@shipfox/api-secrets 4.0.0 → 6.0.0

package/dist/presentation/routes/delete-secret.js

@@ -2,39 +2,40 @@ import { secretKeySchema, secretScopeQuerySchema } from '@shipfox/api-secrets-dt
 import { defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { deleteManagedSecret } from '#core/index.js';
-import { requireManagementWrite } from './auth.js';
 import { translateManagementError } from './errors.js';
-export const deleteSecretRoute = defineRoute({
-    method: 'DELETE',
-    path: '/secrets/:key',
-    description: 'Delete a user-managed secret.',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid(),
-            key: secretKeySchema
-        }),
-        querystring: secretScopeQuerySchema,
-        response: {
-            204: z.void()
+export function deleteSecretRoute(accessControl) {
+    return defineRoute({
+        method: 'DELETE',
+        path: '/secrets/:key',
+        description: 'Delete a user-managed secret.',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid(),
+                key: secretKeySchema
+            }),
+            querystring: secretScopeQuerySchema,
+            response: {
+                204: z.void()
+            }
+        },
+        errorHandler: translateManagementError,
+        handler: async (request, reply)=>{
+            const { workspaceId, key } = request.params;
+            const { project_id: projectId } = request.query;
+            const access = await accessControl.requireManagementWrite({
+                request,
+                workspaceId,
+                projectId
+            });
+            await deleteManagedSecret({
+                workspaceId,
+                projectId,
+                key,
+                actorId: access.userId
+            });
+            return reply.status(204).send();
         }
-    },
-    errorHandler: translateManagementError,
-    handler: async (request, reply)=>{
-        const { workspaceId, key } = request.params;
-        const { project_id: projectId } = request.query;
-        const access = await requireManagementWrite({
-            request,
-            workspaceId,
-            projectId
-        });
-        await deleteManagedSecret({
-            workspaceId,
-            projectId,
-            key,
-            actorId: access.userId
-        });
-        return reply.status(204).send();
-    }
-});
+    });
+}
 
 //# sourceMappingURL=delete-secret.js.map

package/dist/presentation/routes/delete-secret.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/delete-secret.ts"],"sourcesContent":["import {secretKeySchema, secretScopeQuerySchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {deleteManagedSecret} from '#core/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport const deleteSecretRoute = defineRoute({\n  method: 'DELETE',\n  path: '/secrets/:key',\n  description: 'Delete a user-managed secret.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    querystring: secretScopeQuerySchema,\n    response: {204: z.void()},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request, reply) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId} = request.query;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n\n    await deleteManagedSecret({workspaceId, projectId, key, actorId: access.userId});\n    return reply.status(204).send();\n  },\n});\n"],"names":["secretKeySchema","secretScopeQuerySchema","defineRoute","z","deleteManagedSecret","requireManagementWrite","translateManagementError","deleteSecretRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","void","errorHandler","handler","request","reply","project_id","projectId","query","access","actorId","userId","status","send"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,sBAAsB,QAAO,2BAA2B;AACjF,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,oBAAoBL,YAAY;IAC3CM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQT,EAAEU,MAAM,CAAC;YAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;YAAIC,KAAKjB;QAAe;QACtEkB,aAAajB;QACbkB,UAAU;YAAC,KAAKhB,EAAEiB,IAAI;QAAE;IAC1B;IACAC,cAAcf;IACdgB,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACV,WAAW,EAAEG,GAAG,EAAC,GAAGM,QAAQX,MAAM;QACzC,MAAM,EAACa,YAAYC,SAAS,EAAC,GAAGH,QAAQI,KAAK;QAC7C,MAAMC,SAAS,MAAMvB,uBAAuB;YAACkB;YAAST;YAAaY;QAAS;QAE5E,MAAMtB,oBAAoB;YAACU;YAAaY;YAAWT;YAAKY,SAASD,OAAOE,MAAM;QAAA;QAC9E,OAAON,MAAMO,MAAM,CAAC,KAAKC,IAAI;IAC/B;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/delete-secret.ts"],"sourcesContent":["import {secretKeySchema, secretScopeQuerySchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {deleteManagedSecret} from '#core/index.js';\nimport type {ManagementAccessHelpers} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport function deleteSecretRoute(accessControl: ManagementAccessHelpers) {\n  return defineRoute({\n    method: 'DELETE',\n    path: '/secrets/:key',\n    description: 'Delete a user-managed secret.',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n      querystring: secretScopeQuerySchema,\n      response: {204: z.void()},\n    },\n    errorHandler: translateManagementError,\n    handler: async (request, reply) => {\n      const {workspaceId, key} = request.params;\n      const {project_id: projectId} = request.query;\n      const access = await accessControl.requireManagementWrite({request, workspaceId, projectId});\n\n      await deleteManagedSecret({workspaceId, projectId, key, actorId: access.userId});\n      return reply.status(204).send();\n    },\n  });\n}\n"],"names":["secretKeySchema","secretScopeQuerySchema","defineRoute","z","deleteManagedSecret","translateManagementError","deleteSecretRoute","accessControl","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","void","errorHandler","handler","request","reply","project_id","projectId","query","access","requireManagementWrite","actorId","userId","status","send"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,sBAAsB,QAAO,2BAA2B;AACjF,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AAEnD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,SAASC,kBAAkBC,aAAsC;IACtE,OAAOL,YAAY;QACjBM,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQT,EAAEU,MAAM,CAAC;gBAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;gBAAIC,KAAKjB;YAAe;YACtEkB,aAAajB;YACbkB,UAAU;gBAAC,KAAKhB,EAAEiB,IAAI;YAAE;QAC1B;QACAC,cAAchB;QACdiB,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACV,WAAW,EAAEG,GAAG,EAAC,GAAGM,QAAQX,MAAM;YACzC,MAAM,EAACa,YAAYC,SAAS,EAAC,GAAGH,QAAQI,KAAK;YAC7C,MAAMC,SAAS,MAAMrB,cAAcsB,sBAAsB,CAAC;gBAACN;gBAAST;gBAAaY;YAAS;YAE1F,MAAMtB,oBAAoB;gBAACU;gBAAaY;gBAAWT;gBAAKa,SAASF,OAAOG,MAAM;YAAA;YAC9E,OAAOP,MAAMQ,MAAM,CAAC,KAAKC,IAAI;QAC/B;IACF;AACF"}

