@taico/taico 0.0.3 → 0.0.5

package/dist/public/beta/index.html

@@ -18,7 +18,7 @@
 
     <link rel="icon" type="image/svg+xml" href="/beta/roo-favicon.svg" />
     <title>taico — Home</title>
-    <script type="module" crossorigin src="/beta/assets/index-S66NF8rC.js"></script>
+    <script type="module" crossorigin src="/beta/assets/index-B-4bxmRw.js"></script>
     <link rel="stylesheet" crossorigin href="/beta/assets/index-DIzh0pTC.css">
   </head>
   <body>

package/dist/public/index.html

@@ -18,8 +18,8 @@
   <meta name="apple-mobile-web-app-capable" content="yes" />
   <meta name="apple-mobile-web-app-status-bar-style" content="default" />
   <title>taico</title>
-  <script type="module" crossorigin src="/assets/index-BCPnRhO0.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-_FDBdUKK.css">
+  <script type="module" crossorigin src="/assets/index-gfAmuo9i.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-BpWAKFIY.css">
 </head>
 
 <body>

package/dist/secrets/dto/http/create-secret.dto.d.ts

@@ -0,0 +1,5 @@
+export declare class CreateSecretDto {
+    name: string;
+    description?: string;
+    value: string;
+}

package/dist/secrets/dto/http/create-secret.dto.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateSecretDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class CreateSecretDto {
+    name;
+    description;
+    value;
+}
+exports.CreateSecretDto = CreateSecretDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Unique name for the secret',
+        example: 'OPENAI_API_KEY',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], CreateSecretDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Human-readable description of the secret',
+        example: 'OpenAI API key for agent completions',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.MaxLength)(1000),
+    __metadata("design:type", String)
+], CreateSecretDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The secret value (will be encrypted at rest)',
+        example: 'sk-...',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreateSecretDto.prototype, "value", void 0);
+//# sourceMappingURL=create-secret.dto.js.map

package/dist/secrets/dto/http/create-secret.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-secret.dto.js","sourceRoot":"","sources":["../../../../src/secrets/dto/http/create-secret.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAA8E;AAE9E,MAAa,eAAe;IAQ1B,IAAI,CAAU;IASd,WAAW,CAAU;IAQrB,KAAK,CAAU;CAChB;AA1BD,0CA0BC;AAlBC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACD;AASd;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,0CAA0C;QACvD,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,IAAI,CAAC;;oDACK;AAQrB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8CACE"}

package/dist/secrets/dto/http/secret-params.dto.d.ts

@@ -0,0 +1,3 @@
+export declare class SecretParamsDto {
+    id: string;
+}

package/dist/secrets/dto/http/secret-params.dto.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretParamsDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class SecretParamsDto {
+    id;
+}
+exports.SecretParamsDto = SecretParamsDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Secret identifier',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], SecretParamsDto.prototype, "id", void 0);
+//# sourceMappingURL=secret-params.dto.js.map

package/dist/secrets/dto/http/secret-params.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-params.dto.js","sourceRoot":"","sources":["../../../../src/secrets/dto/http/secret-params.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAyC;AAEzC,MAAa,eAAe;IAM1B,EAAE,CAAU;CACb;AAPD,0CAOC;AADC;IALC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,wBAAM,GAAE;;2CACG"}

package/dist/secrets/dto/http/secret-response.dto.d.ts

@@ -0,0 +1,15 @@
+export declare class SecretResponseDto {
+    id: string;
+    name: string;
+    description: string | null;
+    createdByActorId: string;
+    createdBy: string | null;
+    rowVersion: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare class SecretValueResponseDto {
+    id: string;
+    name: string;
+    value: string;
+}

