@taico/taico 0.0.4 → 0.1.0

package/dist/secrets/secrets-encryption.service.js

@@ -0,0 +1,130 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var SecretsEncryptionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretsEncryptionService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto = __importStar(require("crypto"));
+const env_config_1 = require("../config/env.config");
+const secrets_errors_1 = require("./errors/secrets.errors");
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 12;
+const TAG_LENGTH = 16;
+const KEY_LENGTH = 32;
+let SecretsEncryptionService = SecretsEncryptionService_1 = class SecretsEncryptionService {
+    logger = new common_1.Logger(SecretsEncryptionService_1.name);
+    key;
+    constructor() {
+        if (!(0, env_config_1.isSecretsEnabled)()) {
+            this.logger.warn('Secrets feature is disabled (SECRETS_ENABLED is not set to "true"). ' +
+                'Secrets endpoints will return 503 until the feature is enabled.');
+            this.key = null;
+            return;
+        }
+        const envKey = process.env.SECRETS_ENCRYPTION_KEY;
+        if (envKey) {
+            const keyBuffer = Buffer.from(envKey, 'hex');
+            if (keyBuffer.length !== KEY_LENGTH) {
+                throw new Error(`SECRETS_ENCRYPTION_KEY must be a ${KEY_LENGTH * 2}-character hex string (${KEY_LENGTH} bytes). Got ${keyBuffer.length} bytes.`);
+            }
+            this.key = keyBuffer;
+        }
+        else if ((0, env_config_1.isDevelopment)()) {
+            this.logger.warn('SECRETS_ENCRYPTION_KEY is not set. Using a fixed development key. DO NOT use this in production.');
+            this.key = crypto.scryptSync('taico-dev-secrets-key', 'taico-salt', KEY_LENGTH);
+        }
+        else {
+            throw new Error('SECRETS_ENCRYPTION_KEY environment variable is required in production when SECRETS_ENABLED=true. ' +
+                `Set it to a ${KEY_LENGTH * 2}-character hex string (${KEY_LENGTH} bytes).`);
+        }
+    }
+    assertEnabled() {
+        if (!this.key) {
+            throw new secrets_errors_1.SecretsFeatureDisabledError();
+        }
+    }
+    encrypt(plaintext) {
+        this.assertEnabled();
+        const iv = crypto.randomBytes(IV_LENGTH);
+        const cipher = crypto.createCipheriv(ALGORITHM, this.key, iv, {
+            authTagLength: TAG_LENGTH,
+        });
+        const ciphertext = Buffer.concat([
+            cipher.update(plaintext, 'utf8'),
+            cipher.final(),
+        ]);
+        const authTag = cipher.getAuthTag();
+        return [
+            iv.toString('base64'),
+            authTag.toString('base64'),
+            ciphertext.toString('base64'),
+        ].join(':');
+    }
+    decrypt(encryptedValue) {
+        this.assertEnabled();
+        const parts = encryptedValue.split(':');
+        if (parts.length !== 3) {
+            throw new Error('Invalid encrypted value format');
+        }
+        const [ivB64, authTagB64, ciphertextB64] = parts;
+        const iv = Buffer.from(ivB64, 'base64');
+        const authTag = Buffer.from(authTagB64, 'base64');
+        const ciphertext = Buffer.from(ciphertextB64, 'base64');
+        const decipher = crypto.createDecipheriv(ALGORITHM, this.key, iv, {
+            authTagLength: TAG_LENGTH,
+        });
+        decipher.setAuthTag(authTag);
+        const plaintext = Buffer.concat([
+            decipher.update(ciphertext),
+            decipher.final(),
+        ]);
+        return plaintext.toString('utf8');
+    }
+};
+exports.SecretsEncryptionService = SecretsEncryptionService;
+exports.SecretsEncryptionService = SecretsEncryptionService = SecretsEncryptionService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], SecretsEncryptionService);
+//# sourceMappingURL=secrets-encryption.service.js.map

