@temporalio/envconfig 1.13.2

package/lib/utils.js

@@ -0,0 +1,164 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfigData = loadConfigData;
+exports.fromTomlProfile = fromTomlProfile;
+exports.toTomlProfile = toTomlProfile;
+exports.fromTomlTLS = fromTomlTLS;
+exports.toTomlTLS = toTomlTLS;
+exports.fromTomlConfig = fromTomlConfig;
+exports.toTomlConfig = toTomlConfig;
+exports.toPathAndData = toPathAndData;
+const fs_1 = require("fs");
+const internal_workflow_1 = require("@temporalio/common/lib/internal-workflow");
+const encoding_1 = require("@temporalio/common/lib/encoding");
+const envconfig_toml_1 = require("./envconfig-toml");
+/**
+ * Loads configuration data from a {@link ConfigDataSource} and returns it as a Uint8Array.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function loadConfigData(source) {
+    if (!source)
+        return undefined;
+    if ('path' in source) {
+        return Uint8Array.from((0, fs_1.readFileSync)(source.path));
+    }
+    return typeof source.data === 'string' ? (0, encoding_1.encode)(source.data) : source.data;
+}
+/**
+ * Converts a TOML profile structure to a {@link ClientConfigProfile}.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function fromTomlProfile(tomlProfile) {
+    let grpcMeta = undefined;
+    if (tomlProfile.grpc_meta !== undefined) {
+        grpcMeta = {};
+        // Normalize GRPC meta keys.
+        for (const [key, value] of Object.entries(tomlProfile.grpc_meta)) {
+            grpcMeta[(0, envconfig_toml_1.normalizeGrpcMetaKey)(key)] = value;
+        }
+    }
+    const profile = {
+        address: tomlProfile.address,
+        namespace: tomlProfile.namespace,
+        apiKey: tomlProfile.api_key,
+        tls: fromTomlTLS(tomlProfile.tls),
+        grpcMeta,
+    };
+    return (0, internal_workflow_1.filterNullAndUndefined)(profile);
+}
+/**
+ * Converts a {@link ClientConfigProfile} to a TOML profile structure.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function toTomlProfile(profile) {
+    let grpc_meta = undefined;
+    if (profile.grpcMeta !== undefined) {
+        grpc_meta = {};
+        // Normalize GRPC meta keys.
+        for (const [key, value] of Object.entries(profile.grpcMeta)) {
+            grpc_meta[(0, envconfig_toml_1.normalizeGrpcMetaKey)(key)] = value;
+        }
+    }
+    const tomlProfile = {
+        address: profile.address,
+        namespace: profile.namespace,
+        api_key: profile.apiKey,
+        tls: toTomlTLS(profile.tls),
+        grpc_meta,
+    };
+    return (0, internal_workflow_1.filterNullAndUndefined)(tomlProfile);
+}
+/**
+ * Converts a TOML TLS configuration structure to a {@link ClientConfigTLS}.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function fromTomlTLS(tomlTLS) {
+    if (tomlTLS === undefined) {
+        return undefined;
+    }
+    const clientConfigTLS = {
+        disabled: tomlTLS.disabled,
+        serverName: tomlTLS.server_name,
+        clientCert: toConfigDataSource(tomlTLS.client_cert_path, tomlTLS.client_cert_data, 'client_cert'),
+        clientKey: toConfigDataSource(tomlTLS.client_key_path, tomlTLS.client_key_data, 'client_key'),
+        serverCACert: toConfigDataSource(tomlTLS.server_ca_cert_path, tomlTLS.server_ca_cert_data, 'server_ca_cert'),
+    };
+    return (0, internal_workflow_1.filterNullAndUndefined)(clientConfigTLS);
+}
+/**
+ * Converts a {@link ClientConfigTLS} to a TOML TLS configuration structure.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function toTomlTLS(tlsConfig) {
+    if (tlsConfig === undefined) {
+        return undefined;
+    }
+    const clientCert = toPathAndData(tlsConfig.clientCert);
+    const clientKey = toPathAndData(tlsConfig.clientKey);