package/dist/presentation/routes/delete-variable.d.ts

@@ -1,2 +1,3 @@
-export declare const deleteVariableRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function deleteVariableRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=delete-variable.d.ts.map

package/dist/presentation/routes/delete-variable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/delete-variable.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,mBAAmB,iDAkB9B,CAAC"}
+{"version":3,"file":"delete-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/delete-variable.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAGvD,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,uBAAuB,mDAoBzE"}

package/dist/presentation/routes/delete-variable.js

@@ -2,39 +2,40 @@ import { secretKeySchema, secretScopeQuerySchema } from '@shipfox/api-secrets-dt
 import { defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { deleteManagedVariable } from '#core/index.js';
-import { requireManagementWrite } from './auth.js';
 import { translateManagementError } from './errors.js';
-export const deleteVariableRoute = defineRoute({
-    method: 'DELETE',
-    path: '/variables/:key',
-    description: 'Delete a user-managed variable.',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid(),
-            key: secretKeySchema
-        }),
-        querystring: secretScopeQuerySchema,
-        response: {
-            204: z.void()
+export function deleteVariableRoute(accessControl) {
+    return defineRoute({
+        method: 'DELETE',
+        path: '/variables/:key',
+        description: 'Delete a user-managed variable.',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid(),
+                key: secretKeySchema
+            }),
+            querystring: secretScopeQuerySchema,
+            response: {
+                204: z.void()
+            }
+        },
+        errorHandler: translateManagementError,
+        handler: async (request, reply)=>{
+            const { workspaceId, key } = request.params;
+            const { project_id: projectId } = request.query;
+            const access = await accessControl.requireManagementWrite({
+                request,
+                workspaceId,
+                projectId
+            });
+            await deleteManagedVariable({
+                workspaceId,
+                projectId,
+                key,
+                actorId: access.userId
+            });
+            return reply.status(204).send();
         }
-    },
-    errorHandler: translateManagementError,
-    handler: async (request, reply)=>{
-        const { workspaceId, key } = request.params;
-        const { project_id: projectId } = request.query;
-        const access = await requireManagementWrite({
-            request,
-            workspaceId,
-            projectId
-        });
-        await deleteManagedVariable({
-            workspaceId,
-            projectId,
-            key,
-            actorId: access.userId
-        });
-        return reply.status(204).send();
-    }
-});
+    });
+}
 
 //# sourceMappingURL=delete-variable.js.map

package/dist/presentation/routes/delete-variable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/delete-variable.ts"],"sourcesContent":["import {secretKeySchema, secretScopeQuerySchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {deleteManagedVariable} from '#core/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport const deleteVariableRoute = defineRoute({\n  method: 'DELETE',\n  path: '/variables/:key',\n  description: 'Delete a user-managed variable.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    querystring: secretScopeQuerySchema,\n    response: {204: z.void()},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request, reply) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId} = request.query;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n\n    await deleteManagedVariable({workspaceId, projectId, key, actorId: access.userId});\n    return reply.status(204).send();\n  },\n});\n"],"names":["secretKeySchema","secretScopeQuerySchema","defineRoute","z","deleteManagedVariable","requireManagementWrite","translateManagementError","deleteVariableRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","void","errorHandler","handler","request","reply","project_id","projectId","query","access","actorId","userId","status","send"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,sBAAsB,QAAO,2BAA2B;AACjF,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,qBAAqB,QAAO,iBAAiB;AACrD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,sBAAsBL,YAAY;IAC7CM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQT,EAAEU,MAAM,CAAC;YAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;YAAIC,KAAKjB;QAAe;QACtEkB,aAAajB;QACbkB,UAAU;YAAC,KAAKhB,EAAEiB,IAAI;QAAE;IAC1B;IACAC,cAAcf;IACdgB,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACV,WAAW,EAAEG,GAAG,EAAC,GAAGM,QAAQX,MAAM;QACzC,MAAM,EAACa,YAAYC,SAAS,EAAC,GAAGH,QAAQI,KAAK;QAC7C,MAAMC,SAAS,MAAMvB,uBAAuB;YAACkB;YAAST;YAAaY;QAAS;QAE5E,MAAMtB,sBAAsB;YAACU;YAAaY;YAAWT;YAAKY,SAASD,OAAOE,MAAM;QAAA;QAChF,OAAON,MAAMO,MAAM,CAAC,KAAKC,IAAI;IAC/B;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/delete-variable.ts"],"sourcesContent":["import {secretKeySchema, secretScopeQuerySchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {deleteManagedVariable} from '#core/index.js';\nimport type {ManagementAccessHelpers} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport function deleteVariableRoute(accessControl: ManagementAccessHelpers) {\n  return defineRoute({\n    method: 'DELETE',\n    path: '/variables/:key',\n    description: 'Delete a user-managed variable.',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n      querystring: secretScopeQuerySchema,\n      response: {204: z.void()},\n    },\n    errorHandler: translateManagementError,\n    handler: async (request, reply) => {\n      const {workspaceId, key} = request.params;\n      const {project_id: projectId} = request.query;\n      const access = await accessControl.requireManagementWrite({request, workspaceId, projectId});\n\n      await deleteManagedVariable({workspaceId, projectId, key, actorId: access.userId});\n      return reply.status(204).send();\n    },\n  });\n}\n"],"names":["secretKeySchema","secretScopeQuerySchema","defineRoute","z","deleteManagedVariable","translateManagementError","deleteVariableRoute","accessControl","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","void","errorHandler","handler","request","reply","project_id","projectId","query","access","requireManagementWrite","actorId","userId","status","send"],"mappings":"AAAA,SAAQA,eAAe,EAAEC,sBAAsB,QAAO,2BAA2B;AACjF,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,qBAAqB,QAAO,iBAAiB;AAErD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,SAASC,oBAAoBC,aAAsC;IACxE,OAAOL,YAAY;QACjBM,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQT,EAAEU,MAAM,CAAC;gBAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;gBAAIC,KAAKjB;YAAe;YACtEkB,aAAajB;YACbkB,UAAU;gBAAC,KAAKhB,EAAEiB,IAAI;YAAE;QAC1B;QACAC,cAAchB;QACdiB,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACV,WAAW,EAAEG,GAAG,EAAC,GAAGM,QAAQX,MAAM;YACzC,MAAM,EAACa,YAAYC,SAAS,EAAC,GAAGH,QAAQI,KAAK;YAC7C,MAAMC,SAAS,MAAMrB,cAAcsB,sBAAsB,CAAC;gBAACN;gBAAST;gBAAaY;YAAS;YAE1F,MAAMtB,sBAAsB;gBAACU;gBAAaY;gBAAWT;gBAAKa,SAASF,OAAOG,MAAM;YAAA;YAChF,OAAOP,MAAMQ,MAAM,CAAC,KAAKC,IAAI;QAC/B;IACF;AACF"}

