@zincapp/zn-vault-agent 1.3.0

package/dist/lib/metrics.js

@@ -0,0 +1,273 @@
+// Path: src/lib/metrics.ts
+// Prometheus metrics for zn-vault-agent
+import { metricsLogger as log } from './logger.js';
+// Metric storage
+const counters = new Map();
+const gauges = new Map();
+const histograms = new Map();
+// Metric metadata
+const metricHelp = new Map();
+const metricType = new Map();
+// Default histogram buckets (in seconds)
+const DEFAULT_BUCKETS = [0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10];
+/**
+ * Register a counter metric
+ */
+export function registerCounter(name, help) {
+    if (!counters.has(name)) {
+        counters.set(name, []);
+        metricHelp.set(name, help);
+        metricType.set(name, 'counter');
+    }
+}
+/**
+ * Increment a counter
+ */
+export function incCounter(name, labels = {}, value = 1) {
+    const values = counters.get(name);
+    if (!values) {
+        log.warn({ name }, 'Counter not registered');
+        return;
+    }
+    const labelKey = JSON.stringify(labels);
+    const existing = values.find((v) => JSON.stringify(v.labels) === labelKey);
+    if (existing) {
+        existing.value += value;
+    }
+    else {
+        values.push({ value, labels });
+    }
+}
+/**
+ * Register a gauge metric
+ */
+export function registerGauge(name, help) {
+    if (!gauges.has(name)) {
+        gauges.set(name, []);
+        metricHelp.set(name, help);
+        metricType.set(name, 'gauge');
+    }
+}
+/**
+ * Set a gauge value
+ */
+export function setGauge(name, value, labels = {}) {
+    const values = gauges.get(name);
+    if (!values) {
+        log.warn({ name }, 'Gauge not registered');
+        return;
+    }
+    const labelKey = JSON.stringify(labels);
+    const existing = values.find((v) => JSON.stringify(v.labels) === labelKey);
+    if (existing) {
+        existing.value = value;
+        existing.timestamp = Date.now();
+    }
+    else {
+        values.push({ value, labels, timestamp: Date.now() });
+    }
+}
+/**
+ * Register a histogram metric
+ */
+export function registerHistogram(name, help, buckets = DEFAULT_BUCKETS) {
+    if (!histograms.has(name)) {
+        histograms.set(name, []);
+        metricHelp.set(name, help);
+        metricType.set(name, 'histogram');
+        // Store bucket boundaries in help text for reference
+        metricHelp.set(`${name}_buckets`, buckets.join(','));
+    }
+}
+/**
+ * Observe a histogram value
+ */
+export function observeHistogram(name, value, labels = {}) {
+    const values = histograms.get(name);
+    if (!values) {
+        log.warn({ name }, 'Histogram not registered');
+        return;
+    }
+    const bucketBoundaries = metricHelp.get(`${name}_buckets`)?.split(',').map(Number) || DEFAULT_BUCKETS;
+    const labelKey = JSON.stringify(labels);
+    let existing = values.find((v) => JSON.stringify(v.labels) === labelKey);
+    if (!existing) {
+        existing = {
+            buckets: bucketBoundaries.map((le) => ({ le, count: 0 })),
+            sum: 0,
+            count: 0,
+            labels,
+        };
+        values.push(existing);
+    }
+    // Update buckets
+    for (const bucket of existing.buckets) {
+        if (value <= bucket.le) {
+            bucket.count++;
+        }
+    }
+    existing.sum += value;
+    existing.count++;
+}
+/**
+ * Format labels for Prometheus output
+ */
+function formatLabels(labels) {
+    const entries = Object.entries(labels);
+    if (entries.length === 0)
+        return '';
+    return `{${entries.map(([k, v]) => `${k}="${v}"`).join(',')}}`;
+}
+/**
+ * Export all metrics in Prometheus text format
+ */
+export function exportMetrics() {
+    const lines = [];
+    // Add process metrics
+    lines.push('# HELP process_uptime_seconds Process uptime in seconds');
+    lines.push('# TYPE process_uptime_seconds gauge');
+    lines.push(`process_uptime_seconds ${process.uptime().toFixed(3)}`);
+    lines.push('# HELP process_heap_bytes Process heap memory in bytes');
+    lines.push('# TYPE process_heap_bytes gauge');
+    lines.push(`process_heap_bytes ${process.memoryUsage().heapUsed}`);
+    lines.push('');
+    // Export counters
+    for (const [name, values] of counters) {
+        const help = metricHelp.get(name);
+        if (help)
+            lines.push(`# HELP ${name} ${help}`);
+        lines.push(`# TYPE ${name} counter`);
+        for (const v of values) {
+            lines.push(`${name}${formatLabels(v.labels)} ${v.value}`);
+        }
+        // Add total if no labels
+        if (values.length === 0) {
+            lines.push(`${name} 0`);
+        }
+        lines.push('');
+    }
+    // Export gauges
+    for (const [name, values] of gauges) {
+        const help = metricHelp.get(name);
+        if (help)
+            lines.push(`# HELP ${name} ${help}`);
+        lines.push(`# TYPE ${name} gauge`);
+        for (const v of values) {
+            lines.push(`${name}${formatLabels(v.labels)} ${v.value}`);
+        }
+        if (values.length === 0) {
+            lines.push(`${name} 0`);
+        }
+        lines.push('');
+    }
+    // Export histograms
+    for (const [name, values] of histograms) {
+        const help = metricHelp.get(name);
+        if (help)
+            lines.push(`# HELP ${name} ${help}`);
+        lines.push(`# TYPE ${name} histogram`);
+        for (const v of values) {