package/dist/secrets/dto/http/secret-response.dto.js

@@ -0,0 +1,112 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretValueResponseDto = exports.SecretResponseDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+class SecretResponseDto {
+    id;
+    name;
+    description;
+    createdByActorId;
+    createdBy;
+    rowVersion;
+    createdAt;
+    updatedAt;
+}
+exports.SecretResponseDto = SecretResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Secret identifier',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    __metadata("design:type", String)
+], SecretResponseDto.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Name of the secret',
+        example: 'OPENAI_API_KEY',
+    }),
+    __metadata("design:type", String)
+], SecretResponseDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        description: 'Human-readable description',
+        example: 'OpenAI API key for agent completions',
+        nullable: true,
+    }),
+    __metadata("design:type", Object)
+], SecretResponseDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'ID of the actor who created this secret',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    __metadata("design:type", String)
+], SecretResponseDto.prototype, "createdByActorId", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        description: 'Slug of the actor who created this secret',
+        example: 'fran',
+        nullable: true,
+    }),
+    __metadata("design:type", Object)
+], SecretResponseDto.prototype, "createdBy", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Row version for optimistic locking',
+        example: 1,
+    }),
+    __metadata("design:type", Number)
+], SecretResponseDto.prototype, "rowVersion", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'ISO timestamp when the secret was created',
+        example: '2024-01-01T00:00:00.000Z',
+    }),
+    __metadata("design:type", String)
+], SecretResponseDto.prototype, "createdAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'ISO timestamp when the secret was last updated',
+        example: '2024-01-01T00:00:00.000Z',
+    }),
+    __metadata("design:type", String)
+], SecretResponseDto.prototype, "updatedAt", void 0);
+class SecretValueResponseDto {
+    id;
+    name;
+    value;
+}
+exports.SecretValueResponseDto = SecretValueResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Secret identifier',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    __metadata("design:type", String)
+], SecretValueResponseDto.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Name of the secret',
+        example: 'OPENAI_API_KEY',
+    }),
+    __metadata("design:type", String)
+], SecretValueResponseDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The decrypted secret value',
+        example: 'sk-...',
+    }),
+    __metadata("design:type", String)
+], SecretValueResponseDto.prototype, "value", void 0);
+//# sourceMappingURL=secret-response.dto.js.map

package/dist/secrets/dto/http/secret-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-response.dto.js","sourceRoot":"","sources":["../../../../src/secrets/dto/http/secret-response.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AAEnE,MAAa,iBAAiB;IAK5B,EAAE,CAAU;IAMZ,IAAI,CAAU;IAQd,WAAW,CAAiB;IAM5B,gBAAgB,CAAU;IAQ1B,SAAS,CAAiB;IAM1B,UAAU,CAAU;IAMpB,SAAS,CAAU;IAMnB,SAAS,CAAU;CACpB;AApDD,8CAoDC;AA/CC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,sCAAsC;KAChD,CAAC;;6CACU;AAMZ;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,gBAAgB;KAC1B,CAAC;;+CACY;AAQd;IANC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,IAAI;KACf,CAAC;;sDAC0B;AAM5B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,sCAAsC;KAChD,CAAC;;2DACwB;AAQ1B;IANC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,IAAI;KACf,CAAC;;oDACwB;AAM1B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,CAAC;KACX,CAAC;;qDACkB;AAMpB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,2CAA2C;QACxD,OAAO,EAAE,0BAA0B;KACpC,CAAC;;oDACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,0BAA0B;KACpC,CAAC;;oDACiB;AAGrB,MAAa,sBAAsB;IAKjC,EAAE,CAAU;IAMZ,IAAI,CAAU;IAMd,KAAK,CAAU;CAChB;AAlBD,wDAkBC;AAbC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,sCAAsC;KAChD,CAAC;;kDACU;AAMZ;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,gBAAgB;KAC1B,CAAC;;oDACY;AAMd;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,QAAQ;KAClB,CAAC;;qDACa"}

package/dist/secrets/dto/http/update-secret.dto.d.ts

@@ -0,0 +1,5 @@
+export declare class UpdateSecretDto {
+    name?: string;
+    description?: string | null;
+    value?: string;
+}

package/dist/secrets/dto/http/update-secret.dto.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateSecretDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class UpdateSecretDto {
+    name;
+    description;
+    value;
+}
+exports.UpdateSecretDto = UpdateSecretDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'New name for the secret',
+        example: 'OPENAI_API_KEY_V2',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], UpdateSecretDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        description: 'New description for the secret',
+        example: 'Updated OpenAI API key',
+        nullable: true,
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.MaxLength)(1000),
+    __metadata("design:type", Object)
+], UpdateSecretDto.prototype, "description", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'New secret value (will be encrypted at rest)',
+        example: 'sk-...',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateSecretDto.prototype, "value", void 0);
+//# sourceMappingURL=update-secret.dto.js.map

package/dist/secrets/dto/http/update-secret.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-secret.dto.js","sourceRoot":"","sources":["../../../../src/secrets/dto/http/update-secret.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAsD;AACtD,qDAA8E;AAE9E,MAAa,eAAe;IAS1B,IAAI,CAAU;IAWd,WAAW,CAAiB;IAS5B,KAAK,CAAU;CAChB;AA9BD,0CA8BC;AArBC;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,mBAAmB;KAC7B,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;6CACD;AAWd;IATC,IAAA,6BAAmB,EAAC;QACnB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,IAAI,CAAC;;oDACY;AAS5B;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,4BAAU,GAAE;;8CACE"}