package/dist/secrets/secrets-encryption.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-encryption.service.js","sourceRoot":"","sources":["../../src/secrets/secrets-encryption.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAAiC;AACjC,qDAAuE;AACvE,4DAAsE;AAEtE,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,CAAC;AAcf,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IACnD,GAAG,CAAgB;IAEpC;QACE,IAAI,CAAC,IAAA,6BAAgB,GAAE,EAAE,CAAC;YAIxB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,sEAAsE;gBACpE,iEAAiE,CACpE,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,oCAAoC,UAAU,GAAG,CAAC,0BAA0B,UAAU,gBAAgB,SAAS,CAAC,MAAM,SAAS,CAChI,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACvB,CAAC;aAAM,IAAI,IAAA,0BAAa,GAAE,EAAE,CAAC;YAE3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kGAAkG,CACnG,CAAC;YACF,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,uBAAuB,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,mGAAmG;gBACjG,eAAe,UAAU,GAAG,CAAC,0BAA0B,UAAU,UAAU,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,4CAA2B,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAOD,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,GAAI,EAAE,EAAE,EAAE;YAC7D,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAGpC,OAAO;YACL,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAOD,OAAO,CAAC,cAAsB;QAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAI,EAAE,EAAE,EAAE;YACjE,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AArGY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;;GACA,wBAAwB,CAqGpC"}

package/dist/secrets/secrets.controller.d.ts

@@ -0,0 +1,18 @@
+import type { UserContext } from '../auth/guards/context/auth-context.types';
+import { SecretsService } from './secrets.service';
+import { CreateSecretDto } from './dto/http/create-secret.dto';
+import { UpdateSecretDto } from './dto/http/update-secret.dto';
+import { SecretResponseDto, SecretValueResponseDto } from './dto/http/secret-response.dto';
+import { SecretParamsDto } from './dto/http/secret-params.dto';
+export declare class SecretsController {
+    private readonly secretsService;
+    constructor(secretsService: SecretsService);
+    createSecret(dto: CreateSecretDto, user: UserContext): Promise<SecretResponseDto>;
+    listSecrets(): Promise<SecretResponseDto[]>;
+    getSecret(params: SecretParamsDto): Promise<SecretResponseDto>;
+    getSecretValue(params: SecretParamsDto): Promise<SecretValueResponseDto>;
+    updateSecret(params: SecretParamsDto, dto: UpdateSecretDto): Promise<SecretResponseDto>;
+    deleteSecret(params: SecretParamsDto): Promise<void>;
+    private mapToResponse;
+    private mapToValueResponse;
+}