+            const labelStr = formatLabels(v.labels);
+            for (const bucket of v.buckets) {
+                const leLabel = v.labels ? { ...v.labels, le: String(bucket.le) } : { le: String(bucket.le) };
+                lines.push(`${name}_bucket${formatLabels(leLabel)} ${bucket.count}`);
+            }
+            const infLabel = v.labels ? { ...v.labels, le: '+Inf' } : { le: '+Inf' };
+            lines.push(`${name}_bucket${formatLabels(infLabel)} ${v.count}`);
+            lines.push(`${name}_sum${labelStr} ${v.sum.toFixed(6)}`);
+            lines.push(`${name}_count${labelStr} ${v.count}`);
+        }
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+/**
+ * Reset all metrics (useful for testing)
+ */
+export function resetMetrics() {
+    for (const values of counters.values()) {
+        values.length = 0;
+    }
+    for (const values of gauges.values()) {
+        values.length = 0;
+    }
+    for (const values of histograms.values()) {
+        values.length = 0;
+    }
+}
+// Register agent-specific metrics
+export function initializeMetrics() {
+    // Counters
+    registerCounter('znvault_agent_sync_total', 'Total certificate sync operations');
+    registerCounter('znvault_agent_sync_failures_total', 'Total failed sync operations');
+    registerCounter('znvault_agent_secret_sync_total', 'Total secret sync operations');
+    registerCounter('znvault_agent_secret_sync_failures_total', 'Total failed secret sync operations');
+    registerCounter('znvault_agent_websocket_reconnects_total', 'Total WebSocket reconnection attempts');
+    registerCounter('znvault_agent_api_requests_total', 'Total API requests made');
+    registerCounter('znvault_agent_update_checks_total', 'Total update checks performed');
+    registerCounter('znvault_agent_updates_total', 'Total update installations');
+    // Gauges
+    registerGauge('znvault_agent_connected', 'WebSocket connection status (1=connected, 0=disconnected)');
+    registerGauge('znvault_agent_certs_tracked', 'Number of certificates being tracked');
+    registerGauge('znvault_agent_secrets_tracked', 'Number of secrets being tracked');
+    registerGauge('znvault_agent_last_sync_timestamp', 'Timestamp of last successful sync');
+    registerGauge('znvault_agent_cert_expiry_days', 'Days until certificate expiry');
+    registerGauge('znvault_agent_version_info', 'Agent version information');
+    // Histograms
+    registerHistogram('znvault_agent_sync_duration_seconds', 'Certificate sync duration in seconds');
+    registerHistogram('znvault_agent_secret_sync_duration_seconds', 'Secret sync duration in seconds');
+    registerHistogram('znvault_agent_api_request_duration_seconds', 'API request duration in seconds');
+    log.debug('Metrics initialized');
+}
+// Convenience functions for common operations
+export const metrics = {
+    // Sync operations
+    syncSuccess: (certName) => {
+        incCounter('znvault_agent_sync_total', { status: 'success', cert_name: certName });
+        setGauge('znvault_agent_last_sync_timestamp', Date.now() / 1000, { cert_name: certName });
+    },
+    syncFailure: (certName, reason) => {
+        incCounter('znvault_agent_sync_total', { status: 'failure', cert_name: certName });
+        incCounter('znvault_agent_sync_failures_total', { cert_name: certName, reason });
+    },
+    syncDuration: (certName, durationMs) => {
+        observeHistogram('znvault_agent_sync_duration_seconds', durationMs / 1000, { cert_name: certName });
+    },
+    // WebSocket
+    wsConnected: () => setGauge('znvault_agent_connected', 1),
+    wsDisconnected: () => setGauge('znvault_agent_connected', 0),
+    wsReconnect: () => incCounter('znvault_agent_websocket_reconnects_total'),
+    // API
+    apiRequest: (method, status, durationMs) => {
+        incCounter('znvault_agent_api_requests_total', { method, status: String(status) });
+        observeHistogram('znvault_agent_api_request_duration_seconds', durationMs / 1000, { method });
+    },
+    // Certificate tracking
+    setCertsTracked: (count) => setGauge('znvault_agent_certs_tracked', count),
+    setCertExpiry: (certId, certName, days) => {
+        setGauge('znvault_agent_cert_expiry_days', days, { cert_id: certId, cert_name: certName });
+    },
+    // Secret operations
+    secretDeployed: (secretName, success, durationMs) => {
+        incCounter('znvault_agent_secret_sync_total', { status: success ? 'success' : 'failure', secret_name: secretName });
+        if (!success) {
+            incCounter('znvault_agent_secret_sync_failures_total', { secret_name: secretName });
+        }
+        observeHistogram('znvault_agent_secret_sync_duration_seconds', durationMs / 1000, { secret_name: secretName });
+        if (success) {
+            setGauge('znvault_agent_last_sync_timestamp', Date.now() / 1000, { secret_name: secretName });
+        }
+    },
+    setSecretsTracked: (count) => setGauge('znvault_agent_secrets_tracked', count),
+    // Auto-update
+    updateCheck: (status) => {
+        incCounter('znvault_agent_update_checks_total', { status });
+    },
+    updateInstall: (status) => {
+        incCounter('znvault_agent_updates_total', { status });
+    },
+    setVersionInfo: (version, channel) => {
+        setGauge('znvault_agent_version_info', 1, { version, channel });
+    },
+};
+//# sourceMappingURL=metrics.js.map

