envhub-cli 0.1.2 → 0.3.0

package/dist/providers/azure/azure-key-vault.provider.js

@@ -0,0 +1,190 @@
+import { DefaultAzureCredential } from "@azure/identity";
+import { SecretClient, } from "@azure/keyvault-secrets";
+import { parseEnvContent } from "../../utils/env-parser.js";
+const AZURE_SECRET_NAME_REGEX = /^[0-9a-zA-Z-]+$/;
+const MAX_AZURE_SECRET_NAME_LENGTH = 127;
+/**
+ * Azure Key Vault implementation of the SecretProvider interface.
+ */
+export class AzureKeyVaultProvider {
+    name = "azure";
+    client;
+    prefix;
+    constructor(config, prefix = "envhub-") {
+        this.client = new SecretClient(config.vaultUrl, new DefaultAzureCredential());
+        this.prefix = prefix;
+    }
+    fullName(secretName) {
+        const fullName = `${this.prefix}${secretName}`;
+        if (fullName.length > MAX_AZURE_SECRET_NAME_LENGTH) {
+            throw new Error(`Azure Key Vault secret name is too long (${fullName.length}). ` +
+                `Maximum length is ${MAX_AZURE_SECRET_NAME_LENGTH}.`);
+        }
+        if (!AZURE_SECRET_NAME_REGEX.test(fullName)) {
+            throw new Error(`Invalid secret name '${fullName}'. Azure Key Vault allows only letters, numbers, and dashes.`);
+        }
+        return fullName;
+    }
+    stripPrefix(fullName) {
+        if (fullName.startsWith(this.prefix)) {
+            return fullName.substring(this.prefix.length);
+        }
+        return fullName;
+    }
+    isNotFoundError(error) {
+        if (!error || typeof error !== "object") {
+            return false;
+        }
+        const maybeError = error;
+        return (maybeError.statusCode === 404 ||
+            maybeError.code === "SecretNotFound" ||
+            maybeError.code === "NotFound");
+    }
+    parsePayload(secretName, value) {
+        let payload;
+        try {
+            payload = JSON.parse(value);
+        }
+        catch {
+            throw new Error(`Secret '${secretName}' is not in envhub format. It may have been created outside envhub.`);
+        }
+        if (!payload ||
+            typeof payload !== "object" ||
+            !("content" in payload) ||
+            !("metadata" in payload)) {
+            throw new Error(`Secret '${secretName}' is missing envhub metadata. It may have been created outside envhub.`);
+        }
+        const parsed = payload;
+        if (typeof parsed.content !== "string" ||
+            typeof parsed.metadata?.version !== "number") {
+            throw new Error(`Secret '${secretName}' has an invalid envhub payload format.`);
+        }
+        return parsed;
+    }
+    async getPayload(secretName) {
+        const result = await this.client.getSecret(this.fullName(secretName));
+        if (!result.value) {
+            throw new Error(`Secret '${secretName}' has no string content.`);
+        }
+        return this.parsePayload(secretName, result.value);
+    }
+    async secretExists(secretName) {
+        try {
+            await this.client.getSecret(this.fullName(secretName));
+            return true;
+        }
+        catch (error) {
+            if (this.isNotFoundError(error)) {
+                return false;
+            }
+            throw error;
+        }
+    }
+    async push(secretName, content, options) {
+        const exists = await this.secretExists(secretName);
+        let newVersion = 1;
+        if (exists) {
+            const currentPayload = await this.getPayload(secretName);
+            newVersion = currentPayload.metadata.version + 1;
+        }
+        const payload = {
+            content,
+            metadata: {
+                version: newVersion,
+                message: options?.message,
+                updatedAt: new Date().toISOString(),
+                managedBy: "envhub-cli",
+            },
+        };
+        const tags = {
+            managedBy: "envhub-cli",
+            envhubVersion: String(newVersion),
+        };
+        if (options?.message) {
+            tags.envhubMessage = options.message.slice(0, 256);
+        }
+        await this.client.setSecret(this.fullName(secretName), JSON.stringify(payload), {
+            tags,
+        });
+        return { version: newVersion, name: secretName };
+    }
+    async pull(secretName) {
+        const payload = await this.getPayload(secretName);
+        return {
+            content: payload.content,
+            version: payload.metadata.version,
+            name: secretName,
+        };
+    }
+    async cat(secretName) {
+        const payload = await this.getPayload(secretName);
+        return payload.content;
+    }
+    async list() {
+        const items = [];
+        for await (const secret of this.client.listPropertiesOfSecrets()) {
+            if (!secret.name.startsWith(this.prefix)) {
+                continue;
+            }
+            items.push(await this.mapListItem(secret));
+        }
+        return items.sort((a, b) => a.name.localeCompare(b.name));
+    }
+    async mapListItem(secret) {
+        const secretName = this.stripPrefix(secret.name);
+        let secretsCount = 0;
+        let lastMessage = null;
+        try {
+            const payload = await this.getPayload(secretName);
+            const entries = parseEnvContent(payload.content);
+            secretsCount = entries.size;
+            lastMessage = payload.metadata.message ?? null;
+        }
+        catch {
+            // If we cannot parse the payload, still show the secret in list output.
+        }
+        return {
+            name: secretName,
+            secretsCount,
+            updatedAt: secret.updatedOn ?? null,
+            lastMessage,
+        };
+    }
+    async delete(secretName, options) {
+        const fullName = this.fullName(secretName);
+        const poller = await this.client.beginDeleteSecret(fullName);
+        await poller.pollUntilDone();
+        if (options?.force) {
+            try {
+                await this.client.purgeDeletedSecret(fullName);
+            }
+            catch (error) {
+                const reason = error instanceof Error ? error.message : "Unknown error.";
+                throw new Error(`Failed to force-delete '${secretName}'. Azure Key Vault may block purge (for example due to purge protection). ${reason}`);
+            }
+        }
+    }
+    async grant(secretName, userIdentifier) {
+        void secretName;
+        void userIdentifier;
+        throw new Error("Grant is not implemented for Azure Key Vault yet. Use Azure RBAC or access policies in Azure.");
+    }
+    async revoke(secretName, userIdentifier) {
+        void secretName;
+        void userIdentifier;
+        throw new Error("Revoke is not implemented for Azure Key Vault yet. Use Azure RBAC or access policies in Azure.");
+    }
+    async getVersion(secretName) {
+        try {
+            const payload = await this.getPayload(secretName);
+            return payload.metadata.version;
+        }
+        catch (error) {
+            if (this.isNotFoundError(error)) {
+                return 0;
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=azure-key-vault.provider.js.map

