@workos-inc/node 8.8.0 → 8.9.0

package/lib/vault/interfaces/object.interface.d.ts

@@ -1,35 +0,0 @@
-import { KeyContext } from "./key.interface.js";
-
-//#region src/vault/interfaces/object.interface.d.ts
-interface ObjectDigest {
-  id: string;
-  name: string;
-  updatedAt: Date;
-}
-interface ObjectUpdateBy {
-  id: string;
-  name: string;
-}
-interface ObjectMetadata {
-  context: KeyContext;
-  environmentId: string;
-  id: string;
-  keyId: string;
-  updatedAt: Date;
-  updatedBy: ObjectUpdateBy;
-  versionId: string;
-}
-interface VaultObject {
-  id: string;
-  metadata: ObjectMetadata;
-  name: string;
-  value?: string;
-}
-interface ObjectVersion {
-  createdAt: Date;
-  currentVersion: boolean;
-  id: string;
-}
-//#endregion
-export { ObjectDigest, ObjectMetadata, ObjectUpdateBy, ObjectVersion, VaultObject };
-//# sourceMappingURL=object.interface.d.ts.map

package/lib/vault/interfaces/object.interface.js

@@ -1 +0,0 @@
-export {  };

package/lib/vault/serializers/vault-key.serializer.cjs

@@ -1,4 +0,0 @@
-const require_vault_key_serializer = require('../../vault-key.serializer-D5WVcdFV.cjs');
-
-exports.deserializeCreateDataKeyResponse = require_vault_key_serializer.deserializeCreateDataKeyResponse;
-exports.deserializeDecryptDataKeyResponse = require_vault_key_serializer.deserializeDecryptDataKeyResponse;

package/lib/vault/serializers/vault-key.serializer.d.cts

@@ -1,10 +0,0 @@
-import { n as DataKeyPair, t as DataKey } from "../../key.interface-YLV_plqn.cjs";
-import { n as CreateDataKeyResponse } from "../../create-data-key.interface-CfdPFOII.cjs";
-import { n as DecryptDataKeyResponse } from "../../decrypt-data-key.interface-COPJw2aD.cjs";
-
-//#region src/vault/serializers/vault-key.serializer.d.ts
-declare const deserializeCreateDataKeyResponse: (key: CreateDataKeyResponse) => DataKeyPair;
-declare const deserializeDecryptDataKeyResponse: (key: DecryptDataKeyResponse) => DataKey;
-//#endregion
-export { deserializeCreateDataKeyResponse, deserializeDecryptDataKeyResponse };
-//# sourceMappingURL=vault-key.serializer.d.cts.map

package/lib/vault/serializers/vault-key.serializer.d.ts

@@ -1,10 +0,0 @@
-import { DataKey, DataKeyPair } from "../interfaces/key.interface.js";
-import { CreateDataKeyResponse } from "../interfaces/key/create-data-key.interface.js";
-import { DecryptDataKeyResponse } from "../interfaces/key/decrypt-data-key.interface.js";
-
-//#region src/vault/serializers/vault-key.serializer.d.ts
-declare const deserializeCreateDataKeyResponse: (key: CreateDataKeyResponse) => DataKeyPair;
-declare const deserializeDecryptDataKeyResponse: (key: DecryptDataKeyResponse) => DataKey;
-//#endregion
-export { deserializeCreateDataKeyResponse, deserializeDecryptDataKeyResponse };
-//# sourceMappingURL=vault-key.serializer.d.ts.map

package/lib/vault/serializers/vault-key.serializer.js

@@ -1,17 +0,0 @@
-//#region src/vault/serializers/vault-key.serializer.ts
-const deserializeCreateDataKeyResponse = (key) => ({
-	context: key.context,
-	dataKey: {
-		key: key.data_key,
-		id: key.id
-	},
-	encryptedKeys: key.encrypted_keys
-});
-const deserializeDecryptDataKeyResponse = (key) => ({
-	key: key.data_key,
-	id: key.id
-});
-
-//#endregion
-export { deserializeCreateDataKeyResponse, deserializeDecryptDataKeyResponse };
-//# sourceMappingURL=vault-key.serializer.js.map

package/lib/vault/serializers/vault-key.serializer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-key.serializer.js","names":[],"sources":["../../../src/vault/serializers/vault-key.serializer.ts"],"sourcesContent":["import { CreateDataKeyResponse } from '../interfaces/key/create-data-key.interface';\nimport { DecryptDataKeyResponse } from '../interfaces/key/decrypt-data-key.interface';\nimport { DataKey, DataKeyPair } from '../interfaces/key.interface';\n\nexport const deserializeCreateDataKeyResponse = (\n  key: CreateDataKeyResponse,\n): DataKeyPair => ({\n  context: key.context,\n  dataKey: {\n    key: key.data_key,\n    id: key.id,\n  },\n  encryptedKeys: key.encrypted_keys,\n});\n\nexport const deserializeDecryptDataKeyResponse = (\n  key: DecryptDataKeyResponse,\n): DataKey => ({\n  key: key.data_key,\n  id: key.id,\n});\n"],"mappings":";AAIA,MAAa,oCACX,SACiB;CACjB,SAAS,IAAI;CACb,SAAS;EACP,KAAK,IAAI;EACT,IAAI,IAAI;EACT;CACD,eAAe,IAAI;CACpB;AAED,MAAa,qCACX,SACa;CACb,KAAK,IAAI;CACT,IAAI,IAAI;CACT"}

package/lib/vault/serializers/vault-object.serializer.cjs

@@ -1,8 +0,0 @@
-const require_vault_object_serializer = require('../../vault-object.serializer-Cx7rAuca.cjs');
-
-exports.deserializeListObjects = require_vault_object_serializer.deserializeListObjects;
-exports.deserializeObject = require_vault_object_serializer.deserializeObject;
-exports.deserializeObjectMetadata = require_vault_object_serializer.deserializeObjectMetadata;
-exports.desrializeListObjectVersions = require_vault_object_serializer.desrializeListObjectVersions;
-exports.serializeCreateObjectEntity = require_vault_object_serializer.serializeCreateObjectEntity;
-exports.serializeUpdateObjectEntity = require_vault_object_serializer.serializeUpdateObjectEntity;

package/lib/vault/serializers/vault-object.serializer.d.cts

@@ -1,18 +0,0 @@
-import { n as ListResponse, t as List } from "../../list.interface-I2r4xhuH.cjs";
-import { n as CreateObjectOptions, t as CreateObjectEntity } from "../../create-object.interface-BEWdAoAU.cjs";
-import { t as ListObjectVersionsResponse } from "../../list-object-versions.interface-CbrhRrmz.cjs";
-import { t as ObjectDigestResponse } from "../../list-objects.interface-CtunUutg.cjs";
-import { a as VaultObject, i as ObjectVersion, n as ObjectMetadata, t as ObjectDigest } from "../../object.interface-Do9xg7Zv.cjs";
-import { r as ReadObjectResponse, t as ReadObjectMetadataResponse } from "../../read-object.interface-iqgpJxLj.cjs";
-import { n as UpdateObjectOptions, t as UpdateObjectEntity } from "../../update-object.interface-EhYczOkX.cjs";
-
-//#region src/vault/serializers/vault-object.serializer.d.ts
-declare const deserializeObjectMetadata: (metadata: ReadObjectMetadataResponse) => ObjectMetadata;
-declare const deserializeObject: (object: ReadObjectResponse) => VaultObject;
-declare const deserializeListObjects: (list: ListResponse<ObjectDigestResponse>) => List<ObjectDigest>;
-declare const desrializeListObjectVersions: (list: ListObjectVersionsResponse) => ObjectVersion[];
-declare const serializeCreateObjectEntity: (options: CreateObjectOptions) => CreateObjectEntity;
-declare const serializeUpdateObjectEntity: (options: UpdateObjectOptions) => UpdateObjectEntity;
-//#endregion
-export { deserializeListObjects, deserializeObject, deserializeObjectMetadata, desrializeListObjectVersions, serializeCreateObjectEntity, serializeUpdateObjectEntity };
-//# sourceMappingURL=vault-object.serializer.d.cts.map

