envilder 0.7.12 → 0.9.1

package/lib/envilder/application/{pushEnvToSsm/PushEnvToSsmCommandHandler.js → pushEnvToSecrets/PushEnvToSecretsCommandHandler.js}

@@ -22,18 +22,18 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 import { inject, injectable } from 'inversify';
 import { EnvironmentVariable } from '../../domain/EnvironmentVariable.js';
 import { TYPES } from '../../types.js';
-let PushEnvToSsmCommandHandler = class PushEnvToSsmCommandHandler {
+let PushEnvToSecretsCommandHandler = class PushEnvToSecretsCommandHandler {
     constructor(secretProvider, variableStore, logger) {
         this.secretProvider = secretProvider;
         this.variableStore = variableStore;
         this.logger = logger;
     }
     /**
-     * Handles the PushEnvToSsmCommand which imports environment variables
-     * from a local file and pushes them to AWS SSM.
-     * Uses a map file to determine the SSM parameter path for each environment variable.
+     * Handles the PushEnvToSecretsCommand which imports environment variables
+     * from a local file and pushes them to the secret store.
+     * Uses a map file to determine the secret path for each environment variable.
      *
-     * @param command - The PushEnvToSsmCommand containing mapPath and envFilePath
+     * @param command - The PushEnvToSecretsCommand containing mapPath and envFilePath
      */
     handle(command) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -41,8 +41,8 @@ let PushEnvToSsmCommandHandler = class PushEnvToSsmCommandHandler {
                 this.logger.info(`Starting push operation from '${command.envFilePath}' using map '${command.mapPath}'`);
                 const config = yield this.loadConfiguration(command);
                 const validatedPaths = this.validateAndGroupByPath(config);
-                yield this.pushParametersToSSM(validatedPaths);
-                this.logger.info(`Successfully pushed environment variables from '${command.envFilePath}' to AWS SSM.`);
+                yield this.pushParametersToStore(validatedPaths);
+                this.logger.info(`Successfully pushed environment variables from '${command.envFilePath}' to secret store.`);
             }
             catch (error) {
                 const errorMessage = this.getErrorMessage(error);
@@ -63,62 +63,65 @@ let PushEnvToSsmCommandHandler = class PushEnvToSsmCommandHandler {
         });
     }
     /**
-     * Validates and groups environment variables by SSM path.
-     * Ensures that all variables pointing to the same SSM path have the same value.
-     * Returns a map of SSM path to value.
+     * Validates and groups environment variables by secret path.
+     * Ensures that all variables pointing to the same secret path have the same value.
+     * Returns a map of secret path to value.
      */
     validateAndGroupByPath(config) {
         const { paramMap, envVariables } = config;
         const pathToValueMap = new Map();
-        for (const [envKey, ssmPath] of Object.entries(paramMap)) {
+        for (const [envKey, secretPath] of Object.entries(paramMap)) {
             const envValue = envVariables[envKey];
             if (envValue === undefined) {
                 this.logger.warn(`Warning: Environment variable ${envKey} not found in environment file`);
                 continue;
             }
-            const existing = pathToValueMap.get(ssmPath);
+            const existing = pathToValueMap.get(secretPath);
             if (existing) {
                 if (existing.value !== envValue) {
                     const existingMasked = new EnvironmentVariable(existing.sourceKeys[0], existing.value, true).maskedValue;
                     const newMasked = new EnvironmentVariable(envKey, envValue, true)
                         .maskedValue;
-                    throw new Error(`Conflicting values for SSM path '${ssmPath}': ` +
+                    throw new Error(`Conflicting values for secret path '${secretPath}': ` +
                         `'${existing.sourceKeys[0]}' has value '${existingMasked}' ` +
                         `but '${envKey}' has value '${newMasked}'`);
                 }
                 existing.sourceKeys.push(envKey);
             }
             else {
-                pathToValueMap.set(ssmPath, { value: envValue, sourceKeys: [envKey] });
+                pathToValueMap.set(secretPath, {
+                    value: envValue,
