@shipfox/api-secrets 2.0.0

package/dist/presentation/routes/cursor.js

@@ -0,0 +1,19 @@
+export function encodeManagementCursor(cursor) {
+    return Buffer.from(JSON.stringify({
+        key: cursor
+    }), 'utf8').toString('base64url');
+}
+export function decodeManagementCursor(cursor) {
+    if (!cursor) return undefined;
+    try {
+        const parsed = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) return undefined;
+        const { key } = parsed;
+        if (typeof key !== 'string' || key.length === 0) return undefined;
+        return key;
+    } catch  {
+        return undefined;
+    }
+}
+
+//# sourceMappingURL=cursor.js.map

package/dist/presentation/routes/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/cursor.ts"],"sourcesContent":["interface ManagementCursor {\n  key: string;\n}\n\nexport function encodeManagementCursor(cursor: string): string {\n  return Buffer.from(JSON.stringify({key: cursor} satisfies ManagementCursor), 'utf8').toString(\n    'base64url',\n  );\n}\n\nexport function decodeManagementCursor(cursor: string | undefined): string | undefined {\n  if (!cursor) return undefined;\n\n  try {\n    const parsed: unknown = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'));\n    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) return undefined;\n    const {key} = parsed as Partial<ManagementCursor>;\n    if (typeof key !== 'string' || key.length === 0) return undefined;\n    return key;\n  } catch {\n    return undefined;\n  }\n}\n"],"names":["encodeManagementCursor","cursor","Buffer","from","JSON","stringify","key","toString","decodeManagementCursor","undefined","parsed","parse","Array","isArray","length"],"mappings":"AAIA,OAAO,SAASA,uBAAuBC,MAAc;IACnD,OAAOC,OAAOC,IAAI,CAACC,KAAKC,SAAS,CAAC;QAACC,KAAKL;IAAM,IAA+B,QAAQM,QAAQ,CAC3F;AAEJ;AAEA,OAAO,SAASC,uBAAuBP,MAA0B;IAC/D,IAAI,CAACA,QAAQ,OAAOQ;IAEpB,IAAI;QACF,MAAMC,SAAkBN,KAAKO,KAAK,CAACT,OAAOC,IAAI,CAACF,QAAQ,aAAaM,QAAQ,CAAC;QAC7E,IAAI,CAACG,UAAU,OAAOA,WAAW,YAAYE,MAAMC,OAAO,CAACH,SAAS,OAAOD;QAC3E,MAAM,EAACH,GAAG,EAAC,GAAGI;QACd,IAAI,OAAOJ,QAAQ,YAAYA,IAAIQ,MAAM,KAAK,GAAG,OAAOL;QACxD,OAAOH;IACT,EAAE,OAAM;QACN,OAAOG;IACT;AACF"}

package/dist/presentation/routes/delete-secret.d.ts

@@ -0,0 +1,2 @@
+export declare const deleteSecretRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=delete-secret.d.ts.map

package/dist/presentation/routes/delete-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-secret.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/delete-secret.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,iBAAiB,iDAkB5B,CAAC"}

package/dist/presentation/routes/delete-secret.js

@@ -0,0 +1,40 @@
+import { secretKeySchema, secretScopeQuerySchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { deleteManagedSecret } from '#core/index.js';
+import { requireManagementWrite } from './auth.js';
+import { translateManagementError } from './errors.js';
+export const deleteSecretRoute = defineRoute({
+    method: 'DELETE',
+    path: '/secrets/:key',
+    description: 'Delete a user-managed secret.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid(),
+            key: secretKeySchema
+        }),
+        querystring: secretScopeQuerySchema,
+        response: {
+            204: z.void()
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request, reply)=>{
+        const { workspaceId, key } = request.params;
+        const { project_id: projectId } = request.query;
+        const access = await requireManagementWrite({
+            request,
+            workspaceId,
+            projectId
+        });
+        await deleteManagedSecret({
+            workspaceId,
+            projectId,
+            key,
+            actorId: access.userId
+        });
+        return reply.status(204).send();
+    }
+});
+
+//# sourceMappingURL=delete-secret.js.map

package/dist/presentation/routes/delete-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/delete-secret.ts"],"sourcesContent":["import {secretKeySchema, secretScopeQuerySchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {deleteManagedSecret} from '#core/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport const deleteSecretRoute = defineRoute({\n  method: 'DELETE',\n  path: '/secrets/:key',\n  description: 'Delete a user-managed secret.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    querystring: secretScopeQuerySchema,\n    response: {204: z.void()},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request, reply) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId} = request.query;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n\n    await deleteManagedSecret({workspaceId, projectId, key, actorId: access.userId});\n    return reply.status(204).send();\n  },\n});\n"],"names":["secretKeySchema","secretScopeQuerySchema","defineRoute","z","deleteManagedSecret","requireManagementWrite","translateManagementError","deleteSecretRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","void","errorHandler","handler","request","reply","project_id","projectId","query","access","actorId","userId","status","send"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,sBAAsB,QAAO,2BAA2B;AACjF,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,oBAAoBL,YAAY;IAC3CM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQT,EAAEU,MAAM,CAAC;YAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;YAAIC,KAAKjB;QAAe;QACtEkB,aAAajB;QACbkB,UAAU;YAAC,KAAKhB,EAAEiB,IAAI;QAAE;IAC1B;IACAC,cAAcf;IACdgB,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACV,WAAW,EAAEG,GAAG,EAAC,GAAGM,QAAQX,MAAM;QACzC,MAAM,EAACa,YAAYC,SAAS,EAAC,GAAGH,QAAQI,KAAK;QAC7C,MAAMC,SAAS,MAAMvB,uBAAuB;YAACkB;YAAST;YAAaY;QAAS;QAE5E,MAAMtB,oBAAoB;YAACU;YAAaY;YAAWT;YAAKY,SAASD,OAAOE,MAAM;QAAA;QAC9E,OAAON,MAAMO,MAAM,CAAC,KAAKC,IAAI;IAC/B;AACF,GAAG"}