package/dist/lib/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/lib/metrics.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,wCAAwC;AAExC,OAAO,EAAE,aAAa,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AA8BnD,iBAAiB;AACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;AAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEvD,kBAAkB;AAClB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6C,CAAC;AAExE,yCAAyC;AACzC,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAElF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACxD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAAiC,EAAE,EAAE,KAAK,GAAG,CAAC;IACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC;IAE3E,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,SAAiC,EAAE;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC;IAE3E,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,IAAY,EACZ,UAAoB,eAAe;IAEnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClC,qDAAqD;QACrD,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,KAAa,EACb,SAAiC,EAAE;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;IACtG,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC;IAEzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG;YACT,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACzD,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,CAAC;YACR,MAAM;SACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,iBAAiB;IACjB,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,KAAK,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,MAA8B;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEpE,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,kBAAkB;IAClB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,yBAAyB;QACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,gBAAgB;IAChB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,oBAAoB;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9F,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,YAAY,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACjE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,iBAAiB;IAC/B,WAAW;IACX,eAAe,CAAC,0BAA0B,EAAE,mCAAmC,CAAC,CAAC;IACjF,eAAe,CAAC,mCAAmC,EAAE,8BAA8B,CAAC,CAAC;IACrF,eAAe,CAAC,iCAAiC,EAAE,8BAA8B,CAAC,CAAC;IACnF,eAAe,CAAC,0CAA0C,EAAE,qCAAqC,CAAC,CAAC;IACnG,eAAe,CAAC,0CAA0C,EAAE,uCAAuC,CAAC,CAAC;IACrG,eAAe,CAAC,kCAAkC,EAAE,yBAAyB,CAAC,CAAC;IAC/E,eAAe,CAAC,mCAAmC,EAAE,+BAA+B,CAAC,CAAC;IACtF,eAAe,CAAC,6BAA6B,EAAE,4BAA4B,CAAC,CAAC;IAE7E,SAAS;IACT,aAAa,CAAC,yBAAyB,EAAE,2DAA2D,CAAC,CAAC;IACtG,aAAa,CAAC,6BAA6B,EAAE,sCAAsC,CAAC,CAAC;IACrF,aAAa,CAAC,+BAA+B,EAAE,iCAAiC,CAAC,CAAC;IAClF,aAAa,CAAC,mCAAmC,EAAE,mCAAmC,CAAC,CAAC;IACxF,aAAa,CAAC,gCAAgC,EAAE,+BAA+B,CAAC,CAAC;IACjF,aAAa,CAAC,4BAA4B,EAAE,2BAA2B,CAAC,CAAC;IAEzE,aAAa;IACb,iBAAiB,CAAC,qCAAqC,EAAE,sCAAsC,CAAC,CAAC;IACjG,iBAAiB,CAAC,4CAA4C,EAAE,iCAAiC,CAAC,CAAC;IACnG,iBAAiB,CAAC,4CAA4C,EAAE,iCAAiC,CAAC,CAAC;IAEnG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACnC,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,kBAAkB;IAClB,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE;QAChC,UAAU,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,QAAQ,CAAC,mCAAmC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,WAAW,EAAE,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE;QAChD,UAAU,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,UAAU,CAAC,mCAAmC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,YAAY,EAAE,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAE;QACrD,gBAAgB,CAAC,qCAAqC,EAAE,UAAU,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,YAAY;IACZ,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACzD,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,CAAC;IAC5D,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,0CAA0C,CAAC;IAEzE,MAAM;IACN,UAAU,EAAE,CAAC,MAAc,EAAE,MAAc,EAAE,UAAkB,EAAE,EAAE;QACjE,UAAU,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnF,gBAAgB,CAAC,4CAA4C,EAAE,UAAU,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,uBAAuB;IACvB,eAAe,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,6BAA6B,EAAE,KAAK,CAAC;IAClF,aAAa,EAAE,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE;QAChE,QAAQ,CAAC,gCAAgC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,oBAAoB;IACpB,cAAc,EAAE,CAAC,UAAkB,EAAE,OAAgB,EAAE,UAAkB,EAAE,EAAE;QAC3E,UAAU,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,UAAU,CAAC,0CAA0C,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,gBAAgB,CAAC,4CAA4C,EAAE,UAAU,GAAG,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/G,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,mCAAmC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,iBAAiB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,+BAA+B,EAAE,KAAK,CAAC;IAEtF,cAAc;IACd,WAAW,EAAE,CAAC,MAA2B,EAAE,EAAE;QAC3C,UAAU,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,aAAa,EAAE,CAAC,MAAiD,EAAE,EAAE;QACnE,UAAU,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,cAAc,EAAE,CAAC,OAAe,EAAE,OAAe,EAAE,EAAE;QACnD,QAAQ,CAAC,4BAA4B,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;CACF,CAAC"}