+                    sourceKeys: [envKey],
+                });
             }
         }
         const uniquePaths = pathToValueMap.size;
         const totalVariables = Object.keys(paramMap).length;
-        this.logger.info(`Validated ${totalVariables} environment variables mapping to ${uniquePaths} unique SSM parameters`);
+        this.logger.info(`Validated ${totalVariables} environment variables mapping to ${uniquePaths} unique secrets`);
         return pathToValueMap;
     }
-    pushParametersToSSM(pathToValueMap) {
+    pushParametersToStore(pathToValueMap) {
         return __awaiter(this, void 0, void 0, function* () {
             const pathsToProcess = Array.from(pathToValueMap.keys());
-            this.logger.info(`Processing ${pathsToProcess.length} unique SSM parameters`);
-            // Process parameters in parallel with retry logic for throttling errors
-            const parameterProcessingPromises = Array.from(pathToValueMap.entries()).map(([ssmPath, { value, sourceKeys }]) => {
-                return this.retryWithBackoff(() => this.pushParameter(ssmPath, value, sourceKeys));
+            this.logger.info(`Processing ${pathsToProcess.length} unique secrets`);
+            // Process secrets in parallel with retry logic for throttling errors
+            const parameterProcessingPromises = Array.from(pathToValueMap.entries()).map(([secretPath, { value, sourceKeys }]) => {
+                return this.retryWithBackoff(() => this.pushParameter(secretPath, value, sourceKeys));
             });
             yield Promise.all(parameterProcessingPromises);
         });
     }
-    pushParameter(ssmPath, value, sourceKeys) {
+    pushParameter(secretPath, value, sourceKeys) {
         return __awaiter(this, void 0, void 0, function* () {
             const envVariable = new EnvironmentVariable(sourceKeys[0], value, true);
-            yield this.secretProvider.setSecret(ssmPath, value);
+            yield this.secretProvider.setSecret(secretPath, value);
             const keysDescription = sourceKeys.length > 1 ? `${sourceKeys.join(', ')}` : sourceKeys[0];
-            this.logger.info(`Pushed ${keysDescription}=${envVariable.maskedValue} to AWS SSM at path ${ssmPath}`);
+            this.logger.info(`Pushed ${keysDescription}=${envVariable.maskedValue} to secret store at path ${secretPath}`);
         });
     }
     /**
      * Retries an async operation with exponential backoff and jitter.
-     * Handles AWS SSM throttling errors (TooManyUpdates).
+     * Handles throttling errors from cloud providers.
      */
     retryWithBackoff(operation_1) {
         return __awaiter(this, arguments, void 0, function* (operation, maxRetries = 5, baseDelayMs = 100) {
@@ -131,10 +134,11 @@ let PushEnvToSsmCommandHandler = class PushEnvToSsmCommandHandler {
                     lastError = error;
                     const isThrottlingError = typeof error === 'object' &&
                         error !== null &&
-                        'name' in error &&
-                        (error.name === 'TooManyUpdates' ||
-                            error.name === 'ThrottlingException' ||
-                            error.name === 'TooManyRequestsException');
+                        (('name' in error &&
+                            (error.name === 'TooManyUpdates' ||
+                                error.name === 'ThrottlingException' ||
+                                error.name === 'TooManyRequestsException')) ||
+                            ('statusCode' in error && error.statusCode === 429));
                     if (!isThrottlingError || attempt === maxRetries) {
                         throw error;
                     }
@@ -180,12 +184,12 @@ let PushEnvToSsmCommandHandler = class PushEnvToSsmCommandHandler {
         return `Unknown error: ${String(error)}`;
     }
 };
-PushEnvToSsmCommandHandler = __decorate([
+PushEnvToSecretsCommandHandler = __decorate([
     injectable(),
     __param(0, inject(TYPES.ISecretProvider)),
     __param(1, inject(TYPES.IVariableStore)),
     __param(2, inject(TYPES.ILogger)),
     __metadata("design:paramtypes", [Object, Object, Object])
-], PushEnvToSsmCommandHandler);
-export { PushEnvToSsmCommandHandler };
-//# sourceMappingURL=PushEnvToSsmCommandHandler.js.map
+], PushEnvToSecretsCommandHandler);
+export { PushEnvToSecretsCommandHandler };
+//# sourceMappingURL=PushEnvToSecretsCommandHandler.js.map