package/dist/presentation/routes/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/errors.ts"],"names":[],"mappings":"AAcA,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAgD9D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/errors.ts"],"names":[],"mappings":"AAaA,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CA4C9D"}

package/dist/presentation/routes/errors.js

@@ -1,4 +1,3 @@
-import { ProjectNotFoundError } from '@shipfox/api-projects';
 import { ClientError } from '@shipfox/node-fastify';
 import { NamespaceValidationError, SecretBatchDuplicateKeyError, SecretBatchScopeMismatchError, SecretKeyValidationError, SecretNotFoundError, SecretValueTooLargeError, UnknownSecretStoreError, VariableNotFoundError, WorkspaceSecretCapExceededError } from '#core/errors.js';
 export function translateManagementError(error) {
@@ -62,11 +61,6 @@ export function translateManagementError(error) {
             status: 400
         });
     }
-    if (error instanceof ProjectNotFoundError) {
-        throw new ClientError('Project not found', 'project-not-found', {
-            status: 404
-        });
-    }
     throw error;
 }
 

package/dist/presentation/routes/errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/errors.ts"],"sourcesContent":["import {ProjectNotFoundError} from '@shipfox/api-projects';\nimport {ClientError} from '@shipfox/node-fastify';\nimport {\n  NamespaceValidationError,\n  SecretBatchDuplicateKeyError,\n  SecretBatchScopeMismatchError,\n  SecretKeyValidationError,\n  SecretNotFoundError,\n  SecretValueTooLargeError,\n  UnknownSecretStoreError,\n  VariableNotFoundError,\n  WorkspaceSecretCapExceededError,\n} from '#core/errors.js';\n\nexport function translateManagementError(error: unknown): never {\n  if (error instanceof SecretKeyValidationError) {\n    throw new ClientError('Invalid secret key', 'invalid-key', {\n      status: 400,\n      details: {key: error.key},\n    });\n  }\n  if (error instanceof NamespaceValidationError) {\n    throw new ClientError('Invalid namespace', 'invalid-namespace', {\n      status: 400,\n      details: {namespace: error.namespace},\n    });\n  }\n  if (error instanceof SecretValueTooLargeError) {\n    throw new ClientError(error.message, 'value-too-large', {\n      status: 413,\n      details: {max_bytes: error.maxBytes},\n    });\n  }\n  if (error instanceof WorkspaceSecretCapExceededError) {\n    throw new ClientError('Workspace secret cap exceeded', 'workspace-secret-cap-exceeded', {\n      status: 409,\n      details: {cap: error.cap},\n    });\n  }\n  if (error instanceof SecretBatchScopeMismatchError) {\n    throw new ClientError(error.message, 'batch-scope-mismatch', {status: 400});\n  }\n  if (error instanceof SecretBatchDuplicateKeyError) {\n    throw new ClientError('Duplicate batch key', 'duplicate-key', {\n      status: 400,\n      details: {key: error.key},\n    });\n  }\n  if (error instanceof SecretNotFoundError) {\n    throw new ClientError('Secret not found', 'secret-not-found', {status: 404});\n  }\n  if (error instanceof VariableNotFoundError) {\n    throw new ClientError('Variable not found', 'variable-not-found', {status: 404});\n  }\n  if (error instanceof UnknownSecretStoreError) {\n    throw new ClientError('Unknown secret store', 'unknown-secret-store', {status: 400});\n  }\n  if (error instanceof ProjectNotFoundError) {\n    throw new ClientError('Project not found', 'project-not-found', {status: 404});\n  }\n\n  throw error;\n}\n"],"names":["ProjectNotFoundError","ClientError","NamespaceValidationError","SecretBatchDuplicateKeyError","SecretBatchScopeMismatchError","SecretKeyValidationError","SecretNotFoundError","SecretValueTooLargeError","UnknownSecretStoreError","VariableNotFoundError","WorkspaceSecretCapExceededError","translateManagementError","error","status","details","key","namespace","message","max_bytes","maxBytes","cap"],"mappings":"AAAA,SAAQA,oBAAoB,QAAO,wBAAwB;AAC3D,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SACEC,wBAAwB,EACxBC,4BAA4B,EAC5BC,6BAA6B,EAC7BC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,uBAAuB,EACvBC,qBAAqB,EACrBC,+BAA+B,QAC1B,kBAAkB;AAEzB,OAAO,SAASC,yBAAyBC,KAAc;IACrD,IAAIA,iBAAiBP,0BAA0B;QAC7C,MAAM,IAAIJ,YAAY,sBAAsB,eAAe;YACzDY,QAAQ;YACRC,SAAS;gBAACC,KAAKH,MAAMG,GAAG;YAAA;QAC1B;IACF;IACA,IAAIH,iBAAiBV,0BAA0B;QAC7C,MAAM,IAAID,YAAY,qBAAqB,qBAAqB;YAC9DY,QAAQ;YACRC,SAAS;gBAACE,WAAWJ,MAAMI,SAAS;YAAA;QACtC;IACF;IACA,IAAIJ,iBAAiBL,0BAA0B;QAC7C,MAAM,IAAIN,YAAYW,MAAMK,OAAO,