package/dist/secrets/secrets.controller.js

@@ -0,0 +1,160 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const access_token_guard_1 = require("../auth/guards/guards/access-token.guard");
+const scopes_guard_1 = require("../auth/guards/guards/scopes.guard");
+const require_scopes_decorator_1 = require("../auth/guards/decorators/require-scopes.decorator");
+const current_user_decorator_1 = require("../auth/guards/decorators/current-user.decorator");
+const secrets_service_1 = require("./secrets.service");
+const create_secret_dto_1 = require("./dto/http/create-secret.dto");
+const update_secret_dto_1 = require("./dto/http/update-secret.dto");
+const secret_response_dto_1 = require("./dto/http/secret-response.dto");
+const secret_params_dto_1 = require("./dto/http/secret-params.dto");
+const secrets_scopes_1 = require("./secrets.scopes");
+let SecretsController = class SecretsController {
+    secretsService;
+    constructor(secretsService) {
+        this.secretsService = secretsService;
+    }
+    async createSecret(dto, user) {
+        const result = await this.secretsService.createSecret({
+            name: dto.name,
+            description: dto.description,
+            value: dto.value,
+            createdByActorId: user.actorId,
+        });
+        return this.mapToResponse(result);
+    }
+    async listSecrets() {
+        const results = await this.secretsService.listSecrets();
+        return results.map((r) => this.mapToResponse(r));
+    }
+    async getSecret(params) {
+        const result = await this.secretsService.getSecretById(params.id);
+        return this.mapToResponse(result);
+    }
+    async getSecretValue(params) {
+        const result = await this.secretsService.getSecretValue(params.id);
+        return this.mapToValueResponse(result);
+    }
+    async updateSecret(params, dto) {
+        const result = await this.secretsService.updateSecret(params.id, {
+            name: dto.name,
+            description: dto.description,
+            value: dto.value,
+        });
+        return this.mapToResponse(result);
+    }
+    async deleteSecret(params) {
+        await this.secretsService.deleteSecret(params.id);
+    }
+    mapToResponse(result) {
+        return {
+            id: result.id,
+            name: result.name,
+            description: result.description,
+            createdByActorId: result.createdByActorId,
+            createdBy: result.createdBy,
+            rowVersion: result.rowVersion,
+            createdAt: result.createdAt.toISOString(),
+            updatedAt: result.updatedAt.toISOString(),
+        };
+    }
+    mapToValueResponse(result) {
+        return {
+            id: result.id,
+            name: result.name,
+            value: result.value,
+        };
+    }
+};
+exports.SecretsController = SecretsController;
+__decorate([
+    (0, common_1.Post)(),
+    (0, require_scopes_decorator_1.RequireScopes)(secrets_scopes_1.SecretsScopes.WRITE.id),
+    (0, swagger_1.ApiOperation)({ summary: 'Create a new secret' }),
+    (0, swagger_1.ApiCreatedResponse)({ type: secret_response_dto_1.SecretResponseDto, description: 'Secret created successfully' }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, current_user_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [create_secret_dto_1.CreateSecretDto, Object]),
+    __metadata("design:returntype", Promise)
+], SecretsController.prototype, "createSecret", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, require_scopes_decorator_1.RequireScopes)(secrets_scopes_1.SecretsScopes.READ.id),
+    (0, swagger_1.ApiOperation)({ summary: 'List all secrets - values not included' }),
+    (0, swagger_1.ApiOkResponse)({ type: [secret_response_dto_1.SecretResponseDto], description: 'List of secrets (no values)' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], SecretsController.prototype, "listSecrets", null);
+__decorate([
+    (0, common_1.Get)(':id'),
+    (0, require_scopes_decorator_1.RequireScopes)(secrets_scopes_1.SecretsScopes.READ.id),
+    (0, swagger_1.ApiOperation)({ summary: 'Get secret metadata by ID - value not included' }),
+    (0, swagger_1.ApiOkResponse)({ type: secret_response_dto_1.SecretResponseDto, description: 'Secret metadata' }),
+    (0, swagger_1.ApiNotFoundResponse)({ description: 'Secret not found' }),
+    __param(0, (0, common_1.Param)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [secret_params_dto_1.SecretParamsDto]),
+    __metadata("design:returntype", Promise)
+], SecretsController.prototype, "getSecret", null);
+__decorate([
+    (0, common_1.Get)(':id/value'),
+    (0, require_scopes_decorator_1.RequireScopes)(secrets_scopes_1.SecretsScopes.WRITE.id),
+    (0, swagger_1.ApiOperation)({ summary: 'Get decrypted secret value' }),
+    (0, swagger_1.ApiOkResponse)({ type: secret_response_dto_1.SecretValueResponseDto, description: 'Decrypted secret value' }),
+    (0, swagger_1.ApiNotFoundResponse)({ description: 'Secret not found' }),
+    __param(0, (0, common_1.Param)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [secret_params_dto_1.SecretParamsDto]),
+    __metadata("design:returntype", Promise)
+], SecretsController.prototype, "getSecretValue", null);
+__decorate([
+    (0, common_1.Patch)(':id'),
+    (0, require_scopes_decorator_1.RequireScopes)(secrets_scopes_1.SecretsScopes.WRITE.id),
+    (0, swagger_1.ApiOperation)({ summary: 'Update a secret' }),
+    (0, swagger_1.ApiOkResponse)({ type: secret_response_dto_1.SecretResponseDto, description: 'Secret updated successfully' }),
+    (0, swagger_1.ApiNotFoundResponse)({ description: 'Secret not found' }),
+    __param(0, (0, common_1.Param)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [secret_params_dto_1.SecretParamsDto,
+        update_secret_dto_1.UpdateSecretDto]),
+    __metadata("design:returntype", Promise)
+], SecretsController.prototype, "updateSecret", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    (0, common_1.HttpCode)(204),
+    (0, require_scopes_decorator_1.RequireScopes)(secrets_scopes_1.SecretsScopes.DELETE.id),
+    (0, swagger_1.ApiOperation)({ summary: 'Delete a secret' }),
+    (0, swagger_1.ApiNoContentResponse)({ description: 'Secret deleted successfully' }),
+    (0, swagger_1.ApiNotFoundResponse)({ description: 'Secret not found' }),
+    __param(0, (0, common_1.Param)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [secret_params_dto_1.SecretParamsDto]),
+    __metadata("design:returntype", Promise)
+], SecretsController.prototype, "deleteSecret", null);
+exports.SecretsController = SecretsController = __decorate([
+    (0, swagger_1.ApiTags)('Secrets'),
+    (0, swagger_1.ApiCookieAuth)('JWT-Cookie'),
+    (0, common_1.Controller)('secrets'),
+    (0, common_1.UseGuards)(access_token_guard_1.AccessTokenGuard, scopes_guard_1.ScopesGuard),
+    __metadata("design:paramtypes", [secrets_service_1.SecretsService])
+], SecretsController);
+//# sourceMappingURL=secrets.controller.js.map