package/dist/presentation/routes/delete-variable.d.ts

@@ -0,0 +1,2 @@
+export declare const deleteVariableRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=delete-variable.d.ts.map

package/dist/presentation/routes/delete-variable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/delete-variable.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,mBAAmB,iDAkB9B,CAAC"}

package/dist/presentation/routes/delete-variable.js

@@ -0,0 +1,40 @@
+import { secretKeySchema, secretScopeQuerySchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { deleteManagedVariable } from '#core/index.js';
+import { requireManagementWrite } from './auth.js';
+import { translateManagementError } from './errors.js';
+export const deleteVariableRoute = defineRoute({
+    method: 'DELETE',
+    path: '/variables/:key',
+    description: 'Delete a user-managed variable.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid(),
+            key: secretKeySchema
+        }),
+        querystring: secretScopeQuerySchema,
+        response: {
+            204: z.void()
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request, reply)=>{
+        const { workspaceId, key } = request.params;
+        const { project_id: projectId } = request.query;
+        const access = await requireManagementWrite({
+            request,
+            workspaceId,
+            projectId
+        });
+        await deleteManagedVariable({
+            workspaceId,
+            projectId,
+            key,
+            actorId: access.userId
+        });
+        return reply.status(204).send();
+    }
+});
+
+//# sourceMappingURL=delete-variable.js.map

package/dist/presentation/routes/delete-variable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/delete-variable.ts"],"sourcesContent":["import {secretKeySchema, secretScopeQuerySchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {deleteManagedVariable} from '#core/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport const deleteVariableRoute = defineRoute({\n  method: 'DELETE',\n  path: '/variables/:key',\n  description: 'Delete a user-managed variable.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    querystring: secretScopeQuerySchema,\n    response: {204: z.void()},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request, reply) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId} = request.query;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n\n    await deleteManagedVariable({workspaceId, projectId, key, actorId: access.userId});\n    return reply.status(204).send();\n  },\n});\n"],"names":["secretKeySchema","secretScopeQuerySchema","defineRoute","z","deleteManagedVariable","requireManagementWrite","translateManagementError","deleteVariableRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","void","errorHandler","handler","request","reply","project_id","projectId","query","access","actorId","userId","status","send"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,sBAAsB,QAAO,2BAA2B;AACjF,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,qBAAqB,QAAO,iBAAiB;AACrD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,sBAAsBL,YAAY;IAC7CM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQT,EAAEU,MAAM,CAAC;YAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;YAAIC,KAAKjB;QAAe;QACtEkB,aAAajB;QACbkB,UAAU;YAAC,KAAKhB,EAAEiB,IAAI;QAAE;IAC1B;IACAC,cAAcf;IACdgB,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACV,WAAW,EAAEG,GAAG,EAAC,GAAGM,QAAQX,MAAM;QACzC,MAAM,EAACa,YAAYC,SAAS,EAAC,GAAGH,QAAQI,KAAK;QAC7C,MAAMC,SAAS,MAAMvB,uBAAuB;YAACkB;YAAST;YAAaY;QAAS;QAE5E,MAAMtB,sBAAsB;YAACU;YAAaY;YAAWT;YAAKY,SAASD,OAAOE,MAAM;QAAA;QAChF,OAAON,MAAMO,MAAM,CAAC,KAAKC,IAAI;IAC/B;AACF,GAAG"}

package/dist/presentation/routes/errors.d.ts

@@ -0,0 +1,2 @@
+export declare function translateManagementError(error: unknown): never;
+//# sourceMappingURL=errors.d.ts.map

package/dist/presentation/routes/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/errors.ts"],"names":[],"mappings":"AAcA,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAgD9D"}

package/dist/presentation/routes/errors.js

@@ -0,0 +1,73 @@
+import { ProjectNotFoundError } from '@shipfox/api-projects';
+import { ClientError } from '@shipfox/node-fastify';
+import { NamespaceValidationError, SecretBatchDuplicateKeyError, SecretBatchScopeMismatchError, SecretKeyValidationError, SecretNotFoundError, SecretValueTooLargeError, UnknownSecretStoreError, VariableNotFoundError, WorkspaceSecretCapExceededError } from '#core/errors.js';
+export function translateManagementError(error) {
+    if (error instanceof SecretKeyValidationError) {
+        throw new ClientError('Invalid secret key', 'invalid-key', {
+            status: 400,
+            details: {
+                key: error.key
+            }
+        });
+    }
+    if (error instanceof NamespaceValidationError) {
+        throw new ClientError('Invalid namespace', 'invalid-namespace', {
+            status: 400,
+            details: {
+                namespace: error.namespace
+            }
+        });
+    }
+    if (error instanceof SecretValueTooLargeError) {
+        throw new ClientError(error.message, 'value-too-large', {
+            status: 413,
+            details: {
+                max_bytes: error.maxBytes
+            }
+        });
+    }
+    if (error instanceof WorkspaceSecretCapExceededError) {
+        throw new ClientError('Workspace secret cap exceeded', 'workspace-secret-cap-exceeded', {
+            status: 409,
+            details: {
+                cap: error.cap
+            }
+        });
+    }
+    if (error instanceof SecretBatchScopeMismatchError) {
+        throw new ClientError(error.message, 'batch-scope-mismatch', {
+            status: 400
+        });
+    }
+    if (error instanceof SecretBatchDuplicateKeyError) {
+        throw new ClientError('Duplicate batch key', 'duplicate-key', {
+            status: 400,
+            details: {
+                key: error.key
+            }
+        });
+    }
+    if (error instanceof SecretNotFoundError) {
+        throw new ClientError('Secret not found', 'secret-not-found', {
+            status: 404
+        });
+    }
+    if (error instanceof VariableNotFoundError) {
+        throw new ClientError('Variable not found', 'variable-not-found', {
+            status: 404
+        });
+    }
+    if (error instanceof UnknownSecretStoreError) {
+        throw new ClientError('Unknown secret store', 'unknown-secret-store', {
+            status: 400
+        });
+    }
+    if (error instanceof ProjectNotFoundError) {
+        throw new ClientError('Project not found', 'project-not-found', {
+            status: 404
+        });
+    }
+    throw error;
+}
+
+//# sourceMappingURL=errors.js.map