+    const serverCACert = toPathAndData(tlsConfig.serverCACert);
+    const tomlConfigTLS = {
+        disabled: tlsConfig.disabled,
+        server_name: tlsConfig.serverName,
+        client_cert_path: clientCert?.path,
+        client_cert_data: clientCert?.data && (0, encoding_1.decode)(clientCert?.data),
+        client_key_path: clientKey?.path,
+        client_key_data: clientKey?.data && (0, encoding_1.decode)(clientKey?.data),
+        server_ca_cert_path: serverCACert?.path,
+        server_ca_cert_data: serverCACert?.data && (0, encoding_1.decode)(serverCACert?.data),
+    };
+    return (0, internal_workflow_1.filterNullAndUndefined)(tomlConfigTLS);
+}
+/**
+ * Converts a TOML client configuration structure to a {@link ClientConfig}.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function fromTomlConfig(tomlConfig) {
+    const profiles = {};
+    for (const [profileName, profile] of Object.entries(tomlConfig.profile)) {
+        profiles[profileName] = fromTomlProfile(profile);
+    }
+    return { profiles };
+}
+/**
+ * Converts a {@link ClientConfig} to a TOML client configuration structure.
+ *
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+function toTomlConfig(config) {
+    const profile = {};
+    for (const [profileName, configProfile] of Object.entries(config.profiles)) {
+        profile[profileName] = toTomlProfile(configProfile);
+    }
+    return { profile };
+}
+function toPathAndData(source) {
+    if (source === undefined) {
+        return undefined;
+    }
+    if ('path' in source) {
+        return { path: source.path };
+    }
+    if (typeof source.data === 'string') {
+        return { data: (0, encoding_1.encode)(source.data) };
+    }
+    return { data: source.data };
+}
+function toConfigDataSource(path, data, fieldName) {
+    if (path !== undefined && data !== undefined) {
+        throw new Error(`Cannot specify both ${fieldName}_path and ${fieldName}_data`);
+    }
+    if (data !== undefined) {
+        return { data: (0, encoding_1.encode)(data) };
+    }
+    if (path !== undefined) {
+        return { path };
+    }
+    return undefined;
+}
+//# sourceMappingURL=utils.js.map

package/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;AAWA,wCAQC;AAOD,0CAiBC;AAOD,sCAiBC;AAOD,kCAYC;AAOD,8BAkBC;AAOD,wCAQC;AAOD,oCAQC;AAED,sCAWC;AA1JD,2BAAkC;AAClC,gFAAkF;AAClF,8DAAiE;AAEjE,qDAAwH;AAExH;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAAyB;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAA,iBAAY,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,iBAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,WAAoC;IAClE,IAAI,QAAQ,GAAuC,SAAS,CAAC;IAC7D,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxC,QAAQ,GAAG,EAAE,CAAC;QACd,4BAA4B;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,QAAQ,CAAC,IAAA,qCAAoB,EAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAwB;QACnC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,MAAM,EAAE,WAAW,CAAC,OAAO;QAC3B,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC;QACjC,QAAQ;KACT,CAAC;IACF,OAAO,IAAA,0CAAsB,EAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAA4B;IACxD,IAAI,SAAS,GAAuC,SAAS,CAAC;IAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,GAAG,EAAE,CAAC;QACf,4BAA4B;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,IAAA,qCAAoB,EAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;QAC3B,SAAS;KACV,CAAC;IACF,OAAO,IAAA,0CAAsB,EAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,OAA6B;IACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,eAAe,GAAoB;QACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,WAAW;QAC/B,UAAU,EAAE,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACjG,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC;QAC7F,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;KAC7G,CAAC;IACF,OAAO,IAAA,0CAAsB,EAAC,eAAe,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,SAA2B;IACnD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG;QACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,WAAW,EAAE,SAAS,CAAC,UAAU;QACjC,gBAAgB,EAAE,UAAU,EAAE,IAAI;QAClC,gBAAgB,EAAE,UAAU,EAAE,IAAI,IAAI,IAAA,iBAAM,EAAC,UAAU,EAAE,IAAI,CAAC;QAC9D,eAAe,EAAE,SAAS,EAAE,IAAI;QAChC,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,IAAA,iBAAM,EAAC,SAAS,EAAE,IAAI,CAAC;QAC3D,mBAAmB,EAAE,YAAY,EAAE,IAAI;QACvC,mBAAmB,EAAE,YAAY,EAAE,IAAI,IAAI,IAAA,iBAAM,EAAC,YAAY,EAAE,IAAI,CAAC;KACtE,CAAC;IACF,OAAO,IAAA,0CAAsB,EAAC,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,UAA4B;IACzD,MAAM,QAAQ,GAAwC,EAAE,CAAC;IAEzD,KAAK,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,QAAQ,CAAC,WAAW,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,MAAoB;IAC/C,MAAM,OAAO,GAA4C,EAAE,CAAC;IAE5D,KAAK,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,SAAgB,aAAa,CAAC,MAAyB;IACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,IAAA,iBAAM,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAwB,EACxB,IAAwB,EACxB,SAAiB;IAEjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,aAAa,SAAS,OAAO,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,IAAA,iBAAM,EAAC,IAAI,CAAC,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@temporalio/envconfig",
+  "version": "1.13.2",
+  "description": "Temporal.io SDK Environment Configuration sub-package",
+  "main": "lib/index.js",
+  "types": "./lib/index.d.ts",
+  "scripts": {},
+  "keywords": [
+    "temporal",
+    "environment",
+    "configuration",
+    "client"
+  ],
+  "author": "Temporal Technologies Inc. <sdk@temporal.io>",
+  "license": "MIT",
+  "dependencies": {
+    "@temporalio/common": "1.13.2",
+    "smol-toml": "1.4.2"
+  },
+  "devDependencies": {
+    "@temporalio/worker": "1.13.2"
+  },
+  "engines": {
+    "node": ">= 18.0.0"
+  },
+  "bugs": {
+    "url": "https://github.com/temporalio/sdk-typescript/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/temporalio/sdk-typescript.git",
+    "directory": "packages/envconfig"
+  },
+  "homepage": "https://github.com/temporalio/sdk-typescript/tree/main/packages/envconfig",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "src",
+    "lib"
+  ],
+  "gitHead": "cccc54c72f85377ac520b5d6cdd9a9a847027c27"
+}

package/src/envconfig-toml.ts

@@ -0,0 +1,341 @@
+import { readFileSync } from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { parse, stringify, TomlTable } from 'smol-toml';
+import { filterNullAndUndefined } from '@temporalio/common/lib/internal-workflow/objects-helpers';
+import { decode, encode } from '@temporalio/common/lib/encoding';
+import { ConfigDataSource, LoadClientConfigOptions, LoadClientProfileOptions } from './types';
+
+export function normalizeGrpcMetaKey(key: string): string {
+  return key.toLocaleLowerCase().replace('_', '-');
+}
+
+/**
+ * Raw TOML structure representing the client configuration file.
+ *
+ * @internal
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+export interface TomlClientConfig {
+  profile: Record<string, TomlClientConfigProfile>;
+}
+
+/**
+ * Raw TOML structure for a client configuration profile.
+ * Note: field names use snake_case to match TOML file fields for correct parser deserialization.
+ *
+ * @internal
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+export interface TomlClientConfigProfile {
+  address?: string;
+  namespace?: string;
+  api_key?: string;
+  tls?: TomlClientConfigTLS;
+  codec?: TomlClientConfigCodec;
+  grpc_meta?: Record<string, string>;
+}
+
+/**
+ * Raw TOML structure for client configuration TLS.