package/dist/secrets/secrets.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.controller.js","sourceRoot":"","sources":["../../src/secrets/secrets.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,6CAQyB;AACzB,iFAA4E;AAC5E,qEAAiE;AACjE,iGAAmF;AACnF,6FAA+E;AAE/E,uDAAmD;AACnD,oEAA+D;AAC/D,oEAA+D;AAC/D,wEAA2F;AAC3F,oEAA+D;AAE/D,qDAAiD;AAM1C,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAMzD,AAAN,KAAK,CAAC,YAAY,CACR,GAAoB,EACb,IAAiB;QAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC;YACpD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,gBAAgB,EAAE,IAAI,CAAC,OAAO;SAC/B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAMK,AAAN,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAOK,AAAN,KAAK,CAAC,SAAS,CAAU,MAAuB;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAOK,AAAN,KAAK,CAAC,cAAc,CAAU,MAAuB;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAOK,AAAN,KAAK,CAAC,YAAY,CACP,MAAuB,EACxB,GAAoB;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE;YAC/D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAQK,AAAN,KAAK,CAAC,YAAY,CAAU,MAAuB;QACjD,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAEO,aAAa,CAAC,MAAoB;QACxC,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;SAC1C,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,MAAyB;QAClD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC;IACJ,CAAC;CACF,CAAA;AAhGY,8CAAiB;AAOtB;IAJL,IAAA,aAAI,GAAE;IACN,IAAA,wCAAa,EAAC,8BAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IACrC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAChD,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,uCAAiB,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAEzF,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADD,mCAAe;;qDAU7B;AAMK;IAJL,IAAA,YAAG,GAAE;IACL,IAAA,wCAAa,EAAC,8BAAa,CAAC,IAAI,CAAC,EAAE,CAAC;IACpC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IACnE,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,uCAAiB,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;;;oDAIxF;AAOK;IALL,IAAA,YAAG,EAAC,KAAK,CAAC;IACV,IAAA,wCAAa,EAAC,8BAAa,CAAC,IAAI,CAAC,EAAE,CAAC;IACpC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;IAC3E,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,uCAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAC1E,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACxC,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;kDAG/C;AAOK;IALL,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,wCAAa,EAAC,8BAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IACrC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACvD,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,4CAAsB,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACtF,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACnC,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;uDAGpD;AAOK;IALL,IAAA,cAAK,EAAC,KAAK,CAAC;IACZ,IAAA,wCAAa,EAAC,8BAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IACrC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC5C,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,uCAAiB,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IACtF,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAEtD,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,aAAI,GAAE,CAAA;;qCADU,mCAAe;QACnB,mCAAe;;qDAQ7B;AAQK;IANL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,wCAAa,EAAC,8BAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IACtC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC5C,IAAA,8BAAoB,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IACpE,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACrC,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,mCAAe;;qDAElD;4BA1EU,iBAAiB;IAJ7B,IAAA,iBAAO,EAAC,SAAS,CAAC;IAClB,IAAA,uBAAa,EAAC,YAAY,CAAC;IAC3B,IAAA,mBAAU,EAAC,SAAS,CAAC;IACrB,IAAA,kBAAS,EAAC,qCAAgB,EAAE,0BAAW,CAAC;qCAEM,gCAAc;GADhD,iBAAiB,CAgG7B"}