package/lib/vault/serializers/vault-object.serializer.d.ts

@@ -1,18 +0,0 @@
-import { List, ListResponse } from "../../common/interfaces/list.interface.js";
-import { CreateObjectEntity, CreateObjectOptions } from "../interfaces/object/create-object.interface.js";
-import { ListObjectVersionsResponse } from "../interfaces/object/list-object-versions.interface.js";
-import { ObjectDigestResponse } from "../interfaces/object/list-objects.interface.js";
-import { ObjectDigest, ObjectMetadata, ObjectVersion, VaultObject } from "../interfaces/object.interface.js";
-import { ReadObjectMetadataResponse, ReadObjectResponse } from "../interfaces/object/read-object.interface.js";
-import { UpdateObjectEntity, UpdateObjectOptions } from "../interfaces/object/update-object.interface.js";
-
-//#region src/vault/serializers/vault-object.serializer.d.ts
-declare const deserializeObjectMetadata: (metadata: ReadObjectMetadataResponse) => ObjectMetadata;
-declare const deserializeObject: (object: ReadObjectResponse) => VaultObject;
-declare const deserializeListObjects: (list: ListResponse<ObjectDigestResponse>) => List<ObjectDigest>;
-declare const desrializeListObjectVersions: (list: ListObjectVersionsResponse) => ObjectVersion[];
-declare const serializeCreateObjectEntity: (options: CreateObjectOptions) => CreateObjectEntity;
-declare const serializeUpdateObjectEntity: (options: UpdateObjectOptions) => UpdateObjectEntity;
-//#endregion
-export { deserializeListObjects, deserializeObject, deserializeObjectMetadata, desrializeListObjectVersions, serializeCreateObjectEntity, serializeUpdateObjectEntity };
-//# sourceMappingURL=vault-object.serializer.d.ts.map

package/lib/vault/serializers/vault-object.serializer.js

@@ -1,48 +0,0 @@
-//#region src/vault/serializers/vault-object.serializer.ts
-const deserializeObjectMetadata = (metadata) => ({
-	context: metadata.context,
-	environmentId: metadata.environment_id,
-	id: metadata.id,
-	keyId: metadata.key_id,
-	updatedAt: new Date(Date.parse(metadata.updated_at)),
-	updatedBy: metadata.updated_by,
-	versionId: metadata.version_id
-});
-const deserializeObject = (object) => ({
-	id: object.id,
-	name: object.name,
-	...object.value !== void 0 && { value: object.value },
-	metadata: deserializeObjectMetadata(object.metadata)
-});
-const deserializeObjectDigest = (digest) => ({
-	id: digest.id,
-	name: digest.name,
-	updatedAt: new Date(Date.parse(digest.updated_at))
-});
-const deserializeListObjects = (list) => ({
-	object: "list",
-	data: list.data.map(deserializeObjectDigest),
-	listMetadata: {
-		...list.list_metadata.after !== void 0 && { after: list.list_metadata.after },
-		...list.list_metadata.before !== void 0 && { before: list.list_metadata.before }
-	}
-});
-const desrializeListObjectVersions = (list) => list.data.map(deserializeObjectVersion);
-const deserializeObjectVersion = (version) => ({
-	createdAt: new Date(Date.parse(version.created_at)),
-	currentVersion: version.current_version,
-	id: version.id
-});
-const serializeCreateObjectEntity = (options) => ({
-	name: options.name,
-	value: options.value,
-	key_context: options.context
-});
-const serializeUpdateObjectEntity = (options) => ({
-	value: options.value,
-	version_check: options.versionCheck
-});
-
-//#endregion
-export { deserializeListObjects, deserializeObject, deserializeObjectMetadata, desrializeListObjectVersions, serializeCreateObjectEntity, serializeUpdateObjectEntity };
-//# sourceMappingURL=vault-object.serializer.js.map

package/lib/vault/serializers/vault-object.serializer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-object.serializer.js","names":[],"sources":["../../../src/vault/serializers/vault-object.serializer.ts"],"sourcesContent":["import { List, ListResponse } from '../../common/interfaces';\nimport {\n  ReadObjectMetadataResponse,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  UpdateObjectEntity,\n  ObjectMetadata,\n  VaultObject,\n  ObjectVersionResponse,\n  ObjectVersion,\n  CreateObjectOptions,\n  CreateObjectEntity,\n  ObjectDigestResponse,\n  ObjectDigest,\n  ListObjectVersionsResponse,\n} from '../interfaces';\n\nexport const deserializeObjectMetadata = (\n  metadata: ReadObjectMetadataResponse,\n): ObjectMetadata => ({\n  context: metadata.context,\n  environmentId: metadata.environment_id,\n  id: metadata.id,\n  keyId: metadata.key_id,\n  updatedAt: new Date(Date.parse(metadata.updated_at)),\n  updatedBy: metadata.updated_by,\n  versionId: metadata.version_id,\n});\n\nexport const deserializeObject = (object: ReadObjectResponse): VaultObject => ({\n  id: object.id,\n  name: object.name,\n  ...(object.value !== undefined && { value: object.value }),\n  metadata: deserializeObjectMetadata(object.metadata),\n});\n\nconst deserializeObjectDigest = (\n  digest: ObjectDigestResponse,\n): ObjectDigest => ({\n  id: digest.id,\n  name: digest.name,\n  updatedAt: new Date(Date.parse(digest.updated_at)),\n});\n\nexport const deserializeListObjects = (\n  list: ListResponse<ObjectDigestResponse>,\n): List<ObjectDigest> => ({\n  object: 'list',\n  data: list.data.map(deserializeObjectDigest),\n  listMetadata: {\n    ...(list.list_metadata.after !== undefined && {\n      after: list.list_metadata.after,\n    }),\n    ...(list.list_metadata.before !== undefined && {\n      before: list.list_metadata.before,\n    }),\n  },\n});\n\nexport const desrializeListObjectVersions = (\n  list: ListObjectVersionsResponse,\n): ObjectVersion[] => list.data.map(deserializeObjectVersion);\n\nconst deserializeObjectVersion = (\n  version: ObjectVersionResponse,\n): ObjectVersion => ({\n  createdAt: new Date(Date.parse(version.created_at)),\n  currentVersion: version.current_version,\n  id: version.id,\n});\n\nexport const serializeCreateObjectEntity = (\n  options: CreateObjectOptions,\n): CreateObjectEntity => ({\n  name: options.name,\n  value: options.value,\n  key_context: options.context,\n});\n\nexport const serializeUpdateObjectEntity = (\n  options: UpdateObjectOptions,\n): UpdateObjectEntity => ({\n  value: options.value,\n  version_check: options.versionCheck,\n});\n"],"mappings":";AAiBA,MAAa,6BACX,cACoB;CACpB,SAAS,SAAS;CAClB,eAAe,SAAS;CACxB,IAAI,SAAS;CACb,OAAO,SAAS;CAChB,WAAW,IAAI,KAAK,KAAK,MAAM,SAAS,WAAW,CAAC;CACpD,WAAW,SAAS;CACpB,WAAW,SAAS;CACrB;AAED,MAAa,qBAAqB,YAA6C;CAC7E,IAAI,OAAO;CACX,MAAM,OAAO;CACb,GAAI,OAAO,UAAU,UAAa,EAAE,OAAO,OAAO,OAAO;CACzD,UAAU,0BAA0B,OAAO,SAAS;CACrD;AAED,MAAM,2BACJ,YACkB;CAClB,IAAI,OAAO;CACX,MAAM,OAAO;CACb,WAAW,IAAI,KAAK,KAAK,MAAM,OAAO,WAAW,CAAC;CACnD;AAED,MAAa,0BACX,UACwB;CACxB,QAAQ;CACR,MAAM,KAAK,KAAK,IAAI,wBAAwB;CAC5C,cAAc;EACZ,GAAI,KAAK,cAAc,UAAU,UAAa,EAC5C,OAAO,KAAK,cAAc,OAC3B;EACD,GAAI,KAAK,cAAc,WAAW,UAAa,EAC7C,QAAQ,KAAK,cAAc,QAC5B;EACF;CACF;AAED,MAAa,gCACX,SACoB,KAAK,KAAK,IAAI,yBAAyB;AAE7D,MAAM,4BACJ,aACmB;CACnB,WAAW,IAAI,KAAK,KAAK,MAAM,QAAQ,WAAW,CAAC;CACnD,gBAAgB,QAAQ;CACxB,IAAI,QAAQ;CACb;AAED,MAAa,+BACX,aACwB;CACxB,MAAM,QAAQ;CACd,OAAO,QAAQ;CACf,aAAa,QAAQ;CACtB;AAED,MAAa,+BACX,aACwB;CACxB,OAAO,QAAQ;CACf,eAAe,QAAQ;CACxB"}