package/dist/lib/secret-deployer.d.ts

@@ -0,0 +1,22 @@
+import type { SecretTarget } from './config.js';
+export interface SecretDeployResult {
+    success: boolean;
+    secretId: string;
+    name: string;
+    message: string;
+    version?: number;
+    durationMs?: number;
+}
+/**
+ * Deploy a single secret target
+ */
+export declare function deploySecret(target: SecretTarget, force?: boolean): Promise<SecretDeployResult>;
+/**
+ * Deploy all configured secret targets
+ */
+export declare function deployAllSecrets(force?: boolean): Promise<SecretDeployResult[]>;
+/**
+ * Find secret target by ID or alias
+ */
+export declare function findSecretTarget(secretIdOrAlias: string): SecretTarget | undefined;
+//# sourceMappingURL=secret-deployer.d.ts.map

package/dist/lib/secret-deployer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-deployer.d.ts","sourceRoot":"","sources":["../../src/lib/secret-deployer.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMhD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAwGD;;GAEG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,EACpB,KAAK,UAAQ,GACZ,OAAO,CAAC,kBAAkB,CAAC,CAoF7B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAwBnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAOlF"}

package/dist/lib/secret-deployer.js

@@ -0,0 +1,201 @@
+// Path: src/lib/secret-deployer.ts
+// Secret deployment with atomic writes
+import fs from 'node:fs';
+import path from 'node:path';
+import { execSync } from 'node:child_process';
+import { getSecret } from './api.js';
+import { updateSecretTargetVersion, getSecretTargets, loadConfig } from './config.js';
+import { deployLogger as log } from './logger.js';
+import { metrics } from './metrics.js';
+/**
+ * Format secret data according to target format
+ */
+function formatSecretData(data, format, options) {
+    switch (format) {
+        case 'env': {
+            const prefix = options.envPrefix || '';
+            return Object.entries(data)
+                .map(([k, v]) => {
+                const key = prefix + k.toUpperCase();
+                const value = typeof v === 'string' ? v : JSON.stringify(v);
+                return `${key}="${value.replace(/"/g, '\\"')}"`;
+            })
+                .join('\n') + '\n';
+        }
+        case 'json':
+            return JSON.stringify(data, null, 2) + '\n';
+        case 'yaml': {
+            // Simple YAML serialization
+            return Object.entries(data)
+                .map(([k, v]) => {
+                if (typeof v === 'string') {
+                    // Quote strings that might need it
+                    if (v.includes(':') || v.includes('#') || v.includes('\n')) {
+                        return `${k}: "${v.replace(/"/g, '\\"')}"`;
+                    }
+                    return `${k}: ${v}`;
+                }
+                return `${k}: ${JSON.stringify(v)}`;
+            })
+                .join('\n') + '\n';
+        }
+        case 'raw': {
+            if (!options.key) {
+                throw new Error('Key must be specified for raw format');
+            }
+            const value = data[options.key];
+            if (value === undefined) {
+                throw new Error(`Key "${options.key}" not found in secret data`);
+            }
+            return typeof value === 'string' ? value : JSON.stringify(value);
+        }
+        case 'template': {
+            if (!options.templatePath) {
+                throw new Error('Template path must be specified for template format');
+            }
+            if (!fs.existsSync(options.templatePath)) {
+                throw new Error(`Template file not found: ${options.templatePath}`);
+            }
+            let template = fs.readFileSync(options.templatePath, 'utf-8');
+            // Replace {{ key }} placeholders
+            for (const [k, v] of Object.entries(data)) {
+                const value = typeof v === 'string' ? v : JSON.stringify(v);
+                template = template.replace(new RegExp(`\\{\\{\\s*${k}\\s*\\}\\}`, 'g'), value);
+            }
+            return template;
+        }
+        default:
+            return JSON.stringify(data, null, 2) + '\n';
+    }
+}
+/**
+ * Write secret to file with proper permissions (atomic)
+ */
+function writeSecretFile(filePath, content, owner, mode) {
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    // Write to temp file first (atomic)