+ *
+ * @internal
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+export interface TomlClientConfigTLS {
+  disabled?: boolean;
+  client_cert_path?: string;
+  client_cert_data?: string;
+  client_key_path?: string;
+  client_key_data?: string;
+  server_ca_cert_path?: string;
+  server_ca_cert_data?: string;
+  server_name?: string;
+  disable_host_verification?: boolean;
+}
+
+/**
+ * Raw TOML structure for client configuration codec.
+ *
+ * @internal
+ * @experimental Environment configuration is new feature and subject to change.
+ */
+export interface TomlClientConfigCodec {
+  endpoint?: string;
+  auth?: string;
+}
+
+function sourceToStringData(source: ConfigDataSource | undefined): string | undefined {
+  if (source === undefined) {
+    return undefined;
+  }
+  if ('path' in source) {
+    return readFileSync(source.path, { encoding: 'utf-8' });
+  }
+
+  if (typeof source.data === 'string') {
+    return source.data;
+  }
+
+  return decode(source.data);
+}
+
+export function tomlLoadClientConfig(options: LoadClientConfigOptions): TomlClientConfig {
+  const envProvider: Record<string, string | undefined> = options.overrideEnvVars ?? process.env;
+
+  let configData = undefined;
+  try {
+    configData = sourceToStringData(options.configSource) ?? getFallbackConfigData(envProvider);
+  } catch (error) {
+    const isFileNotFound = (error as NodeJS.ErrnoException)?.code === 'ENOENT';
+    if (!isFileNotFound) {
+      throw error;
+    }
+    // File not found is ok
+  }
+  if (configData !== undefined) {
+    return loadFromTomlData(configData, options.configFileStrict ?? false);
+  }
+  return { profile: {} }; // default ClientConfig
+}
+
+export function loadFromTomlData(tomlData: string, isStrict: boolean): TomlClientConfig {
+  const parsed = parse(tomlData);
+  if (isStrict) {
+    strictValidateTomlStructure(parsed);
+  }
+
+  return parsed as unknown as TomlClientConfig;
+}
+
+export function configToTomlData(config: TomlClientConfig): Uint8Array {
+  return encode(stringify(config));
+}
+
+function strictValidateTomlStructure(parsed: TomlTable): void {
+  const allowedTopLevel = new Set(['profile']);
+  const allowedProfile = new Set(['address', 'namespace', 'api_key', 'tls', 'codec', 'grpc_meta']);
+  const allowedTLS = new Set([
+    'disabled',
+    'client_cert_path',
+    'client_key_path',
+    'client_cert_data',
+    'client_key_data',
+    'server_ca_cert_path',
+    'server_ca_cert_data',
+    'server_name',
+  ]);
+  const allowedCodec = new Set(['endpoint', 'auth']);
+
+  // Check top-level keys
+  const unknownTopLevel = Object.keys(parsed).filter((k) => !allowedTopLevel.has(k));
+  if (unknownTopLevel.length > 0) {
+    throw new Error(`Validation error: key(s) unrecognized: ${unknownTopLevel.join(', ')}`);
+  }
+
+  const profiles = parsed.profile;
+  if (profiles === undefined) return;
+
+  // Ensure it's a TomlTable (not a primitive or array)
+  if (typeof profiles !== 'object' || Array.isArray(profiles)) {
+    throw new Error('Validation error: profile must be a table');
+  }
+
+  for (const [profileName, profileData] of Object.entries(profiles)) {
+    // Ensure profile is a table
+    if (typeof profileData !== 'object' || Array.isArray(profileData)) {
+      throw new Error(`Validation error: profile.${profileName} must be a table`);
+    }
+
+    const unknownProfile = Object.keys(profileData).filter((k) => !allowedProfile.has(k));
+    if (unknownProfile.length > 0) {
