gina 0.6.2 → 0.6.3

package/framework/v0.6.3/lib/secrets/src/backends/env.js

@@ -0,0 +1,75 @@
+'use strict';
+/*
+ * This file is part of the gina package.
+ * Copyright (c) 2009-2026 Rhinostone <contact@gina.io>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/**
+ * @module lib/secrets/backends/env
+ * @description Environment-backed resolver for `${secret:KEY}` placeholders.
+ * Reads the framework environment first (`getEnvVar(key)`, when the global
+ * is present), then falls back to the raw `process.env[key]` — `filterArgs()`
+ * (`bin/cli`) moves every `GINA_*`/`VENDOR_*`/`USER_*` key out of
+ * `process.env` into `process.gina`, so in CLI and daemon processes a swept
+ * key is only visible through `getEnvVar`. Never-swept processes
+ * (containers, embedders, tests) resolve through `process.env` as before.
+ * Throws the generic `'Secret resolution failed'` Error when neither tier
+ * yields a non-empty string — the user-facing message intentionally omits
+ * the key name. The key is attached non-enumerably to the thrown Error as
+ * `_ginaSecretKey` so callers can log it at debug level without leaking it
+ * through `toString()`.
+ */
+
+/**
+ * Resolve a secret key against the framework environment, then `process.env`.
+ *
+ * @memberof module:lib/secrets/backends/env
+ * @function resolve
+ * @param {string} key - Placeholder key, e.g. `'DB_PASSWORD'`
+ * @returns {string} Non-empty string value from `getEnvVar(key)` or `process.env[key]`
+ * @throws {Error} `'Secret resolution failed'` when neither tier carries a non-empty string
+ *
+ * @example
+ * var env = require('./backends/env');
+ * process.env.DB_PASSWORD = 's3cret';
+ * env.resolve('DB_PASSWORD'); // → 's3cret'
+ *
+ * @example
+ * // In a CLI/daemon process, a shell-exported GINA_* key was swept out of
+ * // process.env into the framework environment — the getEnvVar tier finds it:
+ * // process.gina.GINA_API_TOKEN === 'tok';  delete process.env.GINA_API_TOKEN;
+ * env.resolve('GINA_API_TOKEN'); // → 'tok'  (#B156)
+ *
+ * @example
+ * delete process.env.MISSING;
+ * try {
+ *     env.resolve('MISSING');
+ * } catch (e) {
+ *     e.message;          // 'Secret resolution failed'  ← no key name
+ *     e._ginaSecretKey;   // 'MISSING'                  ← non-enumerable, for debug logging
+ * }
+ */
+function resolve(key) {
+    // #B156 — framework-environment tier first. Boolean values a sweep may
+    // have coerced ("true"/"false") fail the string check below, keeping the
+    // non-empty-STRING contract identical on both tiers.
+    var value = (typeof getEnvVar === 'function' && getEnvVar(key)) || process.env[key];
+    if (typeof value !== 'string' || value === '') {
+        var err = new Error('Secret resolution failed');
+        Object.defineProperty(err, '_ginaSecretKey', {
+            value: key,
+            enumerable: false,
+            configurable: true,
+            writable: true
+        });
+        throw err;
+    }
+    return value;
+}
+
+module.exports = {
+    resolve: resolve
+};

package/framework/{v0.6.2 → v0.6.3}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gina-framework",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "dependencies": {
     "@rhinostone/busboy": "^1.6.1",
     "@rhinostone/swig": "^2.7.2",

package/gna.js

@@ -15,14 +15,14 @@
 'use strict';
 
 // Framework core — the main gna module (lifecycle hooks, lib, etc.)
-var _gna = require('./framework/v0.6.2/core/gna');
+var _gna = require('./framework/v0.6.3/core/gna');
 
 // SuperController and EntitySuper — loaded from their source modules
-var SuperController = require('./framework/v0.6.2/core/controller');
-var EntitySuper     = require('./framework/v0.6.2/core/model/entity');
+var SuperController = require('./framework/v0.6.3/core/controller');
+var EntitySuper     = require('./framework/v0.6.3/core/model/entity');
 
 // uuid — from the lib registry
-var uuid = require('./framework/v0.6.2/lib/uuid');
+var uuid = require('./framework/v0.6.3/lib/uuid');
 
 module.exports = {
 
@@ -82,6 +82,7 @@ module.exports = {
     get setEnvVar()             { return global.setEnvVar; },
     get getProtected()          { return global.getProtected; },
     get filterArgs()            { return global.filterArgs; },
+    get importEnvVars()         { return global.importEnvVars; },
     get getLogDir()             { return global.getLogDir; },
     get getRunDir()             { return global.getRunDir; },
     get getTmpDir()             { return global.getTmpDir; },