hanzio 1.0.8 → 1.0.10

package/dist/src/secrets/index.js

@@ -1,3 +1,340 @@
+// src/api-wrapper/index.ts
+import { ZodError } from "zod";
+
+class ResponseValidationError extends Error {
+  zodError;
+  rawResponse;
+  validationIssues;
+  constructor(zodError, rawResponse) {
+    const issues = zodError.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ");
+    super(`Response validation failed: ${issues}`);
+    this.name = "ResponseValidationError";
+    this.zodError = zodError;
+    this.rawResponse = rawResponse;
+    this.validationIssues = issues;
+  }
+}
+
+class HttpResponseError extends Error {
+  status;
+  body;
+  constructor(status, body) {
+    super(`HTTP error: ${status} - ${body}`);
+    this.name = "HttpResponseError";
+    this.status = status;
+    this.body = body;
+  }
+}
+function createApiClient(apiConfig) {
+  const request = async (endpointKey, input = {}) => {
+    const endpoint = apiConfig.endpoints[endpointKey];
+    if (!endpoint) {
+      throw new Error(`Unknown API endpoint: ${String(endpointKey)}`);
+    }
+    const { finalUrl, fullUrl } = buildUrl(endpoint, input.reqParams, input.reqQuery, apiConfig.baseApiUrls, apiConfig.defaultBaseApiUrl, input.url);
+    const endpointName = apiConfig.name ? `${apiConfig.name}.${String(endpointKey)}` : String(endpointKey);
+    const startedAt = Date.now();
+    let retryCount = 0;
+    let httpStatus = 0;
+    apiConfig.onRequestStart?.({ endpoint: endpointName, url: fullUrl });
+    try {
+      const config = {
+        method: endpoint.method,
+        url: finalUrl,
+        queryParams: buildQueryParams(endpoint, input.reqQuery),
+        body: buildRequestBody(endpoint, input.reqBody),
+        headers: buildHeaders(endpoint, input.reqHeaders, apiConfig.defaultHeaders ?? {}),
+        doNotEncodeQueryParams: endpoint.doNotEncodeQueryParams,
+        timeoutMs: apiConfig.timeoutMs,
+        fetchFn: apiConfig.fetch ?? fetch
+      };
+      const result = await makeRequestWithRetry(config, apiConfig.retries ?? 3, apiConfig.retryDelayMs ?? 300, (response) => validateAndTransformResponse(endpoint, response), apiConfig.shouldRetry ?? defaultShouldRetry, apiConfig.logger);
+      retryCount = result.retryCount;
+      httpStatus = result.httpStatus;
+      const responseTimeMs = Date.now() - startedAt;
+      const responseSizeMb = calculateSizeInMb(result.validatedData);
+      const requestSizeMb = calculateSizeInMb({
+        method: config.method,
+        url: fullUrl,
+        body: config.body,
+        headers: config.headers
+      });
+      apiConfig.onRequestEnd?.({
+        endpoint: endpointName,
+        url: fullUrl,
+        status: httpStatus,
+        retryCount,
+        responseTimeMs
+      });
+      return {
+        data: result.validatedData,
+        requestSizeMb,
+        responseSizeMb,
+        requestSizeTotalMb: requestSizeMb + responseSizeMb,
+        responseTimeMs,
+        httpStatus,
+        retryCount
+      };
+    } catch (error) {
+      apiConfig.logger?.error?.(error);
+      throw error;
+    }
+  };
+  return { request };
+}
+var createApiWrapper = createApiClient;
+async function validateResponse(schema, data) {
+  try {
+    return await schema.parseAsync(data);
+  } catch (error) {
+    if (error instanceof ZodError) {
+      throw new ResponseValidationError(error, data);
+    }
+    throw error;
+  }
+}
+async function httpRequest(config) {
+  const queryString = config.doNotEncodeQueryParams ? Object.entries(config.queryParams).map(([key, value]) => `${key}=${value}`).join("&") : new URLSearchParams(config.queryParams).toString();
+  const fullUrl = queryString ? `${config.url}?${queryString}` : config.url;
+  const abortController = new AbortController;
+  const timeout = config.timeoutMs === undefined ? undefined : setTimeout(() => abortController.abort(), config.timeoutMs);
+  try {
+    return await config.fetchFn(fullUrl, {
+      method: config.method,
+      headers: config.headers,
+      body: buildFetchBody(config.body, config.headers),
+      signal: abortController.signal
+    });
+  } finally {
+    if (timeout)
+      clearTimeout(timeout);
+  }
+}
+async function makeRequestWithRetry(config, maxRetries, retryDelayMs, validateFn, shouldRetry, logger) {