EAAE,mBAAmB;YACtDJ,QAAQ;YACRC,SAAS;gBAACI,WAAWN,MAAMO,QAAQ;YAAA;QACrC;IACF;IACA,IAAIP,iBAAiBF,iCAAiC;QACpD,MAAM,IAAIT,YAAY,iCAAiC,iCAAiC;YACtFY,QAAQ;YACRC,SAAS;gBAACM,KAAKR,MAAMQ,GAAG;YAAA;QAC1B;IACF;IACA,IAAIR,iBAAiBR,+BAA+B;QAClD,MAAM,IAAIH,YAAYW,MAAMK,OAAO,EAAE,wBAAwB;YAACJ,QAAQ;QAAG;IAC3E;IACA,IAAID,iBAAiBT,8BAA8B;QACjD,MAAM,IAAIF,YAAY,uBAAuB,iBAAiB;YAC5DY,QAAQ;YACRC,SAAS;gBAACC,KAAKH,MAAMG,GAAG;YAAA;QAC1B;IACF;IACA,IAAIH,iBAAiBN,qBAAqB;QACxC,MAAM,IAAIL,YAAY,oBAAoB,oBAAoB;YAACY,QAAQ;QAAG;IAC5E;IACA,IAAID,iBAAiBH,uBAAuB;QAC1C,MAAM,IAAIR,YAAY,sBAAsB,sBAAsB;YAACY,QAAQ;QAAG;IAChF;IACA,IAAID,iBAAiBJ,yBAAyB;QAC5C,MAAM,IAAIP,YAAY,wBAAwB,wBAAwB;YAACY,QAAQ;QAAG;IACpF;IACA,IAAID,iBAAiBZ,sBAAsB;QACzC,MAAM,IAAIC,YAAY,qBAAqB,qBAAqB;YAACY,QAAQ;QAAG;IAC9E;IAEA,MAAMD;AACR"}
+{"version":3,"sources":["../../../src/presentation/routes/errors.ts"],"sourcesContent":["import {ClientError} from '@shipfox/node-fastify';\nimport {\n  NamespaceValidationError,\n  SecretBatchDuplicateKeyError,\n  SecretBatchScopeMismatchError,\n  SecretKeyValidationError,\n  SecretNotFoundError,\n  SecretValueTooLargeError,\n  UnknownSecretStoreError,\n  VariableNotFoundError,\n  WorkspaceSecretCapExceededError,\n} from '#core/errors.js';\n\nexport function translateManagementError(error: unknown): never {\n  if (error instanceof SecretKeyValidationError) {\n    throw new ClientError('Invalid secret key', 'invalid-key', {\n      status: 400,\n      details: {key: error.key},\n    });\n  }\n  if (error instanceof NamespaceValidationError) {\n    throw new ClientError('Invalid namespace', 'invalid-namespace', {\n      status: 400,\n      details: {namespace: error.namespace},\n    });\n  }\n  if (error instanceof SecretValueTooLargeError) {\n    throw new ClientError(error.message, 'value-too-large', {\n      status: 413,\n      details: {max_bytes: error.maxBytes},\n    });\n  }\n  if (error instanceof WorkspaceSecretCapExceededError) {\n    throw new ClientError('Workspace secret cap exceeded', 'workspace-secret-cap-exceeded', {\n      status: 409,\n      details: {cap: error.cap},\n    });\n  }\n  if (error instanceof SecretBatchScopeMismatchError) {\n    throw new ClientError(error.message, 'batch-scope-mismatch', {status: 400});\n  }\n  if (error instanceof SecretBatchDuplicateKeyError) {\n    throw new ClientError('Duplicate batch key', 'duplicate-key', {\n      status: 400,\n      details: {key: error.key},\n    });\n  }\n  if (error instanceof SecretNotFoundError) {\n    throw new ClientError('Secret not found', 'secret-not-found', {status: 404});\n  }\n  if (error instanceof VariableNotFoundError) {\n    throw new ClientError('Variable not found', 'variable-not-found', {status: 404});\n  }\n  if (error instanceof UnknownSecretStoreError) {\n    throw new ClientError('Unknown secret store', 'unknown-secret-store', {status: 400});\n  }\n  throw error;\n}\n"],"names":["ClientError","NamespaceValidationError","SecretBatchDuplicateKeyError","SecretBatchScopeMismatchError","SecretKeyValidationError","SecretNotFoundError","SecretValueTooLargeError","UnknownSecretStoreError","VariableNotFoundError","WorkspaceSecretCapExceededError","translateManagementError","error","status","details","key","namespace","message","max_bytes","maxBytes","cap"],"mappings":"AAAA,SAAQA,WAAW,QAAO,wBAAwB;AAClD,SACEC,wBAAwB,EACxBC,4BAA4B,EAC5BC,6BAA6B,EAC7BC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,uBAAuB,EACvBC,qBAAqB,EACrBC,+BAA+B,QAC1B,kBAAkB;AAEzB,OAAO,SAASC,yBAAyBC,KAAc;IACrD,IAAIA,iBAAiBP,0BAA0B;QAC7C,MAAM,IAAIJ,YAAY,sBAAsB,eAAe;YACzDY,QAAQ;YACRC,SAAS;gBAACC,KAAKH,MAAMG,GAAG;YAAA;QAC1B;IACF;IACA,IAAIH,iBAAiBV,0BAA0B;QAC7C,MAAM,IAAID,YAAY,qBAAqB,qBAAqB;YAC9DY,QAAQ;YACRC,SAAS;gBAACE,WAAWJ,MAAMI,SAAS;YAAA;QACtC;IACF;IACA,IAAIJ,iBAAiBL,0BAA0B;QAC7C,MAAM,IAAIN,YAAYW,MAAMK,OAAO,EAAE,mBAAmB;YACtDJ,QAAQ;YACRC,SAAS;gBAACI,WAAWN,MAAMO,QAAQ;YAAA;QACrC;IACF;IACA,IAAIP,iBAAiBF,iCAAiC;QACpD,MAAM,IAAIT,YAAY,iCAAiC,iCAAiC;YACtFY,QAAQ;YACRC,SAAS;gBAACM,KAAKR,MAAMQ,GAAG;YAAA;QAC1B;IACF;IACA,IAAIR,iBAAiBR,+BAA+B;QAClD,MAAM,IAAIH,YAAYW,MAAMK,OAAO,EAAE,wBAAwB;YAACJ,QAAQ;QAAG;IAC3E;IACA,IAAID,iBAAiBT,8BAA8B;QACjD,MAAM,IAAIF,YAAY,uBAAuB,iBAAiB;YAC5DY,QAAQ;YACRC,SAAS;gBAACC,KAAKH,MAAMG,GAAG;YAAA;QAC1B;IACF;IACA,IAAIH,iBAAiBN,qBAAqB;QACxC,MAAM,IAAIL,YAAY,oBAAoB,oBAAoB;YAACY,QAAQ;QAAG;IAC5E;IACA,IAAID,iBAAiBH,uBAAuB;QAC1C,MAAM,IAAIR,YAAY,sBAAsB,sBAAsB;YAACY,QAAQ;QAAG;IAChF;IACA,IAAID,iBAAiBJ,yBAAyB;QAC5C,MAAM,IAAIP,YAAY,wBAAwB,wBAAwB;YAACY,QAAQ;QAAG;IACpF;IACA,MAAMD;AACR"}