package/dist/secrets/secrets.module.d.ts

@@ -0,0 +1,2 @@
+export declare class SecretsModule {
+}

package/dist/secrets/secrets.module.js

@@ -0,0 +1,31 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretsModule = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const secret_entity_1 = require("./secret.entity");
+const secrets_service_1 = require("./secrets.service");
+const secrets_controller_1 = require("./secrets.controller");
+const secrets_encryption_service_1 = require("./secrets-encryption.service");
+const auth_guards_module_1 = require("../auth/guards/auth-guards.module");
+let SecretsModule = class SecretsModule {
+};
+exports.SecretsModule = SecretsModule;
+exports.SecretsModule = SecretsModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            typeorm_1.TypeOrmModule.forFeature([secret_entity_1.SecretEntity]),
+            auth_guards_module_1.AuthGuardsModule,
+        ],
+        controllers: [secrets_controller_1.SecretsController],
+        providers: [secrets_service_1.SecretsService, secrets_encryption_service_1.SecretsEncryptionService],
+        exports: [secrets_service_1.SecretsService],
+    })
+], SecretsModule);
+//# sourceMappingURL=secrets.module.js.map

package/dist/secrets/secrets.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.module.js","sourceRoot":"","sources":["../../src/secrets/secrets.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,6CAAgD;AAChD,mDAA+C;AAC/C,uDAAmD;AACnD,6DAAyD;AACzD,6EAAwE;AACxE,0EAAqE;AAW9D,IAAM,aAAa,GAAnB,MAAM,aAAa;CAAG,CAAA;AAAhB,sCAAa;wBAAb,aAAa;IATzB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,uBAAa,CAAC,UAAU,CAAC,CAAC,4BAAY,CAAC,CAAC;YACxC,qCAAgB;SACjB;QACD,WAAW,EAAE,CAAC,sCAAiB,CAAC;QAChC,SAAS,EAAE,CAAC,gCAAc,EAAE,qDAAwB,CAAC;QACrD,OAAO,EAAE,CAAC,gCAAc,CAAC;KAC1B,CAAC;GACW,aAAa,CAAG"}

package/dist/secrets/secrets.scopes.d.ts

@@ -0,0 +1,16 @@
+import { Scope } from 'src/auth/core/types/scope.type';
+export declare const SecretsScopes: {
+    readonly READ: {
+        readonly id: "secret:read";
+        readonly description: "Allows reading secret metadata (names, descriptions). Does not expose values.";
+    };
+    readonly WRITE: {
+        readonly id: "secret:write";
+        readonly description: "Allows creating and updating secrets, including reading their decrypted values.";
+    };
+    readonly DELETE: {
+        readonly id: "secret:delete";
+        readonly description: "Allows deleting secrets.";
+    };
+};
+export declare const ALL_SECRETS_SCOPES: readonly Scope[];

package/dist/secrets/secrets.scopes.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALL_SECRETS_SCOPES = exports.SecretsScopes = void 0;
+exports.SecretsScopes = {
+    READ: {
+        id: 'secret:read',
+        description: 'Allows reading secret metadata (names, descriptions). Does not expose values.',
+    },
+    WRITE: {
+        id: 'secret:write',
+        description: 'Allows creating and updating secrets, including reading their decrypted values.',
+    },
+    DELETE: {
+        id: 'secret:delete',
+        description: 'Allows deleting secrets.',
+    },
+};
+exports.ALL_SECRETS_SCOPES = Object.values(exports.SecretsScopes);
+//# sourceMappingURL=secrets.scopes.js.map

package/dist/secrets/secrets.scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.scopes.js","sourceRoot":"","sources":["../../src/secrets/secrets.scopes.ts"],"names":[],"mappings":";;;AAEa,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE;QACJ,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,+EAA+E;KAC7F;IACD,KAAK,EAAE;QACL,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,iFAAiF;KAC/F;IACD,MAAM,EAAE;QACN,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,0BAA0B;KACxC;CACuC,CAAC;AAE9B,QAAA,kBAAkB,GAAqB,MAAM,CAAC,MAAM,CAAC,qBAAa,CAAC,CAAC"}