+  let retryCount = 0;
+  while (true) {
+    try {
+      logger?.debug?.("API request", config);
+      const response = await httpRequest(config);
+      if (response.status >= 400) {
+        if (retryCount < maxRetries && shouldRetry({ response, retryCount, maxRetries })) {
+          retryCount++;
+          await delay(retryDelayMs);
+          continue;
+        }
+        throw new HttpResponseError(response.status, await response.text());
+      }
+      return {
+        validatedData: await validateFn(response),
+        retryCount,
+        httpStatus: response.status
+      };
+    } catch (error) {
+      if (error instanceof HttpResponseError)
+        throw error;
+      if (retryCount >= maxRetries || !shouldRetry({ error, retryCount, maxRetries })) {
+        throw error;
+      }
+      retryCount++;
+      await delay(retryDelayMs);
+    }
+  }
+}
+async function validateAndTransformResponse(endpoint, response) {
+  const responseHeaders = getHeadersAsObject(response.headers);
+  const contentType = responseHeaders["content-type"] ?? "";
+  const responseData = contentType.includes("application/json") ? await response.json() : await response.text();
+  const transformedData = endpoint.resFormatter ? endpoint.resFormatter(responseData, responseHeaders) : responseData;
+  return validateResponse(endpoint.resSchema, transformedData);
+}
+function buildUrl(endpoint, params, reqQuery, baseApiUrls, defaultBaseApiUrl, url) {
+  if (url) {
+    const finalUrl2 = replacePathParams(url, params);
+    const queryString2 = new URLSearchParams(buildQueryParams(endpoint, reqQuery)).toString();
+    return {
+      finalUrl: finalUrl2,
+      fullUrl: queryString2 ? `${finalUrl2}?${queryString2}` : finalUrl2
+    };
+  }
+  const defaultBaseUrl = defaultBaseApiUrl ?? Object.keys(baseApiUrls)[0];
+  if (!defaultBaseUrl) {
+    throw new Error("At least one base API URL is required");
+  }
+  const baseUrlKey = endpoint.baseApiUrl ?? defaultBaseUrl;
+  const configBaseUrl = baseApiUrls[baseUrlKey];
+  if (!configBaseUrl) {
+    throw new Error(`Unknown base API URL: ${baseUrlKey}`);
+  }
+  const baseUrl = typeof configBaseUrl === "function" ? configBaseUrl() : configBaseUrl;
+  const path = typeof endpoint.path === "function" ? endpoint.path(baseUrl) : endpoint.path;
+  const finalUrl = replacePathParams(`${baseUrl}${path}`, params);
+  const queryString = new URLSearchParams(buildQueryParams(endpoint, reqQuery)).toString();
+  return {
+    finalUrl,
+    fullUrl: queryString ? `${finalUrl}?${queryString}` : finalUrl
+  };
+}
+function buildQueryParams(endpoint, query) {
+  const defaultParams = endpoint.reqDefaultQueryParams ?? {};
+  const parsedQuery = endpoint.reqQuerySchema ? endpoint.reqQuerySchema.parse(query) : query ?? {};
+  const merged = { ...defaultParams, ...parsedQuery };
+  return Object.fromEntries(Object.entries(merged).filter(([, value]) => value !== undefined).map(([key, value]) => [key, String(value)]));
+}
+function buildRequestBody(endpoint, body) {
+  if (!endpoint.reqBodySchema)
+    return body;
+  const parsedBody = endpoint.reqBodySchema.parse(body);
+  if (endpoint.reqBodyFormat !== "form-data") {
+    return parsedBody;
+  }
+  const formData = new FormData;
+  for (const [key, value] of Object.entries(parsedBody)) {
+    if (value == null)
+      continue;
+    formData.set(key, value instanceof Blob ? value : String(value));
+  }
+  return formData;
+}
+function buildHeaders(endpoint, headers, defaultHeaders) {
+  const contentType = endpoint.reqBodyFormat === "json" ? "application/json" : undefined;
+  const parsedHeaders = endpoint.reqHeadersSchema ? endpoint.reqHeadersSchema.parse(headers) : headers ?? {};
+  return {
+    ...defaultHeaders,
+    ...contentType && { "Content-Type": contentType },
+    ...endpoint.defaultHeaders,
+    ...parsedHeaders
+  };
+}
+function buildFetchBody(body, headers) {
+  if (body === undefined || body === null)
+    return;
+  if (body instanceof FormData || body instanceof Blob)
+    return body;
+  if (headers["Content-Type"] === "application/json")
+    return JSON.stringify(body);
+  return body;
+}
+function replacePathParams(path, params) {