package/dist/presentation/routes/get-variable.d.ts

@@ -1,2 +1,3 @@
-export declare const getVariableRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function getVariableRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=get-variable.d.ts.map

package/dist/presentation/routes/get-variable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-variable.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,gBAAgB,iDAmB3B,CAAC"}
+{"version":3,"file":"get-variable.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/get-variable.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAGvD,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,uBAAuB,mDAqBtE"}

package/dist/presentation/routes/get-variable.js

@@ -3,40 +3,41 @@ import { defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { getManagedVariable } from '#core/index.js';
 import { toVariableDto } from '#presentation/dto/index.js';
-import { requireManagementRead } from './auth.js';
 import { translateManagementError } from './errors.js';
-export const getVariableRoute = defineRoute({
-    method: 'GET',
-    path: '/variables/:key',
-    description: 'Read a user-managed variable.',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid(),
-            key: secretKeySchema
-        }),
-        querystring: secretScopeQuerySchema,
-        response: {
-            200: getVariableResponseSchema
+export function getVariableRoute(accessControl) {
+    return defineRoute({
+        method: 'GET',
+        path: '/variables/:key',
+        description: 'Read a user-managed variable.',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid(),
+                key: secretKeySchema
+            }),
+            querystring: secretScopeQuerySchema,
+            response: {
+                200: getVariableResponseSchema
+            }
+        },
+        errorHandler: translateManagementError,
+        handler: async (request)=>{
+            const { workspaceId, key } = request.params;
+            const { project_id: projectId } = request.query;
+            await accessControl.requireManagementRead({
+                request,
+                workspaceId,
+                projectId
+            });
+            const variable = await getManagedVariable({
+                workspaceId,
+                projectId,
+                key
+            });
+            return {
+                variable: toVariableDto(variable)
+            };
         }
-    },
-    errorHandler: translateManagementError,
-    handler: async (request)=>{
-        const { workspaceId, key } = request.params;
-        const { project_id: projectId } = request.query;
-        await requireManagementRead({
-            request,
-            workspaceId,
-            projectId
-        });
-        const variable = await getManagedVariable({
-            workspaceId,
-            projectId,
-            key
-        });
-        return {
-            variable: toVariableDto(variable)
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=get-variable.js.map

package/dist/presentation/routes/get-variable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/get-variable.ts"],"sourcesContent":["import {\n  getVariableResponseSchema,\n  secretKeySchema,\n  secretScopeQuerySchema,\n} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getManagedVariable} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport {requireManagementRead} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport const getVariableRoute = defineRoute({\n  method: 'GET',\n  path: '/variables/:key',\n  description: 'Read a user-managed variable.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n    querystring: secretScopeQuerySchema,\n    response: {200: getVariableResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId, key} = request.params;\n    const {project_id: projectId} = request.query;\n\n    await requireManagementRead({request, workspaceId, projectId});\n    const variable = await getManagedVariable({workspaceId, projectId, key});\n\n    return {variable: toVariableDto(variable)};\n  },\n});\n"],"names":["getVariableResponseSchema","secretKeySchema","secretScopeQuerySchema","defineRoute","z","getManagedVariable","toVariableDto","requireManagementRead","translateManagementError","getVariableRoute","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","errorHandler","handler","request","project_id","projectId","query","variable"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,eAAe,EACfC,sBAAsB,QACjB,2BAA2B;AAClC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,kBAAkB,QAAO,iBAAiB;AAClD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,qBAAqB,QAAO,YAAY;AAChD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,mBAAmBN,YAAY;IAC1CO,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQV,EAAEW,MAAM,CAAC;YAACC,aAAaZ,EAAEa,MAAM,GAAGC,IAAI;YAAIC,KAAKlB;QAAe;QACtEmB,aAAalB;QACbmB,UAAU;YAAC,KAAKrB;QAAyB;IAC3C;IACAsB,cAAcd;IACde,SAAS,OAAOC;QACd,MAAM,EAACR,WAAW,EAAEG,GAAG,EAAC,GAAGK,QAAQV,MAAM;QACzC,MAAM,EAACW,YAAYC,SAAS,EAAC,GAAGF,QAAQG,KAAK;QAE7C,MAAMpB,sBAAsB;YAACiB;YAASR;YAAaU;QAAS;QAC5D,MAAME,WAAW,MAAMvB,mBAAmB;YAACW;YAAaU;YAAWP;QAAG;QAEtE,OAAO;YAACS,UAAUtB,cAAcsB;QAAS;IAC3C;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/get-variable.ts"],"sourcesContent":["import {\n  getVariableResponseSchema,\n  secretKeySchema,\n  secretScopeQuerySchema,\n} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {getManagedVariable} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport type {ManagementAccessHelpers} from './auth.js';\nimport {translateManagementError} from './errors.js';\n\nexport function getVariableRoute(accessControl: ManagementAccessHelpers) {\n  return defineRoute({\n    method: 'GET',\n    path: '/variables/:key',\n    description: 'Read a user-managed variable.',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid(), key: secretKeySchema}),\n      querystring: secretScopeQuerySchema,\n      response: {200: getVariableResponseSchema},\n    },\n    errorHandler: translateManagementError,\n    handler: async (request) => {\n      const {workspaceId, key} = request.params;\n      const {project_id: projectId} = request.query;\n\n      await accessControl.requireManagementRead({request, workspaceId, projectId});\n      const variable = await getManagedVariable({workspaceId, projectId, key});\n\n      return {variable: toVariableDto(variable)};\n    },\n  });\n}\n"],"names":["getVariableResponseSchema","secretKeySchema","secretScopeQuerySchema","defineRoute","z","getManagedVariable","toVariableDto","translateManagementError","getVariableRoute","accessControl","method","path","description","schema","params","object","workspaceId","string","uuid","key","querystring","response","errorHandler","handler","request","project_id","projectId","query","requireManagementRead","variable"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,eAAe,EACfC,sBAAsB,QACjB,2BAA2B;AAClC,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,kBAAkB,QAAO,iBAAiB;AAClD,SAAQC,aAAa,QAAO,6BAA6B;AAEzD,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,SAASC,iBAAiBC,aAAsC;IACrE,OAAON,YAAY;QACjBO,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQV,EAAEW,MAAM,CAAC;gBAACC,aAAaZ,EAAEa,MAAM,GAAGC,IAAI;gBAAIC,KAAKlB;YAAe;YACtEmB,aAAalB;YACbmB,UAAU;gBAAC,KAAKrB;YAAyB;QAC3C;QACAsB,cAAcf;QACdgB,SAAS,OAAOC;YACd,MAAM,EAACR,WAAW,EAAEG,GAAG,EAAC,GAAGK,QAAQV,MAAM;YACzC,MAAM,EAACW,YAAYC,SAAS,EAAC,GAAGF,QAAQG,KAAK;YAE7C,MAAMlB,cAAcmB,qBAAqB,CAAC;gBAACJ;gBAASR;gBAAaU;YAAS;YAC1E,MAAMG,WAAW,MAAMxB,mBAAmB;gBAACW;gBAAaU;gBAAWP;YAAG;YAEtE,OAAO;gBAACU,UAAUvB,cAAcuB;YAAS;QAC3C;IACF;AACF"}