+      throw new Error(`Validation error: key(s) unrecognized in profile.${profileName}: ${unknownProfile.join(', ')}`);
+    }
+
+    // Validate TLS
+    const tls = profileData.tls;
+    if (tls !== undefined) {
+      if (typeof tls !== 'object' || Array.isArray(tls)) {
+        throw new Error(`Validation error: profile.${profileName}.tls must be a table`);
+      }
+      const unknownTLS = Object.keys(tls).filter((k) => !allowedTLS.has(k));
+      if (unknownTLS.length > 0) {
+        throw new Error(
+          `Validation error: key(s) unrecognized in profile.${profileName}.tls: ${unknownTLS.join(', ')}`
+        );
+      }
+    }
+
+    // Validate codec
+    const codec = profileData.codec;
+    if (codec !== undefined) {
+      if (typeof codec !== 'object' || Array.isArray(codec)) {
+        throw new Error(`Validation error: profile.${profileName}.codec must be a table`);
+      }
+      const unknownCodec = Object.keys(codec).filter((k) => !allowedCodec.has(k));
+      if (unknownCodec.length > 0) {
+        throw new Error(
+          `Validation error: key(s) unrecognized in profile.${profileName}.codec: ${unknownCodec.join(', ')}`
+        );
+      }
+    }
+  }
+}
+
+function getFallbackConfigData(envProvider: Record<string, string | undefined>): string | undefined {
+  // configSource was not set - fallback to TEMPORAL_CONFIG_FILE, then the default file path
+  let filePath = envProvider['TEMPORAL_CONFIG_FILE'];
+  if (filePath === undefined) {
+    filePath = getDefaultConfigFilePath();
+  }
+  return readFileSync(filePath, { encoding: 'utf-8' });
+}
+
+export function tomlLoadClientConfigProfile(options: LoadClientProfileOptions): TomlClientConfigProfile {
+  if (options.disableEnv && options.disableFile) {
+    throw new Error('Cannot disable both file and environment loading');
+  }
+
+  const envProvider: Record<string, string | undefined> = options.overrideEnvVars ?? process.env;
+
+  let profile: TomlClientConfigProfile = {};
+
+  if (!options.disableFile) {
+    const tomlClientConfig = tomlLoadClientConfig({
+      configSource: options.configSource,
+      configFileStrict: options.configFileStrict,
+      overrideEnvVars: options.overrideEnvVars,
+    });
+    // If profile name not provided, fallback to env variable.
+    const profileName = options.profile ?? envProvider['TEMPORAL_PROFILE'];
+    // If env var also not provided, fallback to default profile name.
+    const tomlProfile = tomlClientConfig.profile[profileName ?? DEFAULT_CONFIG_FILE_PROFILE];
+    // If toml profile does not exist and an explicit profile was requested, error.
+    if (tomlProfile === undefined && profileName) {
+      throw new Error(`Profile '${profileName}' not found in config data`);
+    }
+    // Use loaded profile if exists, otherwise fallback to default profile.
+    profile = tomlProfile ?? {};
+  }
+
+  if (!options.disableEnv) {
+    applyProfileEnvVars(profile, envProvider);
+  }
+  return profile;
+}
+
+function applyProfileEnvVars(profile: TomlClientConfigProfile, envProvider: Record<string, string | undefined>) {
+  profile.address = envProvider['TEMPORAL_ADDRESS'] ?? profile.address;
+  profile.namespace = envProvider['TEMPORAL_NAMESPACE'] ?? profile.namespace;
+  profile.api_key = envProvider['TEMPORAL_API_KEY'] ?? profile.api_key;
+  const tlsFromEnv = getTLSFromEnvVars(envProvider);
+  profile.tls = profile.tls || tlsFromEnv ? { ...profile.tls, ...tlsFromEnv } : undefined;