package/dist/presentation/routes/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/errors.ts"],"sourcesContent":["import {ProjectNotFoundError} from '@shipfox/api-projects';\nimport {ClientError} from '@shipfox/node-fastify';\nimport {\n  NamespaceValidationError,\n  SecretBatchDuplicateKeyError,\n  SecretBatchScopeMismatchError,\n  SecretKeyValidationError,\n  SecretNotFoundError,\n  SecretValueTooLargeError,\n  UnknownSecretStoreError,\n  VariableNotFoundError,\n  WorkspaceSecretCapExceededError,\n} from '#core/errors.js';\n\nexport function translateManagementError(error: unknown): never {\n  if (error instanceof SecretKeyValidationError) {\n    throw new ClientError('Invalid secret key', 'invalid-key', {\n      status: 400,\n      details: {key: error.key},\n    });\n  }\n  if (error instanceof NamespaceValidationError) {\n    throw new ClientError('Invalid namespace', 'invalid-namespace', {\n      status: 400,\n      details: {namespace: error.namespace},\n    });\n  }\n  if (error instanceof SecretValueTooLargeError) {\n    throw new ClientError(error.message, 'value-too-large', {\n      status: 413,\n      details: {max_bytes: error.maxBytes},\n    });\n  }\n  if (error instanceof WorkspaceSecretCapExceededError) {\n    throw new ClientError('Workspace secret cap exceeded', 'workspace-secret-cap-exceeded', {\n      status: 409,\n      details: {cap: error.cap},\n    });\n  }\n  if (error instanceof SecretBatchScopeMismatchError) {\n    throw new ClientError(error.message, 'batch-scope-mismatch', {status: 400});\n  }\n  if (error instanceof SecretBatchDuplicateKeyError) {\n    throw new ClientError('Duplicate batch key', 'duplicate-key', {\n      status: 400,\n      details: {key: error.key},\n    });\n  }\n  if (error instanceof SecretNotFoundError) {\n    throw new ClientError('Secret not found', 'secret-not-found', {status: 404});\n  }\n  if (error instanceof VariableNotFoundError) {\n    throw new ClientError('Variable not found', 'variable-not-found', {status: 404});\n  }\n  if (error instanceof UnknownSecretStoreError) {\n    throw new ClientError('Unknown secret store', 'unknown-secret-store', {status: 400});\n  }\n  if (error instanceof ProjectNotFoundError) {\n    throw new ClientError('Project not found', 'project-not-found', {status: 404});\n  }\n\n  throw error;\n}\n"],"names":["ProjectNotFoundError","ClientError","NamespaceValidationError","SecretBatchDuplicateKeyError","SecretBatchScopeMismatchError","SecretKeyValidationError","SecretNotFoundError","SecretValueTooLargeError","UnknownSecretStoreError","VariableNotFoundError","WorkspaceSecretCapExceededError","translateManagementError","error","status","details","key","namespace","message","max_bytes","maxBytes","cap"],"mappings":"AAAA,SAAQA,oBAAoB,QAAO,wBAAwB;AAC3D,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SACEC,wBAAwB,EACxBC,4BAA4B,EAC5BC,6BAA6B,EAC7BC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,uBAAuB,EACvBC,qBAAqB,EACrBC,+BAA+B,QAC1B,kBAAkB;AAEzB,OAAO,SAASC,yBAAyBC,KAAc;IACrD,IAAIA,iBAAiBP,0BAA0B;QAC7C,MAAM,IAAIJ,YAAY,sBAAsB,eAAe;YACzDY,QAAQ;YACRC,SAAS;gBAACC,KAAKH,MAAMG,GAAG;YAAA;QAC1B;IACF;IACA,IAAIH,iBAAiBV,0BAA0B;QAC7C,MAAM,IAAID,YAAY,qBAAqB,qBAAqB;YAC9DY,QAAQ;YACRC,SAAS;gBAACE,WAAWJ,MAAMI,SAAS;YAAA;QACtC;IACF;IACA,IAAIJ,iBAAiBL,0BAA0B;QAC7C,MAAM,IAAIN,YAAYW,MAAMK,OAAO,EAAE,mBAAmB;YACtDJ,QAAQ;YACRC,SAAS;gBAACI,WAAWN,MAAMO,QAAQ;YAAA;QACrC;IACF;IACA,IAAIP,iBAAiBF,iCAAiC;QACpD,MAAM,IAAIT,YAAY,iCAAiC,iCAAiC;YACtFY,QAAQ;YACRC,SAAS;gBAACM,KAAKR,MAAMQ,GAAG;YAAA;QAC1B;IACF;IACA,IAAIR,iBAAiBR,+BAA+B;QAClD,MAAM,IAAIH,YAAYW,MAAMK,OAAO,EAAE,wBAAwB;YAACJ,QAAQ;QAAG;IAC3E;IACA,IAAID,iBAAiBT,8BAA8B;QACjD,MAAM,IAAIF,YAAY,uBAAuB,iBAAiB;YAC5DY,QAAQ;YACRC,SAAS;gBAACC,KAAKH,MAAMG,GAAG;YAAA;QAC1B;IACF;IACA,IAAIH,iBAAiBN,qBAAqB;QACxC,MAAM,IAAIL,YAAY,oBAAoB,oBAAoB;YAACY,QAAQ;QAAG;IAC5E;IACA,IAAID,iBAAiBH,uBAAuB;QAC1C,MAAM,IAAIR,YAAY,sBAAsB,sBAAsB;YAACY,QAAQ;QAAG;IAChF;IACA,IAAID,iBAAiBJ,yBAAyB;QAC5C,MAAM,IAAIP,YAAY,wBAAwB,wBAAwB;YAACY,QAAQ;QAAG;IACpF;IACA,IAAID,iBAAiBZ,sBAAsB;QACzC,MAAM,IAAIC,YAAY,qBAAqB,qBAAqB;YAACY,QAAQ;QAAG;IAC9E;IAEA,MAAMD;AACR"}