package/lib/vault/vault.cjs

@@ -1,3 +0,0 @@
-const require_vault = require('../vault-BR8gbCEq.cjs');
-
-exports.Vault = require_vault.Vault;

package/lib/vault/vault.d.cts

@@ -1,2 +0,0 @@
-import { r as Vault } from "../api-keys-Dm4rmZx0.cjs";
-export { Vault };

package/lib/vault/vault.d.ts

@@ -1,35 +0,0 @@
-import { PaginationOptions } from "../common/interfaces/pagination-options.interface.js";
-import { List } from "../common/interfaces/list.interface.js";
-import "../index.worker.js";
-import { DataKey, DataKeyPair, KeyContext } from "./interfaces/key.interface.js";
-import { CreateDataKeyOptions } from "./interfaces/key/create-data-key.interface.js";
-import { DecryptDataKeyOptions } from "./interfaces/key/decrypt-data-key.interface.js";
-import { CreateObjectOptions } from "./interfaces/object/create-object.interface.js";
-import { DeleteObjectOptions } from "./interfaces/object/delete-object.interface.js";
-import { ObjectDigest, ObjectMetadata, ObjectVersion, VaultObject } from "./interfaces/object.interface.js";
-import { ReadObjectOptions } from "./interfaces/object/read-object.interface.js";
-import { UpdateObjectOptions } from "./interfaces/object/update-object.interface.js";
-import { WorkOS } from "../workos.js";
-
-//#region src/vault/vault.d.ts
-declare class Vault {
-  private readonly workos;
-  private cryptoProvider;
-  constructor(workos: WorkOS);
-  private decode;
-  createObject(options: CreateObjectOptions): Promise<ObjectMetadata>;
-  listObjects(options?: PaginationOptions | undefined): Promise<List<ObjectDigest>>;
-  listObjectVersions(options: ReadObjectOptions): Promise<ObjectVersion[]>;
-  readObject(options: ReadObjectOptions): Promise<VaultObject>;
-  readObjectByName(name: string): Promise<VaultObject>;
-  describeObject(options: ReadObjectOptions): Promise<VaultObject>;
-  updateObject(options: UpdateObjectOptions): Promise<VaultObject>;
-  deleteObject(options: DeleteObjectOptions): Promise<void>;
-  createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair>;
-  decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey>;
-  encrypt(data: string, context: KeyContext, associatedData?: string): Promise<string>;
-  decrypt(encryptedData: string, associatedData?: string): Promise<string>;
-}
-//#endregion
-export { Vault };
-//# sourceMappingURL=vault.d.ts.map

package/lib/vault/vault.js

@@ -1,101 +0,0 @@
-import { decodeUInt32, encodeUInt32 } from "../common/utils/leb128.js";
-import { base64ToUint8Array, uint8ArrayToBase64 } from "../common/utils/base64.js";
-import { deserializeCreateDataKeyResponse, deserializeDecryptDataKeyResponse } from "./serializers/vault-key.serializer.js";
-import { deserializeListObjects, deserializeObject, deserializeObjectMetadata, desrializeListObjectVersions, serializeCreateObjectEntity, serializeUpdateObjectEntity } from "./serializers/vault-object.serializer.js";
-
-//#region src/vault/vault.ts
-var Vault = class {
-	cryptoProvider;
-	constructor(workos) {
-		this.workos = workos;
-		this.cryptoProvider = workos.getCryptoProvider();
-	}
-	decode(payload) {
-		const inputData = base64ToUint8Array(payload);
-		const iv = new Uint8Array(inputData.subarray(0, 12));
-		const tag = new Uint8Array(inputData.subarray(12, 28));
-		const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);
-		return {
-			iv,
-			tag,
-			keys: uint8ArrayToBase64(inputData.subarray(nextIndex, nextIndex + keyLen)),
-			ciphertext: new Uint8Array(inputData.subarray(nextIndex + keyLen))
-		};
-	}
-	async createObject(options) {
-		const { data } = await this.workos.post(`/vault/v1/kv`, serializeCreateObjectEntity(options));
-		return deserializeObjectMetadata(data);
-	}
-	async listObjects(options) {
-		const url = new URL("/vault/v1/kv", this.workos.baseURL);
-		if (options?.after) url.searchParams.set("after", options.after);
-		if (options?.limit) url.searchParams.set("limit", options.limit.toString());
-		const { data } = await this.workos.get(url.toString());
-		return deserializeListObjects(data);
-	}
-	async listObjectVersions(options) {
-		const { data } = await this.workos.get(`/vault/v1/kv/${encodeURIComponent(options.id)}/versions`);
-		return desrializeListObjectVersions(data);
-	}
-	async readObject(options) {
-		const { data } = await this.workos.get(`/vault/v1/kv/${encodeURIComponent(options.id)}`);
-		return deserializeObject(data);
-	}
-	async readObjectByName(name) {
-		const { data } = await this.workos.get(`/vault/v1/kv/name/${encodeURIComponent(name)}`);
-		return deserializeObject(data);
-	}
-	async describeObject(options) {
-		const { data } = await this.workos.get(`/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`);
-		return deserializeObject(data);
-	}
-	async updateObject(options) {
-		const { data } = await this.workos.put(`/vault/v1/kv/${encodeURIComponent(options.id)}`, serializeUpdateObjectEntity(options));
-		return deserializeObject(data);
-	}
-	async deleteObject(options) {
-		return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);
-	}
-	async createDataKey(options) {
-		const { data } = await this.workos.post(`/vault/v1/keys/data-key`, options);
-		return deserializeCreateDataKeyResponse(data);
-	}
-	async decryptDataKey(options) {
-		const { data } = await this.workos.post(`/vault/v1/keys/decrypt`, options);
-		return deserializeDecryptDataKeyResponse(data);
-	}
-	async encrypt(data, context, associatedData) {
-		const keyPair = await this.createDataKey({ context });
-		const encoder = new TextEncoder();
-		const key = base64ToUint8Array(keyPair.dataKey.key);
-		const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);
-		const prefixLenBuffer = encodeUInt32(keyBlob.length);
-		const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
-		const iv = this.cryptoProvider.randomBytes(12);
-		const { ciphertext, iv: resultIv, tag } = await this.cryptoProvider.encrypt(encoder.encode(data), key, iv, aadBuffer);
-		const resultArray = new Uint8Array(resultIv.length + tag.length + prefixLenBuffer.length + keyBlob.length + ciphertext.length);
-		let offset = 0;
-		resultArray.set(resultIv, offset);
-		offset += resultIv.length;
-		resultArray.set(tag, offset);
-		offset += tag.length;
-		resultArray.set(new Uint8Array(prefixLenBuffer), offset);
-		offset += prefixLenBuffer.length;
-		resultArray.set(keyBlob, offset);
-		offset += keyBlob.length;
-		resultArray.set(ciphertext, offset);
-		return uint8ArrayToBase64(resultArray);
-	}
-	async decrypt(encryptedData, associatedData) {
-		const decoded = this.decode(encryptedData);
-		const key = base64ToUint8Array((await this.decryptDataKey({ keys: decoded.keys })).key);
-		const encoder = new TextEncoder();
-		const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
-		const decrypted = await this.cryptoProvider.decrypt(decoded.ciphertext, key, decoded.iv, decoded.tag, aadBuffer);
-		return new TextDecoder().decode(decrypted);
-	}
-};
-
-//#endregion
-export { Vault };
-//# sourceMappingURL=vault.js.map