+    const tempPath = `${filePath}.tmp.${process.pid}`;
+    fs.writeFileSync(tempPath, content, { mode: parseInt(mode || '0600', 8) });
+    // Set ownership if specified and running as root
+    if (owner && process.getuid?.() === 0) {
+        try {
+            execSync(`chown ${owner} "${tempPath}"`, { stdio: 'ignore' });
+        }
+        catch {
+            // Ignore chown errors
+        }
+    }
+    // Atomic rename
+    fs.renameSync(tempPath, filePath);
+}
+/**
+ * Deploy a single secret target
+ */
+export async function deploySecret(target, force = false) {
+    const startTime = Date.now();
+    try {
+        log.debug({ name: target.name, secretId: target.secretId }, 'Deploying secret');
+        // Fetch secret from vault
+        const secret = await getSecret(target.secretId);
+        // Check if update needed (unless forced)
+        if (!force && target.lastVersion === secret.version) {
+            return {
+                success: true,
+                secretId: target.secretId,
+                name: target.name,
+                message: 'Already up to date',
+                version: secret.version,
+                durationMs: Date.now() - startTime,
+            };
+        }
+        // Format the data
+        const content = formatSecretData(secret.data, target.format, {
+            key: target.key,
+            envPrefix: target.envPrefix,
+            templatePath: target.templatePath,
+        });
+        // Write to file
+        writeSecretFile(target.output, content, target.owner, target.mode);
+        // Update config with new version
+        updateSecretTargetVersion(target.secretId, secret.version);
+        // Run reload command if specified
+        if (target.reloadCmd) {
+            try {
+                log.debug({ cmd: target.reloadCmd }, 'Running reload command');
+                execSync(target.reloadCmd, { stdio: 'pipe' });
+            }
+            catch (err) {
+                log.warn({ err, cmd: target.reloadCmd }, 'Reload command failed');
+            }
+        }
+        const durationMs = Date.now() - startTime;
+        metrics.secretDeployed(target.name, true, durationMs);
+        log.info({
+            name: target.name,
+            secretId: target.secretId,
+            version: secret.version,
+            output: target.output,
+            durationMs,
+        }, 'Secret deployed successfully');
+        return {
+            success: true,
+            secretId: target.secretId,
+            name: target.name,
+            message: 'Deployed successfully',
+            version: secret.version,
+            durationMs,
+        };
+    }
+    catch (err) {
+        const durationMs = Date.now() - startTime;
+        const message = err instanceof Error ? err.message : String(err);
+        metrics.secretDeployed(target.name, false, durationMs);
+        log.error({
+            name: target.name,
+            secretId: target.secretId,
+            err,
+            durationMs,
+        }, 'Secret deployment failed');
+        return {
+            success: false,
+            secretId: target.secretId,
+            name: target.name,
+            message,
+            durationMs,
+        };
+    }
+}
+/**
+ * Deploy all configured secret targets
+ */
+export async function deployAllSecrets(force = false) {
+    const config = loadConfig();
+    const targets = config.secretTargets || [];
+    if (targets.length === 0) {
+        log.debug('No secret targets configured');
+        return [];
+    }
+    log.info({ count: targets.length }, 'Deploying all secrets');
+    const results = [];
+    for (const target of targets) {
+        const result = await deploySecret(target, force);
+        results.push(result);
+    }
+    const successCount = results.filter(r => r.success).length;
+    const errorCount = results.filter(r => !r.success).length;
+    log.info({ total: results.length, success: successCount, errors: errorCount }, 'Secret deployment complete');
+    return results;
+}
+/**
+ * Find secret target by ID or alias
+ */
+export function findSecretTarget(secretIdOrAlias) {
+    const targets = getSecretTargets();
+    return targets.find(t => t.secretId === secretIdOrAlias ||
+        t.secretId === `alias:${secretIdOrAlias}` ||
+        secretIdOrAlias.includes(t.secretId));
+}
+//# sourceMappingURL=secret-deployer.js.map