package/dist/presentation/routes/get-variable.d.ts

@@ -0,0 +1,2 @@
+export declare const getVariableRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=get-variable.d.ts.map

package/dist/presentation/routes/get-variable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-variable.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,gBAAgB,iDAmB3B,CAAC"}

package/dist/presentation/routes/get-variable.js

@@ -0,0 +1,42 @@
+import { getVariableResponseSchema, secretKeySchema, secretScopeQuerySchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { getManagedVariable } from '#core/index.js';
+import { toVariableDto } from '#presentation/dto/index.js';
+import { requireManagementRead } from './auth.js';
+import { translateManagementError } from './errors.js';
+export const getVariableRoute = defineRoute({
+    method: 'GET',
+    path: '/variables/:key',
+    description: 'Read a user-managed variable.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid(),
+            key: secretKeySchema
+        }),
+        querystring: secretScopeQuerySchema,
+        response: {
+            200: getVariableResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId, key } = request.params;
+        const { project_id: projectId } = request.query;
+        await requireManagementRead({
+            request,
+            workspaceId,
+            projectId
+        });
+        const variable = await getManagedVariable({
+            workspaceId,
+            projectId,
+            key
+        });
+        return {
+            variable: toVariableDto(variable)
+        };
+    }
+});
+
+//# sourceMappingURL=get-variable.js.map

package/dist/presentation/routes/get-variable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/get-variable.ts"],"sourcesContent":["import {\n  getVariableResponseSchema,\n  secretKeySchema,\n  secretScopeQuerySchema,\n} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getManagedVariable} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport {requireManagementRead} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport const getVariableRoute = defineRoute({\n  method: 'GET',\n  path: '/variables/:key',\n  description: 'Read a user-managed variable.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    querystring: secretScopeQuerySchema,\n    response: {200: getVariableResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId} = request.query;\n\n    await requireManagementRead({request, workspaceId, projectId});\n    const variable = await getManagedVariable({workspaceId, projectId, key});\n\n    return {variable: toVariableDto(variable)};\n  },\n});\n"],"names":["getVariableResponseSchema","secretKeySchema","secretScopeQuerySchema","defineRoute","z","getManagedVariable","toVariableDto","requireManagementRead","translateManagementError","getVariableRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","errorHandler","handler","request","project_id","projectId","query","variable"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,eAAe,EACfC,sBAAsB,QACjB,2BAA2B;AAClC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,kBAAkB,QAAO,iBAAiB;AAClD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,qBAAqB,QAAO,YAAY;AAChD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,mBAAmBN,YAAY;IAC1CO,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQV,EAAEW,MAAM,CAAC;YAACC,aAAaZ,EAAEa,MAAM,GAAGC,IAAI;YAAIC,KAAKlB;QAAe;QACtEmB,aAAalB;QACbmB,UAAU;YAAC,KAAKrB;QAAyB;IAC3C;IACAsB,cAAcd;IACde,SAAS,OAAOC;QACd,MAAM,EAACR,WAAW,EAAEG,GAAG,EAAC,GAAGK,QAAQV,MAAM;QACzC,MAAM,EAACW,YAAYC,SAAS,EAAC,GAAGF,QAAQG,KAAK;QAE7C,MAAMpB,sBAAsB;YAACiB;YAASR;YAAaU;QAAS;QAC5D,MAAME,WAAW,MAAMvB,mBAAmB;YAACW;YAAaU;YAAWP;QAAG;QAEtE,OAAO;YAACS,UAAUtB,cAAcsB;QAAS;IAC3C;AACF,GAAG"}

package/dist/presentation/routes/index.d.ts

@@ -0,0 +1,3 @@
+import type { RouteGroup } from '@shipfox/node-fastify';
+export declare const secretsRoutes: RouteGroup[];
+//# sourceMappingURL=index.d.ts.map

package/dist/presentation/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAWtD,eAAO,MAAM,aAAa,EAAE,UAAU,EAgBrC,CAAC"}

package/dist/presentation/routes/index.js

@@ -0,0 +1,29 @@
+import { AUTH_USER } from '@shipfox/api-auth-context';
+import { batchSecretsRoute } from './batch-secrets.js';
+import { batchVariablesRoute } from './batch-variables.js';
+import { deleteSecretRoute } from './delete-secret.js';
+import { deleteVariableRoute } from './delete-variable.js';
+import { getVariableRoute } from './get-variable.js';
+import { listSecretsRoute } from './list-secrets.js';
+import { listVariablesRoute } from './list-variables.js';
+import { putSecretRoute } from './put-secret.js';
+import { putVariableRoute } from './put-variable.js';
+export const secretsRoutes = [
+    {
+        prefix: '/workspaces/:workspaceId',
+        auth: AUTH_USER,
+        routes: [
+            listSecretsRoute,
+            putSecretRoute,
+            batchSecretsRoute,
+            deleteSecretRoute,
+            listVariablesRoute,
+            getVariableRoute,
+            putVariableRoute,
+            batchVariablesRoute,
+            deleteVariableRoute
+        ]
+    }
+];
+
+//# sourceMappingURL=index.js.map