package/dist/presentation/routes/index.d.ts

@@ -1,3 +1,4 @@
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
 import type { RouteGroup } from '@shipfox/node-fastify';
-export declare const secretsRoutes: RouteGroup[];
+export declare function createSecretsRoutes(projects: ProjectsModuleClient): RouteGroup[];
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAWtD,eAAO,MAAM,aAAa,EAAE,UAAU,EAgBrC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAYtD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,UAAU,EAAE,CAmBhF"}

package/dist/presentation/routes/index.js

@@ -1,4 +1,5 @@
 import { AUTH_USER } from '@shipfox/api-auth-context';
+import { createManagementAccess } from './auth.js';
 import { batchSecretsRoute } from './batch-secrets.js';
 import { batchVariablesRoute } from './batch-variables.js';
 import { deleteSecretRoute } from './delete-secret.js';
@@ -8,22 +9,25 @@ import { listSecretsRoute } from './list-secrets.js';
 import { listVariablesRoute } from './list-variables.js';
 import { putSecretRoute } from './put-secret.js';
 import { putVariableRoute } from './put-variable.js';
-export const secretsRoutes = [
-    {
-        prefix: '/workspaces/:workspaceId',
-        auth: AUTH_USER,
-        routes: [
-            listSecretsRoute,
-            putSecretRoute,
-            batchSecretsRoute,
-            deleteSecretRoute,
-            listVariablesRoute,
-            getVariableRoute,
-            putVariableRoute,
-            batchVariablesRoute,
-            deleteVariableRoute
-        ]
-    }
-];
+export function createSecretsRoutes(projects) {
+    const access = createManagementAccess(projects);
+    return [
+        {
+            prefix: '/workspaces/:workspaceId',
+            auth: AUTH_USER,
+            routes: [
+                listSecretsRoute(access),
+                putSecretRoute(access),
+                batchSecretsRoute(access),
+                deleteSecretRoute(access),
+                listVariablesRoute(access),
+                getVariableRoute(access),
+                putVariableRoute(access),
+                batchVariablesRoute(access),
+                deleteVariableRoute(access)
+            ]
+        }
+    ];
+}
 
 //# sourceMappingURL=index.js.map

package/dist/presentation/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import {AUTH_USER} from '@shipfox/api-auth-context';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {batchSecretsRoute} from './batch-secrets.js';\nimport {batchVariablesRoute} from './batch-variables.js';\nimport {deleteSecretRoute} from './delete-secret.js';\nimport {deleteVariableRoute} from './delete-variable.js';\nimport {getVariableRoute} from './get-variable.js';\nimport {listSecretsRoute} from './list-secrets.js';\nimport {listVariablesRoute} from './list-variables.js';\nimport {putSecretRoute} from './put-secret.js';\nimport {putVariableRoute} from './put-variable.js';\n\nexport const secretsRoutes: RouteGroup[] = [\n  {\n    prefix: '/workspaces/:workspaceId',\n    auth: AUTH_USER,\n    routes: [\n      listSecretsRoute,\n      putSecretRoute,\n      batchSecretsRoute,\n      deleteSecretRoute,\n      listVariablesRoute,\n      getVariableRoute,\n      putVariableRoute,\n      batchVariablesRoute,\n      deleteVariableRoute,\n    ],\n  },\n];\n"],"names":["AUTH_USER","batchSecretsRoute","batchVariablesRoute","deleteSecretRoute","deleteVariableRoute","getVariableRoute","listSecretsRoute","listVariablesRoute","putSecretRoute","putVariableRoute","secretsRoutes","prefix","auth","routes"],"mappings":"AAAA,SAAQA,SAAS,QAAO,4BAA4B;AAEpD,SAAQC,iBAAiB,QAAO,qBAAqB;AACrD,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,iBAAiB,QAAO,qBAAqB;AACrD,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,gBAAgB,QAAO,oBAAoB;AACnD,SAAQC,gBAAgB,QAAO,oBAAoB;AACnD,SAAQC,kBAAkB,QAAO,sBAAsB;AACvD,SAAQC,cAAc,QAAO,kBAAkB;AAC/C,SAAQC,gBAAgB,QAAO,oBAAoB;AAEnD,OAAO,MAAMC,gBAA8B;IACzC;QACEC,QAAQ;QACRC,MAAMZ;QACNa,QAAQ;YACNP;YACAE;YACAP;YACAE;YACAI;YACAF;YACAI;YACAP;YACAE;SACD;IACH;CACD,CAAC"}
+{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import {AUTH_USER} from '@shipfox/api-auth-context';\nimport type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport {createManagementAccess} from './auth.js';\nimport {batchSecretsRoute} from './batch-secrets.js';\nimport {batchVariablesRoute} from './batch-variables.js';\nimport {deleteSecretRoute} from './delete-secret.js';\nimport {deleteVariableRoute} from './delete-variable.js';\nimport {getVariableRoute} from './get-variable.js';\nimport {listSecretsRoute} from './list-secrets.js';\nimport {listVariablesRoute} from './list-variables.js';\nimport {putSecretRoute} from './put-secret.js';\nimport {putVariableRoute} from './put-variable.js';\n\nexport function createSecretsRoutes(projects: ProjectsModuleClient): RouteGroup[] {\n  const access = createManagementAccess(projects);\n  return [\n    {\n      prefix: '/workspaces/:workspaceId',\n      auth: AUTH_USER,\n      routes: [\n        listSecretsRoute(access),\n        putSecretRoute(access),\n        batchSecretsRoute(access),\n        deleteSecretRoute(access),\n        listVariablesRoute(access),\n        getVariableRoute(access),\n        putVariableRoute(access),\n        batchVariablesRoute(access),\n        deleteVariableRoute(access),\n      ],\n    },\n  ];\n}\n"],"names":["AUTH_USER","createManagementAccess","batchSecretsRoute","batchVariablesRoute","deleteSecretRoute","deleteVariableRoute","getVariableRoute","listSecretsRoute","listVariablesRoute","putSecretRoute","putVariableRoute","createSecretsRoutes","projects","access","prefix","auth","routes"],"mappings":"AAAA,SAAQA,SAAS,QAAO,4BAA4B;AAGpD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,iBAAiB,QAAO,qBAAqB;AACrD,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,iBAAiB,QAAO,qBAAqB;AACrD,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,gBAAgB,QAAO,oBAAoB;AACnD,SAAQC,gBAAgB,QAAO,oBAAoB;AACnD,SAAQC,kBAAkB,QAAO,sBAAsB;AACvD,SAAQC,cAAc,QAAO,kBAAkB;AAC/C,SAAQC,gBAAgB,QAAO,oBAAoB;AAEnD,OAAO,SAASC,oBAAoBC,QAA8B;IAChE,MAAMC,SAASZ,uBAAuBW;IACtC,OAAO;QACL;YACEE,QAAQ;YACRC,MAAMf;YACNgB,QAAQ;gBACNT,iBAAiBM;gBACjBJ,eAAeI;gBACfX,kBAAkBW;gBAClBT,kBAAkBS;gBAClBL,mBAAmBK;gBACnBP,iBAAiBO;gBACjBH,iBAAiBG;gBACjBV,oBAAoBU;gBACpBR,oBAAoBQ;aACrB;QACH;KACD;AACH"}

