dbdock 1.1.3 → 1.1.4

package/dist/config/permissions.checker.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkFilePermissions = checkFilePermissions;
+exports.isFileWorldReadable = isFileWorldReadable;
+exports.suggestPermissionsFix = suggestPermissionsFix;
+exports.checkDirectoryPermissions = checkDirectoryPermissions;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+function checkFilePermissions(filePath) {
+    if (os.platform() === 'win32') {
+        return {
+            secure: true,
+            currentMode: 'N/A (Windows)',
+            recommendedMode: 'N/A (Windows)',
+        };
+    }
+    try {
+        const stats = fs.statSync(filePath);
+        const mode = stats.mode;
+        const ownerRead = (mode & 0o400) !== 0;
+        const ownerWrite = (mode & 0o200) !== 0;
+        const groupRead = (mode & 0o040) !== 0;
+        const groupWrite = (mode & 0o020) !== 0;
+        const otherRead = (mode & 0o004) !== 0;
+        const otherWrite = (mode & 0o002) !== 0;
+        const modeString = (mode & 0o777).toString(8).padStart(3, '0');
+        const isWorldReadable = otherRead;
+        const isGroupReadable = groupRead;
+        const hasWriteByOthers = otherWrite || groupWrite;
+        const secure = !isWorldReadable && !hasWriteByOthers;
+        let warning;
+        if (isWorldReadable) {
+            warning = 'Config file is world-readable. Anyone on this system can read your secrets.';
+        }
+        else if (hasWriteByOthers) {
+            warning = 'Config file is writable by group or others. This could allow unauthorized modifications.';
+        }
+        else if (isGroupReadable) {
+            warning = 'Config file is readable by group members.';
+        }
+        return {
+            secure,
+            currentMode: modeString,
+            recommendedMode: '600',
+            warning,
+        };
+    }
+    catch (error) {
+        return {
+            secure: true,
+            currentMode: 'unknown',
+            recommendedMode: '600',
+        };
+    }
+}
+function isFileWorldReadable(filePath) {
+    if (os.platform() === 'win32') {
+        return false;
+    }
+    try {
+        const stats = fs.statSync(filePath);
+        return (stats.mode & 0o004) !== 0;
+    }
+    catch {
+        return false;
+    }
+}
+function suggestPermissionsFix(filePath) {
+    const absolutePath = path.resolve(filePath);
+    return `chmod 600 "${absolutePath}"`;
+}
+function checkDirectoryPermissions(dirPath) {
+    if (os.platform() === 'win32') {
+        return {
+            secure: true,
+            currentMode: 'N/A (Windows)',
+            recommendedMode: 'N/A (Windows)',
+        };
+    }
+    try {
+        const stats = fs.statSync(dirPath);
+        const mode = stats.mode;
+        const modeString = (mode & 0o777).toString(8).padStart(3, '0');
+        const otherRead = (mode & 0o004) !== 0;
+        const otherWrite = (mode & 0o002) !== 0;
+        const otherExecute = (mode & 0o001) !== 0;
+        const secure = !otherWrite;
+        return {
+            secure,
+            currentMode: modeString,
+            recommendedMode: '700',
+            warning: otherWrite ? 'Directory is writable by others' : undefined,
+        };
+    }
+    catch {
+        return {
+            secure: true,
+            currentMode: 'unknown',
+            recommendedMode: '700',
+        };
+    }
+}
+//# sourceMappingURL=permissions.checker.js.map

package/dist/config/permissions.checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.checker.js","sourceRoot":"","sources":["../../src/config/permissions.checker.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,oDAkDC;AAED,kDAWC;AAED,sDAGC;AAED,8DAkCC;AAnHD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AASzB,SAAgB,oBAAoB,CAAC,QAAgB;IACnD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,eAAe;YAC5B,eAAe,EAAE,eAAe;SACjC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAExB,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAE/D,MAAM,eAAe,GAAG,SAAS,CAAC;QAClC,MAAM,eAAe,GAAG,SAAS,CAAC;QAClC,MAAM,gBAAgB,GAAG,UAAU,IAAI,UAAU,CAAC;QAElD,MAAM,MAAM,GAAG,CAAC,eAAe,IAAI,CAAC,gBAAgB,CAAC;QAErD,IAAI,OAA2B,CAAC;QAChC,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,GAAG,6EAA6E,CAAC;QAC1F,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,OAAO,GAAG,0FAA0F,CAAC;QACvG,CAAC;aAAM,IAAI,eAAe,EAAE,CAAC;YAC3B,OAAO,GAAG,2CAA2C,CAAC;QACxD,CAAC;QAED,OAAO;YACL,MAAM;YACN,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,KAAK;YACtB,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,SAAS;YACtB,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,cAAc,YAAY,GAAG,CAAC;AACvC,CAAC;AAED,SAAgB,yBAAyB,CAAC,OAAe;IACvD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,eAAe;YAC5B,eAAe,EAAE,eAAe;SACjC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAExB,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAE/D,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC;QAE3B,OAAO;YACL,MAAM;YACN,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,KAAK;YACtB,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,SAAS;YACtB,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/config/pgpass.helper.d.ts

