@tillstack/secrets-node 0.1.0

package/dist/index.d.mts

@@ -0,0 +1,15 @@
+import { SecretsClientOptions, SecretsClient, PullResult } from '@tillstack/secrets-core';
+export * from '@tillstack/secrets-core';
+
+/** Create a client from options or the environment (`TILLSECRETS_TOKEN`,
+ *  optional `TILLSECRETS_URL`, optional `TILLSECRETS_ENV`). */
+declare function createClient(opts?: Partial<SecretsClientOptions>): SecretsClient;
+interface LoadOptions extends Partial<SecretsClientOptions> {
+    /** Overwrite keys already present in process.env (default false — existing
+     *  wins, matching dotenv). */
+    override?: boolean;
+}
+/** Pull secrets and inject them into process.env. Returns the pulled map. */
+declare function load(opts?: LoadOptions): Promise<PullResult>;
+
+export { type LoadOptions, createClient, load };

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+import { SecretsClientOptions, SecretsClient, PullResult } from '@tillstack/secrets-core';
+export * from '@tillstack/secrets-core';
+
+/** Create a client from options or the environment (`TILLSECRETS_TOKEN`,
+ *  optional `TILLSECRETS_URL`, optional `TILLSECRETS_ENV`). */
+declare function createClient(opts?: Partial<SecretsClientOptions>): SecretsClient;
+interface LoadOptions extends Partial<SecretsClientOptions> {
+    /** Overwrite keys already present in process.env (default false — existing
+     *  wins, matching dotenv). */
+    override?: boolean;
+}
+/** Pull secrets and inject them into process.env. Returns the pulled map. */
+declare function load(opts?: LoadOptions): Promise<PullResult>;
+
+export { type LoadOptions, createClient, load };