package/dist/secrets/secrets.service.d.ts

@@ -0,0 +1,17 @@
+import { Repository } from 'typeorm';
+import { SecretEntity } from './secret.entity';
+import { SecretsEncryptionService } from './secrets-encryption.service';
+import { CreateSecretInput, SecretResult, SecretValueResult, UpdateSecretInput } from './dto/service/secrets.service.types';
+export declare class SecretsService {
+    private readonly secretRepository;
+    private readonly encryptionService;
+    private readonly logger;
+    constructor(secretRepository: Repository<SecretEntity>, encryptionService: SecretsEncryptionService);
+    createSecret(input: CreateSecretInput): Promise<SecretResult>;
+    listSecrets(): Promise<SecretResult[]>;
+    getSecretById(id: string): Promise<SecretResult>;
+    getSecretValue(id: string): Promise<SecretValueResult>;
+    updateSecret(id: string, input: UpdateSecretInput): Promise<SecretResult>;
+    deleteSecret(id: string): Promise<void>;
+    private mapToResult;
+}

package/dist/secrets/secrets.service.js

@@ -0,0 +1,147 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SecretsService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretsService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("@nestjs/typeorm");
+const typeorm_2 = require("typeorm");
+const secret_entity_1 = require("./secret.entity");
+const secrets_encryption_service_1 = require("./secrets-encryption.service");
+const secrets_errors_1 = require("./errors/secrets.errors");
+let SecretsService = SecretsService_1 = class SecretsService {
+    secretRepository;
+    encryptionService;
+    logger = new common_1.Logger(SecretsService_1.name);
+    constructor(secretRepository, encryptionService) {
+        this.secretRepository = secretRepository;
+        this.encryptionService = encryptionService;
+    }
+    async createSecret(input) {
+        this.logger.log({ message: 'Creating secret', name: input.name });
+        const existing = await this.secretRepository.findOne({
+            where: { name: input.name },
+        });
+        if (existing) {
+            throw new secrets_errors_1.SecretNameConflictError(input.name);
+        }
+        const encryptedValue = this.encryptionService.encrypt(input.value);
+        const secret = this.secretRepository.create({
+            name: input.name,
+            description: input.description ?? null,
+            encryptedValue,
+            createdByActorId: input.createdByActorId,
+        });
+        const saved = await this.secretRepository.save(secret);
+        const withRelations = await this.secretRepository.findOne({
+            where: { id: saved.id },
+            relations: ['createdByActor'],
+        });
+        return this.mapToResult(withRelations);
+    }
+    async listSecrets() {
+        this.logger.log({ message: 'Listing secrets' });
+        const secrets = await this.secretRepository.find({
+            relations: ['createdByActor'],
+            order: { createdAt: 'ASC' },
+        });
+        return secrets.map((s) => this.mapToResult(s));
+    }
+    async getSecretById(id) {
+        this.logger.log({ message: 'Fetching secret by id', id });
+        const secret = await this.secretRepository.findOne({
+            where: { id },
+            relations: ['createdByActor'],
+        });
+        if (!secret) {
+            throw new secrets_errors_1.SecretNotFoundError(id);
+        }
+        return this.mapToResult(secret);
+    }
+    async getSecretValue(id) {
+        this.logger.log({ message: 'Fetching secret value', id });
+        const secret = await this.secretRepository.findOne({
+            where: { id },
+        });
+        if (!secret) {
+            throw new secrets_errors_1.SecretNotFoundError(id);
+        }
+        const value = this.encryptionService.decrypt(secret.encryptedValue);
+        return {
+            id: secret.id,
+            name: secret.name,
+            value,
+        };
+    }
+    async updateSecret(id, input) {
+        this.logger.log({ message: 'Updating secret', id });
+        const secret = await this.secretRepository.findOne({
+            where: { id },
+        });
+        if (!secret) {
+            throw new secrets_errors_1.SecretNotFoundError(id);
+        }
+        if (input.name !== undefined && input.name !== secret.name) {
+            const existing = await this.secretRepository.findOne({
+                where: { name: input.name },
+            });
+            if (existing) {
+                throw new secrets_errors_1.SecretNameConflictError(input.name);
+            }
+            secret.name = input.name;
+        }
+        if (input.description !== undefined) {
+            secret.description = input.description;
+        }
+        if (input.value !== undefined) {
+            secret.encryptedValue = this.encryptionService.encrypt(input.value);
+        }
+        await this.secretRepository.save(secret);
+        const updated = await this.secretRepository.findOne({
+            where: { id },
+            relations: ['createdByActor'],
+        });
+        return this.mapToResult(updated);
+    }
+    async deleteSecret(id) {
+        this.logger.log({ message: 'Deleting secret', id });
+        const secret = await this.secretRepository.findOne({
+            where: { id },
+        });
+        if (!secret) {
+            throw new secrets_errors_1.SecretNotFoundError(id);
+        }
+        await this.secretRepository.softDelete(id);
+    }
+    mapToResult(secret) {
+        return {
+            id: secret.id,
+            name: secret.name,
+            description: secret.description,
+            createdByActorId: secret.createdByActorId,
+            createdBy: secret.createdBy,
+            rowVersion: secret.rowVersion,
+            createdAt: secret.createdAt,
+            updatedAt: secret.updatedAt,
+        };
+    }
+};
+exports.SecretsService = SecretsService;
+exports.SecretsService = SecretsService = SecretsService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_1.InjectRepository)(secret_entity_1.SecretEntity)),
+    __metadata("design:paramtypes", [typeorm_2.Repository,
+        secrets_encryption_service_1.SecretsEncryptionService])
+], SecretsService);
+//# sourceMappingURL=secrets.service.js.map