@@ -0,0 +1,15 @@
+export interface PgPassEntry {
+    hostname: string;
+    port: string;
+    database: string;
+    username: string;
+    password: string;
+}
+export declare function getPgPassPath(): string;
+export declare function checkPgPassPermissions(): boolean;
+export declare function parsePgPassLine(line: string): PgPassEntry | null;
+export declare function findPgPassEntry(host: string, port: number, database: string, user: string): string | null;
+export declare function hasPgPassEntry(host: string, port: number, database: string, user: string): boolean;
+export declare function createPgPassEntry(host: string, port: number, database: string, user: string, password: string): string;
+export declare function appendToPgPass(entry: string): void;
+export declare function getPgPassInstructions(host: string, port: number, database: string, user: string): string;

package/dist/config/pgpass.helper.js

@@ -0,0 +1,184 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPgPassPath = getPgPassPath;
+exports.checkPgPassPermissions = checkPgPassPermissions;
+exports.parsePgPassLine = parsePgPassLine;
+exports.findPgPassEntry = findPgPassEntry;
+exports.hasPgPassEntry = hasPgPassEntry;
+exports.createPgPassEntry = createPgPassEntry;
+exports.appendToPgPass = appendToPgPass;
+exports.getPgPassInstructions = getPgPassInstructions;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+function getPgPassPath() {
+    if (os.platform() === 'win32') {
+        const appData = process.env.APPDATA || path.join(os.homedir(), 'AppData', 'Roaming');
+        return path.join(appData, 'postgresql', 'pgpass.conf');
+    }
+    return path.join(os.homedir(), '.pgpass');
+}
+function checkPgPassPermissions() {
+    if (os.platform() === 'win32') {
+        return true;
+    }
+    const pgpassPath = getPgPassPath();
+    try {
+        const stats = fs.statSync(pgpassPath);
+        const mode = stats.mode & 0o777;
+        return mode === 0o600;
+    }
+    catch {
+        return false;
+    }
+}
+function parsePgPassLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#')) {
+        return null;
+    }
+    const parts = [];
+    let current = '';
+    let escaped = false;
+    for (let i = 0; i < trimmed.length; i++) {
+        const char = trimmed[i];
+        if (escaped) {
+            current += char;
+            escaped = false;
+        }
+        else if (char === '\\') {
+            escaped = true;
+        }
+        else if (char === ':') {
+            parts.push(current);
+            current = '';
+        }
+        else {
+            current += char;
+        }
+    }
+    parts.push(current);
+    if (parts.length !== 5) {
+        return null;
+    }
+    return {
+        hostname: parts[0],
+        port: parts[1],
+        database: parts[2],
+        username: parts[3],
+        password: parts[4],
+    };
+}
+function matchesPattern(value, pattern) {
+    if (pattern === '*') {
+        return true;
+    }
+    return value === pattern;
+}
+function findPgPassEntry(host, port, database, user) {
+    const pgpassPath = getPgPassPath();
+    if (!fs.existsSync(pgpassPath)) {
+        return null;
+    }
+    if (!checkPgPassPermissions()) {
+        console.warn(`Warning: .pgpass file permissions too open. ` +
+            `Run "chmod 600 ${pgpassPath}" to fix.`);
+        return null;
+    }
+    try {
+        const content = fs.readFileSync(pgpassPath, 'utf-8');
+        const lines = content.split('\n');
+        for (const line of lines) {
+            const entry = parsePgPassLine(line);
+            if (!entry)
+                continue;
+            const hostMatches = matchesPattern(host, entry.hostname);
+            const portMatches = matchesPattern(String(port), entry.port);
+            const dbMatches = matchesPattern(database, entry.database);
+            const userMatches = matchesPattern(user, entry.username);
+            if (hostMatches && portMatches && dbMatches && userMatches) {
+                return entry.password;
+            }
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+function hasPgPassEntry(host, port, database, user) {
+    return findPgPassEntry(host, port, database, user) !== null;
+}
+function createPgPassEntry(host, port, database, user, password) {
+    const escape = (s) => s.replace(/\\/g, '\\\\').replace(/:/g, '\\:');
+    return `${escape(host)}:${port}:${escape(database)}:${escape(user)}:${escape(password)}`;
+}
+function appendToPgPass(entry) {
+    const pgpassPath = getPgPassPath();
+    const dir = path.dirname(pgpassPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    let existingContent = '';
+    if (fs.existsSync(pgpassPath)) {
+        existingContent = fs.readFileSync(pgpassPath, 'utf-8');
+        if (!existingContent.endsWith('\n')) {
+            existingContent += '\n';
+        }
+    }
+    fs.writeFileSync(pgpassPath, existingContent + entry + '\n', { mode: 0o600 });
+}
+function getPgPassInstructions(host, port, database, user) {
+    const pgpassPath = getPgPassPath();
+    const entry = `${host}:${port}:${database}:${user}:YOUR_PASSWORD`;
+    return `
+To use .pgpass for secure password storage:
+
+1. Add this line to ${pgpassPath}:
+   ${entry}
+
+2. Set proper permissions (Unix/Mac):
+   chmod 600 ${pgpassPath}
+
+3. Remove the password from your dbdock.config.json
+
+Benefits:
+- Password not exposed via PGPASSWORD environment variable
+- Secure file permissions prevent unauthorized access
+- Works with all PostgreSQL tools (psql, pg_dump, etc.)
+`;
+}
+//# sourceMappingURL=pgpass.helper.js.map