package/dist/presentation/routes/list-secrets.d.ts

@@ -1,2 +1,3 @@
-export declare const listSecretsRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function listSecretsRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=list-secrets.d.ts.map

package/dist/presentation/routes/list-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-secrets.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,gBAAgB,iDA+B3B,CAAC"}
+{"version":3,"file":"list-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-secrets.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAIvD,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,uBAAuB,mDAiCtE"}

package/dist/presentation/routes/list-secrets.js

@@ -3,48 +3,49 @@ import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { listManagedSecrets } from '#core/index.js';
 import { toSecretDto } from '#presentation/dto/index.js';
-import { requireManagementRead } from './auth.js';
 import { decodeManagementCursor, encodeManagementCursor } from './cursor.js';
 import { translateManagementError } from './errors.js';
-export const listSecretsRoute = defineRoute({
-    method: 'GET',
-    path: '/secrets',
-    description: 'List user-managed secrets for a workspace or project scope.',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid()
-        }),
-        querystring: listSecretsQuerySchema,
-        response: {
-            200: listSecretsResponseSchema
-        }
-    },
-    errorHandler: translateManagementError,
-    handler: async (request)=>{
-        const { workspaceId } = request.params;
-        const { project_id: projectId, limit, cursor } = request.query;
-        const decodedCursor = decodeManagementCursor(cursor);
-        if (cursor && !decodedCursor) {
-            throw new ClientError('Invalid cursor', 'invalid-cursor', {
-                status: 400
+export function listSecretsRoute(accessControl) {
+    return defineRoute({
+        method: 'GET',
+        path: '/secrets',
+        description: 'List user-managed secrets for a workspace or project scope.',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid()
+            }),
+            querystring: listSecretsQuerySchema,
+            response: {
+                200: listSecretsResponseSchema
+            }
+        },
+        errorHandler: translateManagementError,
+        handler: async (request)=>{
+            const { workspaceId } = request.params;
+            const { project_id: projectId, limit, cursor } = request.query;
+            const decodedCursor = decodeManagementCursor(cursor);
+            if (cursor && !decodedCursor) {
+                throw new ClientError('Invalid cursor', 'invalid-cursor', {
+                    status: 400
+                });
+            }
+            await accessControl.requireManagementRead({
+                request,
+                workspaceId,
+                projectId
+            });
+            const result = await listManagedSecrets({
+                workspaceId,
+                projectId,
+                limit,
+                cursor: decodedCursor ?? undefined
             });
+            return {
+                secrets: result.secrets.map(toSecretDto),
+                next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null
+            };
         }
-        await requireManagementRead({
-            request,
-            workspaceId,
-            projectId
-        });
-        const result = await listManagedSecrets({
-            workspaceId,
-            projectId,
-            limit,
-            cursor: decodedCursor ?? undefined
-        });
-        return {
-            secrets: result.secrets.map(toSecretDto),
-            next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=list-secrets.js.map