package/lib/envilder/application/pushEnvToSecrets/PushEnvToSecretsCommandHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PushEnvToSecretsCommandHandler.js","sourceRoot":"","sources":["../../../../src/envilder/application/pushEnvToSecrets/PushEnvToSecretsCommandHandler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAI1E,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAIhC,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IACzC,YAEmB,cAA+B,EAE/B,aAA6B,EACN,MAAe;QAHtC,mBAAc,GAAd,cAAc,CAAiB;QAE/B,kBAAa,GAAb,aAAa,CAAgB;QACN,WAAM,GAAN,MAAM,CAAS;IACtD,CAAC;IAEJ;;;;;;OAMG;IACG,MAAM,CAAC,OAAgC;;YAC3C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iCAAiC,OAAO,CAAC,WAAW,gBAAgB,OAAO,CAAC,OAAO,GAAG,CACvF,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACrD,MAAM,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBAC3D,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;gBAEjD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mDAAmD,OAAO,CAAC,WAAW,oBAAoB,CAC3F,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,YAAY,EAAE,CAAC,CAAC;gBACtE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAEa,iBAAiB,CAAC,OAAgC;;YAI9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEtE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uCAAuC,OAAO,CAAC,WAAW,GAAG,CAC9D,CAAC;YACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAC1D,OAAO,CAAC,WAAW,CACpB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,SAAS,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,iCAAiC,CACvE,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,SAAS,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,oCAAoC,CAC9E,CAAC;YAEF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QACpC,CAAC;KAAA;IAED;;;;OAIG;IACK,sBAAsB,CAAC,MAG9B;QACC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,GAAG,EAG3B,CAAC;QAEJ,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iCAAiC,MAAM,gCAAgC,CACxE,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAC5C,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EACtB,QAAQ,CAAC,KAAK,EACd,IAAI,CACL,CAAC,WAAW,CAAC;oBACd,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;yBAC9D,WAAW,CAAC;oBACf,MAAM,IAAI,KAAK,CACb,uCAAuC,UAAU,KAAK;wBACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,cAAc,IAAI;wBAC5D,QAAQ,MAAM,gBAAgB,SAAS,GAAG,CAC7C,CAAC;gBACJ,CAAC;gBACD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE;oBAC7B,KAAK,EAAE,QAAQ;oBACf,UAAU,EAAE,CAAC,MAAM,CAAC;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC;QACxC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,aAAa,cAAc,qCAAqC,WAAW,iBAAiB,CAC7F,CAAC;QAEF,OAAO,cAAc,CAAC;IACxB,CAAC;IAEa,qBAAqB,CACjC,cAAoE;;YAEpE,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,cAAc,CAAC,MAAM,iBAAiB,CAAC,CAAC;YAEvE,qEAAqE;YACrE,MAAM,2BAA2B,GAAG,KAAK,CAAC,IAAI,CAC5C,cAAc,CAAC,OAAO,EAAE,CACzB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE;gBAC5C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAChC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAClD,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;KAAA;IAEa,aAAa,CACzB,UAAkB,EAClB,KAAa,EACb,UAAoB;;YAEpB,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAEvD,MAAM,eAAe,GACnB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAErE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,UAAU,eAAe,IAAI,WAAW,CAAC,WAAW,4BAA4B,UAAU,EAAE,CAC7F,CAAC;QACJ,CAAC;KAAA;IAED;;;OAGG;IACW,gBAAgB;6DAC5B,SAA2B,EAC3B,UAAU,GAAG,CAAC,EACd,WAAW,GAAG,GAAG;YAEjB,IAAI,SAAkB,CAAC;YAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;gBACvD,IAAI,CAAC;oBACH,OAAO,MAAM,SAAS,EAAE,CAAC;gBAC3B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,SAAS,GAAG,KAAK,CAAC;oBAElB,MAAM,iBAAiB,GACrB,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,CAAC,CAAC,MAAM,IAAI,KAAK;4BACf,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB;gCAC9B,KAAK,CAAC,IAAI,KAAK,qBAAqB;gCACpC,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC;4BAC7C,CAAC,YAAY,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC;oBAEzD,IAAI,CAAC,iBAAiB,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;wBACjD,MAAM,KAAK,CAAC;oBACd,CAAC;oBAED,MAAM,gBAAgB,GAAG,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC;oBACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,gBAAgB,GAAG,GAAG,CAAC,CAAC,eAAe;oBACtE,MAAM,OAAO,GAAG,gBAAgB,GAAG,MAAM,CAAC;oBAE1C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAED,MAAM,SAAS,CAAC;QAClB,CAAC;KAAA;IAEO,eAAe,CAAC,KAAc;QACpC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,sBAAsB,CAAC;QAChC,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,2BAA2B,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,KAIhB,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,QAAQ,CAAC,OAAO;oBACrB,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE;oBACzC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpB,CAAC;YAED,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,IAAI,QAAQ,CAAC,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,QAAQ,CAAC,OAAO;gBAAE,UAAU,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAEtE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,iBAAiB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACnD,CAAC;YAED,OAAO,iBAAiB,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,CAAC;QAED,OAAO,kBAAkB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3C,CAAC;CACF,CAAA;AA3OY,8BAA8B;IAD1C,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAE7B,WAAA,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAE5B,WAAA,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;;GANb,8BAA8B,CA2O1C"}