package/dist/config/pgpass.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pgpass.helper.js","sourceRoot":"","sources":["../../src/config/pgpass.helper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,sCAMC;AAED,wDAcC;AAED,0CAuCC;AASD,0CA0CC;AAED,wCAOC;AAED,8CAUC;AAED,wCAiBC;AAED,sDAyBC;AAjMD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAUzB,SAAgB,aAAa;IAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,sBAAsB;IACpC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QAChC,OAAO,IAAI,KAAK,KAAK,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACd,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAClB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAClB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,KAAK,OAAO,CAAC;AAC3B,CAAC;AAED,SAAgB,eAAe,CAC7B,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,IAAY;IAEZ,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IAEnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CACV,8CAA8C;YAC9C,kBAAkB,UAAU,WAAW,CACxC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAEzD,IAAI,WAAW,IAAI,WAAW,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;gBAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,cAAc,CAC5B,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,IAAY;IAEZ,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAgB,iBAAiB,CAC/B,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,IAAY,EACZ,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE5E,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,SAAgB,cAAc,CAAC,KAAa;IAC1C,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,eAAe,IAAI,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,eAAe,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAgB,qBAAqB,CACnC,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,IAAY;IAEZ,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI,gBAAgB,CAAC;IAElE,OAAO;;;sBAGa,UAAU;KAC3B,KAAK;;;eAGK,UAAU;;;;;;;;CAQxB,CAAC;AACF,CAAC"}

package/dist/config/secrets.validator.d.ts

@@ -0,0 +1,17 @@
+export declare const SENSITIVE_FIELDS: readonly ["postgres.password", "storage.accessKeyId", "storage.secretAccessKey", "storage.cloudinaryApiKey", "storage.cloudinaryApiSecret", "encryption.secret", "alerts.smtpUser", "alerts.smtpPass", "alerts.slackWebhook"];
+export declare const ENV_VAR_MAPPING: Record<string, string>;
+export type SensitiveField = (typeof SENSITIVE_FIELDS)[number];
+export declare function maskSecretValue(value: string | undefined): string;
+export declare function getNestedValue(obj: Record<string, unknown>, path: string): unknown;
+export declare function setNestedValue(obj: Record<string, unknown>, path: string, value: unknown): void;
+export declare function hasSecretsInConfig(config: Record<string, unknown>): string[];
+export declare function loadSecretsFromEnv(): Record<string, string | undefined>;
+export declare function mergeSecretsIntoConfig(config: Record<string, unknown>, secrets: Record<string, string | undefined>): Record<string, unknown>;
+export interface SecretsValidationResult {
+    valid: boolean;
+    missingSecrets: string[];
+    warnings: string[];
+    mode: 'strict' | 'legacy';
+}
+export declare function validateSecrets(config: Record<string, unknown>, requireEnvOnly?: boolean): SecretsValidationResult;
+export declare function formatMigrationInstructions(secretsInConfig: string[]): string;