package/dist/presentation/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import {AUTH_USER} from '@shipfox/api-auth-context';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {batchSecretsRoute} from './batch-secrets.js';\nimport {batchVariablesRoute} from './batch-variables.js';\nimport {deleteSecretRoute} from './delete-secret.js';\nimport {deleteVariableRoute} from './delete-variable.js';\nimport {getVariableRoute} from './get-variable.js';\nimport {listSecretsRoute} from './list-secrets.js';\nimport {listVariablesRoute} from './list-variables.js';\nimport {putSecretRoute} from './put-secret.js';\nimport {putVariableRoute} from './put-variable.js';\n\nexport const secretsRoutes: RouteGroup[] = [\n  {\n    prefix: '/workspaces/:workspaceId',\n    auth: AUTH_USER,\n    routes: [\n      listSecretsRoute,\n      putSecretRoute,\n      batchSecretsRoute,\n      deleteSecretRoute,\n      listVariablesRoute,\n      getVariableRoute,\n      putVariableRoute,\n      batchVariablesRoute,\n      deleteVariableRoute,\n    ],\n  },\n];\n"],"names":["AUTH_USER","batchSecretsRoute","batchVariablesRoute","deleteSecretRoute","deleteVariableRoute","getVariableRoute","listSecretsRoute","listVariablesRoute","putSecretRoute","putVariableRoute","secretsRoutes","prefix","auth","routes"],"mappings":"AAAA,SAAQA,SAAS,QAAO,4BAA4B;AAEpD,SAAQC,iBAAiB,QAAO,qBAAqB;AACrD,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,iBAAiB,QAAO,qBAAqB;AACrD,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,gBAAgB,QAAO,oBAAoB;AACnD,SAAQC,gBAAgB,QAAO,oBAAoB;AACnD,SAAQC,kBAAkB,QAAO,sBAAsB;AACvD,SAAQC,cAAc,QAAO,kBAAkB;AAC/C,SAAQC,gBAAgB,QAAO,oBAAoB;AAEnD,OAAO,MAAMC,gBAA8B;IACzC;QACEC,QAAQ;QACRC,MAAMZ;QACNa,QAAQ;YACNP;YACAE;YACAP;YACAE;YACAI;YACAF;YACAI;YACAP;YACAE;SACD;IACH;CACD,CAAC"}

package/dist/presentation/routes/list-secrets.d.ts

@@ -0,0 +1,2 @@
+export declare const listSecretsRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=list-secrets.d.ts.map

package/dist/presentation/routes/list-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-secrets.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,gBAAgB,iDA+B3B,CAAC"}

package/dist/presentation/routes/list-secrets.js

@@ -0,0 +1,50 @@
+import { listSecretsQuerySchema, listSecretsResponseSchema } from '@shipfox/api-secrets-dto';
+import { ClientError, defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { listManagedSecrets } from '#core/index.js';
+import { toSecretDto } from '#presentation/dto/index.js';
+import { requireManagementRead } from './auth.js';
+import { decodeManagementCursor, encodeManagementCursor } from './cursor.js';
+import { translateManagementError } from './errors.js';
+export const listSecretsRoute = defineRoute({
+    method: 'GET',
+    path: '/secrets',
+    description: 'List user-managed secrets for a workspace or project scope.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid()
+        }),
+        querystring: listSecretsQuerySchema,
+        response: {
+            200: listSecretsResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId } = request.params;
+        const { project_id: projectId, limit, cursor } = request.query;
+        const decodedCursor = decodeManagementCursor(cursor);
+        if (cursor && !decodedCursor) {
+            throw new ClientError('Invalid cursor', 'invalid-cursor', {
+                status: 400
+            });
+        }
+        await requireManagementRead({
+            request,
+            workspaceId,
+            projectId
+        });
+        const result = await listManagedSecrets({
+            workspaceId,
+            projectId,
+            limit,
+            cursor: decodedCursor ?? undefined
+        });
+        return {
+            secrets: result.secrets.map(toSecretDto),
+            next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null
+        };
+    }
+});
+
+//# sourceMappingURL=list-secrets.js.map