package/dist/secrets/dto/service/secrets.service.types.d.ts

@@ -0,0 +1,26 @@
+export type CreateSecretInput = {
+    name: string;
+    description?: string | null;
+    value: string;
+    createdByActorId: string;
+};
+export type UpdateSecretInput = {
+    name?: string;
+    description?: string | null;
+    value?: string;
+};
+export type SecretResult = {
+    id: string;
+    name: string;
+    description: string | null;
+    createdByActorId: string;
+    createdBy: string | null;
+    rowVersion: number;
+    createdAt: Date;
+    updatedAt: Date;
+};
+export type SecretValueResult = {
+    id: string;
+    name: string;
+    value: string;
+};

package/dist/secrets/dto/service/secrets.service.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=secrets.service.types.js.map

package/dist/secrets/dto/service/secrets.service.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.service.types.js","sourceRoot":"","sources":["../../../../src/secrets/dto/service/secrets.service.types.ts"],"names":[],"mappings":""}

package/dist/secrets/errors/secrets.errors.d.ts

@@ -0,0 +1,21 @@
+export declare const SecretsErrorCodes: {
+    readonly SECRET_NOT_FOUND: "SECRET_NOT_FOUND";
+    readonly SECRET_NAME_CONFLICT: "SECRET_NAME_CONFLICT";
+    readonly SECRET_FEATURE_DISABLED: "SECRET_FEATURE_DISABLED";
+};
+type SecretsErrorCode = (typeof SecretsErrorCodes)[keyof typeof SecretsErrorCodes];
+export declare abstract class SecretsDomainError extends Error {
+    readonly code: SecretsErrorCode;
+    readonly context?: Record<string, unknown> | undefined;
+    constructor(message: string, code: SecretsErrorCode, context?: Record<string, unknown> | undefined);
+}
+export declare class SecretNotFoundError extends SecretsDomainError {
+    constructor(secretId: string);
+}
+export declare class SecretNameConflictError extends SecretsDomainError {
+    constructor(name: string);
+}
+export declare class SecretsFeatureDisabledError extends SecretsDomainError {
+    constructor();
+}
+export {};

package/dist/secrets/errors/secrets.errors.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretsFeatureDisabledError = exports.SecretNameConflictError = exports.SecretNotFoundError = exports.SecretsDomainError = exports.SecretsErrorCodes = void 0;
+const errors_1 = require("@taico/errors");
+exports.SecretsErrorCodes = {
+    SECRET_NOT_FOUND: errors_1.ErrorCodes.SECRET_NOT_FOUND,
+    SECRET_NAME_CONFLICT: errors_1.ErrorCodes.SECRET_NAME_CONFLICT,
+    SECRET_FEATURE_DISABLED: errors_1.ErrorCodes.SECRET_FEATURE_DISABLED,
+};
+class SecretsDomainError extends Error {
+    code;
+    context;
+    constructor(message, code, context) {
+        super(message);
+        this.code = code;
+        this.context = context;
+        this.name = this.constructor.name;
+    }
+}
+exports.SecretsDomainError = SecretsDomainError;
+class SecretNotFoundError extends SecretsDomainError {
+    constructor(secretId) {
+        super('Secret not found.', exports.SecretsErrorCodes.SECRET_NOT_FOUND, {
+            secretId,
+        });
+    }
+}
+exports.SecretNotFoundError = SecretNotFoundError;
+class SecretNameConflictError extends SecretsDomainError {
+    constructor(name) {
+        super('A secret with this name already exists.', exports.SecretsErrorCodes.SECRET_NAME_CONFLICT, {
+            name,
+        });
+    }
+}
+exports.SecretNameConflictError = SecretNameConflictError;
+class SecretsFeatureDisabledError extends SecretsDomainError {
+    constructor() {
+        super('Secrets feature is disabled. Set SECRETS_ENABLED=true and provide SECRETS_ENCRYPTION_KEY to enable it.', exports.SecretsErrorCodes.SECRET_FEATURE_DISABLED);
+    }
+}
+exports.SecretsFeatureDisabledError = SecretsFeatureDisabledError;
+//# sourceMappingURL=secrets.errors.js.map

package/dist/secrets/errors/secrets.errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.errors.js","sourceRoot":"","sources":["../../../src/secrets/errors/secrets.errors.ts"],"names":[],"mappings":";;;AAAA,0CAA2C;AAE9B,QAAA,iBAAiB,GAAG;IAC/B,gBAAgB,EAAE,mBAAU,CAAC,gBAAgB;IAC7C,oBAAoB,EAAE,mBAAU,CAAC,oBAAoB;IACrD,uBAAuB,EAAE,mBAAU,CAAC,uBAAuB;CACnD,CAAC;AAIX,MAAsB,kBAAmB,SAAQ,KAAK;IAGzC;IACA;IAHX,YACE,OAAe,EACN,IAAsB,EACtB,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAkB;QACtB,YAAO,GAAP,OAAO,CAA0B;QAG1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AATD,gDASC;AAED,MAAa,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,QAAgB;QAC1B,KAAK,CAAC,mBAAmB,EAAE,yBAAiB,CAAC,gBAAgB,EAAE;YAC7D,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;CACF;AAND,kDAMC;AAED,MAAa,uBAAwB,SAAQ,kBAAkB;IAC7D,YAAY,IAAY;QACtB,KAAK,CAAC,yCAAyC,EAAE,yBAAiB,CAAC,oBAAoB,EAAE;YACvF,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAND,0DAMC;AAED,MAAa,2BAA4B,SAAQ,kBAAkB;IACjE;QACE,KAAK,CACH,wGAAwG,EACxG,yBAAiB,CAAC,uBAAuB,CAC1C,CAAC;IACJ,CAAC;CACF;AAPD,kEAOC"}

