@shipfox/api-secrets 5.0.0 → 7.1.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 51 files with swc (123.26ms)
+Successfully compiled: 52 files with swc (576.27ms)

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @shipfox/api-secrets
 
+## 7.1.0
+
+### Patch Changes
+
+- Updated dependencies [ac42c96]
+- Updated dependencies [6ce08c0]
+  - @shipfox/node-fastify@0.3.0
+  - @shipfox/node-module@0.5.0
+  - @shipfox/node-opentelemetry@0.6.0
+  - @shipfox/api-auth-context@7.1.0
+
+## 6.0.0
+
+### Minor Changes
+
+- a42b575: Exposes Secrets through its inter-module contract and migrates Agent, integrations, and Workflows consumers.
+
+### Patch Changes
+
+- f73da5d: Enforces bounded API context imports and routes inter-module consumers through producer contracts.
+- Updated dependencies [54ce48b]
+- Updated dependencies [c0162b0]
+- Updated dependencies [7ac43a4]
+- Updated dependencies [a01e917]
+- Updated dependencies [a42b575]
+- Updated dependencies [8bdc149]
+- Updated dependencies [3810996]
+- Updated dependencies [b00ed29]
+- Updated dependencies [8aa7cd3]
+- Updated dependencies [81f9544]
+  - @shipfox/node-module@0.4.0
+  - @shipfox/node-drizzle@0.3.2
+  - @shipfox/node-outbox@0.2.4
+  - @shipfox/api-secrets-dto@6.0.0
+  - @shipfox/api-auth-context@6.0.0
+  - @shipfox/node-fastify@0.2.4
+  - @shipfox/inter-module@0.2.0
+  - @shipfox/api-projects-dto@6.0.0
+
 ## 5.0.0
 
 ### Patch Changes

package/dist/index.d.ts

@@ -1,4 +1,6 @@
+import type { ProjectsModuleClient } from '@shipfox/api-projects-dto';
 import type { ShipfoxModule } from '@shipfox/node-module';
 export { BUILTIN_LOCAL_STORE, DekUnwrapError, DekWrapError, deleteManagedSecret, deleteManagedVariable, deleteSecrets, deleteVariables, getManagedVariable, getSecret, getSecretsByNamespace, getVariable, getVariablesByNamespace, KekConfigurationError, KekVersionStrandedError, listManagedSecrets, listManagedVariables, NamespaceValidationError, resolveSecretStore, rotateWorkspaceDataKeys, SecretBatchScopeMismatchError, SecretDecryptionError, SecretKeyValidationError, SecretNotFoundError, type SecretStoreProvider, SecretValueTooLargeError, setManagedSecrets, setManagedVariables, setSecrets, setVariables, UnknownSecretStoreError, VariableNotFoundError, WorkspaceSecretCapExceededError, } from '#core/index.js';
+export declare function createSecretsModule(projects: ProjectsModuleClient): ShipfoxModule;
 export declare const secretsModule: ShipfoxModule;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAMxD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,WAAW,EACX,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,aAAa,EAAE,aAO3B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AAEpE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAOxD,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,WAAW,EACX,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AAExB,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,aAAa,CAUjF;AAGD,eAAO,MAAM,aAAa,EAAE,aAG3B,CAAC"}