package/lib/envilder/application/pushSingle/PushSingleCommand.d.ts

@@ -1,8 +1,8 @@
 export declare class PushSingleCommand {
     readonly key: string;
     readonly value: string;
-    readonly ssmPath: string;
-    constructor(key: string, value: string, ssmPath: string);
-    static create(key: string, value: string, ssmPath: string): PushSingleCommand;
+    readonly secretPath: string;
+    constructor(key: string, value: string, secretPath: string);
+    static create(key: string, value: string, secretPath: string): PushSingleCommand;
 }
 //# sourceMappingURL=PushSingleCommand.d.ts.map

package/lib/envilder/application/pushSingle/PushSingleCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PushSingleCommand.d.ts","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommand.ts"],"names":[],"mappings":"AAAA,qBAAa,iBAAiB;aAEV,GAAG,EAAE,MAAM;aACX,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM;gBAFf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM;IAGjC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,iBAAiB;CAGrB"}
+{"version":3,"file":"PushSingleCommand.d.ts","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommand.ts"],"names":[],"mappings":"AAAA,qBAAa,iBAAiB;aAEV,GAAG,EAAE,MAAM;aACX,KAAK,EAAE,MAAM;aACb,UAAU,EAAE,MAAM;gBAFlB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM;IAGpC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,iBAAiB;CAGrB"}

package/lib/envilder/application/pushSingle/PushSingleCommand.js

@@ -1,11 +1,11 @@
 export class PushSingleCommand {
-    constructor(key, value, ssmPath) {
+    constructor(key, value, secretPath) {
         this.key = key;
         this.value = value;
-        this.ssmPath = ssmPath;
+        this.secretPath = secretPath;
     }
-    static create(key, value, ssmPath) {
-        return new PushSingleCommand(key, value, ssmPath);
+    static create(key, value, secretPath) {
+        return new PushSingleCommand(key, value, secretPath);
     }
 }
 //# sourceMappingURL=PushSingleCommand.js.map

package/lib/envilder/application/pushSingle/PushSingleCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"PushSingleCommand.js","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommand.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAiB;IAC5B,YACkB,GAAW,EACX,KAAa,EACb,OAAe;QAFf,QAAG,GAAH,GAAG,CAAQ;QACX,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAQ;IAC9B,CAAC;IAEJ,MAAM,CAAC,MAAM,CACX,GAAW,EACX,KAAa,EACb,OAAe;QAEf,OAAO,IAAI,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;CACF"}
+{"version":3,"file":"PushSingleCommand.js","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommand.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAiB;IAC5B,YACkB,GAAW,EACX,KAAa,EACb,UAAkB;QAFlB,QAAG,GAAH,GAAG,CAAQ;QACX,UAAK,GAAL,KAAK,CAAQ;QACb,eAAU,GAAV,UAAU,CAAQ;IACjC,CAAC;IAEJ,MAAM,CAAC,MAAM,CACX,GAAW,EACX,KAAa,EACb,UAAkB;QAElB,OAAO,IAAI,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;CACF"}

package/lib/envilder/application/pushSingle/PushSingleCommandHandler.d.ts

@@ -6,9 +6,9 @@ export declare class PushSingleCommandHandler {
     private readonly logger;
     constructor(secretProvider: ISecretProvider, logger: ILogger);
     /**
-     * Handles the PushSingleCommand which pushes a single environment variable to AWS SSM.
+     * Handles the PushSingleCommand which pushes a single environment variable to the secret store.
      *
-     * @param command - The PushSingleCommand containing key, value and ssmPath
+     * @param command - The PushSingleCommand containing key, value and secretPath
      */
     handle(command: PushSingleCommand): Promise<void>;
 }

package/lib/envilder/application/pushSingle/PushSingleCommandHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PushSingleCommandHandler.d.ts","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommandHandler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,qBACa,wBAAwB;IAGjC,OAAO,CAAC,QAAQ,CAAC,cAAc;IACR,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAD7B,cAAc,EAAE,eAAe,EACR,MAAM,EAAE,OAAO;IAGzD;;;;OAIG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAuBxD"}
+{"version":3,"file":"PushSingleCommandHandler.d.ts","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommandHandler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,qBACa,wBAAwB;IAGjC,OAAO,CAAC,QAAQ,CAAC,cAAc;IACR,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAD7B,cAAc,EAAE,eAAe,EACR,MAAM,EAAE,OAAO;IAGzD;;;;OAIG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAyBxD"}