package/dist/secrets/secret.entity.d.ts

@@ -0,0 +1,14 @@
+import { ActorEntity } from '../identity-provider/actor.entity';
+export declare class SecretEntity {
+    id: string;
+    name: string;
+    description: string | null;
+    encryptedValue: string;
+    createdByActorId: string;
+    createdByActor?: ActorEntity;
+    rowVersion: number;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt?: Date | null;
+    get createdBy(): string | null;
+}

package/dist/secrets/secret.entity.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretEntity = void 0;
+const typeorm_1 = require("typeorm");
+const actor_entity_1 = require("../identity-provider/actor.entity");
+let SecretEntity = class SecretEntity {
+    id;
+    name;
+    description;
+    encryptedValue;
+    createdByActorId;
+    createdByActor;
+    rowVersion;
+    createdAt;
+    updatedAt;
+    deletedAt;
+    get createdBy() {
+        return this.createdByActor?.slug ?? null;
+    }
+};
+exports.SecretEntity = SecretEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], SecretEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    __metadata("design:type", String)
+], SecretEntity.prototype, "name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    __metadata("design:type", Object)
+], SecretEntity.prototype, "description", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'encrypted_value' }),
+    __metadata("design:type", String)
+], SecretEntity.prototype, "encryptedValue", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid', nullable: false, name: 'created_by_actor_id' }),
+    __metadata("design:type", String)
+], SecretEntity.prototype, "createdByActorId", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => actor_entity_1.ActorEntity),
+    (0, typeorm_1.JoinColumn)({ name: 'created_by_actor_id' }),
+    __metadata("design:type", actor_entity_1.ActorEntity)
+], SecretEntity.prototype, "createdByActor", void 0);
+__decorate([
+    (0, typeorm_1.VersionColumn)({ name: 'row_version' }),
+    __metadata("design:type", Number)
+], SecretEntity.prototype, "rowVersion", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ type: 'datetime', name: 'created_at' }),
+    __metadata("design:type", Date)
+], SecretEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.UpdateDateColumn)({ type: 'datetime', name: 'updated_at' }),
+    __metadata("design:type", Date)
+], SecretEntity.prototype, "updatedAt", void 0);
+__decorate([
+    (0, typeorm_1.DeleteDateColumn)({ type: 'datetime', name: 'deleted_at', nullable: true }),
+    __metadata("design:type", Object)
+], SecretEntity.prototype, "deletedAt", void 0);
+exports.SecretEntity = SecretEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'secrets' })
+], SecretEntity);
+//# sourceMappingURL=secret.entity.js.map

package/dist/secrets/secret.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.entity.js","sourceRoot":"","sources":["../../src/secrets/secret.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAUiB;AACjB,oEAAgE;AAGzD,IAAM,YAAY,GAAlB,MAAM,YAAY;IAEvB,EAAE,CAAU;IAGZ,IAAI,CAAU;IAGd,WAAW,CAAiB;IAG5B,cAAc,CAAU;IAGxB,gBAAgB,CAAU;IAI1B,cAAc,CAAe;IAG7B,UAAU,CAAU;IAGpB,SAAS,CAAQ;IAGjB,SAAS,CAAQ;IAGjB,SAAS,CAAe;IAExB,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,IAAI,CAAC;IAC3C,CAAC;CACF,CAAA;AAnCY,oCAAY;AAEvB;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;wCACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;0CACX;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACb;AAG5B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;;oDAC1B;AAGxB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;;sDAC7C;AAI1B;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC;IAC5B,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;8BAC3B,0BAAW;oDAAC;AAG7B;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;gDACnB;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;+CAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;+CAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACnD;uBA9Bb,YAAY;IADxB,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;GACf,YAAY,CAmCxB"}

package/dist/secrets/secrets-encryption.service.d.ts

@@ -0,0 +1,8 @@
+export declare class SecretsEncryptionService {
+    private readonly logger;
+    private readonly key;
+    constructor();
+    private assertEnabled;
+    encrypt(plaintext: string): string;
+    decrypt(encryptedValue: string): string;
+}