+  const codecFromEnv = getCodecFromEnvVars(envProvider);
+  profile.codec = profile.codec || codecFromEnv ? { ...profile.codec, ...codecFromEnv } : undefined;
+  applyGrpcMetaFromEnvVars(profile, envProvider);
+}
+
+function getTLSFromEnvVars(envProvider: Record<string, string | undefined>): TomlClientConfigTLS | undefined {
+  const tlsConfig: TomlClientConfigTLS = filterNullAndUndefined({
+    disabled: envVarToBool(envProvider['TEMPORAL_TLS']),
+    client_cert_path: envProvider['TEMPORAL_TLS_CLIENT_CERT_PATH'],
+    client_cert_data: envProvider['TEMPORAL_TLS_CLIENT_CERT_DATA'],
+    client_key_path: envProvider['TEMPORAL_TLS_CLIENT_KEY_PATH'],
+    client_key_data: envProvider['TEMPORAL_TLS_CLIENT_KEY_DATA'],
+    server_ca_cert_path: envProvider['TEMPORAL_TLS_SERVER_CA_CERT_PATH'],
+    server_ca_cert_data: envProvider['TEMPORAL_TLS_SERVER_CA_CERT_DATA'],
+    server_name: envProvider['TEMPORAL_TLS_SERVER_NAME'],
+    disable_host_verification: envVarToBool(envProvider['TEMPORAL_TLS_DISABLE_HOST_VERIFICATION']),
+  });
+
+  // If no properties were added, return undefined
+  return Object.keys(tlsConfig).length > 0 ? tlsConfig : undefined;
+}
+
+function getCodecFromEnvVars(envProvider: Record<string, string | undefined>): TomlClientConfigCodec | undefined {
+  const codec: TomlClientConfigCodec = {};
+  const endpoint = envProvider['TEMPORAL_CODEC_ENDPOINT'];
+  if (endpoint !== undefined) {
+    codec.endpoint = endpoint;
+  }
+  const auth = envProvider['TEMPORAL_CODEC_AUTH'];
+  if (auth !== undefined) {
+    codec.auth = auth;
+  }
+  // If no properties were added, return undefined
+  return Object.keys(codec).length > 0 ? codec : undefined;
+}
+
+function applyGrpcMetaFromEnvVars(profile: TomlClientConfigProfile, envProvider: Record<string, string | undefined>) {
+  const PREFIX = 'TEMPORAL_GRPC_META_';
+
+  for (const [key, value] of Object.entries(envProvider)) {
+    if (key.startsWith(PREFIX)) {
+      const headerName = key.slice(PREFIX.length);
+      const normalizedKey = normalizeGrpcMetaKey(headerName);
+      if (profile.grpc_meta === undefined) {
+        profile.grpc_meta = {};
+      }
+
+      // Empty values remove the key, non-empty values set it
+      if (value === '' || value == null) {
+        delete profile.grpc_meta[normalizedKey];
+      } else {
+        profile.grpc_meta[normalizedKey] = value;
+      }
+    }
+  }
+}
+
+function envVarToBool(envVar?: string): boolean | undefined {
+  if (envVar === undefined) {
+    return undefined;
+  }
+  return envVar === '1' || envVar === 'true';
+}
+
+const DEFAULT_CONFIG_FILE_PROFILE = 'default';
+const DEFAULT_CONFIG_FILE = 'config.toml';
+
+function getDefaultConfigFilePath(): string {
+  const configDir = getUserConfigDir();
+  const configPath = path.join(configDir, 'temporalio', DEFAULT_CONFIG_FILE);
+  return configPath;
+}
+
+function getUserConfigDir(): string {
+  const platform = os.platform();
+
+  switch (platform) {
+    case 'win32': {
+      const dir = process.env.APPDATA;
+      if (!dir) {
+        throw new Error('%AppData% is not defined');
+      }
+      return dir;
+    }
+
+    case 'darwin': {
+      const dir = process.env.HOME;
+      if (!dir) {
+        throw new Error('$HOME is not defined');
+      }
+      return path.join(dir, 'Library', 'Application Support');
+    }
+
+    default: {
+      // Unix/Linux
+      let dir = process.env.XDG_CONFIG_HOME;
+      if (!dir) {