package/lib/envilder/application/pushSingle/PushSingleCommandHandler.js

@@ -28,21 +28,21 @@ let PushSingleCommandHandler = class PushSingleCommandHandler {
         this.logger = logger;
     }
     /**
-     * Handles the PushSingleCommand which pushes a single environment variable to AWS SSM.
+     * Handles the PushSingleCommand which pushes a single environment variable to the secret store.
      *
-     * @param command - The PushSingleCommand containing key, value and ssmPath
+     * @param command - The PushSingleCommand containing key, value and secretPath
      */
     handle(command) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                this.logger.info(`Starting push operation for key '${command.key}' to path '${command.ssmPath}'`);
+                this.logger.info(`Starting push operation for key '${command.key}' to path '${EnvironmentVariable.maskSecretPath(command.secretPath)}'`);
                 const envVariable = new EnvironmentVariable(command.key, command.value, true);
-                yield this.secretProvider.setSecret(command.ssmPath, command.value);
-                this.logger.info(`Pushed ${command.key}=${envVariable.maskedValue} to AWS SSM at path ${command.ssmPath}`);
+                yield this.secretProvider.setSecret(command.secretPath, command.value);
+                this.logger.info(`Pushed ${command.key}=${envVariable.maskedValue} to secret store at path ${EnvironmentVariable.maskSecretPath(command.secretPath)}`);
             }
             catch (error) {
                 const errorMessage = error instanceof Error ? error.message : String(error);
-                this.logger.error(`Failed to push variable to SSM: ${errorMessage}`);
+                this.logger.error(`Failed to push variable to secret store: ${errorMessage}`);
                 throw error;
             }
         });

package/lib/envilder/application/pushSingle/PushSingleCommandHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"PushSingleCommandHandler.js","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommandHandler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAG1E,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAIhC,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YAEmB,cAA+B,EACR,MAAe;QADtC,mBAAc,GAAd,cAAc,CAAiB;QACR,WAAM,GAAN,MAAM,CAAS;IACtD,CAAC;IAEJ;;;;OAIG;IACG,MAAM,CAAC,OAA0B;;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,OAAO,CAAC,GAAG,cAAc,OAAO,CAAC,OAAO,GAAG,CAChF,CAAC;gBAEF,MAAM,WAAW,GAAG,IAAI,mBAAmB,CACzC,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,KAAK,EACb,IAAI,CACL,CAAC;gBAEF,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,UAAU,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,WAAW,uBAAuB,OAAO,CAAC,OAAO,EAAE,CACzF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;gBACrE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAnCY,wBAAwB;IADpC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAE7B,WAAA,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;;GAJb,wBAAwB,CAmCpC"}
+{"version":3,"file":"PushSingleCommandHandler.js","sourceRoot":"","sources":["../../../../src/envilder/application/pushSingle/PushSingleCommandHandler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAG1E,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAIhC,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YAEmB,cAA+B,EACR,MAAe;QADtC,mBAAc,GAAd,cAAc,CAAiB;QACR,WAAM,GAAN,MAAM,CAAS;IACtD,CAAC;IAEJ;;;;OAIG;IACG,MAAM,CAAC,OAA0B;;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,OAAO,CAAC,GAAG,cAAc,mBAAmB,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CACvH,CAAC;gBAEF,MAAM,WAAW,GAAG,IAAI,mBAAmB,CACzC,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,KAAK,EACb,IAAI,CACL,CAAC;gBAEF,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,UAAU,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,WAAW,4BAA4B,mBAAmB,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CACrI,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,4CAA4C,YAAY,EAAE,CAC3D,CAAC;gBACF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AArCY,wBAAwB;IADpC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAE7B,WAAA,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;;GAJb,wBAAwB,CAqCpC"}

package/lib/envilder/domain/CliOptions.d.ts

@@ -19,15 +19,15 @@ export type CliOptions = {
      */
     value?: string;
     /**
-     * SSM path for the single environment variable
+     * Secret path in the cloud provider for the single environment variable
      */
-    ssmPath?: string;
+    secretPath?: string;
     /**
      * AWS CLI profile to use
      */
     profile?: string;
     /**
-     * Flag to push local .env file back to AWS SSM (renamed from import)
+     * Flag to push local .env file back to the secret store
      */
     push?: boolean;
 };