package/dist/providers/azure/azure-key-vault.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-key-vault.provider.js","sourceRoot":"","sources":["../../../src/providers/azure/azure-key-vault.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,YAAY,GAEb,MAAM,yBAAyB,CAAC;AAUjC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAc5D,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAClD,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEzC;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,OAAO,CAAC;IAChB,MAAM,CAAe;IACrB,MAAM,CAAS;IAEvB,YAAY,MAAmB,EAAE,SAAiB,SAAS;QACzD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,sBAAsB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,UAAkB;QACjC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAE/C,IAAI,QAAQ,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,4CAA4C,QAAQ,CAAC,MAAM,KAAK;gBAC9D,qBAAqB,4BAA4B,GAAG,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,8DAA8D,CAC/F,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG,KAA+C,CAAC;QACnE,OAAO,CACL,UAAU,CAAC,UAAU,KAAK,GAAG;YAC7B,UAAU,CAAC,IAAI,KAAK,gBAAgB;YACpC,UAAU,CAAC,IAAI,KAAK,UAAU,CAC/B,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,UAAkB,EAAE,KAAa;QACpD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,qEAAqE,CAC3F,CAAC;QACJ,CAAC;QAED,IACE,CAAC,OAAO;YACR,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;YACvB,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,wEAAwE,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,OAAwB,CAAC;QACxC,IACE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,OAAO,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,QAAQ,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,yCAAyC,CAC/D,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAAkB;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,0BAA0B,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAkB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,OAAe,EACf,OAAqB;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACzD,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAkB;YAC7B,OAAO;YACP,QAAQ,EAAE;gBACR,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,OAAO,EAAE,OAAO;gBACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,YAAY;aACxB;SACF,CAAC;QAEF,MAAM,IAAI,GAA2B;YACnC,SAAS,EAAE,YAAY;YACvB,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;SAClC,CAAC;QACF,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;YAC9E,IAAI;SACL,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAElD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,IAAI,EAAE,UAAU;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAqB,EAAE,CAAC;QAEnC,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,SAAS;YACX,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAwB;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,WAAW,GAAkB,IAAI,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;YAC5B,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QAED,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,YAAY;YACZ,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,OAAuB;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;QAE7B,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBACzE,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,6EAA6E,MAAM,EAAE,CAC3H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB,EAAE,cAAsB;QACpD,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,cAAsB;QACrD,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/providers/gcp/gcp-secret-manager.provider.d.ts