package/dist/secrets/secrets.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.service.js","sourceRoot":"","sources":["../../src/secrets/secrets.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAmD;AACnD,qCAAqC;AACrC,mDAA+C;AAC/C,6EAAwE;AAOxE,4DAGiC;AAG1B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAKN;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAE1D,YAEmB,gBAA0C,EAC1C,iBAA2C;QAD3C,qBAAgB,GAAhB,gBAAgB,CAA0B;QAC1C,sBAAiB,GAAjB,iBAAiB,CAA0B;IAC3D,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACnD,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,wCAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,cAAc;YACd,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;SACzC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEvD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACxD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;YACvB,SAAS,EAAE,CAAC,gBAAgB,CAAC;SAC9B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,WAAW,CAAC,aAAc,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAC/C,SAAS,EAAE,CAAC,gBAAgB,CAAC;YAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;SAC5B,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,gBAAgB,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oCAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oCAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAEpE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK;SACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,KAAwB;QACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oCAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBACnD,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,wCAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACzC,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,SAAS,EAAE,CAAC,gBAAgB,CAAC;SAC9B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,WAAW,CAAC,OAAQ,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oCAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,WAAW,CAAC,MAAoB;QACtC,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;CACF,CAAA;AArJY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,0BAAgB,EAAC,4BAAY,CAAC,CAAA;qCACI,oBAAU;QACT,qDAAwB;GANnD,cAAc,CAqJ1B"}

package/dist/task-blueprints/dto/create-scheduled-task.dto.d.ts

@@ -0,0 +1,5 @@
+export declare class CreateScheduledTaskDto {
+    taskBlueprintId: string;
+    cronExpression: string;
+    enabled?: boolean;
+}

package/dist/task-blueprints/dto/create-scheduled-task.dto.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateScheduledTaskDto = void 0;
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+class CreateScheduledTaskDto {
+    taskBlueprintId;
+    cronExpression;
+    enabled;
+}
+exports.CreateScheduledTaskDto = CreateScheduledTaskDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'ID of the task blueprint to schedule',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreateScheduledTaskDto.prototype, "taskBlueprintId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Cron expression for scheduling (e.g., "0 9 * * 1-5" for weekdays at 9am)',
+        example: '0 9 * * *',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], CreateScheduledTaskDto.prototype, "cronExpression", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Whether the scheduled task is enabled',
+        example: true,
+        default: true,
+    }),
+    (0, class_validator_1.IsBoolean)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Boolean)
+], CreateScheduledTaskDto.prototype, "enabled", void 0);
+//# sourceMappingURL=create-scheduled-task.dto.js.map

package/dist/task-blueprints/dto/create-scheduled-task.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-scheduled-task.dto.js","sourceRoot":"","sources":["../../../src/task-blueprints/dto/create-scheduled-task.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA8E;AAC9E,6CAAmE;AAEnE,MAAa,sBAAsB;IAOjC,eAAe,CAAU;IAQzB,cAAc,CAAU;IASxB,OAAO,CAAW;CACnB;AAzBD,wDAyBC;AAlBC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;+DACY;AAQzB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE,WAAW;KACrB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8DACW;AASxB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,2BAAS,GAAE;IACX,IAAA,4BAAU,GAAE;;uDACK"}