package/lib/vault/vault.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault.js","names":["workos: WorkOS"],"sources":["../../src/vault/vault.ts"],"sourcesContent":["import { decodeUInt32, encodeUInt32 } from '../common/utils/leb128';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { List, ListResponse } from '../common/interfaces';\nimport { PaginationOptions } from '../index.worker';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../common/utils/base64';\nimport type { WorkOS } from '../workos';\nimport {\n  CreateDataKeyOptions,\n  CreateDataKeyResponse,\n  CreateObjectOptions,\n  DataKey,\n  DataKeyPair,\n  DecryptDataKeyOptions,\n  DecryptDataKeyResponse,\n  DeleteObjectOptions,\n  KeyContext,\n  ListObjectVersionsResponse,\n  ObjectDigest,\n  ObjectDigestResponse,\n  ObjectMetadata,\n  ObjectVersion,\n  ReadObjectMetadataResponse,\n  ReadObjectOptions,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  VaultObject,\n} from './interfaces';\nimport {\n  deserializeCreateDataKeyResponse,\n  deserializeDecryptDataKeyResponse,\n} from './serializers/vault-key.serializer';\nimport {\n  deserializeListObjects,\n  deserializeObject,\n  deserializeObjectMetadata,\n  desrializeListObjectVersions,\n  serializeCreateObjectEntity,\n  serializeUpdateObjectEntity,\n} from './serializers/vault-object.serializer';\n\ninterface Decoded {\n  iv: Uint8Array;\n  tag: Uint8Array;\n  keys: string;\n  ciphertext: Uint8Array;\n}\n\nexport class Vault {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(private readonly workos: WorkOS) {\n    this.cryptoProvider = workos.getCryptoProvider();\n  }\n\n  private decode(payload: string): Decoded {\n    const inputData = base64ToUint8Array(payload);\n    // Use 12 bytes for IV (standard for AES-GCM)\n    const iv = new Uint8Array(inputData.subarray(0, 12));\n    const tag = new Uint8Array(inputData.subarray(12, 28));\n    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);\n\n    // Use subarray instead of slice and convert directly to base64\n    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);\n    const keys = uint8ArrayToBase64(keysBuffer);\n\n    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));\n\n    return {\n      iv,\n      tag,\n      keys,\n      ciphertext,\n    };\n  }\n\n  async createObject(options: CreateObjectOptions): Promise<ObjectMetadata> {\n    const { data } = await this.workos.post<ReadObjectMetadataResponse>(\n      `/vault/v1/kv`,\n      serializeCreateObjectEntity(options),\n    );\n    return deserializeObjectMetadata(data);\n  }\n\n  async listObjects(\n    options?: PaginationOptions | undefined,\n  ): Promise<List<ObjectDigest>> {\n    const url = new URL('/vault/v1/kv', this.workos.baseURL);\n    if (options?.after) {\n      url.searchParams.set('after', options.after);\n    }\n    if (options?.limit) {\n      url.searchParams.set('limit', options.limit.toString());\n    }\n\n    const { data } = await this.workos.get<ListResponse<ObjectDigestResponse>>(\n      url.toString(),\n    );\n    return deserializeListObjects(data);\n  }\n\n  async listObjectVersions(\n    options: ReadObjectOptions,\n  ): Promise<ObjectVersion[]> {\n    const { data } = await this.workos.get<ListObjectVersionsResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`,\n    );\n    return desrializeListObjectVersions(data);\n  }\n\n  async readObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async readObjectByName(name: string): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/name/${encodeURIComponent(name)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async describeObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`,\n    );\n    return deserializeObject(data);\n  }\n\n  async updateObject(options: UpdateObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.put<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n      serializeUpdateObjectEntity(options),\n    );\n    return deserializeObject(data);\n  }\n\n  async deleteObject(options: DeleteObjectOptions): Promise<void> {\n    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);\n  }\n\n  async createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair> {\n    const { data } = await this.workos.post<CreateDataKeyResponse>(\n      `/vault/v1/keys/data-key`,\n      options,\n    );\n    return deserializeCreateDataKeyResponse(data);\n  }\n\n  async decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey> {\n    const { data } = await this.workos.post<DecryptDataKeyResponse>(\n      `/vault/v1/keys/decrypt`,\n      options,\n    );\n    return deserializeDecryptDataKeyResponse(data);\n  }\n\n  async encrypt(\n    data: string,\n    context: KeyContext,\n    associatedData?: string,\n  ): Promise<string> {\n    const keyPair = await this.createDataKey({\n      context,\n    });\n\n    // Convert base64 key to Uint8Array\n    const encoder = new TextEncoder();\n\n    // Use our cross-runtime base64 utility\n    const key = base64ToUint8Array(keyPair.dataKey.key);\n    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);\n\n    const prefixLenBuffer = encodeUInt32(keyBlob.length);\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    // Use a 12-byte IV for AES-GCM (industry standard)\n    const iv = this.cryptoProvider.randomBytes(12);\n\n    const {\n      ciphertext,\n      iv: resultIv,\n      tag,\n    } = await this.cryptoProvider.encrypt(\n      encoder.encode(data),\n      key,\n      iv,\n      aadBuffer,\n    );\n\n    // Concatenate all parts into a single array\n    const resultArray = new Uint8Array(\n      resultIv.length +\n        tag.length +\n        prefixLenBuffer.length +\n        keyBlob.length +\n        ciphertext.length,\n    );\n\n    let offset = 0;\n    resultArray.set(resultIv, offset);\n    offset += resultIv.length;\n\n    resultArray.set(tag, offset);\n    offset += tag.length;\n\n    resultArray.set(new Uint8Array(prefixLenBuffer), offset);\n    offset += prefixLenBuffer.length;\n\n    resultArray.set(keyBlob, offset);\n    offset += keyBlob.length;\n\n    resultArray.set(ciphertext, offset);\n\n    // Convert to base64 using our cross-runtime utility\n    return uint8ArrayToBase64(resultArray);\n  }\n\n  async decrypt(\n    encryptedData: string,\n    associatedData?: string,\n  ): Promise<string> {\n    const decoded = this.decode(encryptedData);\n    const dataKey = await this.decryptDataKey({ keys: decoded.keys });\n\n    // Convert base64 key to Uint8Array using our cross-runtime utility\n    const key = base64ToUint8Array(dataKey.key);\n\n    const encoder = new TextEncoder();\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    const decrypted = await this.cryptoProvider.decrypt(\n      decoded.ciphertext,\n      key,\n      decoded.iv,\n      decoded.tag,\n      aadBuffer,\n    );\n\n    return new TextDecoder().decode(decrypted);\n  }\n}\n"],"mappings":";;;;;;AA+CA,IAAa,QAAb,MAAmB;CACjB,AAAQ;CAER,YAAY,AAAiBA,QAAgB;EAAhB;AAC3B,OAAK,iBAAiB,OAAO,mBAAmB;;CAGlD,AAAQ,OAAO,SAA0B;EACvC,MAAM,YAAY,mBAAmB,QAAQ;EAE7C,MAAM,KAAK,IAAI,WAAW,UAAU,SAAS,GAAG,GAAG,CAAC;EACpD,MAAM,MAAM,IAAI,WAAW,UAAU,SAAS,IAAI,GAAG,CAAC;EACtD,MAAM,EAAE,OAAO,QAAQ,cAAc,aAAa,WAAW,GAAG;AAQhE,SAAO;GACL;GACA;GACA,MAPW,mBADM,UAAU,SAAS,WAAW,YAAY,OAAO,CACzB;GAQzC,YANiB,IAAI,WAAW,UAAU,SAAS,YAAY,OAAO,CAAC;GAOxE;;CAGH,MAAM,aAAa,SAAuD;EACxE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,gBACA,4BAA4B,QAAQ,CACrC;AACD,SAAO,0BAA0B,KAAK;;CAGxC,MAAM,YACJ,SAC6B;EAC7B,MAAM,MAAM,IAAI,IAAI,gBAAgB,KAAK,OAAO,QAAQ;AACxD,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM;AAE9C,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM,UAAU,CAAC;EAGzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,IAAI,UAAU,CACf;AACD,SAAO,uBAAuB,KAAK;;CAGrC,MAAM,mBACJ,SAC0B;EAC1B,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAO,6BAA6B,KAAK;;CAG3C,MAAM,WAAW,SAAkD;EACjE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,GAC/C;AACD,SAAO,kBAAkB,KAAK;;CAGhC,MAAM,iBAAiB,MAAoC;EACzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,qBAAqB,mBAAmB,KAAK,GAC9C;AACD,SAAO,kBAAkB,KAAK;;CAGhC,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAO,kBAAkB,KAAK;;CAGhC,MAAM,aAAa,SAAoD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,IAC9C,4BAA4B,QAAQ,CACrC;AACD,SAAO,kBAAkB,KAAK;;CAGhC,MAAM,aAAa,SAA6C;AAC9D,SAAO,KAAK,OAAO,OAAO,gBAAgB,mBAAmB,QAAQ,GAAG,GAAG;;CAG7E,MAAM,cAAc,SAAqD;EACvE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,2BACA,QACD;AACD,SAAO,iCAAiC,KAAK;;CAG/C,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,0BACA,QACD;AACD,SAAO,kCAAkC,KAAK;;CAGhD,MAAM,QACJ,MACA,SACA,gBACiB;EACjB,MAAM,UAAU,MAAM,KAAK,cAAc,EACvC,SACD,CAAC;EAGF,MAAM,UAAU,IAAI,aAAa;EAGjC,MAAM,MAAM,mBAAmB,QAAQ,QAAQ,IAAI;EACnD,MAAM,UAAU,mBAAmB,QAAQ,cAAc;EAEzD,MAAM,kBAAkB,aAAa,QAAQ,OAAO;EACpD,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAGJ,MAAM,KAAK,KAAK,eAAe,YAAY,GAAG;EAE9C,MAAM,EACJ,YACA,IAAI,UACJ,QACE,MAAM,KAAK,eAAe,QAC5B,QAAQ,OAAO,KAAK,EACpB,KACA,IACA,UACD;EAGD,MAAM,cAAc,IAAI,WACtB,SAAS,SACP,IAAI,SACJ,gBAAgB,SAChB,QAAQ,SACR,WAAW,OACd;EAED,IAAI,SAAS;AACb,cAAY,IAAI,UAAU,OAAO;AACjC,YAAU,SAAS;AAEnB,cAAY,IAAI,KAAK,OAAO;AAC5B,YAAU,IAAI;AAEd,cAAY,IAAI,IAAI,WAAW,gBAAgB,EAAE,OAAO;AACxD,YAAU,gBAAgB;AAE1B,cAAY,IAAI,SAAS,OAAO;AAChC,YAAU,QAAQ;AAElB,cAAY,IAAI,YAAY,OAAO;AAGnC,SAAO,mBAAmB,YAAY;;CAGxC,MAAM,QACJ,eACA,gBACiB;EACjB,MAAM,UAAU,KAAK,OAAO,cAAc;EAI1C,MAAM,MAAM,oBAHI,MAAM,KAAK,eAAe,EAAE,MAAM,QAAQ,MAAM,CAAC,EAG1B,IAAI;EAE3C,MAAM,UAAU,IAAI,aAAa;EACjC,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAEJ,MAAM,YAAY,MAAM,KAAK,eAAe,QAC1C,QAAQ,YACR,KACA,QAAQ,IACR,QAAQ,KACR,UACD;AAED,SAAO,IAAI,aAAa,CAAC,OAAO,UAAU"}