@@ -0,0 +1,26 @@
+import type { GCPConfig } from "../../config/config.schema.js";
+import type { DeleteOptions, PullResult, PushOptions, PushResult, SecretListItem, SecretProvider } from "../provider.interface.js";
+export declare class GCPSecretManagerProvider implements SecretProvider {
+    readonly name = "gcp";
+    private client;
+    private prefix;
+    private projectId;
+    constructor(config: GCPConfig, prefix?: string);
+    private get projectPath();
+    private fullName;
+    private stripPrefix;
+    private secretResource;
+    private isNotFoundError;
+    private parsePayload;
+    private secretExists;
+    private getPayload;
+    push(secretName: string, content: string, options?: PushOptions): Promise<PushResult>;
+    pull(secretName: string): Promise<PullResult>;
+    cat(secretName: string): Promise<string>;
+    list(): Promise<SecretListItem[]>;
+    delete(secretName: string, _options?: DeleteOptions): Promise<void>;
+    grant(_secretName: string, _userIdentifier: string): Promise<void>;
+    revoke(_secretName: string, _userIdentifier: string): Promise<void>;
+    getVersion(secretName: string): Promise<number>;
+}
+//# sourceMappingURL=gcp-secret-manager.provider.d.ts.map

package/dist/providers/gcp/gcp-secret-manager.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp-secret-manager.provider.d.ts","sourceRoot":"","sources":["../../../src/providers/gcp/gcp-secret-manager.provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,cAAc,EACf,MAAM,0BAA0B,CAAC;AAkBlC,qBAAa,wBAAyB,YAAW,cAAc;IAC7D,QAAQ,CAAC,IAAI,SAAS;IACtB,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAS;gBAEd,MAAM,EAAE,SAAS,EAAE,MAAM,GAAE,MAAkB;IAMzD,OAAO,KAAK,WAAW,GAEtB;IAED,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,YAAY;YAgCN,YAAY;YAYZ,UAAU;IAalB,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAuCrF,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAS7C,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKxC,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAyCjC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnE,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAWtD"}