package/dist/index.js

@@ -0,0 +1,36 @@
+'use strict';
+
+var secretsCore = require('@tillstack/secrets-core');
+
+// src/index.ts
+function createClient(opts) {
+  const token = opts?.token ?? process.env.TILLSECRETS_TOKEN;
+  if (!token) throw new Error("TillSecrets: no token \u2014 pass one or set TILLSECRETS_TOKEN");
+  const built = { token };
+  const url = opts?.url ?? process.env.TILLSECRETS_URL;
+  if (url) built.url = url;
+  const env = opts?.environmentId ?? process.env.TILLSECRETS_ENV;
+  if (env) built.environmentId = env;
+  if (opts?.timeoutMs !== void 0) built.timeoutMs = opts.timeoutMs;
+  if (opts?.fetch) built.fetch = opts.fetch;
+  return new secretsCore.SecretsClient(built);
+}
+async function load(opts = {}) {
+  const client = createClient(opts);
+  const result = await client.pull();
+  for (const [k, v] of Object.entries(result.secrets)) {
+    if (opts.override || process.env[k] === void 0) process.env[k] = v;
+  }
+  return result;
+}
+
+exports.createClient = createClient;
+exports.load = load;
+Object.keys(secretsCore).forEach(function (k) {
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+    enumerable: true,
+    get: function () { return secretsCore[k]; }
+  });
+});
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["SecretsClient"],"mappings":";;;;;AAgBO,SAAS,aAAa,IAAA,EAAqD;AAChF,EAAA,MAAM,KAAA,GAAQ,IAAA,EAAM,KAAA,IAAS,OAAA,CAAQ,GAAA,CAAI,iBAAA;AACzC,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,gEAA2D,CAAA;AACvF,EAAA,MAAM,KAAA,GAA8B,EAAE,KAAA,EAAM;AAC5C,EAAA,MAAM,GAAA,GAAM,IAAA,EAAM,GAAA,IAAO,OAAA,CAAQ,GAAA,CAAI,eAAA;AACrC,EAAA,IAAI,GAAA,QAAW,GAAA,GAAM,GAAA;AACrB,EAAA,MAAM,GAAA,GAAM,IAAA,EAAM,aAAA,IAAiB,OAAA,CAAQ,GAAA,CAAI,eAAA;AAC/C,EAAA,IAAI,GAAA,QAAW,aAAA,GAAgB,GAAA;AAC/B,EAAA,IAAI,IAAA,EAAM,SAAA,KAAc,MAAA,EAAW,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AAC1D,EAAA,IAAI,IAAA,EAAM,KAAA,EAAO,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,KAAA;AACpC,EAAA,OAAO,IAAIA,0BAAc,KAAK,CAAA;AAChC;AASA,eAAsB,IAAA,CAAK,IAAA,GAAoB,EAAC,EAAwB;AACtE,EAAA,MAAM,MAAA,GAAS,aAAa,IAAI,CAAA;AAChC,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAA,EAAK;AACjC,EAAA,KAAA,MAAW,CAAC,GAAG,CAAC,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AACnD,IAAA,IAAI,IAAA,CAAK,QAAA,IAAY,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAM,MAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,GAAI,CAAA;AAAA,EACtE;AACA,EAAA,OAAO,MAAA;AACT","file":"index.js","sourcesContent":["// @tillstack/secrets-node — TillSecrets client for Node.js.\n//\n//   import { load } from '@tillstack/secrets-node'\n//   await load()                       // reads TILLSECRETS_TOKEN, injects into process.env\n//   // ... process.env.STRIPE_KEY is now populated\n//\n// or explicitly:\n//   const client = createClient({ token })\n//   const { secrets } = await client.pull()\n\nimport { SecretsClient, type SecretsClientOptions, type PullResult } from '@tillstack/secrets-core'\n\nexport * from '@tillstack/secrets-core'\n\n/** Create a client from options or the environment (`TILLSECRETS_TOKEN`,\n *  optional `TILLSECRETS_URL`, optional `TILLSECRETS_ENV`). */\nexport function createClient(opts?: Partial<SecretsClientOptions>): SecretsClient {\n  const token = opts?.token ?? process.env.TILLSECRETS_TOKEN\n  if (!token) throw new Error('TillSecrets: no token — pass one or set TILLSECRETS_TOKEN')\n  const built: SecretsClientOptions = { token }\n  const url = opts?.url ?? process.env.TILLSECRETS_URL\n  if (url) built.url = url\n  const env = opts?.environmentId ?? process.env.TILLSECRETS_ENV\n  if (env) built.environmentId = env\n  if (opts?.timeoutMs !== undefined) built.timeoutMs = opts.timeoutMs\n  if (opts?.fetch) built.fetch = opts.fetch\n  return new SecretsClient(built)\n}\n\nexport interface LoadOptions extends Partial<SecretsClientOptions> {\n  /** Overwrite keys already present in process.env (default false — existing\n   *  wins, matching dotenv). */\n  override?: boolean\n}\n\n/** Pull secrets and inject them into process.env. Returns the pulled map. */\nexport async function load(opts: LoadOptions = {}): Promise<PullResult> {\n  const client = createClient(opts)\n  const result = await client.pull()\n  for (const [k, v] of Object.entries(result.secrets)) {\n    if (opts.override || process.env[k] === undefined) process.env[k] = v\n  }\n  return result\n}\n"]}