package/lib/envilder/domain/CliOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CliOptions.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/CliOptions.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC"}
+{"version":3,"file":"CliOptions.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/CliOptions.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC"}

package/lib/envilder/domain/EnvironmentVariable.d.ts

@@ -29,6 +29,11 @@ export declare class EnvironmentVariable {
      * Returns a masked representation of the value for logging
      */
     get maskedValue(): string;
+    /**
+     * Returns a masked representation of a secret path for safe logging.
+     */
+    static maskSecretPath(path: string): string;
+    private static mask;
     /**
      * Validates the environment variable
      */

package/lib/envilder/domain/EnvironmentVariable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnvironmentVariable.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/EnvironmentVariable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IAEpC;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,OAAe;IAOlE;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAQxB;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ;CAWjB"}
+{"version":3,"file":"EnvironmentVariable.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/EnvironmentVariable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IAEpC;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,OAAe;IAOlE;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAMxB;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI3C,OAAO,CAAC,MAAM,CAAC,IAAI;IAMnB;;OAEG;IACH,OAAO,CAAC,QAAQ;CAWjB"}

package/lib/envilder/domain/EnvironmentVariable.js

@@ -40,9 +40,18 @@ export class EnvironmentVariable {
         if (!this._isSecret) {
             return this._value;
         }
-        return this._value.length > 10
-            ? '*'.repeat(this._value.length - 3) + this._value.slice(-3)
-            : '*'.repeat(this._value.length);
+        return EnvironmentVariable.mask(this._value, 10);
+    }
+    /**
+     * Returns a masked representation of a secret path for safe logging.
+     */
+    static maskSecretPath(path) {
+        return EnvironmentVariable.mask(path, 3);
+    }
+    static mask(value, minLengthToShowTail) {
+        return value.length > minLengthToShowTail
+            ? '*'.repeat(value.length - 3) + value.slice(-3)
+            : '*'.repeat(value.length);
     }
     /**
      * Validates the environment variable

package/lib/envilder/domain/EnvironmentVariable.js.map

@@ -1 +1 @@
-{"version":3,"file":"EnvironmentVariable.js","sourceRoot":"","sources":["../../../src/envilder/domain/EnvironmentVariable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAK9B;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,KAAa,EAAE,WAAoB,KAAK;QAChE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;YAC5B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,IAAY,EAAE,KAAa;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,8BAA8B,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"EnvironmentVariable.js","sourceRoot":"","sources":["../../../src/envilder/domain/EnvironmentVariable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAK9B;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,KAAa,EAAE,WAAoB,KAAK;QAChE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,IAAY;QAChC,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,IAAI,CAAC,KAAa,EAAE,mBAA2B;QAC5D,OAAO,KAAK,CAAC,MAAM,GAAG,mBAAmB;YACvC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,IAAY,EAAE,KAAa;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,8BAA8B,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/lib/envilder/domain/MapFileConfig.d.ts

@@ -0,0 +1,10 @@
+export type MapFileConfig = {
+    provider?: string;
+    vaultUrl?: string;
+    profile?: string;
+};
+export type ParsedMapFile = {
+    config: MapFileConfig;
+    mappings: Record<string, string>;
+};
+//# sourceMappingURL=MapFileConfig.d.ts.map

package/lib/envilder/domain/MapFileConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapFileConfig.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/MapFileConfig.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC"}

package/lib/envilder/domain/MapFileConfig.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=MapFileConfig.js.map

package/lib/envilder/domain/MapFileConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MapFileConfig.js","sourceRoot":"","sources":["../../../src/envilder/domain/MapFileConfig.ts"],"names":[],"mappings":""}

package/lib/envilder/domain/OperationMode.d.ts

@@ -1,6 +1,6 @@
 export declare enum OperationMode {
     PUSH_SINGLE = "PUSH_SINGLE",
-    PUSH_ENV_TO_SSM = "PUSH_ENV_TO_SSM",
-    PULL_SSM_TO_ENV = "PULL_SSM_TO_ENV"
+    PUSH_ENV_TO_SECRETS = "PUSH_ENV_TO_SECRETS",
+    PULL_SECRETS_TO_ENV = "PULL_SECRETS_TO_ENV"
 }
 //# sourceMappingURL=OperationMode.d.ts.map