package/dist/providers/gcp/gcp-secret-manager.provider.js

@@ -0,0 +1,199 @@
+import { SecretManagerServiceClient } from "@google-cloud/secret-manager";
+import { parseEnvContent } from "../../utils/env-parser.js";
+const GCP_SECRET_ID_REGEX = /^[A-Za-z0-9_-]+$/;
+const MAX_GCP_SECRET_ID_LENGTH = 255;
+export class GCPSecretManagerProvider {
+    name = "gcp";
+    client;
+    prefix;
+    projectId;
+    constructor(config, prefix = "envhub-") {
+        this.client = new SecretManagerServiceClient();
+        this.projectId = config.projectId;
+        this.prefix = prefix;
+    }
+    get projectPath() {
+        return `projects/${this.projectId}`;
+    }
+    fullName(secretName) {
+        const fullName = `${this.prefix}${secretName}`;
+        if (fullName.length > MAX_GCP_SECRET_ID_LENGTH) {
+            throw new Error(`GCP Secret Manager secret id is too long (${fullName.length}). ` +
+                `Maximum length is ${MAX_GCP_SECRET_ID_LENGTH}.`);
+        }
+        if (!GCP_SECRET_ID_REGEX.test(fullName)) {
+            throw new Error(`Invalid secret name '${fullName}'. GCP Secret Manager allows only letters, numbers, dashes, and underscores.`);
+        }
+        return fullName;
+    }
+    stripPrefix(fullName) {
+        if (fullName.startsWith(this.prefix)) {
+            return fullName.substring(this.prefix.length);
+        }
+        return fullName;
+    }
+    secretResource(secretName) {
+        return `${this.projectPath}/secrets/${this.fullName(secretName)}`;
+    }
+    isNotFoundError(error) {
+        if (!error || typeof error !== "object") {
+            return false;
+        }
+        const maybeError = error;
+        return maybeError.code === 5 || maybeError.details?.includes("not found") === true;
+    }
+    parsePayload(secretName, value) {
+        let payload;
+        try {
+            payload = JSON.parse(value);
+        }
+        catch {
+            throw new Error(`Secret '${secretName}' is not in envhub format. It may have been created outside envhub.`);
+        }
+        if (!payload ||
+            typeof payload !== "object" ||
+            !("content" in payload) ||
+            !("metadata" in payload)) {
+            throw new Error(`Secret '${secretName}' is missing envhub metadata. It may have been created outside envhub.`);
+        }
+        const parsed = payload;
+        if (typeof parsed.content !== "string" ||
+            typeof parsed.metadata?.version !== "number") {
+            throw new Error(`Secret '${secretName}' has an invalid envhub payload format.`);
+        }
+        return parsed;
+    }
+    async secretExists(secretName) {
+        try {
+            await this.client.getSecret({ name: this.secretResource(secretName) });
+            return true;
+        }
+        catch (error) {
+            if (this.isNotFoundError(error)) {
+                return false;
+            }
+            throw error;
+        }
+    }
+    async getPayload(secretName) {
+        const [result] = await this.client.accessSecretVersion({
+            name: `${this.secretResource(secretName)}/versions/latest`,
+        });
+        const data = result.payload?.data;
+        if (!data) {
+            throw new Error(`Secret '${secretName}' has no string content.`);
+        }
+        return this.parsePayload(secretName, data.toString("utf-8"));
+    }
+    async push(secretName, content, options) {
+        const exists = await this.secretExists(secretName);
+        let newVersion = 1;
+        // NOTE: GCP Secret Manager does not support conditional writes.
+        // The version in the payload is a metadata counter, not atomically guaranteed.
+        if (!exists) {
+            await this.client.createSecret({
+                parent: this.projectPath,
+                secretId: this.fullName(secretName),
+                secret: {
+                    replication: { automatic: {} },
+                },
+            });
+        }
+        else {
+            const currentPayload = await this.getPayload(secretName);
+            newVersion = currentPayload.metadata.version + 1;
+        }
+        const payload = {
+            content,
+            metadata: {
+                version: newVersion,
+                message: options?.message,
+                updatedAt: new Date().toISOString(),
+                managedBy: "envhub-cli",
+            },
+        };
+        await this.client.addSecretVersion({
+            parent: this.secretResource(secretName),
+            payload: {
+                data: Buffer.from(JSON.stringify(payload), "utf-8"),
+            },
+        });
+        return { version: newVersion, name: secretName };
+    }
+    async pull(secretName) {
+        const payload = await this.getPayload(secretName);
+        return {
+            content: payload.content,
+            version: payload.metadata.version,
+            name: secretName,
+        };
+    }
+    async cat(secretName) {
+        const payload = await this.getPayload(secretName);
+        return payload.content;
+    }
+    async list() {
+        const secrets = [];
+        let pageToken;
+        do {
+            const [page, , response] = await this.client.listSecrets({ parent: this.projectPath, pageToken });
+            secrets.push(...page);
+            pageToken = response?.nextPageToken ?? undefined;
+        } while (pageToken);
+        const relevant = secrets
+            .map((s) => s.name?.split("/").pop())
+            .filter((fullName) => !!fullName && fullName.startsWith(this.prefix))
+            .map((fullName) => this.stripPrefix(fullName));
+        const items = await Promise.all(relevant.map(async (secretName) => {
+            let secretsCount = 0;
+            let lastMessage = null;
+            let updatedAt = null;
+            try {
+                const payload = await this.getPayload(secretName);
+                const entries = parseEnvContent(payload.content);
+                secretsCount = entries.size;
+                lastMessage = payload.metadata.message ?? null;
+                updatedAt = new Date(payload.metadata.updatedAt);
+            }
+            catch (error) {
+                const grpcCode = error.code;
+                if (typeof grpcCode === "number" && !this.isNotFoundError(error)) {
+                    throw error;
+                }
+                // Parse errors and not-found: still show secret in list output.
+            }
+            return { name: secretName, secretsCount, updatedAt, lastMessage };
+        }));
+        return items.sort((a, b) => a.name.localeCompare(b.name));
+    }
+    async delete(secretName, _options) {
+        try {
+            await this.client.deleteSecret({ name: this.secretResource(secretName) });
+        }
+        catch (error) {
+            if (this.isNotFoundError(error)) {
+                throw new Error(`Secret '${secretName}' not found.`);
+            }
+            throw error;
+        }
+    }
+    async grant(_secretName, _userIdentifier) {
+        throw new Error("Grant is not implemented for GCP Secret Manager yet. Use IAM bindings in Google Cloud.");
+    }
+    async revoke(_secretName, _userIdentifier) {
+        throw new Error("Revoke is not implemented for GCP Secret Manager yet. Use IAM bindings in Google Cloud.");
+    }
+    async getVersion(secretName) {
+        try {
+            const payload = await this.getPayload(secretName);
+            return payload.metadata.version;
+        }
+        catch (error) {
+            if (this.isNotFoundError(error)) {
+                return 0;
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=gcp-secret-manager.provider.js.map