package/dist/presentation/routes/list-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/list-secrets.ts"],"sourcesContent":["import {listSecretsQuerySchema, listSecretsResponseSchema} from '@shipfox/api-secrets-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {listManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport {requireManagementRead} from './auth.js';\nimport {decodeManagementCursor, encodeManagementCursor} from './cursor.js';\nimport {translateManagementError} from './errors.js';\n\nexport const listSecretsRoute = defineRoute({\n  method: 'GET',\n  path: '/secrets',\n  description: 'List user-managed secrets for a workspace or project scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    querystring: listSecretsQuerySchema,\n    response: {200: listSecretsResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, limit, cursor} = request.query;\n    const decodedCursor = decodeManagementCursor(cursor);\n    if (cursor && !decodedCursor) {\n      throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});\n    }\n\n    await requireManagementRead({request, workspaceId, projectId});\n    const result = await listManagedSecrets({\n      workspaceId,\n      projectId,\n      limit,\n      cursor: decodedCursor ?? undefined,\n    });\n\n    return {\n      secrets: result.secrets.map(toSecretDto),\n      next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null,\n    };\n  },\n});\n"],"names":["listSecretsQuerySchema","listSecretsResponseSchema","ClientError","defineRoute","z","listManagedSecrets","toSecretDto","requireManagementRead","decodeManagementCursor","encodeManagementCursor","translateManagementError","listSecretsRoute","method","path","description","schema","params","object","workspaceId","string","uuid","querystring","response","errorHandler","handler","request","project_id","projectId","limit","cursor","query","decodedCursor","status","result","undefined","secrets","map","next_cursor","nextCursor"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,yBAAyB,QAAO,2BAA2B;AAC3F,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,kBAAkB,QAAO,iBAAiB;AAClD,SAAQC,WAAW,QAAO,6BAA6B;AACvD,SAAQC,qBAAqB,QAAO,YAAY;AAChD,SAAQC,sBAAsB,EAAEC,sBAAsB,QAAO,cAAc;AAC3E,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,mBAAmBR,YAAY;IAC1CS,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQZ,EAAEa,MAAM,CAAC;YAACC,aAAad,EAAEe,MAAM,GAAGC,IAAI;QAAE;QAChDC,aAAarB;QACbsB,UAAU;YAAC,KAAKrB;QAAyB;IAC3C;IACAsB,cAAcb;IACdc,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAC,GAAGJ,QAAQK,KAAK;QAC5D,MAAMC,gBAAgBvB,uBAAuBqB;QAC7C,IAAIA,UAAU,CAACE,eAAe;YAC5B,MAAM,IAAI7B,YAAY,kBAAkB,kBAAkB;gBAAC8B,QAAQ;YAAG;QACxE;QAEA,MAAMzB,sBAAsB;YAACkB;YAASP;YAAaS;QAAS;QAC5D,MAAMM,SAAS,MAAM5B,mBAAmB;YACtCa;YACAS;YACAC;YACAC,QAAQE,iBAAiBG;QAC3B;QAEA,OAAO;YACLC,SAASF,OAAOE,OAAO,CAACC,GAAG,CAAC9B;YAC5B+B,aAAaJ,OAAOK,UAAU,GAAG7B,uBAAuBwB,OAAOK,UAAU,IAAI;QAC/E;IACF;AACF,GAAG"}

package/dist/presentation/routes/list-variables.d.ts

@@ -0,0 +1,2 @@
+export declare const listVariablesRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=list-variables.d.ts.map

package/dist/presentation/routes/list-variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-variables.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-variables.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,kBAAkB,iDA+B7B,CAAC"}

package/dist/presentation/routes/list-variables.js

@@ -0,0 +1,50 @@
+import { listVariablesQuerySchema, listVariablesResponseSchema } from '@shipfox/api-secrets-dto';
+import { ClientError, defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { listManagedVariables } from '#core/index.js';
+import { toVariableListItemDto } from '#presentation/dto/index.js';
+import { requireManagementRead } from './auth.js';
+import { decodeManagementCursor, encodeManagementCursor } from './cursor.js';
+import { translateManagementError } from './errors.js';
+export const listVariablesRoute = defineRoute({
+    method: 'GET',
+    path: '/variables',
+    description: 'List user-managed variables for a workspace or project scope.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid()
+        }),
+        querystring: listVariablesQuerySchema,
+        response: {
+            200: listVariablesResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId } = request.params;
+        const { project_id: projectId, limit, cursor } = request.query;
+        const decodedCursor = decodeManagementCursor(cursor);
+        if (cursor && !decodedCursor) {
+            throw new ClientError('Invalid cursor', 'invalid-cursor', {
+                status: 400
+            });
+        }
+        await requireManagementRead({
+            request,
+            workspaceId,
+            projectId
+        });
+        const result = await listManagedVariables({
+            workspaceId,
+            projectId,
+            limit,
+            cursor: decodedCursor ?? undefined
+        });
+        return {
+            variables: result.variables.map(toVariableListItemDto),
+            next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null
+        };
+    }
+});
+
+//# sourceMappingURL=list-variables.js.map

package/dist/presentation/routes/list-variables.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/list-variables.ts"],"sourcesContent":["import {listVariablesQuerySchema, listVariablesResponseSchema} from '@shipfox/api-secrets-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {listManagedVariables} from '#core/index.js';\nimport {toVariableListItemDto} from '#presentation/dto/index.js';\nimport {requireManagementRead} from './auth.js';\nimport {decodeManagementCursor, encodeManagementCursor} from './cursor.js';\nimport {translateManagementError} from './errors.js';\n\nexport const listVariablesRoute = defineRoute({\n  method: 'GET',\n  path: '/variables',\n  description: 'List user-managed variables for a workspace or project scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    querystring: listVariablesQuerySchema,\n    response: {200: listVariablesResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, limit, cursor} = request.query;\n    const decodedCursor = decodeManagementCursor(cursor);\n    if (cursor && !decodedCursor) {\n      throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});\n    }\n\n    await requireManagementRead({request, workspaceId, projectId});\n    const result = await listManagedVariables({\n      workspaceId,\n      projectId,\n      limit,\n      cursor: decodedCursor ?? undefined,\n    });\n\n    return {\n      variables: result.variables.map(toVariableListItemDto),\n      next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null,\n    };\n  },\n});\n"],"names":["listVariablesQuerySchema","listVariablesResponseSchema","ClientError","defineRoute","z","listManagedVariables","toVariableListItemDto","requireManagementRead","decodeManagementCursor","encodeManagementCursor","translateManagementError","listVariablesRoute","method","path","description","schema","params","object","workspaceId","string","uuid","querystring","response","errorHandler","handler","request","project_id","projectId","limit","cursor","query","decodedCursor","status","result","undefined","variables","map","next_cursor","nextCursor"],"mappings":"AAAA,SAAQA,wBAAwB,EAAEC,2BAA2B,QAAO,2BAA2B;AAC/F,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,oBAAoB,QAAO,iBAAiB;AACpD,SAAQC,qBAAqB,QAAO,6BAA6B;AACjE,SAAQC,qBAAqB,QAAO,YAAY;AAChD,SAAQC,sBAAsB,EAAEC,sBAAsB,QAAO,cAAc;AAC3E,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,qBAAqBR,YAAY;IAC5CS,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQZ,EAAEa,MAAM,CAAC;YAACC,aAAad,EAAEe,MAAM,GAAGC,IAAI;QAAE;QAChDC,aAAarB;QACbsB,UAAU;YAAC,KAAKrB;QAA2B;IAC7C;IACAsB,cAAcb;IACdc,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAC,GAAGJ,QAAQK,KAAK;QAC5D,MAAMC,gBAAgBvB,uBAAuBqB;QAC7C,IAAIA,UAAU,CAACE,eAAe;YAC5B,MAAM,IAAI7B,YAAY,kBAAkB,kBAAkB;gBAAC8B,QAAQ;YAAG;QACxE;QAEA,MAAMzB,sBAAsB;YAACkB;YAASP;YAAaS;QAAS;QAC5D,MAAMM,SAAS,MAAM5B,qBAAqB;YACxCa;YACAS;YACAC;YACAC,QAAQE,iBAAiBG;QAC3B;QAEA,OAAO;YACLC,WAAWF,OAAOE,SAAS,CAACC,GAAG,CAAC9B;YAChC+B,aAAaJ,OAAOK,UAAU,GAAG7B,uBAAuBwB,OAAOK,UAAU,IAAI;QAC/E;IACF;AACF,GAAG"}