package/dist/index.js

@@ -2,27 +2,41 @@ import { secretsEventSchemas } from '@shipfox/api-secrets-dto';
 import { db, migrationsPath, secretsOutbox } from '#db/index.js';
 import { registerSecretsServiceMetrics } from '#metrics/index.js';
 import { secretsE2eRoutes } from '#presentation/e2eRoutes/index.js';
-import { secretsRoutes } from '#presentation/routes/index.js';
+import { createSecretsInterModulePresentation } from '#presentation/inter-module.js';
+import { createSecretsRoutes } from '#presentation/routes/index.js';
 export { BUILTIN_LOCAL_STORE, DekUnwrapError, DekWrapError, deleteManagedSecret, deleteManagedVariable, deleteSecrets, deleteVariables, getManagedVariable, getSecret, getSecretsByNamespace, getVariable, getVariablesByNamespace, KekConfigurationError, KekVersionStrandedError, listManagedSecrets, listManagedVariables, NamespaceValidationError, resolveSecretStore, rotateWorkspaceDataKeys, SecretBatchScopeMismatchError, SecretDecryptionError, SecretKeyValidationError, SecretNotFoundError, SecretValueTooLargeError, setManagedSecrets, setManagedVariables, setSecrets, setVariables, UnknownSecretStoreError, VariableNotFoundError, WorkspaceSecretCapExceededError } from '#core/index.js';
+export function createSecretsModule(projects) {
+    return {
+        name: 'secrets',
+        database: {
+            db,
+            migrationsPath
+        },
+        routes: createSecretsRoutes(projects),
+        e2eRoutes: [
+            secretsE2eRoutes
+        ],
+        metrics: registerSecretsServiceMetrics,
+        publishers: [
+            {
+                name: 'secrets',
+                table: secretsOutbox,
+                db,
+                eventSchemas: secretsEventSchemas
+            }
+        ],
+        interModulePresentations: [
+            createSecretsInterModulePresentation()
+        ]
+    };
+}
+// Migration setup imports this declaration only for the owned database metadata.
 export const secretsModule = {
     name: 'secrets',
     database: {
         db,
         migrationsPath
-    },
-    routes: secretsRoutes,
-    e2eRoutes: [
-        secretsE2eRoutes
-    ],
-    metrics: registerSecretsServiceMetrics,
-    publishers: [
-        {
-            name: 'secrets',
-            table: secretsOutbox,
-            db,
-            eventSchemas: secretsEventSchemas
-        }
-    ]
+    }
 };
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {secretsEventSchemas} from '@shipfox/api-secrets-dto';\nimport type {ShipfoxModule} from '@shipfox/node-module';\nimport {db, migrationsPath, secretsOutbox} from '#db/index.js';\nimport {registerSecretsServiceMetrics} from '#metrics/index.js';\nimport {secretsE2eRoutes} from '#presentation/e2eRoutes/index.js';\nimport {secretsRoutes} from '#presentation/routes/index.js';\n\nexport {\n  BUILTIN_LOCAL_STORE,\n  DekUnwrapError,\n  DekWrapError,\n  deleteManagedSecret,\n  deleteManagedVariable,\n  deleteSecrets,\n  deleteVariables,\n  getManagedVariable,\n  getSecret,\n  getSecretsByNamespace,\n  getVariable,\n  getVariablesByNamespace,\n  KekConfigurationError,\n  KekVersionStrandedError,\n  listManagedSecrets,\n  listManagedVariables,\n  NamespaceValidationError,\n  resolveSecretStore,\n  rotateWorkspaceDataKeys,\n  SecretBatchScopeMismatchError,\n  SecretDecryptionError,\n  SecretKeyValidationError,\n  SecretNotFoundError,\n  type SecretStoreProvider,\n  SecretValueTooLargeError,\n  setManagedSecrets,\n  setManagedVariables,\n  setSecrets,\n  setVariables,\n  UnknownSecretStoreError,\n  VariableNotFoundError,\n  WorkspaceSecretCapExceededError,\n} from '#core/index.js';\n\nexport const secretsModule: ShipfoxModule = {\n  name: 'secrets',\n  database: {db, migrationsPath},\n  routes: secretsRoutes,\n  e2eRoutes: [secretsE2eRoutes],\n  metrics: registerSecretsServiceMetrics,\n  publishers: [{name: 'secrets', table: secretsOutbox, db, eventSchemas: secretsEventSchemas}],\n};\n"],"names":["secretsEventSchemas","db","migrationsPath","secretsOutbox","registerSecretsServiceMetrics","secretsE2eRoutes","secretsRoutes","BUILTIN_LOCAL_STORE","DekUnwrapError","DekWrapError","deleteManagedSecret","deleteManagedVariable","deleteSecrets","deleteVariables","getManagedVariable","getSecret","getSecretsByNamespace","getVariable","getVariablesByNamespace","KekConfigurationError","KekVersionStrandedError","listManagedSecrets","listManagedVariables","NamespaceValidationError","resolveSecretStore","rotateWorkspaceDataKeys","SecretBatchScopeMismatchError","SecretDecryptionError","SecretKeyValidationError","SecretNotFoundError","SecretValueTooLargeError","setManagedSecrets","setManagedVariables","setSecrets","setVariables","UnknownSecretStoreError","VariableNotFoundError","WorkspaceSecretCapExceededError","secretsModule","name","database","routes","e2eRoutes","metrics","publishers","table","eventSchemas"],"mappings":"AAAA,SAAQA,mBAAmB,QAAO,2BAA2B;AAE7D,SAAQC,EAAE,EAAEC,cAAc,EAAEC,aAAa,QAAO,eAAe;AAC/D,SAAQC,6BAA6B,QAAO,oBAAoB;AAChE,SAAQC,gBAAgB,QAAO,mCAAmC;AAClE,SAAQC,aAAa,QAAO,gCAAgC;AAE5D,SACEC,mBAAmB,EACnBC,cAAc,EACdC,YAAY,EACZC,mBAAmB,EACnBC,qBAAqB,EACrBC,aAAa,EACbC,eAAe,EACfC,kBAAkB,EAClBC,SAAS,EACTC,qBAAqB,EACrBC,WAAW,EACXC,uBAAuB,EACvBC,qBAAqB,EACrBC,uBAAuB,EACvBC,kBAAkB,EAClBC,oBAAoB,EACpBC,wBAAwB,EACxBC,kBAAkB,EAClBC,uBAAuB,EACvBC,6BAA6B,EAC7BC,qBAAqB,EACrBC,wBAAwB,EACxBC,mBAAmB,EAEnBC,wBAAwB,EACxBC,iBAAiB,EACjBC,mBAAmB,EACnBC,UAAU,EACVC,YAAY,EACZC,uBAAuB,EACvBC,qBAAqB,EACrBC,+BAA+B,QAC1B,iBAAiB;AAExB,OAAO,MAAMC,gBAA+B;IAC1CC,MAAM;IACNC,UAAU;QAACvC;QAAIC;IAAc;IAC7BuC,QAAQnC;IACRoC,WAAW;QAACrC;KAAiB;IAC7BsC,SAASvC;IACTwC,YAAY;QAAC;YAACL,MAAM;YAAWM,OAAO1C;YAAeF;YAAI6C,cAAc9C;QAAmB;KAAE;AAC9F,EAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {ProjectsModuleClient} from '@shipfox/api-projects-dto';\nimport {secretsEventSchemas} from '@shipfox/api-secrets-dto';\nimport type {ShipfoxModule} from '@shipfox/node-module';\nimport {db, migrationsPath, secretsOutbox} from '#db/index.js';\nimport {registerSecretsServiceMetrics} from '#metrics/index.js';\nimport {secretsE2eRoutes} from '#presentation/e2eRoutes/index.js';\nimport {createSecretsInterModulePresentation} from '#presentation/inter-module.js';\nimport {createSecretsRoutes} from '#presentation/routes/index.js';\n\nexport {\n  BUILTIN_LOCAL_STORE,\n  DekUnwrapError,\n  DekWrapError,\n  deleteManagedSecret,\n  deleteManagedVariable,\n  deleteSecrets,\n  deleteVariables,\n  getManagedVariable,\n  getSecret,\n  getSecretsByNamespace,\n  getVariable,\n  getVariablesByNamespace,\n  KekConfigurationError,\n  KekVersionStrandedError,\n  listManagedSecrets,\n  listManagedVariables,\n  NamespaceValidationError,\n  resolveSecretStore,\n  rotateWorkspaceDataKeys,\n  SecretBatchScopeMismatchError,\n  SecretDecryptionError,\n  SecretKeyValidationError,\n  SecretNotFoundError,\n  type SecretStoreProvider,\n  SecretValueTooLargeError,\n  setManagedSecrets,\n  setManagedVariables,\n  setSecrets,\n  setVariables,\n  UnknownSecretStoreError,\n  VariableNotFoundError,\n  WorkspaceSecretCapExceededError,\n} from '#core/index.js';\n\nexport function createSecretsModule(projects: ProjectsModuleClient): ShipfoxModule {\n  return {\n    name: 'secrets',\n    database: {db, migrationsPath},\n    routes: createSecretsRoutes(projects),\n    e2eRoutes: [secretsE2eRoutes],\n    metrics: registerSecretsServiceMetrics,\n    publishers: [{name: 'secrets', table: secretsOutbox, db, eventSchemas: secretsEventSchemas}],\n    interModulePresentations: [createSecretsInterModulePresentation()],\n  };\n}\n\n// Migration setup imports this declaration only for the owned database metadata.\nexport const secretsModule: ShipfoxModule = {\n  name: 'secrets',\n  database: {db, migrationsPath},\n};\n"],"names":["secretsEventSchemas","db","migrationsPath","secretsOutbox","registerSecretsServiceMetrics","secretsE2eRoutes","createSecretsInterModulePresentation","createSecretsRoutes","BUILTIN_LOCAL_STORE","DekUnwrapError","DekWrapError","deleteManagedSecret","deleteManagedVariable","deleteSecrets","deleteVariables","getManagedVariable","getSecret","getSecretsByNamespace","getVariable","getVariablesByNamespace","KekConfigurationError","KekVersionStrandedError","listManagedSecrets","listManagedVariables","NamespaceValidationError","resolveSecretStore","rotateWorkspaceDataKeys","SecretBatchScopeMismatchError","SecretDecryptionError","SecretKeyValidationError","SecretNotFoundError","SecretValueTooLargeError","setManagedSecrets","setManagedVariables","setSecrets","setVariables","UnknownSecretStoreError","VariableNotFoundError","WorkspaceSecretCapExceededError","createSecretsModule","projects","name","database","routes","e2eRoutes","metrics","publishers","table","eventSchemas","interModulePresentations","secretsModule"],"mappings":"AACA,SAAQA,mBAAmB,QAAO,2BAA2B;AAE7D,SAAQC,EAAE,EAAEC,cAAc,EAAEC,aAAa,QAAO,eAAe;AAC/D,SAAQC,6BAA6B,QAAO,oBAAoB;AAChE,SAAQC,gBAAgB,QAAO,mCAAmC;AAClE,SAAQC,oCAAoC,QAAO,gCAAgC;AACnF,SAAQC,mBAAmB,QAAO,gCAAgC;AAElE,SACEC,mBAAmB,EACnBC,cAAc,EACdC,YAAY,EACZC,mBAAmB,EACnBC,qBAAqB,EACrBC,aAAa,EACbC,eAAe,EACfC,kBAAkB,EAClBC,SAAS,EACTC,qBAAqB,EACrBC,WAAW,EACXC,uBAAuB,EACvBC,qBAAqB,EACrBC,uBAAuB,EACvBC,kBAAkB,EAClBC,oBAAoB,EACpBC,wBAAwB,EACxBC,kBAAkB,EAClBC,uBAAuB,EACvBC,6BAA6B,EAC7BC,qBAAqB,EACrBC,wBAAwB,EACxBC,mBAAmB,EAEnBC,wBAAwB,EACxBC,iBAAiB,EACjBC,mBAAmB,EACnBC,UAAU,EACVC,YAAY,EACZC,uBAAuB,EACvBC,qBAAqB,EACrBC,+BAA+B,QAC1B,iBAAiB;AAExB,OAAO,SAASC,oBAAoBC,QAA8B;IAChE,OAAO;QACLC,MAAM;QACNC,UAAU;YAACzC;YAAIC;QAAc;QAC7ByC,QAAQpC,oBAAoBiC;QAC5BI,WAAW;YAACvC;SAAiB;QAC7BwC,SAASzC;QACT0C,YAAY;YAAC;gBAACL,MAAM;gBAAWM,OAAO5C;gBAAeF;gBAAI+C,cAAchD;YAAmB;SAAE;QAC5FiD,0BAA0B;YAAC3C;SAAuC;IACpE;AACF;AAEA,iFAAiF;AACjF,OAAO,MAAM4C,gBAA+B;IAC1CT,MAAM;IACNC,UAAU;QAACzC;QAAIC;IAAc;AAC/B,EAAE"}