package/dist/providers/gcp/gcp-secret-manager.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp-secret-manager.provider.js","sourceRoot":"","sources":["../../../src/providers/gcp/gcp-secret-manager.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAU1E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAc5D,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,MAAM,OAAO,wBAAwB;IAC1B,IAAI,GAAG,KAAK,CAAC;IACd,MAAM,CAA6B;IACnC,MAAM,CAAS;IACf,SAAS,CAAS;IAE1B,YAAY,MAAiB,EAAE,SAAiB,SAAS;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,0BAA0B,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;IAEO,QAAQ,CAAC,UAAkB;QACjC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAE/C,IAAI,QAAQ,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,6CAA6C,QAAQ,CAAC,MAAM,KAAK;gBAC/D,qBAAqB,wBAAwB,GAAG,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,8EAA8E,CAC/G,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,UAAkB;QACvC,OAAO,GAAG,IAAI,CAAC,WAAW,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;IACpE,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG,KAA4C,CAAC;QAChE,OAAO,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACrF,CAAC;IAEO,YAAY,CAAC,UAAkB,EAAE,KAAa;QACpD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,qEAAqE,CAC3F,CAAC;QACJ,CAAC;QAED,IACE,CAAC,OAAO;YACR,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;YACvB,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,wEAAwE,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,OAAwB,CAAC;QACxC,IACE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,OAAO,MAAM,CAAC,QAAQ,EAAE,OAAO,KAAK,QAAQ,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,yCAAyC,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAkB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAAkB;QACzC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACrD,IAAI,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB;SAC3D,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,0BAA0B,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,OAAe,EAAE,OAAqB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,gEAAgE;QAChE,+EAA+E;QAC/E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,WAAW;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACnC,MAAM,EAAE;oBACN,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACzD,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAkB;YAC7B,OAAO;YACP,QAAQ,EAAE;gBACR,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,OAAO,EAAE,OAAO;gBACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,YAAY;aACxB;SACF,CAAC;QAEF,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC;YACvC,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;aACpD;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,IAAI,EAAE,UAAU;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,IAAI,SAA6B,CAAC;QAClC,GAAG,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,AAAD,EAAG,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAClG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACtB,SAAS,GAAG,QAAQ,EAAE,aAAa,IAAI,SAAS,CAAC;QACnD,CAAC,QAAQ,SAAS,EAAE;QAEpB,MAAM,QAAQ,GAAG,OAAO;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aACxF,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAA2B,EAAE;YACzD,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,WAAW,GAAkB,IAAI,CAAC;YACtC,IAAI,SAAS,GAAgB,IAAI,CAAC;YAElC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAClD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjD,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC5B,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;gBAC/C,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAI,KAA2B,CAAC,IAAI,CAAC;gBACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjE,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,gEAAgE;YAClE,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;QACpE,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,QAAwB;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,cAAc,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,eAAuB;QACtD,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,eAAuB;QACvD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/providers/provider.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.factory.d.ts","sourceRoot":"","sources":["../../src/providers/provider.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGxE;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc;IA2B3D;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE;CAO5F"}
+{"version":3,"file":"provider.factory.d.ts","sourceRoot":"","sources":["../../src/providers/provider.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAKxE;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,cAAc;IA6B3D;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE;CAO5F"}