package/lib/vault-BR8gbCEq.cjs

@@ -1,106 +0,0 @@
-const require_leb128 = require('./leb128-DvqSoSLE.cjs');
-const require_base64 = require('./base64-DtRxstGt.cjs');
-const require_vault_key_serializer = require('./vault-key.serializer-D5WVcdFV.cjs');
-const require_vault_object_serializer = require('./vault-object.serializer-Cx7rAuca.cjs');
-
-//#region src/vault/vault.ts
-var Vault = class {
-	cryptoProvider;
-	constructor(workos) {
-		this.workos = workos;
-		this.cryptoProvider = workos.getCryptoProvider();
-	}
-	decode(payload) {
-		const inputData = require_base64.base64ToUint8Array(payload);
-		const iv = new Uint8Array(inputData.subarray(0, 12));
-		const tag = new Uint8Array(inputData.subarray(12, 28));
-		const { value: keyLen, nextIndex } = require_leb128.decodeUInt32(inputData, 28);
-		return {
-			iv,
-			tag,
-			keys: require_base64.uint8ArrayToBase64(inputData.subarray(nextIndex, nextIndex + keyLen)),
-			ciphertext: new Uint8Array(inputData.subarray(nextIndex + keyLen))
-		};
-	}
-	async createObject(options) {
-		const { data } = await this.workos.post(`/vault/v1/kv`, require_vault_object_serializer.serializeCreateObjectEntity(options));
-		return require_vault_object_serializer.deserializeObjectMetadata(data);
-	}
-	async listObjects(options) {
-		const url = new URL("/vault/v1/kv", this.workos.baseURL);
-		if (options?.after) url.searchParams.set("after", options.after);
-		if (options?.limit) url.searchParams.set("limit", options.limit.toString());
-		const { data } = await this.workos.get(url.toString());
-		return require_vault_object_serializer.deserializeListObjects(data);
-	}
-	async listObjectVersions(options) {
-		const { data } = await this.workos.get(`/vault/v1/kv/${encodeURIComponent(options.id)}/versions`);
-		return require_vault_object_serializer.desrializeListObjectVersions(data);
-	}
-	async readObject(options) {
-		const { data } = await this.workos.get(`/vault/v1/kv/${encodeURIComponent(options.id)}`);
-		return require_vault_object_serializer.deserializeObject(data);
-	}
-	async readObjectByName(name) {
-		const { data } = await this.workos.get(`/vault/v1/kv/name/${encodeURIComponent(name)}`);
-		return require_vault_object_serializer.deserializeObject(data);
-	}
-	async describeObject(options) {
-		const { data } = await this.workos.get(`/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`);
-		return require_vault_object_serializer.deserializeObject(data);
-	}
-	async updateObject(options) {
-		const { data } = await this.workos.put(`/vault/v1/kv/${encodeURIComponent(options.id)}`, require_vault_object_serializer.serializeUpdateObjectEntity(options));
-		return require_vault_object_serializer.deserializeObject(data);
-	}
-	async deleteObject(options) {
-		return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);
-	}
-	async createDataKey(options) {
-		const { data } = await this.workos.post(`/vault/v1/keys/data-key`, options);
-		return require_vault_key_serializer.deserializeCreateDataKeyResponse(data);
-	}
-	async decryptDataKey(options) {
-		const { data } = await this.workos.post(`/vault/v1/keys/decrypt`, options);
-		return require_vault_key_serializer.deserializeDecryptDataKeyResponse(data);
-	}
-	async encrypt(data, context, associatedData) {
-		const keyPair = await this.createDataKey({ context });
-		const encoder = new TextEncoder();
-		const key = require_base64.base64ToUint8Array(keyPair.dataKey.key);
-		const keyBlob = require_base64.base64ToUint8Array(keyPair.encryptedKeys);
-		const prefixLenBuffer = require_leb128.encodeUInt32(keyBlob.length);
-		const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
-		const iv = this.cryptoProvider.randomBytes(12);
-		const { ciphertext, iv: resultIv, tag } = await this.cryptoProvider.encrypt(encoder.encode(data), key, iv, aadBuffer);
-		const resultArray = new Uint8Array(resultIv.length + tag.length + prefixLenBuffer.length + keyBlob.length + ciphertext.length);
-		let offset = 0;
-		resultArray.set(resultIv, offset);
-		offset += resultIv.length;
-		resultArray.set(tag, offset);
-		offset += tag.length;
-		resultArray.set(new Uint8Array(prefixLenBuffer), offset);
-		offset += prefixLenBuffer.length;
-		resultArray.set(keyBlob, offset);
-		offset += keyBlob.length;
-		resultArray.set(ciphertext, offset);
-		return require_base64.uint8ArrayToBase64(resultArray);
-	}
-	async decrypt(encryptedData, associatedData) {
-		const decoded = this.decode(encryptedData);
-		const key = require_base64.base64ToUint8Array((await this.decryptDataKey({ keys: decoded.keys })).key);
-		const encoder = new TextEncoder();
-		const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
-		const decrypted = await this.cryptoProvider.decrypt(decoded.ciphertext, key, decoded.iv, decoded.tag, aadBuffer);
-		return new TextDecoder().decode(decrypted);
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'Vault', {
-  enumerable: true,
-  get: function () {
-    return Vault;
-  }
-});
-//# sourceMappingURL=vault-BR8gbCEq.cjs.map