package/dist/presentation/inter-module.d.ts

@@ -0,0 +1,4 @@
+import { secretsInterModuleContract } from '@shipfox/api-secrets-dto/inter-module';
+import { type InterModulePresentation } from '@shipfox/inter-module';
+export declare function createSecretsInterModulePresentation(): InterModulePresentation<typeof secretsInterModuleContract>;
+//# sourceMappingURL=inter-module.d.ts.map

package/dist/presentation/inter-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../../src/presentation/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,0BAA0B,EAAC,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,uBAAuB,CAAC;AAY/B,wBAAgB,oCAAoC,IAAI,uBAAuB,CAC7E,OAAO,0BAA0B,CAClC,CAiCA"}

package/dist/presentation/inter-module.js

@@ -0,0 +1,73 @@
+import { secretsInterModuleContract } from '@shipfox/api-secrets-dto/inter-module';
+import { createInterModuleKnownError, defineInterModulePresentation } from '@shipfox/inter-module';
+import { deleteSecrets, getSecret, getSecretsByNamespace, getVariablesByNamespace, SecretDecryptionError, SecretValueTooLargeError, setSecrets, WorkspaceSecretCapExceededError } from '#core/index.js';
+export function createSecretsInterModulePresentation() {
+    return defineInterModulePresentation(secretsInterModuleContract, {
+        getSecret: async (input)=>{
+            try {
+                const { store, ...params } = input;
+                return {
+                    value: await getSecret({
+                        ...params,
+                        ...store === undefined ? {} : {
+                            store
+                        }
+                    })
+                };
+            } catch (error) {
+                throw toGetKnownError('getSecret', error);
+            }
+        },
+        getSecretsByNamespace: async (input)=>{
+            try {
+                const { store, ...params } = input;
+                return {
+                    values: await getSecretsByNamespace({
+                        ...params,
+                        ...store === undefined ? {} : {
+                            store
+                        }
+                    })
+                };
+            } catch (error) {
+                throw toGetKnownError('getSecretsByNamespace', error);
+            }
+        },
+        getVariablesByNamespace: async (input)=>({
+                values: await getVariablesByNamespace(input)
+            }),
+        setSecrets: async (input)=>{
+            try {
+                await setSecrets(input);
+                return {};
+            } catch (error) {
+                throw toSetKnownError(error);
+            }
+        },
+        deleteSecrets: async (input)=>({
+                deleted: await deleteSecrets(input)
+            })
+    });
+}
+function toGetKnownError(methodName, error) {
+    if (error instanceof SecretDecryptionError) {
+        return createInterModuleKnownError(secretsInterModuleContract.methods[methodName], 'secret-decryption-failed', {});
+    }
+    return error;
+}
+function toSetKnownError(error) {
+    const method = secretsInterModuleContract.methods.setSecrets;
+    if (error instanceof SecretValueTooLargeError) {
+        return createInterModuleKnownError(method, 'value-too-large', {
+            maxBytes: error.maxBytes
+        });
+    }
+    if (error instanceof WorkspaceSecretCapExceededError) {
+        return createInterModuleKnownError(method, 'workspace-secret-cap-exceeded', {
+            cap: error.cap
+        });
+    }
+    return error;
+}
+
+//# sourceMappingURL=inter-module.js.map