package/dist/index.mjs

@@ -0,0 +1,28 @@
+import { SecretsClient } from '@tillstack/secrets-core';
+export * from '@tillstack/secrets-core';
+
+// src/index.ts
+function createClient(opts) {
+  const token = opts?.token ?? process.env.TILLSECRETS_TOKEN;
+  if (!token) throw new Error("TillSecrets: no token \u2014 pass one or set TILLSECRETS_TOKEN");
+  const built = { token };
+  const url = opts?.url ?? process.env.TILLSECRETS_URL;
+  if (url) built.url = url;
+  const env = opts?.environmentId ?? process.env.TILLSECRETS_ENV;
+  if (env) built.environmentId = env;
+  if (opts?.timeoutMs !== void 0) built.timeoutMs = opts.timeoutMs;
+  if (opts?.fetch) built.fetch = opts.fetch;
+  return new SecretsClient(built);
+}
+async function load(opts = {}) {
+  const client = createClient(opts);
+  const result = await client.pull();
+  for (const [k, v] of Object.entries(result.secrets)) {
+    if (opts.override || process.env[k] === void 0) process.env[k] = v;
+  }
+  return result;
+}
+
+export { createClient, load };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;AAgBO,SAAS,aAAa,IAAA,EAAqD;AAChF,EAAA,MAAM,KAAA,GAAQ,IAAA,EAAM,KAAA,IAAS,OAAA,CAAQ,GAAA,CAAI,iBAAA;AACzC,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,gEAA2D,CAAA;AACvF,EAAA,MAAM,KAAA,GAA8B,EAAE,KAAA,EAAM;AAC5C,EAAA,MAAM,GAAA,GAAM,IAAA,EAAM,GAAA,IAAO,OAAA,CAAQ,GAAA,CAAI,eAAA;AACrC,EAAA,IAAI,GAAA,QAAW,GAAA,GAAM,GAAA;AACrB,EAAA,MAAM,GAAA,GAAM,IAAA,EAAM,aAAA,IAAiB,OAAA,CAAQ,GAAA,CAAI,eAAA;AAC/C,EAAA,IAAI,GAAA,QAAW,aAAA,GAAgB,GAAA;AAC/B,EAAA,IAAI,IAAA,EAAM,SAAA,KAAc,MAAA,EAAW,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AAC1D,EAAA,IAAI,IAAA,EAAM,KAAA,EAAO,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,KAAA;AACpC,EAAA,OAAO,IAAI,cAAc,KAAK,CAAA;AAChC;AASA,eAAsB,IAAA,CAAK,IAAA,GAAoB,EAAC,EAAwB;AACtE,EAAA,MAAM,MAAA,GAAS,aAAa,IAAI,CAAA;AAChC,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAA,EAAK;AACjC,EAAA,KAAA,MAAW,CAAC,GAAG,CAAC,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AACnD,IAAA,IAAI,IAAA,CAAK,QAAA,IAAY,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAM,MAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,GAAI,CAAA;AAAA,EACtE;AACA,EAAA,OAAO,MAAA;AACT","file":"index.mjs","sourcesContent":["// @tillstack/secrets-node — TillSecrets client for Node.js.\n//\n//   import { load } from '@tillstack/secrets-node'\n//   await load()                       // reads TILLSECRETS_TOKEN, injects into process.env\n//   // ... process.env.STRIPE_KEY is now populated\n//\n// or explicitly:\n//   const client = createClient({ token })\n//   const { secrets } = await client.pull()\n\nimport { SecretsClient, type SecretsClientOptions, type PullResult } from '@tillstack/secrets-core'\n\nexport * from '@tillstack/secrets-core'\n\n/** Create a client from options or the environment (`TILLSECRETS_TOKEN`,\n *  optional `TILLSECRETS_URL`, optional `TILLSECRETS_ENV`). */\nexport function createClient(opts?: Partial<SecretsClientOptions>): SecretsClient {\n  const token = opts?.token ?? process.env.TILLSECRETS_TOKEN\n  if (!token) throw new Error('TillSecrets: no token — pass one or set TILLSECRETS_TOKEN')\n  const built: SecretsClientOptions = { token }\n  const url = opts?.url ?? process.env.TILLSECRETS_URL\n  if (url) built.url = url\n  const env = opts?.environmentId ?? process.env.TILLSECRETS_ENV\n  if (env) built.environmentId = env\n  if (opts?.timeoutMs !== undefined) built.timeoutMs = opts.timeoutMs\n  if (opts?.fetch) built.fetch = opts.fetch\n  return new SecretsClient(built)\n}\n\nexport interface LoadOptions extends Partial<SecretsClientOptions> {\n  /** Overwrite keys already present in process.env (default false — existing\n   *  wins, matching dotenv). */\n  override?: boolean\n}\n\n/** Pull secrets and inject them into process.env. Returns the pulled map. */\nexport async function load(opts: LoadOptions = {}): Promise<PullResult> {\n  const client = createClient(opts)\n  const result = await client.pull()\n  for (const [k, v] of Object.entries(result.secrets)) {\n    if (opts.override || process.env[k] === undefined) process.env[k] = v\n  }\n  return result\n}\n"]}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@tillstack/secrets-node",
+  "version": "0.1.0",
+  "description": "TillSecrets client for Node.js — pull encrypted config at boot and inject it into process.env, with a drop-in dotenv-style API.",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "sideEffects": false,
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@tillstack/secrets-core": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.7.3"
+  },
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tillafrica/tilldev.git",
+    "directory": "packages/secrets-node"
+  },
+  "homepage": "https://tilldev.dev",
+  "bugs": {
+    "url": "https://github.com/tillafrica/tilldev/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "tilldev",
+    "tillsecrets",
+    "secrets",
+    "config",
+    "env",
+    "dotenv",
+    "node"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}