package/dist/config/secrets.validator.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENV_VAR_MAPPING = exports.SENSITIVE_FIELDS = void 0;
+exports.maskSecretValue = maskSecretValue;
+exports.getNestedValue = getNestedValue;
+exports.setNestedValue = setNestedValue;
+exports.hasSecretsInConfig = hasSecretsInConfig;
+exports.loadSecretsFromEnv = loadSecretsFromEnv;
+exports.mergeSecretsIntoConfig = mergeSecretsIntoConfig;
+exports.validateSecrets = validateSecrets;
+exports.formatMigrationInstructions = formatMigrationInstructions;
+exports.SENSITIVE_FIELDS = [
+    'postgres.password',
+    'storage.accessKeyId',
+    'storage.secretAccessKey',
+    'storage.cloudinaryApiKey',
+    'storage.cloudinaryApiSecret',
+    'encryption.secret',
+    'alerts.smtpUser',
+    'alerts.smtpPass',
+    'alerts.slackWebhook',
+];
+exports.ENV_VAR_MAPPING = {
+    'postgres.password': 'DBDOCK_DB_PASSWORD',
+    'storage.accessKeyId': 'DBDOCK_STORAGE_ACCESS_KEY',
+    'storage.secretAccessKey': 'DBDOCK_STORAGE_SECRET_KEY',
+    'storage.cloudinaryApiKey': 'DBDOCK_CLOUDINARY_API_KEY',
+    'storage.cloudinaryApiSecret': 'DBDOCK_CLOUDINARY_API_SECRET',
+    'encryption.secret': 'DBDOCK_ENCRYPTION_SECRET',
+    'alerts.smtpUser': 'DBDOCK_SMTP_USER',
+    'alerts.smtpPass': 'DBDOCK_SMTP_PASS',
+    'alerts.slackWebhook': 'DBDOCK_SLACK_WEBHOOK',
+};
+function maskSecretValue(value) {
+    if (!value)
+        return '********';
+    if (value.length <= 4)
+        return '****';
+    return value.slice(0, 2) + '****' + value.slice(-2);
+}
+function getNestedValue(obj, path) {
+    const keys = path.split('.');
+    let current = obj;
+    for (const key of keys) {
+        if (current === null || current === undefined || typeof current !== 'object') {
+            return undefined;
+        }
+        current = current[key];
+    }
+    return current;
+}
+function setNestedValue(obj, path, value) {
+    const keys = path.split('.');
+    let current = obj;
+    for (let i = 0; i < keys.length - 1; i++) {
+        const key = keys[i];
+        if (!(key in current) || typeof current[key] !== 'object') {
+            current[key] = {};
+        }
+        current = current[key];
+    }
+    current[keys[keys.length - 1]] = value;
+}
+function hasSecretsInConfig(config) {
+    const foundSecrets = [];
+    for (const field of exports.SENSITIVE_FIELDS) {
+        const value = getNestedValue(config, field);
+        if (value !== undefined && value !== null && value !== '') {
+            foundSecrets.push(field);
+        }
+    }
+    return foundSecrets;
+}
+function loadSecretsFromEnv() {
+    const secrets = {};
+    for (const [fieldPath, envVar] of Object.entries(exports.ENV_VAR_MAPPING)) {
+        const value = process.env[envVar];
+        if (value !== undefined && value !== '') {
+            secrets[fieldPath] = value;
+        }
+    }
+    return secrets;
+}
+function mergeSecretsIntoConfig(config, secrets) {
+    const merged = JSON.parse(JSON.stringify(config));
+    for (const [fieldPath, value] of Object.entries(secrets)) {
+        if (value !== undefined) {
+            setNestedValue(merged, fieldPath, value);
+        }
+    }
+    return merged;
+}
+function validateSecrets(config, requireEnvOnly = false) {
+    const result = {
+        valid: true,
+        missingSecrets: [],
+        warnings: [],
+        mode: requireEnvOnly ? 'strict' : 'legacy',
+    };
+    const secretsInConfig = hasSecretsInConfig(config);
+    const envSecrets = loadSecretsFromEnv();
+    if (requireEnvOnly && secretsInConfig.length > 0) {
+        result.valid = false;
+        result.warnings.push('Strict mode enabled: secrets must be provided via environment variables only.');
+        for (const field of secretsInConfig) {
+            const envVar = exports.ENV_VAR_MAPPING[field];
+            result.warnings.push(`  - ${field} found in config, use ${envVar} instead`);
+        }
+    }
+    else if (secretsInConfig.length > 0) {
+        result.warnings.push('⚠️  Security Warning: Secrets detected in configuration file.');
+        result.warnings.push('   Consider moving them to environment variables for better security:');
+        for (const field of secretsInConfig) {
+            const envVar = exports.ENV_VAR_MAPPING[field];
+            result.warnings.push(`     - ${field} → ${envVar}`);
+        }
+        result.warnings.push('');
+        result.warnings.push('   Run "npx dbdock migrate-config" to migrate automatically.');
+    }
+    const requiredSecrets = getRequiredSecrets(config);
+    for (const field of requiredSecrets) {
+        const configValue = getNestedValue(config, field);
+        const envValue = envSecrets[field];
+        if (!configValue && !envValue) {
+            result.valid = false;
+            const envVar = exports.ENV_VAR_MAPPING[field];
+            result.missingSecrets.push(`${field} (set via ${envVar})`);
+        }
+    }
+    return result;
+}
+function getRequiredSecrets(config) {
+    const required = [];
+    required.push('postgres.password');
+    const storageProvider = getNestedValue(config, 'storage.provider');
+    if (storageProvider === 's3' || storageProvider === 'r2') {
+        required.push('storage.accessKeyId');
+        required.push('storage.secretAccessKey');
+    }
+    else if (storageProvider === 'cloudinary') {
+        required.push('storage.cloudinaryApiKey');
+        required.push('storage.cloudinaryApiSecret');
+    }
+    const encryptionEnabled = getNestedValue(config, 'encryption.enabled');
+    if (encryptionEnabled) {
+        required.push('encryption.secret');
+    }
+    return required;
+}
+function formatMigrationInstructions(secretsInConfig) {
+    const lines = [
+        '',
+        '╔════════════════════════════════════════════════════════════════╗',
+        '║                    SECURITY RECOMMENDATION                      ║',
+        '╠════════════════════════════════════════════════════════════════╣',
+        '║  Move these secrets from config file to environment variables: ║',
+        '╠════════════════════════════════════════════════════════════════╣',
+    ];
+    for (const field of secretsInConfig) {
+        const envVar = exports.ENV_VAR_MAPPING[field];
+        lines.push(`║  ${field.padEnd(25)} → ${envVar.padEnd(30)} ║`);
+    }
+    lines.push('╠════════════════════════════════════════════════════════════════╣');
+    lines.push('║  Run: npx dbdock migrate-config                                ║');
+    lines.push('╚════════════════════════════════════════════════════════════════╝');
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=secrets.validator.js.map