package/lib/vault-BR8gbCEq.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-BR8gbCEq.cjs","names":["workos: WorkOS","base64ToUint8Array","decodeUInt32","uint8ArrayToBase64","serializeCreateObjectEntity","deserializeObjectMetadata","deserializeListObjects","desrializeListObjectVersions","deserializeObject","serializeUpdateObjectEntity","deserializeCreateDataKeyResponse","deserializeDecryptDataKeyResponse","encodeUInt32"],"sources":["../src/vault/vault.ts"],"sourcesContent":["import { decodeUInt32, encodeUInt32 } from '../common/utils/leb128';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { List, ListResponse } from '../common/interfaces';\nimport { PaginationOptions } from '../index.worker';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../common/utils/base64';\nimport type { WorkOS } from '../workos';\nimport {\n  CreateDataKeyOptions,\n  CreateDataKeyResponse,\n  CreateObjectOptions,\n  DataKey,\n  DataKeyPair,\n  DecryptDataKeyOptions,\n  DecryptDataKeyResponse,\n  DeleteObjectOptions,\n  KeyContext,\n  ListObjectVersionsResponse,\n  ObjectDigest,\n  ObjectDigestResponse,\n  ObjectMetadata,\n  ObjectVersion,\n  ReadObjectMetadataResponse,\n  ReadObjectOptions,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  VaultObject,\n} from './interfaces';\nimport {\n  deserializeCreateDataKeyResponse,\n  deserializeDecryptDataKeyResponse,\n} from './serializers/vault-key.serializer';\nimport {\n  deserializeListObjects,\n  deserializeObject,\n  deserializeObjectMetadata,\n  desrializeListObjectVersions,\n  serializeCreateObjectEntity,\n  serializeUpdateObjectEntity,\n} from './serializers/vault-object.serializer';\n\ninterface Decoded {\n  iv: Uint8Array;\n  tag: Uint8Array;\n  keys: string;\n  ciphertext: Uint8Array;\n}\n\nexport class Vault {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(private readonly workos: WorkOS) {\n    this.cryptoProvider = workos.getCryptoProvider();\n  }\n\n  private decode(payload: string): Decoded {\n    const inputData = base64ToUint8Array(payload);\n    // Use 12 bytes for IV (standard for AES-GCM)\n    const iv = new Uint8Array(inputData.subarray(0, 12));\n    const tag = new Uint8Array(inputData.subarray(12, 28));\n    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);\n\n    // Use subarray instead of slice and convert directly to base64\n    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);\n    const keys = uint8ArrayToBase64(keysBuffer);\n\n    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));\n\n    return {\n      iv,\n      tag,\n      keys,\n      ciphertext,\n    };\n  }\n\n  async createObject(options: CreateObjectOptions): Promise<ObjectMetadata> {\n    const { data } = await this.workos.post<ReadObjectMetadataResponse>(\n      `/vault/v1/kv`,\n      serializeCreateObjectEntity(options),\n    );\n    return deserializeObjectMetadata(data);\n  }\n\n  async listObjects(\n    options?: PaginationOptions | undefined,\n  ): Promise<List<ObjectDigest>> {\n    const url = new URL('/vault/v1/kv', this.workos.baseURL);\n    if (options?.after) {\n      url.searchParams.set('after', options.after);\n    }\n    if (options?.limit) {\n      url.searchParams.set('limit', options.limit.toString());\n    }\n\n    const { data } = await this.workos.get<ListResponse<ObjectDigestResponse>>(\n      url.toString(),\n    );\n    return deserializeListObjects(data);\n  }\n\n  async listObjectVersions(\n    options: ReadObjectOptions,\n  ): Promise<ObjectVersion[]> {\n    const { data } = await this.workos.get<ListObjectVersionsResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`,\n    );\n    return desrializeListObjectVersions(data);\n  }\n\n  async readObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async readObjectByName(name: string): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/name/${encodeURIComponent(name)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async describeObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`,\n    );\n    return deserializeObject(data);\n  }\n\n  async updateObject(options: UpdateObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.put<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n      serializeUpdateObjectEntity(options),\n    );\n    return deserializeObject(data);\n  }\n\n  async deleteObject(options: DeleteObjectOptions): Promise<void> {\n    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);\n  }\n\n  async createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair> {\n    const { data } = await this.workos.post<CreateDataKeyResponse>(\n      `/vault/v1/keys/data-key`,\n      options,\n    );\n    return deserializeCreateDataKeyResponse(data);\n  }\n\n  async decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey> {\n    const { data } = await this.workos.post<DecryptDataKeyResponse>(\n      `/vault/v1/keys/decrypt`,\n      options,\n    );\n    return deserializeDecryptDataKeyResponse(data);\n  }\n\n  async encrypt(\n    data: string,\n    context: KeyContext,\n    associatedData?: string,\n  ): Promise<string> {\n    const keyPair = await this.createDataKey({\n      context,\n    });\n\n    // Convert base64 key to Uint8Array\n    const encoder = new TextEncoder();\n\n    // Use our cross-runtime base64 utility\n    const key = base64ToUint8Array(keyPair.dataKey.key);\n    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);\n\n    const prefixLenBuffer = encodeUInt32(keyBlob.length);\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    // Use a 12-byte IV for AES-GCM (industry standard)\n    const iv = this.cryptoProvider.randomBytes(12);\n\n    const {\n      ciphertext,\n      iv: resultIv,\n      tag,\n    } = await this.cryptoProvider.encrypt(\n      encoder.encode(data),\n      key,\n      iv,\n      aadBuffer,\n    );\n\n    // Concatenate all parts into a single array\n    const resultArray = new Uint8Array(\n      resultIv.length +\n        tag.length +\n        prefixLenBuffer.length +\n        keyBlob.length +\n        ciphertext.length,\n    );\n\n    let offset = 0;\n    resultArray.set(resultIv, offset);\n    offset += resultIv.length;\n\n    resultArray.set(tag, offset);\n    offset += tag.length;\n\n    resultArray.set(new Uint8Array(prefixLenBuffer), offset);\n    offset += prefixLenBuffer.length;\n\n    resultArray.set(keyBlob, offset);\n    offset += keyBlob.length;\n\n    resultArray.set(ciphertext, offset);\n\n    // Convert to base64 using our cross-runtime utility\n    return uint8ArrayToBase64(resultArray);\n  }\n\n  async decrypt(\n    encryptedData: string,\n    associatedData?: string,\n  ): Promise<string> {\n    const decoded = this.decode(encryptedData);\n    const dataKey = await this.decryptDataKey({ keys: decoded.keys });\n\n    // Convert base64 key to Uint8Array using our cross-runtime utility\n    const key = base64ToUint8Array(dataKey.key);\n\n    const encoder = new TextEncoder();\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    const decrypted = await this.cryptoProvider.decrypt(\n      decoded.ciphertext,\n      key,\n      decoded.iv,\n      decoded.tag,\n      aadBuffer,\n    );\n\n    return new TextDecoder().decode(decrypted);\n  }\n}\n"],"mappings":";;;;;;AA+CA,IAAa,QAAb,MAAmB;CACjB,AAAQ;CAER,YAAY,AAAiBA,QAAgB;EAAhB;AAC3B,OAAK,iBAAiB,OAAO,mBAAmB;;CAGlD,AAAQ,OAAO,SAA0B;EACvC,MAAM,YAAYC,kCAAmB,QAAQ;EAE7C,MAAM,KAAK,IAAI,WAAW,UAAU,SAAS,GAAG,GAAG,CAAC;EACpD,MAAM,MAAM,IAAI,WAAW,UAAU,SAAS,IAAI,GAAG,CAAC;EACtD,MAAM,EAAE,OAAO,QAAQ,cAAcC,4BAAa,WAAW,GAAG;AAQhE,SAAO;GACL;GACA;GACA,MAPWC,kCADM,UAAU,SAAS,WAAW,YAAY,OAAO,CACzB;GAQzC,YANiB,IAAI,WAAW,UAAU,SAAS,YAAY,OAAO,CAAC;GAOxE;;CAGH,MAAM,aAAa,SAAuD;EACxE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,gBACAC,4DAA4B,QAAQ,CACrC;AACD,SAAOC,0DAA0B,KAAK;;CAGxC,MAAM,YACJ,SAC6B;EAC7B,MAAM,MAAM,IAAI,IAAI,gBAAgB,KAAK,OAAO,QAAQ;AACxD,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM;AAE9C,MAAI,SAAS,MACX,KAAI,aAAa,IAAI,SAAS,QAAQ,MAAM,UAAU,CAAC;EAGzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,IAAI,UAAU,CACf;AACD,SAAOC,uDAAuB,KAAK;;CAGrC,MAAM,mBACJ,SAC0B;EAC1B,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAOC,6DAA6B,KAAK;;CAG3C,MAAM,WAAW,SAAkD;EACjE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,GAC/C;AACD,SAAOC,kDAAkB,KAAK;;CAGhC,MAAM,iBAAiB,MAAoC;EACzD,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,qBAAqB,mBAAmB,KAAK,GAC9C;AACD,SAAOA,kDAAkB,KAAK;;CAGhC,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,CAAC,WAChD;AACD,SAAOA,kDAAkB,KAAK;;CAGhC,MAAM,aAAa,SAAoD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,IACjC,gBAAgB,mBAAmB,QAAQ,GAAG,IAC9CC,4DAA4B,QAAQ,CACrC;AACD,SAAOD,kDAAkB,KAAK;;CAGhC,MAAM,aAAa,SAA6C;AAC9D,SAAO,KAAK,OAAO,OAAO,gBAAgB,mBAAmB,QAAQ,GAAG,GAAG;;CAG7E,MAAM,cAAc,SAAqD;EACvE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,2BACA,QACD;AACD,SAAOE,8DAAiC,KAAK;;CAG/C,MAAM,eAAe,SAAkD;EACrE,MAAM,EAAE,SAAS,MAAM,KAAK,OAAO,KACjC,0BACA,QACD;AACD,SAAOC,+DAAkC,KAAK;;CAGhD,MAAM,QACJ,MACA,SACA,gBACiB;EACjB,MAAM,UAAU,MAAM,KAAK,cAAc,EACvC,SACD,CAAC;EAGF,MAAM,UAAU,IAAI,aAAa;EAGjC,MAAM,MAAMV,kCAAmB,QAAQ,QAAQ,IAAI;EACnD,MAAM,UAAUA,kCAAmB,QAAQ,cAAc;EAEzD,MAAM,kBAAkBW,4BAAa,QAAQ,OAAO;EACpD,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAGJ,MAAM,KAAK,KAAK,eAAe,YAAY,GAAG;EAE9C,MAAM,EACJ,YACA,IAAI,UACJ,QACE,MAAM,KAAK,eAAe,QAC5B,QAAQ,OAAO,KAAK,EACpB,KACA,IACA,UACD;EAGD,MAAM,cAAc,IAAI,WACtB,SAAS,SACP,IAAI,SACJ,gBAAgB,SAChB,QAAQ,SACR,WAAW,OACd;EAED,IAAI,SAAS;AACb,cAAY,IAAI,UAAU,OAAO;AACjC,YAAU,SAAS;AAEnB,cAAY,IAAI,KAAK,OAAO;AAC5B,YAAU,IAAI;AAEd,cAAY,IAAI,IAAI,WAAW,gBAAgB,EAAE,OAAO;AACxD,YAAU,gBAAgB;AAE1B,cAAY,IAAI,SAAS,OAAO;AAChC,YAAU,QAAQ;AAElB,cAAY,IAAI,YAAY,OAAO;AAGnC,SAAOT,kCAAmB,YAAY;;CAGxC,MAAM,QACJ,eACA,gBACiB;EACjB,MAAM,UAAU,KAAK,OAAO,cAAc;EAI1C,MAAM,MAAMF,mCAHI,MAAM,KAAK,eAAe,EAAE,MAAM,QAAQ,MAAM,CAAC,EAG1B,IAAI;EAE3C,MAAM,UAAU,IAAI,aAAa;EACjC,MAAM,YAAY,iBACd,QAAQ,OAAO,eAAe,GAC9B;EAEJ,MAAM,YAAY,MAAM,KAAK,eAAe,QAC1C,QAAQ,YACR,KACA,QAAQ,IACR,QAAQ,KACR,UACD;AAED,SAAO,IAAI,aAAa,CAAC,OAAO,UAAU"}

