@vita-mojo/aggregator 1.8.0 → 1.10.0

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@vita-mojo/aggregator",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "type": "commonjs",
   "scripts": {
-    "postinstall": "npx ts-node tools/scripts/decrypt-aggregator.ts"
+    "postinstall": "node postinstall.js"
   },
   "dependencies": {
     "@vita-mojo/amounts": "0.0.33",

package/postinstall.js

@@ -0,0 +1,134 @@
+#!/usr/bin/env node
+/* eslint-disable no-console */
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+
+/**
+ * Load environment variables from .env file
+ */
+function loadEnvFile() {
+  // Navigate up to repo root (from node_modules/@cicd_vitamojo/aggregator)
+  const repoRoot = path.resolve(__dirname, '../../../..');
+  const envFilePath = path.join(repoRoot, '.env');
+
+  if (!fs.existsSync(envFilePath)) {
+    console.log('ℹ No .env file found in repo root');
+    return;
+  }
+
+  try {
+    const envContent = fs.readFileSync(envFilePath, 'utf-8');
+    const lines = envContent.split('\n');
+
+    for (const line of lines) {
+      const trimmed = line.trim();
+
+      // Skip empty lines and comments
+      if (!trimmed || trimmed.startsWith('#')) {
+        continue;
+      }
+
+      const [key, ...valueParts] = trimmed.split('=');
+      const value = valueParts.join('=').trim();
+
+      // Remove quotes if present
+      const cleanValue = value.replace(/^['"]|['"]$/g, '');
+
+      // Only set if not already in environment
+      if (!process.env[key]) {
+        process.env[key] = cleanValue;
+      }
+    }
+
+    console.log('✓ Loaded environment variables from .env file');
+  } catch (error) {
+    console.error(`⚠ Failed to read .env file: ${error.message}`);
+  }
+}
+
+/**
+ * Decrypt a file using a shared secret
+ */
+function decryptFile(filePath, sharedSecret) {
+  const encryptedData = fs.readFileSync(filePath);
+
+  // Extract IV from the first 16 bytes
+  const iv = encryptedData.slice(0, 16);
+  const encrypted = encryptedData.slice(16);
+
+  // Decrypt the file content with AES-256-CBC using the shared secret
+  const decipher = crypto.createDecipheriv('aes-256-cbc', sharedSecret, iv);
+  const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+
+  return decrypted;
+}
+
+/**
+ * Decrypt all .enc files in the current directory
+ */
+function decryptFiles() {
+  console.log('\n🔓 Decrypting aggregator files...');
+
+  const sharedSecretEnv = process.env.AGGREGATOR_ENCRYPTION_KEY;
+  if (!sharedSecretEnv) {
+    console.warn('⚠ AGGREGATOR_ENCRYPTION_KEY environment variable not set');
+    console.warn('⚠ Skipping decryption of aggregator files');
+    return;
+  }
+
+  // Shared secret must be 32 bytes (256 bits) for AES-256
+  const sharedSecret = Buffer.from(sharedSecretEnv, 'base64');
+  if (sharedSecret.length !== 32) {
+    throw new Error(`AGGREGATOR_ENCRYPTION_KEY must be 32 bytes (256 bits), got ${sharedSecret.length} bytes`);
+  }
+
+  // Get current directory (where the package is installed)
+  const currentDir = __dirname;
+
+  if (!fs.existsSync(currentDir)) {
+    console.log(`✗ Directory not found: ${currentDir}`);
+    return;
+  }
+
+  const files = fs.readdirSync(currentDir);
+  let decryptedCount = 0;
+
+  for (const file of files) {
+    if (!file.endsWith('.enc')) {
+      continue;
+    }
+
+    const encFilePath = path.join(currentDir, file);
+    const originalFilePath = encFilePath.slice(0, -4); // Remove .enc extension
+
+    try {
+      const decrypted = decryptFile(encFilePath, sharedSecret);
+      fs.writeFileSync(originalFilePath, decrypted);
+      fs.unlinkSync(encFilePath); // Remove encrypted file
+      console.log(`  ✓ Decrypted: ${path.basename(originalFilePath)}`);
+      decryptedCount++;
+    } catch (error) {
+      console.error(`Failed to decrypt ${file}:`, error.message);
+      throw error;
+    }
+  }
+
+  if (decryptedCount === 0) {
+    console.log('No encrypted files found');
+  } else {
+    console.log(`✓ Decryption completed (${decryptedCount} files)`);
+  }
+}
+
+/**
+ * Main execution
+ */
+try {
+  loadEnvFile();
+  decryptFiles();
+} catch (error) {
+  console.error('\n❌ Aggregator decryption failed:', error.message);
+  process.exit(1);
+}