package/dist/config/secrets.validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.validator.js","sourceRoot":"","sources":["../../src/config/secrets.validator.ts"],"names":[],"mappings":";;;AA6BA,0CAIC;AAED,wCAYC;AAED,wCAaC;AAED,gDAWC;AAED,gDAWC;AAED,wDAaC;AASD,0CAmDC;AAwBD,kEAqBC;AA7MY,QAAA,gBAAgB,GAAG;IAC9B,mBAAmB;IACnB,qBAAqB;IACrB,yBAAyB;IACzB,0BAA0B;IAC1B,6BAA6B;IAC7B,mBAAmB;IACnB,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;CACb,CAAC;AAEE,QAAA,eAAe,GAA2B;IACrD,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,2BAA2B;IAClD,yBAAyB,EAAE,2BAA2B;IACtD,0BAA0B,EAAE,2BAA2B;IACvD,6BAA6B,EAAE,8BAA8B;IAC7D,mBAAmB,EAAE,0BAA0B;IAC/C,iBAAiB,EAAE,kBAAkB;IACrC,iBAAiB,EAAE,kBAAkB;IACrC,qBAAqB,EAAE,sBAAsB;CAC9C,CAAC;AAIF,SAAgB,eAAe,CAAC,KAAyB;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,UAAU,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAgB,cAAc,CAAC,GAA4B,EAAE,IAAY;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAY,GAAG,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,cAAc,CAAC,GAA4B,EAAE,IAAY,EAAE,KAAc;IACvF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAG,GAAG,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AACzC,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAA+B;IAChE,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,wBAAgB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,kBAAkB;IAChC,MAAM,OAAO,GAAuC,EAAE,CAAC;IAEvD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAe,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAA+B,EAC/B,OAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAElD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AASD,SAAgB,eAAe,CAC7B,MAA+B,EAC/B,iBAA0B,KAAK;IAE/B,MAAM,MAAM,GAA4B;QACtC,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;KAC3C,CAAC;IAEF,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IAExC,IAAI,cAAc,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,+EAA+E,CAChF,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,yBAAyB,MAAM,UAAU,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;SAAM,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,+DAA+D,CAChE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,uEAAuE,CACxE,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,MAAM,MAAM,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,MAAM,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+B;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAEnC,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAW,CAAC;IAC7E,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC3C,CAAC;SAAM,IAAI,eAAe,KAAK,YAAY,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,CAAC,MAAM,EAAE,oBAAoB,CAAY,CAAC;IAClF,IAAI,iBAAiB,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,2BAA2B,CAAC,eAAyB;IACnE,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,oEAAoE;QACpE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;KACrE,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,uBAAe,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/utils/logger.d.ts

