@tinycloud/sdk-services 2.1.0-beta.4 → 2.2.0-beta.7

package/dist/index.cjs

@@ -39,6 +39,7 @@ __export(index_exports, {
   RetryPolicySchema: () => RetryPolicySchema,
   SQLAction: () => SQLAction,
   SQLService: () => SQLService,
+  SecretsService: () => SecretsService,
   ServiceContext: () => ServiceContext,
   ServiceErrorEventSchema: () => ServiceErrorEventSchema,
   ServiceErrorSchema: () => ServiceErrorSchema,
@@ -3844,6 +3845,77 @@ function createVaultCrypto(wasm) {
     sha256: (data) => wasm.vault_sha256(data)
   };
 }
+
+// src/secrets/SecretsService.ts
+var SECRET_NAME_RE = /^[A-Z][A-Z0-9_]*$/;
+var SECRET_PREFIX = "secrets/";
+function invalidSecretName(name) {
+  return err({
+    code: ErrorCodes.INVALID_INPUT,
+    service: "secrets",
+    message: `Invalid secret name ${JSON.stringify(name)}. Secret names must match ${SECRET_NAME_RE.source}.`
+  });
+}
+function secretKey(name) {
+  return `${SECRET_PREFIX}${name}`;
+}
+var SecretsService = class {
+  constructor(vault) {
+    this.getVault = typeof vault === "function" ? vault : () => vault;
+  }
+  get vault() {
+    return this.getVault();
+  }
+  get isUnlocked() {
+    return this.vault.isUnlocked;
+  }
+  unlock(signer) {
+    return this.vault.unlock(signer);
+  }
+  lock() {
+    this.vault.lock();
+  }
+  async get(name) {
+    if (!SECRET_NAME_RE.test(name)) {
+      return invalidSecretName(name);
+    }
+    const result = await this.vault.get(secretKey(name));
+    if (!result.ok) {
+      return result;
+    }
+    return { ok: true, data: result.data.value.value };
+  }
+  async put(name, value) {
+    if (!SECRET_NAME_RE.test(name)) {
+      return invalidSecretName(name);
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    return this.vault.put(secretKey(name), {
+      value,
+      createdAt: now,
+      updatedAt: now
+    });
+  }
+  async delete(name) {
+    if (!SECRET_NAME_RE.test(name)) {
+      return invalidSecretName(name);
+    }
+    return this.vault.delete(secretKey(name));
+  }
+  async list() {
+    const result = await this.vault.list({
+      prefix: SECRET_PREFIX,
+      removePrefix: true
+    });
+    if (!result.ok) {
+      return result;
+    }
+    return {
+      ok: true,
+      data: result.data.filter((name) => SECRET_NAME_RE.test(name))
+    };
+  }
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BaseService,
@@ -3865,6 +3937,7 @@ function createVaultCrypto(wasm) {
   RetryPolicySchema,
   SQLAction,
   SQLService,
+  SecretsService,
   ServiceContext,
   ServiceErrorEventSchema,
   ServiceErrorSchema,