBodySchema,\n    response: {200: batchSecretsResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, entries} = request.body;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n    const secrets = await setManagedSecrets({\n      workspaceId,\n      projectId,\n      actorId: access.userId,\n      entries,\n    });\n\n    return {secrets: secrets.map(toSecretDto), warnings: secretWarnings(entries)};\n  },\n});\n"],"names":["batchSecretsBodySchema","batchSecretsResponseSchema","defineRoute","z","setManagedSecrets","toSecretDto","requireManagementWrite","translateManagementError","secretWarnings","batchSecretsRoute","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","project_id","projectId","entries","access","secrets","actorId","userId","map","warnings"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,0BAA0B,QAAO,2BAA2B;AAC5F,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,iBAAiB,QAAO,iBAAiB;AACjD,SAAQC,WAAW,QAAO,6BAA6B;AACvD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,cAAc,QAAO,gBAAgB;AAE7C,OAAO,MAAMC,oBAAoBP,YAAY;IAC3CQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;QAAE;QAChDC,MAAMnB;QACNoB,UAAU;YAAC,KAAKnB;QAA0B;IAC5C;IACAoB,cAAcd;IACde,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,OAAO,EAAC,GAAGH,QAAQJ,IAAI;QACrD,MAAMQ,SAAS,MAAMrB,uBAAuB;YAACiB;YAASP;YAAaS;QAAS;QAC5E,MAAMG,UAAU,MAAMxB,kBAAkB;YACtCY;YACAS;YACAI,SAASF,OAAOG,MAAM;YACtBJ;QACF;QAEA,OAAO;YAACE,SAASA,QAAQG,GAAG,CAAC1B;YAAc2B,UAAUxB,eAAekB;QAAQ;IAC9E;AACF,GAAG"}

package/dist/presentation/routes/batch-variables.d.ts

@@ -0,0 +1,2 @@
+export declare const batchVariablesRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=batch-variables.d.ts.map

package/dist/presentation/routes/batch-variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-variables.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/batch-variables.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,mBAAmB,iDAuB9B,CAAC"}

package/dist/presentation/routes/batch-variables.js

@@ -0,0 +1,44 @@
+import { batchVariablesBodySchema, batchVariablesResponseSchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { setManagedVariables } from '#core/index.js';
+import { toVariableDto } from '#presentation/dto/index.js';
+import { requireManagementWrite } from './auth.js';
+import { translateManagementError } from './errors.js';
+import { variableWarnings } from './warnings.js';
+export const batchVariablesRoute = defineRoute({
+    method: 'POST',
+    path: '/variables::batch',
+    description: 'Create or update multiple user-managed variables in one scope.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid()
+        }),
+        body: batchVariablesBodySchema,
+        response: {
+            200: batchVariablesResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId } = request.params;
+        const { project_id: projectId, entries } = request.body;
+        const access = await requireManagementWrite({
+            request,
+            workspaceId,
+            projectId
+        });
+        const variables = await setManagedVariables({
+            workspaceId,
+            projectId,
+            actorId: access.userId,
+            entries
+        });
+        return {
+            variables: variables.map(toVariableDto),
+            warnings: variableWarnings(entries)
+        };
+    }
+});
+
+//# sourceMappingURL=batch-variables.js.map

package/dist/presentation/routes/batch-variables.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/batch-variables.ts"],"sourcesContent":["import {batchVariablesBodySchema, batchVariablesResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedVariables} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {variableWarnings} from './warnings.js';\n\nexport const batchVariablesRoute = defineRoute({\n  method: 'POST',\n  path: '/variables::batch',\n  description: 'Create or update multiple user-managed variables in one scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    body: batchVariablesBodySchema,\n    response: {200: batchVariablesResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, entries} = request.body;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n    const variables = await setManagedVariables({\n      workspaceId,\n      projectId,\n      actorId: access.userId,\n      entries,\n    });\n\n    return {variables: variables.map(toVariableDto), warnings: variableWarnings(entries)};\n  },\n});\n"],"names":["batchVariablesBodySchema","batchVariablesResponseSchema","defineRoute","z","setManagedVariables","toVariableDto","requireManagementWrite","translateManagementError","variableWarnings","batchVariablesRoute","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","project_id","projectId","entries","access","variables","actorId","userId","map","warnings"],"mappings":"AAAA,SAAQA,wBAAwB,EAAEC,4BAA4B,QAAO,2BAA2B;AAChG,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,gBAAgB,QAAO,gBAAgB;AAE/C,OAAO,MAAMC,sBAAsBP,YAAY;IAC7CQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;QAAE;QAChDC,MAAMnB;QACNoB,UAAU;YAAC,KAAKnB;QAA4B;IAC9C;IACAoB,cAAcd;IACde,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,OAAO,EAAC,GAAGH,QAAQJ,IAAI;QACrD,MAAMQ,SAAS,MAAMrB,uBAAuB;YAACiB;YAASP;YAAaS;QAAS;QAC5E,MAAMG,YAAY,MAAMxB,oBAAoB;YAC1CY;YACAS;YACAI,SAASF,OAAOG,MAAM;YACtBJ;QACF;QAEA,OAAO;YAACE,WAAWA,UAAUG,GAAG,CAAC1B;YAAgB2B,UAAUxB,iBAAiBkB;QAAQ;IACtF;AACF,GAAG"}

package/dist/presentation/routes/cursor.d.ts

@@ -0,0 +1,3 @@
+export declare function encodeManagementCursor(cursor: string): string;
+export declare function decodeManagementCursor(cursor: string | undefined): string | undefined;
+//# sourceMappingURL=cursor.d.ts.map

package/dist/presentation/routes/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/cursor.ts"],"names":[],"mappings":"AAIA,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAYrF"}