package/dist/lib/secret-deployer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-deployer.js","sourceRoot":"","sources":["../../src/lib/secret-deployer.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,uCAAuC;AAEvC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtF,OAAO,EAAE,YAAY,IAAI,GAAG,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAWvC;;GAEG;AACH,SAAS,gBAAgB,CACvB,IAA6B,EAC7B,MAAc,EACd,OAAoE;IAEpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;iBACxB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBACd,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC5D,OAAO,GAAG,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QAE9C,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,4BAA4B;YAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;iBACxB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;gBACd,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,mCAAmC;oBACnC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC3D,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;oBAC7C,CAAC;oBACD,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,CAAC,GAAG,4BAA4B,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC9D,iCAAiC;YACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC5D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED;YACE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,QAAgB,EAChB,OAAe,EACf,KAAc,EACd,IAAa;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAE3E,iDAAiD;IACjD,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,CAAC,SAAS,KAAK,KAAK,QAAQ,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAoB,EACpB,KAAK,GAAG,KAAK;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAEhF,0BAA0B;QAC1B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhD,yCAAyC;QACzC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,oBAAoB;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE;YAC3D,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QAEH,gBAAgB;QAChB,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAEnE,iCAAiC;QACjC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,kCAAkC;QAClC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBAC/D,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAEtD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU;SACX,EAAE,8BAA8B,CAAC,CAAC;QAEnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,uBAAuB;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEjE,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAEvD,GAAG,CAAC,KAAK,CAAC;YACR,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG;YACH,UAAU;SACX,EAAE,0BAA0B,CAAC,CAAC;QAE/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO;YACP,UAAU;SACX,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAK,GAAG,KAAK;IAClD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAE1D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAE7G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,eAAuB;IACtD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACtB,CAAC,CAAC,QAAQ,KAAK,eAAe;QAC9B,CAAC,CAAC,QAAQ,KAAK,SAAS,eAAe,EAAE;QACzC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CACrC,CAAC;AACJ,CAAC"}

package/dist/lib/validation.d.ts

@@ -0,0 +1,25 @@
+import type { AgentConfig } from './config.js';
+export interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+    warnings: ValidationWarning[];
+}
+export interface ValidationError {
+    field: string;
+    message: string;
+    value?: unknown;
+}
+export interface ValidationWarning {
+    field: string;
+    message: string;
+    suggestion?: string;
+}
+/**
+ * Validate the full agent configuration
+ */
+export declare function validateConfig(config: AgentConfig): ValidationResult;
+/**
+ * Format validation result for display
+ */
+export declare function formatValidationResult(result: ValidationResult): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/lib/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/lib/validation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,aAAa,CAAC;AAG3D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4HD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,gBAAgB,CA8GpE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAgCvE"}