package/dist/presentation/inter-module.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/presentation/inter-module.ts"],"sourcesContent":["import {secretsInterModuleContract} from '@shipfox/api-secrets-dto/inter-module';\nimport {\n  createInterModuleKnownError,\n  defineInterModulePresentation,\n  type InterModulePresentation,\n} from '@shipfox/inter-module';\nimport {\n  deleteSecrets,\n  getSecret,\n  getSecretsByNamespace,\n  getVariablesByNamespace,\n  SecretDecryptionError,\n  SecretValueTooLargeError,\n  setSecrets,\n  WorkspaceSecretCapExceededError,\n} from '#core/index.js';\n\nexport function createSecretsInterModulePresentation(): InterModulePresentation<\n  typeof secretsInterModuleContract\n> {\n  return defineInterModulePresentation(secretsInterModuleContract, {\n    getSecret: async (input) => {\n      try {\n        const {store, ...params} = input;\n        return {value: await getSecret({...params, ...(store === undefined ? {} : {store})})};\n      } catch (error) {\n        throw toGetKnownError('getSecret', error);\n      }\n    },\n    getSecretsByNamespace: async (input) => {\n      try {\n        const {store, ...params} = input;\n        return {\n          values: await getSecretsByNamespace({...params, ...(store === undefined ? {} : {store})}),\n        };\n      } catch (error) {\n        throw toGetKnownError('getSecretsByNamespace', error);\n      }\n    },\n    getVariablesByNamespace: async (input) => ({\n      values: await getVariablesByNamespace(input),\n    }),\n    setSecrets: async (input) => {\n      try {\n        await setSecrets(input);\n        return {};\n      } catch (error) {\n        throw toSetKnownError(error);\n      }\n    },\n    deleteSecrets: async (input) => ({deleted: await deleteSecrets(input)}),\n  });\n}\n\nfunction toGetKnownError(\n  methodName: 'getSecret' | 'getSecretsByNamespace',\n  error: unknown,\n): unknown {\n  if (error instanceof SecretDecryptionError) {\n    return createInterModuleKnownError(\n      secretsInterModuleContract.methods[methodName],\n      'secret-decryption-failed',\n      {},\n    );\n  }\n  return error;\n}\n\nfunction toSetKnownError(error: unknown): unknown {\n  const method = secretsInterModuleContract.methods.setSecrets;\n  if (error instanceof SecretValueTooLargeError) {\n    return createInterModuleKnownError(method, 'value-too-large', {maxBytes: error.maxBytes});\n  }\n  if (error instanceof WorkspaceSecretCapExceededError) {\n    return createInterModuleKnownError(method, 'workspace-secret-cap-exceeded', {cap: error.cap});\n  }\n  return error;\n}\n"],"names":["secretsInterModuleContract","createInterModuleKnownError","defineInterModulePresentation","deleteSecrets","getSecret","getSecretsByNamespace","getVariablesByNamespace","SecretDecryptionError","SecretValueTooLargeError","setSecrets","WorkspaceSecretCapExceededError","createSecretsInterModulePresentation","input","store","params","value","undefined","error","toGetKnownError","values","toSetKnownError","deleted","methodName","methods","method","maxBytes","cap"],"mappings":"AAAA,SAAQA,0BAA0B,QAAO,wCAAwC;AACjF,SACEC,2BAA2B,EAC3BC,6BAA6B,QAExB,wBAAwB;AAC/B,SACEC,aAAa,EACbC,SAAS,EACTC,qBAAqB,EACrBC,uBAAuB,EACvBC,qBAAqB,EACrBC,wBAAwB,EACxBC,UAAU,EACVC,+BAA+B,QAC1B,iBAAiB;AAExB,OAAO,SAASC;IAGd,OAAOT,8BAA8BF,4BAA4B;QAC/DI,WAAW,OAAOQ;YAChB,IAAI;gBACF,MAAM,EAACC,KAAK,EAAE,GAAGC,QAAO,GAAGF;gBAC3B,OAAO;oBAACG,OAAO,MAAMX,UAAU;wBAAC,GAAGU,MAAM;wBAAE,GAAID,UAAUG,YAAY,CAAC,IAAI;4BAACH;wBAAK,CAAC;oBAAC;gBAAE;YACtF,EAAE,OAAOI,OAAO;gBACd,MAAMC,gBAAgB,aAAaD;YACrC;QACF;QACAZ,uBAAuB,OAAOO;YAC5B,IAAI;gBACF,MAAM,EAACC,KAAK,EAAE,GAAGC,QAAO,GAAGF;gBAC3B,OAAO;oBACLO,QAAQ,MAAMd,sBAAsB;wBAAC,GAAGS,MAAM;wBAAE,GAAID,UAAUG,YAAY,CAAC,IAAI;4BAACH;wBAAK,CAAC;oBAAC;gBACzF;YACF,EAAE,OAAOI,OAAO;gBACd,MAAMC,gBAAgB,yBAAyBD;YACjD;QACF;QACAX,yBAAyB,OAAOM,QAAW,CAAA;gBACzCO,QAAQ,MAAMb,wBAAwBM;YACxC,CAAA;QACAH,YAAY,OAAOG;YACjB,IAAI;gBACF,MAAMH,WAAWG;gBACjB,OAAO,CAAC;YACV,EAAE,OAAOK,OAAO;gBACd,MAAMG,gBAAgBH;YACxB;QACF;QACAd,eAAe,OAAOS,QAAW,CAAA;gBAACS,SAAS,MAAMlB,cAAcS;YAAM,CAAA;IACvE;AACF;AAEA,SAASM,gBACPI,UAAiD,EACjDL,KAAc;IAEd,IAAIA,iBAAiBV,uBAAuB;QAC1C,OAAON,4BACLD,2BAA2BuB,OAAO,CAACD,WAAW,EAC9C,4BACA,CAAC;IAEL;IACA,OAAOL;AACT;AAEA,SAASG,gBAAgBH,KAAc;IACrC,MAAMO,SAASxB,2BAA2BuB,OAAO,CAACd,UAAU;IAC5D,IAAIQ,iBAAiBT,0BAA0B;QAC7C,OAAOP,4BAA4BuB,QAAQ,mBAAmB;YAACC,UAAUR,MAAMQ,QAAQ;QAAA;IACzF;IACA,IAAIR,iBAAiBP,iCAAiC;QACpD,OAAOT,4BAA4BuB,QAAQ,iCAAiC;YAACE,KAAKT,MAAMS,GAAG;QAAA;IAC7F;IACA,OAAOT;AACT"}

package/dist/presentation/routes/auth.d.ts

@@ -1,16 +1,20 @@
+import { type ProjectsModuleClient } from '@shipfox/api-projects-dto';
 import type { FastifyRequest } from 'fastify';
 export interface ManagementAccess {
     workspaceId: string;
     userId: string;
 }
-export declare function requireManagementRead(params: {
-    request: FastifyRequest;
-    workspaceId: string;
-    projectId?: string | undefined;
-}): Promise<ManagementAccess>;
-export declare function requireManagementWrite(params: {
-    request: FastifyRequest;
-    workspaceId: string;
-    projectId?: string | undefined;
-}): Promise<ManagementAccess>;
+export interface ManagementAccessHelpers {
+    requireManagementRead(params: {
+        request: FastifyRequest;
+        workspaceId: string;
+        projectId?: string | undefined;
+    }): Promise<ManagementAccess>;
+    requireManagementWrite(params: {
+        request: FastifyRequest;
+        workspaceId: string;
+        projectId?: string | undefined;
+    }): Promise<ManagementAccess>;
+}
+export declare function createManagementAccess(projects: ProjectsModuleClient): ManagementAccessHelpers;
 //# sourceMappingURL=auth.d.ts.map

package/dist/presentation/routes/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAa5B;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,KAAK,oBAAoB,EAA8B,MAAM,2BAA2B,CAAC;AAGjG,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,MAAM,EAAE;QAC5B,OAAO,EAAE,cAAc,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAChC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9B,sBAAsB,CAAC,MAAM,EAAE;QAC7B,OAAO,EAAE,cAAc,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAChC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/B;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,uBAAuB,CAa9F"}