+        const home = process.env.HOME;
+        if (!home) {
+          throw new Error('neither $XDG_CONFIG_HOME nor $HOME are defined');
+        }
+        dir = path.join(home, '.config');
+      } else if (!path.isAbsolute(dir)) {
+        throw new Error('path in $XDG_CONFIG_HOME is relative');
+      }
+      return dir;
+    }
+  }
+}

package/src/envconfig.ts

@@ -0,0 +1,78 @@
+import type { TLSConfig } from '@temporalio/common/lib/internal-non-workflow';
+import { decode } from '@temporalio/common/lib/encoding';
+import {
+  configToTomlData,
+  loadFromTomlData,
+  tomlLoadClientConfig,
+  tomlLoadClientConfigProfile,
+} from './envconfig-toml';
+import {
+  ClientConfig,
+  ClientConfigFromTomlOptions,
+  ClientConfigProfile,
+  ClientConfigTLS,
+  ClientConnectConfig,
+  LoadClientConfigOptions,
+  LoadClientProfileOptions,
+} from './types';
+import { fromTomlConfig, fromTomlProfile, loadConfigData, toTomlConfig } from './utils';
+
+export function loadClientConfig(options: LoadClientConfigOptions): ClientConfig {
+  return fromTomlConfig(tomlLoadClientConfig(options));
+}
+
+export function loadClientConfigFromToml(tomlData: Uint8Array, options: ClientConfigFromTomlOptions): ClientConfig {
+  return fromTomlConfig(loadFromTomlData(decode(tomlData), options.strict));
+}
+
+export function clientConfigToToml(config: ClientConfig): Uint8Array {
+  return configToTomlData(toTomlConfig(config));
+}
+
+export function loadClientConfigProfile(options: LoadClientProfileOptions = {}): ClientConfigProfile {
+  return fromTomlProfile(tomlLoadClientConfigProfile(options));
+}
+
+export function loadClientConnectConfig(options: LoadClientProfileOptions = {}): ClientConnectConfig {
+  return toClientOptions(loadClientConfigProfile(options));
+}
+
+export function toClientOptions(profile: ClientConfigProfile): ClientConnectConfig {
+  // TLS is enabled if we have an explicit TLS config, or if an api key is provided.
+  const tls = toTLSConfig(profile.tls) ?? (profile.apiKey !== undefined ? true : undefined);
+  return {
+    namespace: profile.namespace,
+    connectionOptions: {
+      address: profile.address,
+      apiKey: profile.apiKey,
+      tls,
+      metadata: profile.grpcMeta,
+    },
+  };
+}
+
+export function toTLSConfig(config?: ClientConfigTLS): TLSConfig | boolean | undefined {
+  if (config === undefined) {
+    return undefined;
+  }
+  if (config.disabled === true) {
+    return false;
+  }
+
+  const serverRootCACert = loadConfigData(config.serverCACert);
+  const crtBuffer = loadConfigData(config.clientCert);
+  const keyBuffer = loadConfigData(config.clientKey);
+
+  const tlsConfig: TLSConfig = {
+    serverNameOverride: config.serverName,
+    serverRootCACertificate: serverRootCACert,
+    clientCertPair:
+      crtBuffer && keyBuffer
+        ? {
+            crt: crtBuffer,
+            key: keyBuffer,
+          }
+        : undefined,
+  };
+  return tlsConfig;
+}

package/src/index.ts

@@ -0,0 +1,20 @@
+export {
+  loadClientConfig,
+  loadClientConfigProfile,
+  loadClientConnectConfig,
+  loadClientConfigFromToml,
+  clientConfigToToml,
+  toClientOptions,
+} from './envconfig';
+
+export {
+  ClientConfig,
+  ClientConfigProfile,
+  ClientConfigTLS,
+  LoadClientConfigOptions,
+  LoadClientProfileOptions,
+  ClientConfigFromTomlOptions,
+  ConfigDataSource,
+} from './types';
+
+export { fromTomlConfig, fromTomlProfile, toTomlConfig, toTomlProfile, loadConfigData } from './utils';