package/lib/vault-key.serializer-D5WVcdFV.cjs

@@ -1,29 +0,0 @@
-
-//#region src/vault/serializers/vault-key.serializer.ts
-const deserializeCreateDataKeyResponse = (key) => ({
-	context: key.context,
-	dataKey: {
-		key: key.data_key,
-		id: key.id
-	},
-	encryptedKeys: key.encrypted_keys
-});
-const deserializeDecryptDataKeyResponse = (key) => ({
-	key: key.data_key,
-	id: key.id
-});
-
-//#endregion
-Object.defineProperty(exports, 'deserializeCreateDataKeyResponse', {
-  enumerable: true,
-  get: function () {
-    return deserializeCreateDataKeyResponse;
-  }
-});
-Object.defineProperty(exports, 'deserializeDecryptDataKeyResponse', {
-  enumerable: true,
-  get: function () {
-    return deserializeDecryptDataKeyResponse;
-  }
-});
-//# sourceMappingURL=vault-key.serializer-D5WVcdFV.cjs.map

package/lib/vault-key.serializer-D5WVcdFV.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-key.serializer-D5WVcdFV.cjs","names":[],"sources":["../src/vault/serializers/vault-key.serializer.ts"],"sourcesContent":["import { CreateDataKeyResponse } from '../interfaces/key/create-data-key.interface';\nimport { DecryptDataKeyResponse } from '../interfaces/key/decrypt-data-key.interface';\nimport { DataKey, DataKeyPair } from '../interfaces/key.interface';\n\nexport const deserializeCreateDataKeyResponse = (\n  key: CreateDataKeyResponse,\n): DataKeyPair => ({\n  context: key.context,\n  dataKey: {\n    key: key.data_key,\n    id: key.id,\n  },\n  encryptedKeys: key.encrypted_keys,\n});\n\nexport const deserializeDecryptDataKeyResponse = (\n  key: DecryptDataKeyResponse,\n): DataKey => ({\n  key: key.data_key,\n  id: key.id,\n});\n"],"mappings":";;AAIA,MAAa,oCACX,SACiB;CACjB,SAAS,IAAI;CACb,SAAS;EACP,KAAK,IAAI;EACT,IAAI,IAAI;EACT;CACD,eAAe,IAAI;CACpB;AAED,MAAa,qCACX,SACa;CACb,KAAK,IAAI;CACT,IAAI,IAAI;CACT"}