package/dist/presentation/routes/auth.js

@@ -1,23 +1,27 @@
 import { requireWorkspaceAccess } from '@shipfox/api-auth-context';
-import { requireProjectForWorkspace } from '@shipfox/api-projects';
+import { projectsInterModuleContract } from '@shipfox/api-projects-dto';
+import { isInterModuleKnownError } from '@shipfox/inter-module';
 import { ClientError } from '@shipfox/node-fastify';
-export async function requireManagementRead(params) {
+export function createManagementAccess(projects) {
+    return {
+        requireManagementRead: (params)=>requireManagementRead(params, projects),
+        requireManagementWrite: (params)=>requireManagementWrite(params, projects)
+    };
+}
+async function requireManagementRead(params, projects) {
     const membership = requireWorkspaceAccess({
         request: params.request,
         workspaceId: params.workspaceId
     });
     if (params.projectId) {
-        await requireProjectForWorkspace({
-            workspaceId: params.workspaceId,
-            projectId: params.projectId
-        });
+        await requireProjectForWorkspace(params.workspaceId, params.projectId, projects);
     }
     return {
         workspaceId: params.workspaceId,
         userId: membership.userId
     };
 }
-export async function requireManagementWrite(params) {
+async function requireManagementWrite(params, projects) {
     const membership = requireWorkspaceAccess({
         request: params.request,
         workspaceId: params.workspaceId
@@ -28,15 +32,27 @@ export async function requireManagementWrite(params) {
         });
     }
     if (params.projectId) {
-        await requireProjectForWorkspace({
-            workspaceId: params.workspaceId,
-            projectId: params.projectId
-        });
+        await requireProjectForWorkspace(params.workspaceId, params.projectId, projects);
     }
     return {
         workspaceId: params.workspaceId,
         userId: membership.userId
     };
 }
+async function requireProjectForWorkspace(workspaceId, projectId, projects) {
+    try {
+        await projects.requireProjectForWorkspace({
+            workspaceId,
+            projectId
+        });
+    } catch (error) {
+        if (isInterModuleKnownError(projectsInterModuleContract.methods.requireProjectForWorkspace, error)) {
+            throw new ClientError('Project not found', 'project-not-found', {
+                status: 404
+            });
+        }
+        throw error;
+    }
+}
 
 //# sourceMappingURL=auth.js.map

package/dist/presentation/routes/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/auth.ts"],"sourcesContent":["import {requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {requireProjectForWorkspace} from '@shipfox/api-projects';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\n\nexport interface ManagementAccess {\n  workspaceId: string;\n  userId: string;\n}\n\nexport async function requireManagementRead(params: {\n  request: FastifyRequest;\n  workspaceId: string;\n  projectId?: string | undefined;\n}): Promise<ManagementAccess> {\n  const membership = requireWorkspaceAccess({\n    request: params.request,\n    workspaceId: params.workspaceId,\n  });\n  if (params.projectId) {\n    await requireProjectForWorkspace({\n      workspaceId: params.workspaceId,\n      projectId: params.projectId,\n    });\n  }\n\n  return {workspaceId: params.workspaceId, userId: membership.userId};\n}\n\nexport async function requireManagementWrite(params: {\n  request: FastifyRequest;\n  workspaceId: string;\n  projectId?: string | undefined;\n}): Promise<ManagementAccess> {\n  const membership = requireWorkspaceAccess({\n    request: params.request,\n    workspaceId: params.workspaceId,\n  });\n  if (membership.role !== 'admin') {\n    throw new ClientError('Workspace admin role required', 'forbidden', {status: 403});\n  }\n  if (params.projectId) {\n    await requireProjectForWorkspace({\n      workspaceId: params.workspaceId,\n      projectId: params.projectId,\n    });\n  }\n\n  return {workspaceId: params.workspaceId, userId: membership.userId};\n}\n"],"names":["requireWorkspaceAccess","requireProjectForWorkspace","ClientError","requireManagementRead","params","membership","request","workspaceId","projectId","userId","requireManagementWrite","role","status"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,4BAA4B;AACjE,SAAQC,0BAA0B,QAAO,wBAAwB;AACjE,SAAQC,WAAW,QAAO,wBAAwB;AAQlD,OAAO,eAAeC,sBAAsBC,MAI3C;IACC,MAAMC,aAAaL,uBAAuB;QACxCM,SAASF,OAAOE,OAAO;QACvBC,aAAaH,OAAOG,WAAW;IACjC;IACA,IAAIH,OAAOI,SAAS,EAAE;QACpB,MAAMP,2BAA2B;YAC/BM,aAAaH,OAAOG,WAAW;YAC/BC,WAAWJ,OAAOI,SAAS;QAC7B;IACF;IAEA,OAAO;QAACD,aAAaH,OAAOG,WAAW;QAAEE,QAAQJ,WAAWI,MAAM;IAAA;AACpE;AAEA,OAAO,eAAeC,uBAAuBN,MAI5C;IACC,MAAMC,aAAaL,uBAAuB;QACxCM,SAASF,OAAOE,OAAO;QACvBC,aAAaH,OAAOG,WAAW;IACjC;IACA,IAAIF,WAAWM,IAAI,KAAK,SAAS;QAC/B,MAAM,IAAIT,YAAY,iCAAiC,aAAa;YAACU,QAAQ;QAAG;IAClF;IACA,IAAIR,OAAOI,SAAS,EAAE;QACpB,MAAMP,2BAA2B;YAC/BM,aAAaH,OAAOG,WAAW;YAC/BC,WAAWJ,OAAOI,SAAS;QAC7B;IACF;IAEA,OAAO;QAACD,aAAaH,OAAOG,WAAW;QAAEE,QAAQJ,WAAWI,MAAM;IAAA;AACpE"}
+{"version":3,"sources":["../../../src/presentation/routes/auth.ts"],"sourcesContent":["import {requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {type ProjectsModuleClient, projectsInterModuleContract} from '@shipfox/api-projects-dto';\nimport {isInterModuleKnownError} from '@shipfox/inter-module';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\n\nexport interface ManagementAccess {\n  workspaceId: string;\n  userId: string;\n}\n\nexport interface ManagementAccessHelpers {\n  requireManagementRead(params: {\n    request: FastifyRequest;\n    workspaceId: string;\n    projectId?: string | undefined;\n  }): Promise<ManagementAccess>;\n  requireManagementWrite(params: {\n    request: FastifyRequest;\n    workspaceId: string;\n    projectId?: string | undefined;\n  }): Promise<ManagementAccess>;\n}\n\nexport function createManagementAccess(projects: ProjectsModuleClient): ManagementAccessHelpers {\n  return {\n    requireManagementRead: (params: {\n      request: FastifyRequest;\n      workspaceId: string;\n      projectId?: string | undefined;\n    }) => requireManagementRead(params, projects),\n    requireManagementWrite: (params: {\n      request: FastifyRequest;\n      workspaceId: string;\n      projectId?: string | undefined;\n    }) => requireManagementWrite(params, projects),\n  };\n}\n\nasync function requireManagementRead(\n  params: {\n    request: FastifyRequest;\n    workspaceId: string;\n    projectId?: string | undefined;\n  },\n  projects: ProjectsModuleClient,\n): Promise<ManagementAccess> {\n  const membership = requireWorkspaceAccess({\n    request: params.request,\n    workspaceId: params.workspaceId,\n  });\n  if (params.projectId) {\n    await requireProjectForWorkspace(params.workspaceId, params.projectId, projects);\n  }\n\n  return {workspaceId: params.workspaceId, userId: membership.userId};\n}\n\nasync function requireManagementWrite(\n  params: {\n    request: FastifyRequest;\n    workspaceId: string;\n    projectId?: string | undefined;\n  },\n  projects: ProjectsModuleClient,\n): Promise<ManagementAccess> {\n  const membership = requireWorkspaceAccess({\n    request: params.request,\n    workspaceId: params.workspaceId,\n  });\n  if (membership.role !== 'admin') {\n    throw new ClientError('Workspace admin role required', 'forbidden', {status: 403});\n  }\n  if (params.projectId) {\n    await requireProjectForWorkspace(params.workspaceId, params.projectId, projects);\n  }\n\n  return {workspaceId: params.workspaceId, userId: membership.userId};\n}\n\nasync function requireProjectForWorkspace(\n  workspaceId: string,\n  projectId: string,\n  projects: ProjectsModuleClient,\n): Promise<void> {\n  try {\n    await projects.requireProjectForWorkspace({workspaceId, projectId});\n  } catch (error) {\n    if (\n      isInterModuleKnownError(projectsInterModuleContract.methods.requireProjectForWorkspace, error)\n    ) {\n      throw new ClientError('Project not found', 'project-not-found', {status: 404});\n    }\n    throw error;\n  }\n}\n"],"names":["requireWorkspaceAccess","projectsInterModuleContract","isInterModuleKnownError","ClientError","createManagementAccess","projects","requireManagementRead","params","requireManagementWrite","membership","request","workspaceId","projectId","requireProjectForWorkspace","userId","role","status","error","methods"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,4BAA4B;AACjE,SAAmCC,2BAA2B,QAAO,4BAA4B;AACjG,SAAQC,uBAAuB,QAAO,wBAAwB;AAC9D,SAAQC,WAAW,QAAO,wBAAwB;AAqBlD,OAAO,SAASC,uBAAuBC,QAA8B;IACnE,OAAO;QACLC,uBAAuB,CAACC,SAIlBD,sBAAsBC,QAAQF;QACpCG,wBAAwB,CAACD,SAInBC,uBAAuBD,QAAQF;IACvC;AACF;AAEA,eAAeC,sBACbC,MAIC,EACDF,QAA8B;IAE9B,MAAMI,aAAaT,uBAAuB;QACxCU,SAASH,OAAOG,OAAO;QACvBC,aAAaJ,OAAOI,WAAW;IACjC;IACA,IAAIJ,OAAOK,SAAS,EAAE;QACpB,MAAMC,2BAA2BN,OAAOI,WAAW,EAAEJ,OAAOK,SAAS,EAAEP;IACzE;IAEA,OAAO;QAACM,aAAaJ,OAAOI,WAAW;QAAEG,QAAQL,WAAWK,MAAM;IAAA;AACpE;AAEA,eAAeN,uBACbD,MAIC,EACDF,QAA8B;IAE9B,MAAMI,aAAaT,uBAAuB;QACxCU,SAASH,OAAOG,OAAO;QACvBC,aAAaJ,OAAOI,WAAW;IACjC;IACA,IAAIF,WAAWM,IAAI,KAAK,SAAS;QAC/B,MAAM,IAAIZ,YAAY,iCAAiC,aAAa;YAACa,QAAQ;QAAG;IAClF;IACA,IAAIT,OAAOK,SAAS,EAAE;QACpB,MAAMC,2BAA2BN,OAAOI,WAAW,EAAEJ,OAAOK,SAAS,EAAEP;IACzE;IAEA,OAAO;QAACM,aAAaJ,OAAOI,WAAW;QAAEG,QAAQL,WAAWK,MAAM;IAAA;AACpE;AAEA,eAAeD,2BACbF,WAAmB,EACnBC,SAAiB,EACjBP,QAA8B;IAE9B,IAAI;QACF,MAAMA,SAASQ,0BAA0B,CAAC;YAACF;YAAaC;QAAS;IACnE,EAAE,OAAOK,OAAO;QACd,IACEf,wBAAwBD,4BAA4BiB,OAAO,CAACL,0BAA0B,EAAEI,QACxF;YACA,MAAM,IAAId,YAAY,qBAAqB,qBAAqB;gBAACa,QAAQ;YAAG;QAC9E;QACA,MAAMC;IACR;AACF"}