package/dist/presentation/routes/put-secret.d.ts

@@ -0,0 +1,2 @@
+export declare const putSecretRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=put-secret.d.ts.map

package/dist/presentation/routes/put-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-secret.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/put-secret.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,cAAc,iDAyBzB,CAAC"}

package/dist/presentation/routes/put-secret.js

@@ -0,0 +1,52 @@
+import { putSecretBodySchema, putSecretResponseSchema, secretKeySchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { setManagedSecrets } from '#core/index.js';
+import { toSecretDto } from '#presentation/dto/index.js';
+import { requireManagementWrite } from './auth.js';
+import { translateManagementError } from './errors.js';
+import { secretWarnings } from './warnings.js';
+export const putSecretRoute = defineRoute({
+    method: 'PUT',
+    path: '/secrets/:key',
+    description: 'Create or update a user-managed secret.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid(),
+            key: secretKeySchema
+        }),
+        body: putSecretBodySchema,
+        response: {
+            200: putSecretResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId, key } = request.params;
+        const { project_id: projectId, value } = request.body;
+        const access = await requireManagementWrite({
+            request,
+            workspaceId,
+            projectId
+        });
+        const entries = [
+            {
+                key,
+                value
+            }
+        ];
+        const [secret] = await setManagedSecrets({
+            workspaceId,
+            projectId,
+            actorId: access.userId,
+            entries
+        });
+        if (!secret) throw new Error('Secret write returned no row');
+        return {
+            secret: toSecretDto(secret),
+            warnings: secretWarnings(entries)
+        };
+    }
+});
+
+//# sourceMappingURL=put-secret.js.map

package/dist/presentation/routes/put-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/put-secret.ts"],"sourcesContent":["import {\n  putSecretBodySchema,\n  putSecretResponseSchema,\n  secretKeySchema,\n} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {secretWarnings} from './warnings.js';\n\nexport const putSecretRoute = defineRoute({\n  method: 'PUT',\n  path: '/secrets/:key',\n  description: 'Create or update a user-managed secret.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    body: putSecretBodySchema,\n    response: {200: putSecretResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId, value} = request.body;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n    const entries = [{key, value}];\n    const [secret] = await setManagedSecrets({\n      workspaceId,\n      projectId,\n      actorId: access.userId,\n      entries,\n    });\n    if (!secret) throw new Error('Secret write returned no row');\n\n    return {secret: toSecretDto(secret), warnings: secretWarnings(entries)};\n  },\n});\n"],"names":["putSecretBodySchema","putSecretResponseSchema","secretKeySchema","defineRoute","z","setManagedSecrets","toSecretDto","requireManagementWrite","translateManagementError","secretWarnings","putSecretRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","body","response","errorHandler","handler","request","project_id","projectId","value","access","entries","secret","actorId","userId","Error","warnings"],"mappings":"AAAA,SACEA,mBAAmB,EACnBC,uBAAuB,EACvBC,eAAe,QACV,2BAA2B;AAClC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,iBAAiB,QAAO,iBAAiB;AACjD,SAAQC,WAAW,QAAO,6BAA6B;AACvD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,cAAc,QAAO,gBAAgB;AAE7C,OAAO,MAAMC,iBAAiBP,YAAY;IACxCQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;YAAIC,KAAKlB;QAAe;QACtEmB,MAAMrB;QACNsB,UAAU;YAAC,KAAKrB;QAAuB;IACzC;IACAsB,cAAcf;IACdgB,SAAS,OAAOC;QACd,MAAM,EAACR,WAAW,EAAEG,GAAG,EAAC,GAAGK,QAAQV,MAAM;QACzC,MAAM,EAACW,YAAYC,SAAS,EAAEC,KAAK,EAAC,GAAGH,QAAQJ,IAAI;QACnD,MAAMQ,SAAS,MAAMtB,uBAAuB;YAACkB;YAASR;YAAaU;QAAS;QAC5E,MAAMG,UAAU;YAAC;gBAACV;gBAAKQ;YAAK;SAAE;QAC9B,MAAM,CAACG,OAAO,GAAG,MAAM1B,kBAAkB;YACvCY;YACAU;YACAK,SAASH,OAAOI,MAAM;YACtBH;QACF;QACA,IAAI,CAACC,QAAQ,MAAM,IAAIG,MAAM;QAE7B,OAAO;YAACH,QAAQzB,YAAYyB;YAASI,UAAU1B,eAAeqB;QAAQ;IACxE;AACF,GAAG"}