@@ -1,5 +1,11 @@
 import { Logger as NestLogger } from '@nestjs/common';
+export declare function maskCredentials(message: string): string;
 export declare class DBDockLogger extends NestLogger {
+    log(message: string, ...optionalParams: unknown[]): void;
+    error(message: string, ...optionalParams: unknown[]): void;
+    warn(message: string, ...optionalParams: unknown[]): void;
+    debug(message: string, ...optionalParams: unknown[]): void;
+    verbose(message: string, ...optionalParams: unknown[]): void;
     logBackupStart(backupId: string, type: string): void;
     logBackupComplete(backupId: string, duration: number, size: number): void;
     logBackupError(backupId: string, error: Error): void;

package/dist/utils/logger.js

@@ -1,8 +1,43 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DBDockLogger = void 0;
+exports.maskCredentials = maskCredentials;
 const common_1 = require("@nestjs/common");
+const SENSITIVE_PATTERNS = [
+    { pattern: /password['":\s]*['"]?([^'"}\s,]+)/gi, replacement: 'password: ********' },
+    { pattern: /secret['":\s]*['"]?([^'"}\s,]+)/gi, replacement: 'secret: ********' },
+    { pattern: /accesskey['":\s]*['"]?([^'"}\s,]+)/gi, replacement: 'accessKey: ********' },
+    { pattern: /secretkey['":\s]*['"]?([^'"}\s,]+)/gi, replacement: 'secretKey: ********' },
+    { pattern: /apikey['":\s]*['"]?([^'"}\s,]+)/gi, replacement: 'apiKey: ********' },
+    { pattern: /apisecret['":\s]*['"]?([^'"}\s,]+)/gi, replacement: 'apiSecret: ********' },
+    { pattern: /webhook['":\s]*['"]?(https?:\/\/[^'"}\s,]+)/gi, replacement: 'webhook: ********' },
+    { pattern: /PGPASSWORD=([^\s]+)/gi, replacement: 'PGPASSWORD=********' },
+    { pattern: /Bearer\s+([A-Za-z0-9\-._~+/]+=*)/gi, replacement: 'Bearer ********' },
+    { pattern: /Basic\s+([A-Za-z0-9+/]+=*)/gi, replacement: 'Basic ********' },
+];
+function maskCredentials(message) {
+    let masked = message;
+    for (const { pattern, replacement } of SENSITIVE_PATTERNS) {
+        masked = masked.replace(pattern, replacement);
+    }
+    return masked;
+}
 class DBDockLogger extends common_1.Logger {
+    log(message, ...optionalParams) {
+        super.log(maskCredentials(message), ...optionalParams);
+    }
+    error(message, ...optionalParams) {
+        super.error(maskCredentials(message), ...optionalParams);
+    }
+    warn(message, ...optionalParams) {
+        super.warn(maskCredentials(message), ...optionalParams);
+    }
+    debug(message, ...optionalParams) {
+        super.debug(maskCredentials(message), ...optionalParams);
+    }
+    verbose(message, ...optionalParams) {
+        super.verbose(maskCredentials(message), ...optionalParams);
+    }
     logBackupStart(backupId, type) {
         this.log(`Backup started: ${backupId} (type: ${type})`);
     }