package/dist/presentation/routes/batch-secrets.d.ts

@@ -1,2 +1,3 @@
-export declare const batchSecretsRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function batchSecretsRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=batch-secrets.d.ts.map

package/dist/presentation/routes/batch-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"batch-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/batch-secrets.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,iDAuB5B,CAAC"}
+{"version":3,"file":"batch-secrets.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/batch-secrets.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAIvD,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,mDAyBvE"}

package/dist/presentation/routes/batch-secrets.js

@@ -3,42 +3,43 @@ import { defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { setManagedSecrets } from '#core/index.js';
 import { toSecretDto } from '#presentation/dto/index.js';
-import { requireManagementWrite } from './auth.js';
 import { translateManagementError } from './errors.js';
 import { secretWarnings } from './warnings.js';
-export const batchSecretsRoute = defineRoute({
-    method: 'POST',
-    path: '/secrets::batch',
-    description: 'Create or update multiple user-managed secrets in one scope.',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid()
-        }),
-        body: batchSecretsBodySchema,
-        response: {
-            200: batchSecretsResponseSchema
+export function batchSecretsRoute(accessControl) {
+    return defineRoute({
+        method: 'POST',
+        path: '/secrets::batch',
+        description: 'Create or update multiple user-managed secrets in one scope.',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid()
+            }),
+            body: batchSecretsBodySchema,
+            response: {
+                200: batchSecretsResponseSchema
+            }
+        },
+        errorHandler: translateManagementError,
+        handler: async (request)=>{
+            const { workspaceId } = request.params;
+            const { project_id: projectId, entries } = request.body;
+            const access = await accessControl.requireManagementWrite({
+                request,
+                workspaceId,
+                projectId
+            });
+            const secrets = await setManagedSecrets({
+                workspaceId,
+                projectId,
+                actorId: access.userId,
+                entries
+            });
+            return {
+                secrets: secrets.map(toSecretDto),
+                warnings: secretWarnings(entries)
+            };
         }
-    },
-    errorHandler: translateManagementError,
-    handler: async (request)=>{
-        const { workspaceId } = request.params;
-        const { project_id: projectId, entries } = request.body;
-        const access = await requireManagementWrite({
-            request,
-            workspaceId,
-            projectId
-        });
-        const secrets = await setManagedSecrets({
-            workspaceId,
-            projectId,
-            actorId: access.userId,
-            entries
-        });
-        return {
-            secrets: secrets.map(toSecretDto),
-            warnings: secretWarnings(entries)
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=batch-secrets.js.map