package/dist/presentation/routes/list-secrets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/list-secrets.ts"],"sourcesContent":["import {listSecretsQuerySchema, listSecretsResponseSchema} from '@shipfox/api-secrets-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {listManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport {requireManagementRead} from './auth.js';\nimport {decodeManagementCursor, encodeManagementCursor} from './cursor.js';\nimport {translateManagementError} from './errors.js';\n\nexport const listSecretsRoute = defineRoute({\n  method: 'GET',\n  path: '/secrets',\n  description: 'List user-managed secrets for a workspace or project scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    querystring: listSecretsQuerySchema,\n    response: {200: listSecretsResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, limit, cursor} = request.query;\n    const decodedCursor = decodeManagementCursor(cursor);\n    if (cursor && !decodedCursor) {\n      throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});\n    }\n\n    await requireManagementRead({request, workspaceId, projectId});\n    const result = await listManagedSecrets({\n      workspaceId,\n      projectId,\n      limit,\n      cursor: decodedCursor ?? undefined,\n    });\n\n    return {\n      secrets: result.secrets.map(toSecretDto),\n      next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null,\n    };\n  },\n});\n"],"names":["listSecretsQuerySchema","listSecretsResponseSchema","ClientError","defineRoute","z","listManagedSecrets","toSecretDto","requireManagementRead","decodeManagementCursor","encodeManagementCursor","translateManagementError","listSecretsRoute","method","path","description","schema","params","object","workspaceId","string","uuid","querystring","response","errorHandler","handler","request","project_id","projectId","limit","cursor","query","decodedCursor","status","result","undefined","secrets","map","next_cursor","nextCursor"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,yBAAyB,QAAO,2BAA2B;AAC3F,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,kBAAkB,QAAO,iBAAiB;AAClD,SAAQC,WAAW,QAAO,6BAA6B;AACvD,SAAQC,qBAAqB,QAAO,YAAY;AAChD,SAAQC,sBAAsB,EAAEC,sBAAsB,QAAO,cAAc;AAC3E,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,MAAMC,mBAAmBR,YAAY;IAC1CS,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQZ,EAAEa,MAAM,CAAC;YAACC,aAAad,EAAEe,MAAM,GAAGC,IAAI;QAAE;QAChDC,aAAarB;QACbsB,UAAU;YAAC,KAAKrB;QAAyB;IAC3C;IACAsB,cAAcb;IACdc,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAC,GAAGJ,QAAQK,KAAK;QAC5D,MAAMC,gBAAgBvB,uBAAuBqB;QAC7C,IAAIA,UAAU,CAACE,eAAe;YAC5B,MAAM,IAAI7B,YAAY,kBAAkB,kBAAkB;gBAAC8B,QAAQ;YAAG;QACxE;QAEA,MAAMzB,sBAAsB;YAACkB;YAASP;YAAaS;QAAS;QAC5D,MAAMM,SAAS,MAAM5B,mBAAmB;YACtCa;YACAS;YACAC;YACAC,QAAQE,iBAAiBG;QAC3B;QAEA,OAAO;YACLC,SAASF,OAAOE,OAAO,CAACC,GAAG,CAAC9B;YAC5B+B,aAAaJ,OAAOK,UAAU,GAAG7B,uBAAuBwB,OAAOK,UAAU,IAAI;QAC/E;IACF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/list-secrets.ts"],"sourcesContent":["import {listSecretsQuerySchema, listSecretsResponseSchema} from '@shipfox/api-secrets-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {listManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport type {ManagementAccessHelpers} from './auth.js';\nimport {decodeManagementCursor, encodeManagementCursor} from './cursor.js';\nimport {translateManagementError} from './errors.js';\n\nexport function listSecretsRoute(accessControl: ManagementAccessHelpers) {\n  return defineRoute({\n    method: 'GET',\n    path: '/secrets',\n    description: 'List user-managed secrets for a workspace or project scope.',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid()}),\n      querystring: listSecretsQuerySchema,\n      response: {200: listSecretsResponseSchema},\n    },\n    errorHandler: translateManagementError,\n    handler: async (request) => {\n      const {workspaceId} = request.params;\n      const {project_id: projectId, limit, cursor} = request.query;\n      const decodedCursor = decodeManagementCursor(cursor);\n      if (cursor && !decodedCursor) {\n        throw new ClientError('Invalid cursor', 'invalid-cursor', {status: 400});\n      }\n\n      await accessControl.requireManagementRead({request, workspaceId, projectId});\n      const result = await listManagedSecrets({\n        workspaceId,\n        projectId,\n        limit,\n        cursor: decodedCursor ?? undefined,\n      });\n\n      return {\n        secrets: result.secrets.map(toSecretDto),\n        next_cursor: result.nextCursor ? encodeManagementCursor(result.nextCursor) : null,\n      };\n    },\n  });\n}\n"],"names":["listSecretsQuerySchema","listSecretsResponseSchema","ClientError","defineRoute","z","listManagedSecrets","toSecretDto","decodeManagementCursor","encodeManagementCursor","translateManagementError","listSecretsRoute","accessControl","method","path","description","schema","params","object","workspaceId","string","uuid","querystring","response","errorHandler","handler","request","project_id","projectId","limit","cursor","query","decodedCursor","status","requireManagementRead","result","undefined","secrets","map","next_cursor","nextCursor"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,yBAAyB,QAAO,2BAA2B;AAC3F,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,kBAAkB,QAAO,iBAAiB;AAClD,SAAQC,WAAW,QAAO,6BAA6B;AAEvD,SAAQC,sBAAsB,EAAEC,sBAAsB,QAAO,cAAc;AAC3E,SAAQC,wBAAwB,QAAO,cAAc;AAErD,OAAO,SAASC,iBAAiBC,aAAsC;IACrE,OAAOR,YAAY;QACjBS,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQZ,EAAEa,MAAM,CAAC;gBAACC,aAAad,EAAEe,MAAM,GAAGC,IAAI;YAAE;YAChDC,aAAarB;YACbsB,UAAU;gBAAC,KAAKrB;YAAyB;QAC3C;QACAsB,cAAcd;QACde,SAAS,OAAOC;YACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;YACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAC,GAAGJ,QAAQK,KAAK;YAC5D,MAAMC,gBAAgBxB,uBAAuBsB;YAC7C,IAAIA,UAAU,CAACE,eAAe;gBAC5B,MAAM,IAAI7B,YAAY,kBAAkB,kBAAkB;oBAAC8B,QAAQ;gBAAG;YACxE;YAEA,MAAMrB,cAAcsB,qBAAqB,CAAC;gBAACR;gBAASP;gBAAaS;YAAS;YAC1E,MAAMO,SAAS,MAAM7B,mBAAmB;gBACtCa;gBACAS;gBACAC;gBACAC,QAAQE,iBAAiBI;YAC3B;YAEA,OAAO;gBACLC,SAASF,OAAOE,OAAO,CAACC,GAAG,CAAC/B;gBAC5BgC,aAAaJ,OAAOK,UAAU,GAAG/B,uBAAuB0B,OAAOK,UAAU,IAAI;YAC/E;QACF;IACF;AACF"}

package/dist/presentation/routes/list-variables.d.ts

@@ -1,2 +1,3 @@
-export declare const listVariablesRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function listVariablesRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=list-variables.d.ts.map

package/dist/presentation/routes/list-variables.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-variables.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-variables.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,kBAAkB,iDA+B7B,CAAC"}
+{"version":3,"file":"list-variables.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/list-variables.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAIvD,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,uBAAuB,mDAiCxE"}