package/dist/providers/provider.factory.js

@@ -1,4 +1,6 @@
 import { AWSSecretsProvider } from "./aws/aws-secrets.provider.js";
+import { AzureKeyVaultProvider } from "./azure/azure-key-vault.provider.js";
+import { GCPSecretManagerProvider } from "./gcp/gcp-secret-manager.provider.js";
 /**
  * Factory for creating provider instances based on configuration.
  *
@@ -19,9 +21,15 @@ export class ProviderFactory {
                 }
                 return new AWSSecretsProvider(config.aws, config.prefix);
             case "azure":
-                throw new Error("Azure Key Vault provider is not yet implemented. Coming soon!");
+                if (!config.azure) {
+                    throw new Error("Azure configuration is missing. Run 'envhub init' first.");
+                }
+                return new AzureKeyVaultProvider(config.azure, config.prefix);
             case "gcp":
-                throw new Error("GCP Secret Manager provider is not yet implemented. Coming soon!");
+                if (!config.gcp) {
+                    throw new Error("GCP configuration is missing. Run 'envhub init' first.");
+                }
+                return new GCPSecretManagerProvider(config.gcp, config.prefix);
             default:
                 throw new Error(`Unknown provider '${providerType}'. Supported: aws, azure, gcp`);
         }
@@ -32,8 +40,8 @@ export class ProviderFactory {
     static getAvailableProviders() {
         return [
             { type: "aws", label: "AWS Secrets Manager", available: true },
-            { type: "azure", label: "Azure Key Vault", available: false },
-            { type: "gcp", label: "GCP Secret Manager", available: false },
+            { type: "azure", label: "Azure Key Vault", available: true },
+            { type: "gcp", label: "GCP Secret Manager", available: true },
         ];
     }
 }

package/dist/providers/provider.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.factory.js","sourceRoot":"","sources":["../../src/providers/provider.factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAoB;QACxC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QAErC,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,KAAK;gBACR,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAE3D,KAAK,OAAO;gBACV,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;YAEJ,KAAK,KAAK;gBACR,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;YAEJ;gBACE,MAAM,IAAI,KAAK,CACb,qBAAqB,YAA4B,+BAA+B,CACjF,CAAC;QACN,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB;QAC1B,OAAO;YACL,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE;YAC9D,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE;YAC7D,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE;SAC/D,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"provider.factory.js","sourceRoot":"","sources":["../../src/providers/provider.factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAoB;QACxC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;QAErC,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,KAAK;gBACR,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAE3D,KAAK,OAAO;gBACV,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAEhE,KAAK,KAAK;gBACR,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,IAAI,wBAAwB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAEjE;gBACE,MAAM,IAAI,KAAK,CACb,qBAAqB,YAA4B,+BAA+B,CACjF,CAAC;QACN,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB;QAC1B,OAAO;YACL,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE;YAC9D,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE;YAC5D,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE;SAC9D,CAAC;IACJ,CAAC;CACF"}

package/dist/tui/app.d.ts

@@ -0,0 +1,12 @@
+import React from "react";
+import type { EnvhubConfig } from "../config/config.schema.js";
+import type { SecretProvider } from "../providers/provider.interface.js";
+import type { VersionControl } from "../versioning/version-control.js";
+interface EnvhubTuiAppProps {
+    config: EnvhubConfig;
+    provider: SecretProvider;
+    versionControl: VersionControl;
+}
+export declare function EnvhubTuiApp({ config, provider, versionControl, }: EnvhubTuiAppProps): React.JSX.Element;
+export {};
+//# sourceMappingURL=app.d.ts.map

package/dist/tui/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/tui/app.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAoD,MAAM,OAAO,CAAC;AAEzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,KAAK,EAAkB,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEvE,UAAU,iBAAiB;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,cAAc,EAAE,cAAc,CAAC;CAChC;AAaD,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,QAAQ,EACR,cAAc,GACf,EAAE,iBAAiB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAsSvC"}