package/dist/presentation/routes/batch-secrets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/batch-secrets.ts"],"sourcesContent":["import {batchSecretsBodySchema, batchSecretsResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {secretWarnings} from './warnings.js';\n\nexport const batchSecretsRoute = defineRoute({\n  method: 'POST',\n  path: '/secrets::batch',\n  description: 'Create or update multiple user-managed secrets in one scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    body: batchSecretsBodySchema,\n    response: {200: batchSecretsResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, entries} = request.body;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n    const secrets = await setManagedSecrets({\n      workspaceId,\n      projectId,\n      actorId: access.userId,\n      entries,\n    });\n\n    return {secrets: secrets.map(toSecretDto), warnings: secretWarnings(entries)};\n  },\n});\n"],"names":["batchSecretsBodySchema","batchSecretsResponseSchema","defineRoute","z","setManagedSecrets","toSecretDto","requireManagementWrite","translateManagementError","secretWarnings","batchSecretsRoute","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","project_id","projectId","entries","access","secrets","actorId","userId","map","warnings"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,0BAA0B,QAAO,2BAA2B;AAC5F,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,iBAAiB,QAAO,iBAAiB;AACjD,SAAQC,WAAW,QAAO,6BAA6B;AACvD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,cAAc,QAAO,gBAAgB;AAE7C,OAAO,MAAMC,oBAAoBP,YAAY;IAC3CQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;QAAE;QAChDC,MAAMnB;QACNoB,UAAU;YAAC,KAAKnB;QAA0B;IAC5C;IACAoB,cAAcd;IACde,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,OAAO,EAAC,GAAGH,QAAQJ,IAAI;QACrD,MAAMQ,SAAS,MAAMrB,uBAAuB;YAACiB;YAASP;YAAaS;QAAS;QAC5E,MAAMG,UAAU,MAAMxB,kBAAkB;YACtCY;YACAS;YACAI,SAASF,OAAOG,MAAM;YACtBJ;QACF;QAEA,OAAO;YAACE,SAASA,QAAQG,GAAG,CAAC1B;YAAc2B,UAAUxB,eAAekB;QAAQ;IAC9E;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/batch-secrets.ts"],"sourcesContent":["import {batchSecretsBodySchema, batchSecretsResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedSecrets} from '#core/index.js';\nimport {toSecretDto} from '#presentation/dto/index.js';\nimport type {ManagementAccessHelpers} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {secretWarnings} from './warnings.js';\n\nexport function batchSecretsRoute(accessControl: ManagementAccessHelpers) {\n  return defineRoute({\n    method: 'POST',\n    path: '/secrets::batch',\n    description: 'Create or update multiple user-managed secrets in one scope.',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid()}),\n      body: batchSecretsBodySchema,\n      response: {200: batchSecretsResponseSchema},\n    },\n    errorHandler: translateManagementError,\n    handler: async (request) => {\n      const {workspaceId} = request.params;\n      const {project_id: projectId, entries} = request.body;\n      const access = await accessControl.requireManagementWrite({request, workspaceId, projectId});\n      const secrets = await setManagedSecrets({\n        workspaceId,\n        projectId,\n        actorId: access.userId,\n        entries,\n      });\n\n      return {secrets: secrets.map(toSecretDto), warnings: secretWarnings(entries)};\n    },\n  });\n}\n"],"names":["batchSecretsBodySchema","batchSecretsResponseSchema","defineRoute","z","setManagedSecrets","toSecretDto","translateManagementError","secretWarnings","batchSecretsRoute","accessControl","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","project_id","projectId","entries","access","requireManagementWrite","secrets","actorId","userId","map","warnings"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,0BAA0B,QAAO,2BAA2B;AAC5F,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,iBAAiB,QAAO,iBAAiB;AACjD,SAAQC,WAAW,QAAO,6BAA6B;AAEvD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,cAAc,QAAO,gBAAgB;AAE7C,OAAO,SAASC,kBAAkBC,aAAsC;IACtE,OAAOP,YAAY;QACjBQ,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQX,EAAEY,MAAM,CAAC;gBAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;YAAE;YAChDC,MAAMnB;YACNoB,UAAU;gBAAC,KAAKnB;YAA0B;QAC5C;QACAoB,cAAcf;QACdgB,SAAS,OAAOC;YACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;YACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,OAAO,EAAC,GAAGH,QAAQJ,IAAI;YACrD,MAAMQ,SAAS,MAAMlB,cAAcmB,sBAAsB,CAAC;gBAACL;gBAASP;gBAAaS;YAAS;YAC1F,MAAMI,UAAU,MAAMzB,kBAAkB;gBACtCY;gBACAS;gBACAK,SAASH,OAAOI,MAAM;gBACtBL;YACF;YAEA,OAAO;gBAACG,SAASA,QAAQG,GAAG,CAAC3B;gBAAc4B,UAAU1B,eAAemB;YAAQ;QAC9E;IACF;AACF"}

package/dist/presentation/routes/batch-variables.d.ts

@@ -1,2 +1,3 @@
-export declare const batchVariablesRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function batchVariablesRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=batch-variables.d.ts.map

package/dist/presentation/routes/batch-variables.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"batch-variables.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/batch-variables.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,mBAAmB,iDAuB9B,CAAC"}
+{"version":3,"file":"batch-variables.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/batch-variables.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAIvD,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,uBAAuB,mDAyBzE"}

package/dist/presentation/routes/batch-variables.js

@@ -3,42 +3,43 @@ import { defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { setManagedVariables } from '#core/index.js';
 import { toVariableDto } from '#presentation/dto/index.js';
-import { requireManagementWrite } from './auth.js';
 import { translateManagementError } from './errors.js';
 import { variableWarnings } from './warnings.js';
-export const batchVariablesRoute = defineRoute({
-    method: 'POST',
-    path: '/variables::batch',
-    description: 'Create or update multiple user-managed variables in one scope.',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid()
-        }),
-        body: batchVariablesBodySchema,
-        response: {
-            200: batchVariablesResponseSchema
+export function batchVariablesRoute(accessControl) {
+    return defineRoute({
+        method: 'POST',
+        path: '/variables::batch',
+        description: 'Create or update multiple user-managed variables in one scope.',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid()
+            }),
+            body: batchVariablesBodySchema,
+            response: {
+                200: batchVariablesResponseSchema
+            }
+        },
+        errorHandler: translateManagementError,
+        handler: async (request)=>{
+            const { workspaceId } = request.params;
+            const { project_id: projectId, entries } = request.body;
+            const access = await accessControl.requireManagementWrite({
+                request,
+                workspaceId,
+                projectId
+            });
+            const variables = await setManagedVariables({
+                workspaceId,
+                projectId,
+                actorId: access.userId,
+                entries
+            });
+            return {
+                variables: variables.map(toVariableDto),
+                warnings: variableWarnings(entries)
+            };
         }
-    },
-    errorHandler: translateManagementError,
-    handler: async (request)=>{
-        const { workspaceId } = request.params;
-        const { project_id: projectId, entries } = request.body;
-        const access = await requireManagementWrite({
-            request,
-            workspaceId,
-            projectId
-        });
-        const variables = await setManagedVariables({
-            workspaceId,
-            projectId,
-            actorId: access.userId,
-            entries
-        });
-        return {
-            variables: variables.map(toVariableDto),
-            warnings: variableWarnings(entries)
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=batch-variables.js.map