package/lib/vault-object.serializer-Cx7rAuca.cjs

@@ -1,84 +0,0 @@
-
-//#region src/vault/serializers/vault-object.serializer.ts
-const deserializeObjectMetadata = (metadata) => ({
-	context: metadata.context,
-	environmentId: metadata.environment_id,
-	id: metadata.id,
-	keyId: metadata.key_id,
-	updatedAt: new Date(Date.parse(metadata.updated_at)),
-	updatedBy: metadata.updated_by,
-	versionId: metadata.version_id
-});
-const deserializeObject = (object) => ({
-	id: object.id,
-	name: object.name,
-	...object.value !== void 0 && { value: object.value },
-	metadata: deserializeObjectMetadata(object.metadata)
-});
-const deserializeObjectDigest = (digest) => ({
-	id: digest.id,
-	name: digest.name,
-	updatedAt: new Date(Date.parse(digest.updated_at))
-});
-const deserializeListObjects = (list) => ({
-	object: "list",
-	data: list.data.map(deserializeObjectDigest),
-	listMetadata: {
-		...list.list_metadata.after !== void 0 && { after: list.list_metadata.after },
-		...list.list_metadata.before !== void 0 && { before: list.list_metadata.before }
-	}
-});
-const desrializeListObjectVersions = (list) => list.data.map(deserializeObjectVersion);
-const deserializeObjectVersion = (version) => ({
-	createdAt: new Date(Date.parse(version.created_at)),
-	currentVersion: version.current_version,
-	id: version.id
-});
-const serializeCreateObjectEntity = (options) => ({
-	name: options.name,
-	value: options.value,
-	key_context: options.context
-});
-const serializeUpdateObjectEntity = (options) => ({
-	value: options.value,
-	version_check: options.versionCheck
-});
-
-//#endregion
-Object.defineProperty(exports, 'deserializeListObjects', {
-  enumerable: true,
-  get: function () {
-    return deserializeListObjects;
-  }
-});
-Object.defineProperty(exports, 'deserializeObject', {
-  enumerable: true,
-  get: function () {
-    return deserializeObject;
-  }
-});
-Object.defineProperty(exports, 'deserializeObjectMetadata', {
-  enumerable: true,
-  get: function () {
-    return deserializeObjectMetadata;
-  }
-});
-Object.defineProperty(exports, 'desrializeListObjectVersions', {
-  enumerable: true,
-  get: function () {
-    return desrializeListObjectVersions;
-  }
-});
-Object.defineProperty(exports, 'serializeCreateObjectEntity', {
-  enumerable: true,
-  get: function () {
-    return serializeCreateObjectEntity;
-  }
-});
-Object.defineProperty(exports, 'serializeUpdateObjectEntity', {
-  enumerable: true,
-  get: function () {
-    return serializeUpdateObjectEntity;
-  }
-});
-//# sourceMappingURL=vault-object.serializer-Cx7rAuca.cjs.map

package/lib/vault-object.serializer-Cx7rAuca.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-object.serializer-Cx7rAuca.cjs","names":[],"sources":["../src/vault/serializers/vault-object.serializer.ts"],"sourcesContent":["import { List, ListResponse } from '../../common/interfaces';\nimport {\n  ReadObjectMetadataResponse,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  UpdateObjectEntity,\n  ObjectMetadata,\n  VaultObject,\n  ObjectVersionResponse,\n  ObjectVersion,\n  CreateObjectOptions,\n  CreateObjectEntity,\n  ObjectDigestResponse,\n  ObjectDigest,\n  ListObjectVersionsResponse,\n} from '../interfaces';\n\nexport const deserializeObjectMetadata = (\n  metadata: ReadObjectMetadataResponse,\n): ObjectMetadata => ({\n  context: metadata.context,\n  environmentId: metadata.environment_id,\n  id: metadata.id,\n  keyId: metadata.key_id,\n  updatedAt: new Date(Date.parse(metadata.updated_at)),\n  updatedBy: metadata.updated_by,\n  versionId: metadata.version_id,\n});\n\nexport const deserializeObject = (object: ReadObjectResponse): VaultObject => ({\n  id: object.id,\n  name: object.name,\n  ...(object.value !== undefined && { value: object.value }),\n  metadata: deserializeObjectMetadata(object.metadata),\n});\n\nconst deserializeObjectDigest = (\n  digest: ObjectDigestResponse,\n): ObjectDigest => ({\n  id: digest.id,\n  name: digest.name,\n  updatedAt: new Date(Date.parse(digest.updated_at)),\n});\n\nexport const deserializeListObjects = (\n  list: ListResponse<ObjectDigestResponse>,\n): List<ObjectDigest> => ({\n  object: 'list',\n  data: list.data.map(deserializeObjectDigest),\n  listMetadata: {\n    ...(list.list_metadata.after !== undefined && {\n      after: list.list_metadata.after,\n    }),\n    ...(list.list_metadata.before !== undefined && {\n      before: list.list_metadata.before,\n    }),\n  },\n});\n\nexport const desrializeListObjectVersions = (\n  list: ListObjectVersionsResponse,\n): ObjectVersion[] => list.data.map(deserializeObjectVersion);\n\nconst deserializeObjectVersion = (\n  version: ObjectVersionResponse,\n): ObjectVersion => ({\n  createdAt: new Date(Date.parse(version.created_at)),\n  currentVersion: version.current_version,\n  id: version.id,\n});\n\nexport const serializeCreateObjectEntity = (\n  options: CreateObjectOptions,\n): CreateObjectEntity => ({\n  name: options.name,\n  value: options.value,\n  key_context: options.context,\n});\n\nexport const serializeUpdateObjectEntity = (\n  options: UpdateObjectOptions,\n): UpdateObjectEntity => ({\n  value: options.value,\n  version_check: options.versionCheck,\n});\n"],"mappings":";;AAiBA,MAAa,6BACX,cACoB;CACpB,SAAS,SAAS;CAClB,eAAe,SAAS;CACxB,IAAI,SAAS;CACb,OAAO,SAAS;CAChB,WAAW,IAAI,KAAK,KAAK,MAAM,SAAS,WAAW,CAAC;CACpD,WAAW,SAAS;CACpB,WAAW,SAAS;CACrB;AAED,MAAa,qBAAqB,YAA6C;CAC7E,IAAI,OAAO;CACX,MAAM,OAAO;CACb,GAAI,OAAO,UAAU,UAAa,EAAE,OAAO,OAAO,OAAO;CACzD,UAAU,0BAA0B,OAAO,SAAS;CACrD;AAED,MAAM,2BACJ,YACkB;CAClB,IAAI,OAAO;CACX,MAAM,OAAO;CACb,WAAW,IAAI,KAAK,KAAK,MAAM,OAAO,WAAW,CAAC;CACnD;AAED,MAAa,0BACX,UACwB;CACxB,QAAQ;CACR,MAAM,KAAK,KAAK,IAAI,wBAAwB;CAC5C,cAAc;EACZ,GAAI,KAAK,cAAc,UAAU,UAAa,EAC5C,OAAO,KAAK,cAAc,OAC3B;EACD,GAAI,KAAK,cAAc,WAAW,UAAa,EAC7C,QAAQ,KAAK,cAAc,QAC5B;EACF;CACF;AAED,MAAa,gCACX,SACoB,KAAK,KAAK,IAAI,yBAAyB;AAE7D,MAAM,4BACJ,aACmB;CACnB,WAAW,IAAI,KAAK,KAAK,MAAM,QAAQ,WAAW,CAAC;CACnD,gBAAgB,QAAQ;CACxB,IAAI,QAAQ;CACb;AAED,MAAa,+BACX,aACwB;CACxB,MAAM,QAAQ;CACd,OAAO,QAAQ;CACf,aAAa,QAAQ;CACtB;AAED,MAAa,+BACX,aACwB;CACxB,OAAO,QAAQ;CACf,eAAe,QAAQ;CACxB"}