package/lib/envilder/domain/OperationMode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OperationMode.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/OperationMode.ts"],"names":[],"mappings":"AAAA,oBAAY,aAAa;IACvB,WAAW,gBAAgB;IAC3B,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;CACpC"}
+{"version":3,"file":"OperationMode.d.ts","sourceRoot":"","sources":["../../../src/envilder/domain/OperationMode.ts"],"names":[],"mappings":"AAAA,oBAAY,aAAa;IACvB,WAAW,gBAAgB;IAC3B,mBAAmB,wBAAwB;IAC3C,mBAAmB,wBAAwB;CAC5C"}

package/lib/envilder/domain/OperationMode.js

@@ -1,7 +1,7 @@
 export var OperationMode;
 (function (OperationMode) {
     OperationMode["PUSH_SINGLE"] = "PUSH_SINGLE";
-    OperationMode["PUSH_ENV_TO_SSM"] = "PUSH_ENV_TO_SSM";
-    OperationMode["PULL_SSM_TO_ENV"] = "PULL_SSM_TO_ENV";
+    OperationMode["PUSH_ENV_TO_SECRETS"] = "PUSH_ENV_TO_SECRETS";
+    OperationMode["PULL_SECRETS_TO_ENV"] = "PULL_SECRETS_TO_ENV";
 })(OperationMode || (OperationMode = {}));
 //# sourceMappingURL=OperationMode.js.map

package/lib/envilder/domain/OperationMode.js.map

@@ -1 +1 @@
-{"version":3,"file":"OperationMode.js","sourceRoot":"","sources":["../../../src/envilder/domain/OperationMode.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,4CAA2B,CAAA;IAC3B,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;AACrC,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB"}
+{"version":3,"file":"OperationMode.js","sourceRoot":"","sources":["../../../src/envilder/domain/OperationMode.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,4CAA2B,CAAA;IAC3B,4DAA2C,CAAA;IAC3C,4DAA2C,CAAA;AAC7C,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB"}

package/lib/envilder/domain/ports/IVariableStore.d.ts

@@ -1,5 +1,7 @@
+import type { ParsedMapFile } from '../MapFileConfig.js';
 export interface IVariableStore {
     getMapping(source: string): Promise<Record<string, string>>;
+    getParsedMapping(source: string): Promise<ParsedMapFile>;
     getEnvironment(source: string): Promise<Record<string, string>>;
     saveEnvironment(destination: string, envVariables: Record<string, string>): Promise<void>;
 }

package/lib/envilder/domain/ports/IVariableStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IVariableStore.d.ts","sourceRoot":"","sources":["../../../../src/envilder/domain/ports/IVariableStore.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}
+{"version":3,"file":"IVariableStore.d.ts","sourceRoot":"","sources":["../../../../src/envilder/domain/ports/IVariableStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/lib/envilder/infrastructure/aws/AwsSecretProviderFactory.d.ts

@@ -0,0 +1,4 @@
+import type { MapFileConfig } from '../../domain/MapFileConfig.js';
+import type { ISecretProvider } from '../../domain/ports/ISecretProvider.js';
+export declare function createAwsSecretProvider(config: MapFileConfig): ISecretProvider;
+//# sourceMappingURL=AwsSecretProviderFactory.d.ts.map

package/lib/envilder/infrastructure/aws/AwsSecretProviderFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSecretProviderFactory.d.ts","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/aws/AwsSecretProviderFactory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAG7E,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,GACpB,eAAe,CAKjB"}

package/lib/envilder/infrastructure/aws/AwsSecretProviderFactory.js

@@ -0,0 +1,10 @@
+import { SSM } from '@aws-sdk/client-ssm';
+import { fromIni } from '@aws-sdk/credential-providers';
+import { AwsSsmSecretProvider } from './AwsSsmSecretProvider.js';
+export function createAwsSecretProvider(config) {
+    const ssm = config.profile
+        ? new SSM({ credentials: fromIni({ profile: config.profile }) })
+        : new SSM();
+    return new AwsSsmSecretProvider(ssm);
+}
+//# sourceMappingURL=AwsSecretProviderFactory.js.map

package/lib/envilder/infrastructure/aws/AwsSecretProviderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsSecretProviderFactory.js","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/aws/AwsSecretProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAGxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,UAAU,uBAAuB,CACrC,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO;QACxB,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC"}

package/lib/envilder/infrastructure/aws/AwsSsmSecretProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AwsSsmSecretProvider.d.ts","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/aws/AwsSsmSecretProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,GAAG,EACT,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,qBACa,oBAAqB,YAAW,eAAe;IAC1D,OAAO,CAAC,GAAG,CAAM;gBAEL,GAAG,EAAE,GAAG;IAId,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAuBpD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAS5D"}
+{"version":3,"file":"AwsSsmSecretProvider.d.ts","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/aws/AwsSsmSecretProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,GAAG,EACT,MAAM,qBAAqB,CAAC;AAI7B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,qBACa,oBAAqB,YAAW,eAAe;IAC1D,OAAO,CAAC,GAAG,CAAM;gBAEL,GAAG,EAAE,GAAG;IAId,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAyBpD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAS5D"}