package/dist/presentation/routes/batch-variables.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/batch-variables.ts"],"sourcesContent":["import {batchVariablesBodySchema, batchVariablesResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedVariables} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport {requireManagementWrite} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {variableWarnings} from './warnings.js';\n\nexport const batchVariablesRoute = defineRoute({\n  method: 'POST',\n  path: '/variables::batch',\n  description: 'Create or update multiple user-managed variables in one scope.',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    body: batchVariablesBodySchema,\n    response: {200: batchVariablesResponseSchema},\n  },\n  errorHandler: translateManagementError,\n  handler: async (request) => {\n    const {workspaceId} = request.params;\n    const {project_id: projectId, entries} = request.body;\n    const access = await requireManagementWrite({request, workspaceId, projectId});\n    const variables = await setManagedVariables({\n      workspaceId,\n      projectId,\n      actorId: access.userId,\n      entries,\n    });\n\n    return {variables: variables.map(toVariableDto), warnings: variableWarnings(entries)};\n  },\n});\n"],"names":["batchVariablesBodySchema","batchVariablesResponseSchema","defineRoute","z","setManagedVariables","toVariableDto","requireManagementWrite","translateManagementError","variableWarnings","batchVariablesRoute","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","project_id","projectId","entries","access","variables","actorId","userId","map","warnings"],"mappings":"AAAA,SAAQA,wBAAwB,EAAEC,4BAA4B,QAAO,2BAA2B;AAChG,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,sBAAsB,QAAO,YAAY;AACjD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,gBAAgB,QAAO,gBAAgB;AAE/C,OAAO,MAAMC,sBAAsBP,YAAY;IAC7CQ,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQX,EAAEY,MAAM,CAAC;YAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;QAAE;QAChDC,MAAMnB;QACNoB,UAAU;YAAC,KAAKnB;QAA4B;IAC9C;IACAoB,cAAcd;IACde,SAAS,OAAOC;QACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,OAAO,EAAC,GAAGH,QAAQJ,IAAI;QACrD,MAAMQ,SAAS,MAAMrB,uBAAuB;YAACiB;YAASP;YAAaS;QAAS;QAC5E,MAAMG,YAAY,MAAMxB,oBAAoB;YAC1CY;YACAS;YACAI,SAASF,OAAOG,MAAM;YACtBJ;QACF;QAEA,OAAO;YAACE,WAAWA,UAAUG,GAAG,CAAC1B;YAAgB2B,UAAUxB,iBAAiBkB;QAAQ;IACtF;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/batch-variables.ts"],"sourcesContent":["import {batchVariablesBodySchema, batchVariablesResponseSchema} from '@shipfox/api-secrets-dto';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {setManagedVariables} from '#core/index.js';\nimport {toVariableDto} from '#presentation/dto/index.js';\nimport type {ManagementAccessHelpers} from './auth.js';\nimport {translateManagementError} from './errors.js';\nimport {variableWarnings} from './warnings.js';\n\nexport function batchVariablesRoute(accessControl: ManagementAccessHelpers) {\n  return defineRoute({\n    method: 'POST',\n    path: '/variables::batch',\n    description: 'Create or update multiple user-managed variables in one scope.',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid()}),\n      body: batchVariablesBodySchema,\n      response: {200: batchVariablesResponseSchema},\n    },\n    errorHandler: translateManagementError,\n    handler: async (request) => {\n      const {workspaceId} = request.params;\n      const {project_id: projectId, entries} = request.body;\n      const access = await accessControl.requireManagementWrite({request, workspaceId, projectId});\n      const variables = await setManagedVariables({\n        workspaceId,\n        projectId,\n        actorId: access.userId,\n        entries,\n      });\n\n      return {variables: variables.map(toVariableDto), warnings: variableWarnings(entries)};\n    },\n  });\n}\n"],"names":["batchVariablesBodySchema","batchVariablesResponseSchema","defineRoute","z","setManagedVariables","toVariableDto","translateManagementError","variableWarnings","batchVariablesRoute","accessControl","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","project_id","projectId","entries","access","requireManagementWrite","variables","actorId","userId","map","warnings"],"mappings":"AAAA,SAAQA,wBAAwB,EAAEC,4BAA4B,QAAO,2BAA2B;AAChG,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,mBAAmB,QAAO,iBAAiB;AACnD,SAAQC,aAAa,QAAO,6BAA6B;AAEzD,SAAQC,wBAAwB,QAAO,cAAc;AACrD,SAAQC,gBAAgB,QAAO,gBAAgB;AAE/C,OAAO,SAASC,oBAAoBC,aAAsC;IACxE,OAAOP,YAAY;QACjBQ,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQX,EAAEY,MAAM,CAAC;gBAACC,aAAab,EAAEc,MAAM,GAAGC,IAAI;YAAE;YAChDC,MAAMnB;YACNoB,UAAU;gBAAC,KAAKnB;YAA4B;QAC9C;QACAoB,cAAcf;QACdgB,SAAS,OAAOC;YACd,MAAM,EAACP,WAAW,EAAC,GAAGO,QAAQT,MAAM;YACpC,MAAM,EAACU,YAAYC,SAAS,EAAEC,OAAO,EAAC,GAAGH,QAAQJ,IAAI;YACrD,MAAMQ,SAAS,MAAMlB,cAAcmB,sBAAsB,CAAC;gBAACL;gBAASP;gBAAaS;YAAS;YAC1F,MAAMI,YAAY,MAAMzB,oBAAoB;gBAC1CY;gBACAS;gBACAK,SAASH,OAAOI,MAAM;gBACtBL;YACF;YAEA,OAAO;gBAACG,WAAWA,UAAUG,GAAG,CAAC3B;gBAAgB4B,UAAU1B,iBAAiBmB;YAAQ;QACtF;IACF;AACF"}

package/dist/presentation/routes/delete-secret.d.ts

@@ -1,2 +1,3 @@
-export declare const deleteSecretRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { ManagementAccessHelpers } from './auth.js';
+export declare function deleteSecretRoute(accessControl: ManagementAccessHelpers): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=delete-secret.d.ts.map

package/dist/presentation/routes/delete-secret.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-secret.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/delete-secret.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,iBAAiB,iDAkB5B,CAAC"}
+{"version":3,"file":"delete-secret.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/delete-secret.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,WAAW,CAAC;AAGvD,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,uBAAuB,mDAoBvE"}