package/dist/utils/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":";;;AAAA,2CAAsD;AAEtD,MAAa,YAAa,SAAQ,eAAU;IAC1C,cAAc,CAAC,QAAgB,EAAE,IAAY;QAC3C,IAAI,CAAC,GAAG,CAAC,mBAAmB,QAAQ,WAAW,IAAI,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,IAAY;QAChE,IAAI,CAAC,GAAG,CACN,qBAAqB,QAAQ,eAAe,QAAQ,aAAa,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAC3F,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,QAAgB,EAAE,KAAY;QAC3C,IAAI,CAAC,KAAK,CAAC,kBAAkB,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,UAAmB;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,oBAAoB,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE,QAAgB;QACnD,IAAI,CAAC,GAAG,CAAC,sBAAsB,QAAQ,eAAe,QAAQ,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,KAAY;QAC5C,IAAI,CAAC,KAAK,CAAC,mBAAmB,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,IAAI,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,kBAAkB,CAAC,OAAe,EAAE,KAAY;QAC9C,IAAI,CAAC,KAAK,CAAC,uBAAuB,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE9B,MAAM,CAAC,GAAG,IAAI,CAAC;QACf,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpD,OAAO,GAAG,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AA7CD,oCA6CC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":";;;AAeA,0CAMC;AArBD,2CAAsD;AAEtD,MAAM,kBAAkB,GAAoD;IAC1E,EAAE,OAAO,EAAE,qCAAqC,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACrF,EAAE,OAAO,EAAE,mCAAmC,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACjF,EAAE,OAAO,EAAE,sCAAsC,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACvF,EAAE,OAAO,EAAE,sCAAsC,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACvF,EAAE,OAAO,EAAE,mCAAmC,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACjF,EAAE,OAAO,EAAE,sCAAsC,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACvF,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC9F,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACxE,EAAE,OAAO,EAAE,oCAAoC,EAAE,WAAW,EAAE,iBAAiB,EAAE;IACjF,EAAE,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,gBAAgB,EAAE;CAC3E,CAAC;AAEF,SAAgB,eAAe,CAAC,OAAe;IAC7C,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC1D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAa,YAAa,SAAQ,eAAU;IAC1C,GAAG,CAAC,OAAe,EAAE,GAAG,cAAyB;QAC/C,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,cAAyB;QACjD,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,cAAyB;QAChD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,cAAyB;QACjD,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,OAAe,EAAE,GAAG,cAAyB;QACnD,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IAC7D,CAAC;IACD,cAAc,CAAC,QAAgB,EAAE,IAAY;QAC3C,IAAI,CAAC,GAAG,CAAC,mBAAmB,QAAQ,WAAW,IAAI,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,IAAY;QAChE,IAAI,CAAC,GAAG,CACN,qBAAqB,QAAQ,eAAe,QAAQ,aAAa,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAC3F,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,QAAgB,EAAE,KAAY;QAC3C,IAAI,CAAC,KAAK,CAAC,kBAAkB,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,UAAmB;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,oBAAoB,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE,QAAgB;QACnD,IAAI,CAAC,GAAG,CAAC,sBAAsB,QAAQ,eAAe,QAAQ,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,KAAY;QAC5C,IAAI,CAAC,KAAK,CAAC,mBAAmB,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,IAAI,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,kBAAkB,CAAC,OAAe,EAAE,KAAY;QAC9C,IAAI,CAAC,KAAK,CAAC,uBAAuB,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE9B,MAAM,CAAC,GAAG,IAAI,CAAC;QACf,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpD,OAAO,GAAG,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AAhED,oCAgEC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dbdock",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "Enterprise-grade PostgreSQL backup and restore in under 60 seconds. CLI-first tool with encryption, compression, and multi-cloud storage.",
   "author": "Naheem Olaide <naheemolaide@gmail.com>",
   "private": false,