package/dist/presentation/routes/put-variable.d.ts

@@ -0,0 +1,2 @@
+export declare const putVariableRoute: import("@shipfox/node-fastify").RouteDefinition;
+//# sourceMappingURL=put-variable.d.ts.map

package/dist/presentation/routes/put-variable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/put-variable.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,gBAAgB,iDAyB3B,CAAC"}

package/dist/presentation/routes/put-variable.js

@@ -0,0 +1,52 @@
+import { putVariableBodySchema, putVariableResponseSchema, secretKeySchema } from '@shipfox/api-secrets-dto';
+import { defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { setManagedVariables } from '#core/index.js';
+import { toVariableDto } from '#presentation/dto/index.js';
+import { requireManagementWrite } from './auth.js';
+import { translateManagementError } from './errors.js';
+import { variableWarnings } from './warnings.js';
+export const putVariableRoute = defineRoute({
+    method: 'PUT',
+    path: '/variables/:key',
+    description: 'Create or update a user-managed variable.',
+    schema: {
+        params: z.object({
+            workspaceId: z.string().uuid(),
+            key: secretKeySchema
+        }),
+        body: putVariableBodySchema,
+        response: {
+            200: putVariableResponseSchema
+        }
+    },
+    errorHandler: translateManagementError,
+    handler: async (request)=>{
+        const { workspaceId, key } = request.params;
+        const { project_id: projectId, value } = request.body;
+        const access = await requireManagementWrite({
+            request,
+            workspaceId,
+            projectId
+        });
+        const entries = [
+            {
+                key,
+                value
+            }
+        ];
+        const [variable] = await setManagedVariables({
+            workspaceId,
+            projectId,
+            actorId: access.userId,
+            entries
+        });
+        if (!variable) throw new Error('Variable write returned no row');
+        return {
+            variable: toVariableDto(variable),
+            warnings: variableWarnings(entries)
+        };
+    }
+});
+
+//# sourceMappingURL=put-variable.js.map

package/dist/presentation/routes/put-variable.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/put-variable.ts"],"sourcesContent":["import {\n  putVariableBodySchema,\n  putVariableResponseSchema,\n  secretKeySchema,\n} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedVariables} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {variableWarnings} from './warnings.js';\n\nexport const putVariableRoute = defineRoute({\n  method: 'PUT',\n  path: '/variables/:key',\n  description: 'Create or update a user-managed variable.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    body: putVariableBodySchema,\n    response: {200: putVariableResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId, value} = request.body;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n    const entries = [{key, value}];\n    const [variable] = await setManagedVariables({\n      workspaceId,\n      projectId,\n      actorId: access.userId,\n      entries,\n    });\n    if (!variable) throw new Error('Variable write returned no row');\n\n    return {variable: toVariableDto(variable), warnings: variableWarnings(entries)};\n  },\n});\n"],"names":["putVariableBodySchema","putVariableResponseSchema","secretKeySchema","defineRoute","z","setManagedVariables","toVariableDto","requireManagementWrite","translateManagementError","variableWarnings","putVariableRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","body","response","errorHandler","handler","request","project_id","projectId","value","access","entries","variable","actorId","userId","Error","warnings"],"mappings":"AAAA,SACEA,qBAAqB,EACrBC,yBAAyB,EACzBC,eAAe,QACV,2BAA2B;AAClC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,gBAAgB,QAAO,gBAAgB;AAE/C,OAAO,MAAMC,mBAAmBP,YAAY;IAC1CQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;YAAIC,KAAKlB;QAAe;QACtEmB,MAAMrB;QACNsB,UAAU;YAAC,KAAKrB;QAAyB;IAC3C;IACAsB,cAAcf;IACdgB,SAAS,OAAOC;QACd,MAAM,EAACR,WAAW,EAAEG,GAAG,EAAC,GAAGK,QAAQV,MAAM;QACzC,MAAM,EAACW,YAAYC,SAAS,EAAEC,KAAK,EAAC,GAAGH,QAAQJ,IAAI;QACnD,MAAMQ,SAAS,MAAMtB,uBAAuB;YAACkB;YAASR;YAAaU;QAAS;QAC5E,MAAMG,UAAU;YAAC;gBAACV;gBAAKQ;YAAK;SAAE;QAC9B,MAAM,CAACG,SAAS,GAAG,MAAM1B,oBAAoB;YAC3CY;YACAU;YACAK,SAASH,OAAOI,MAAM;YACtBH;QACF;QACA,IAAI,CAACC,UAAU,MAAM,IAAIG,MAAM;QAE/B,OAAO;YAACH,UAAUzB,cAAcyB;YAAWI,UAAU1B,iBAAiBqB;QAAQ;IAChF;AACF,GAAG"}

package/dist/presentation/routes/warnings.d.ts

@@ -0,0 +1,5 @@
+import { type SecretWriteWarningDto } from '@shipfox/api-secrets-dto';
+import type { ManagementEntry } from '#core/index.js';
+export declare function secretWarnings(entries: ManagementEntry[]): SecretWriteWarningDto[];
+export declare function variableWarnings(entries: ManagementEntry[]): SecretWriteWarningDto[];
+//# sourceMappingURL=warnings.d.ts.map

package/dist/presentation/routes/warnings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warnings.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/warnings.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAI3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAEpD,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,qBAAqB,EAAE,CAMlF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,qBAAqB,EAAE,CAIpF"}