package/lib/envilder/infrastructure/aws/AwsSsmSecretProvider.js

@@ -18,6 +18,8 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 import { GetParameterCommand, PutParameterCommand, } from '@aws-sdk/client-ssm';
 import { injectable } from 'inversify';
+import { EnvironmentVariable } from '../../domain/EnvironmentVariable.js';
+import { SecretOperationError } from '../../domain/errors/DomainErrors.js';
 let AwsSsmSecretProvider = class AwsSsmSecretProvider {
     constructor(ssm) {
         this.ssm = ssm;
@@ -40,7 +42,7 @@ let AwsSsmSecretProvider = class AwsSsmSecretProvider {
                     return undefined;
                 }
                 const errorMessage = error instanceof Error ? error.message : String(error);
-                throw new Error(`Failed to get secret ${name}: ${errorMessage}`);
+                throw new SecretOperationError(`Failed to get secret ${EnvironmentVariable.maskSecretPath(name)}: ${errorMessage}`);
             }
         });
     }

package/lib/envilder/infrastructure/aws/AwsSsmSecretProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AwsSsmSecretProvider.js","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/aws/AwsSsmSecretProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAIhC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAG/B,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAEK,SAAS,CAAC,IAAY;;YAC1B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;oBACtC,IAAI,EAAE,IAAI;oBACV,cAAc,EAAE,IAAI;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnD,OAAO,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,OAAO,KAAK,KAAK,QAAQ;oBACzB,KAAK,KAAK,IAAI;oBACd,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAClC,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,KAAK,YAAY,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;KAAA;IAEK,SAAS,CAAC,IAAY,EAAE,KAAa;;YACzC,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;gBACtC,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;KAAA;CACF,CAAA;AAvCY,oBAAoB;IADhC,UAAU,EAAE;;GACA,oBAAoB,CAuChC"}
+{"version":3,"file":"AwsSsmSecretProvider.js","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/aws/AwsSsmSecretProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAIpE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAG/B,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAEK,SAAS,CAAC,IAAY;;YAC1B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;oBACtC,IAAI,EAAE,IAAI;oBACV,cAAc,EAAE,IAAI;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnD,OAAO,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,KAAK,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,OAAO,KAAK,KAAK,QAAQ;oBACzB,KAAK,KAAK,IAAI;oBACd,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAClC,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,mBAAmB,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,YAAY,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;KAAA;IAEK,SAAS,CAAC,IAAY,EAAE,KAAa;;YACzC,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;gBACtC,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;KAAA;CACF,CAAA;AAzCY,oBAAoB;IADhC,UAAU,EAAE;;GACA,oBAAoB,CAyChC"}

package/lib/envilder/infrastructure/azure/AzureKeyVaultSecretProvider.d.ts

@@ -0,0 +1,17 @@
+import type { SecretClient } from '@azure/keyvault-secrets';
+import type { ISecretProvider } from '../../domain/ports/ISecretProvider.js';
+export declare class AzureKeyVaultSecretProvider implements ISecretProvider {
+    private client;
+    private normalizedNameRegistry;
+    constructor(client: SecretClient);
+    getSecret(name: string): Promise<string | undefined>;
+    setSecret(name: string, value: string): Promise<void>;
+    /**
+     * Validates that the secret name meets Azure Key Vault naming constraints.
+     * @see https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#objects-identifiers-and-versioning
+     */
+    private validateSecretName;
+    private resolveSecretName;
+    private normalizeSecretName;
+}
+//# sourceMappingURL=AzureKeyVaultSecretProvider.d.ts.map

package/lib/envilder/infrastructure/azure/AzureKeyVaultSecretProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AzureKeyVaultSecretProvider.d.ts","sourceRoot":"","sources":["../../../../src/envilder/infrastructure/azure/AzureKeyVaultSecretProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAO5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,qBACa,2BAA4B,YAAW,eAAe;IACjE,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,sBAAsB,CAA6B;gBAE/C,MAAM,EAAE,YAAY;IAI1B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAsBpD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,iBAAiB;IAsBzB,OAAO,CAAC,mBAAmB;CA+B5B"}