+  return path.replace(/:(\w+)/g, (_, key) => {
+    const value = params?.[key];
+    if (value === undefined) {
+      throw new Error(`Missing required path parameter: ${key}`);
+    }
+    return encodeURIComponent(String(value));
+  });
+}
+function getHeadersAsObject(headers) {
+  const result = {};
+  headers.forEach((value, key) => {
+    result[key] = value;
+  });
+  return result;
+}
+function calculateSizeInMb(data) {
+  const sizeInBytes = new TextEncoder().encode(JSON.stringify(data)).length;
+  return sizeInBytes / (1024 * 1024);
+}
+function defaultShouldRetry({ error, response }) {
+  if (error)
+    return true;
+  return response ? response.status >= 500 : false;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+// src/secrets/infisical.ts
+import { z } from "zod";
+var defaultFetch = globalThis.fetch;
+var infisicalAuthResponseSchema = z.object({
+  accessToken: z.string()
+});
+var infisicalSecretSchema = z.object({
+  secretKey: z.string(),
+  secretValue: z.string()
+});
+var infisicalSecretsResponseSchema = z.object({
+  secrets: z.array(infisicalSecretSchema)
+});
+async function loadInfisicalSecrets({
+  keys,
+  projectId,
+  environment,
+  siteUrl,
+  clientIdEnvKey,
+  clientSecretEnvKey
+}) {
+  const clientId = process.env[clientIdEnvKey];
+  const clientSecret = process.env[clientSecretEnvKey];
+  if (!clientId || !clientSecret) {
+    throw new Error("Missing Infisical credentials");
+  }
+  const infisical = createInfisicalApiClient(siteUrl);
+  const { data: auth } = await infisical.request("login", {
+    reqBody: {
+      clientId,
+      clientSecret
+    }
+  });
+  const { data } = await infisical.request("listSecrets", {
+    reqHeaders: {
+      Authorization: `Bearer ${auth.accessToken}`
+    },
+    reqQuery: {
+      environment,
+      projectId,
+      secretPath: "/",
+      viewSecretValue: true,
+      expandSecretReferences: true,
+      includeImports: true
+    }
+  });
+  const wantedKeys = new Set(keys);
+  return Object.fromEntries(data.secrets.filter((secret) => wantedKeys.has(secret.secretKey)).map((secret) => [secret.secretKey, secret.secretValue]));
+}
+function createInfisicalApiClient(siteUrl) {
+  return createApiClient({
+    name: "infisical",
+    baseApiUrls: {
+      infisical: siteUrl
+    },
+    defaultBaseApiUrl: "infisical",
+    fetch: getFetch(),
+    retries: 1,
+    endpoints: {
+      login: {
+        method: "POST",
+        path: "/api/v1/auth/universal-auth/login",
+        reqBodySchema: z.object({
+          clientId: z.string(),
+          clientSecret: z.string()
+        }),
+        resSchema: infisicalAuthResponseSchema,
+        reqBodyFormat: "json"
+      },
+      listSecrets: {
+        method: "GET",
+        path: "/api/v4/secrets",
+        reqHeadersSchema: z.object({
+          Authorization: z.string()
+        }),
+        reqQuerySchema: z.object({
+          projectId: z.string(),
+          environment: z.string(),
+          secretPath: z.string(),
+          viewSecretValue: z.boolean(),
+          expandSecretReferences: z.boolean(),
+          includeImports: z.boolean()
+        }),
+        resSchema: infisicalSecretsResponseSchema
+      }
+    }
+  });
+}
+function getFetch() {
+  return globalThis.fetch ?? defaultFetch;
+}
+
 // src/secrets/vite.ts
 function getViteDefine(secretSet) {
   return Object.fromEntries(Object.entries(secretSet.secrets()).map(([key, value]) => [
@@ -14,10 +351,6 @@ function viteSecretSetPlugin(secretSet) {
   };
 }
 
-// src/secrets/index.ts
-import { InfisicalSDK } from "@infisical/sdk";
-import { networkInterfaces } from "node:os";
-
 // src/cool-console-log/index.ts
 var terminalColors = {
   reset: "\x1B[0m",
@@ -125,8 +458,6 @@ function logBanner(text, color = "cyan", options = {}) {
 
 // src/secrets/index.ts
 var DEFAULT_INFISICAL_SITE_URL = "https://eu.infisical.com";
-var LOCAL_IP_VALUE = "LOCAL_IP";
-var VPN_INTERFACE_RE = /^(utun|tun|tailscale|wg|ipsec|ppp)/i;
 var logger = createCoolLogger();
 function getSecretEnvironment() {
   const env = process.env.SECRETS_ENV || "development";
@@ -139,13 +470,7 @@ function getSecretEnvironment() {
 async function defineSecretSet(keys, options) {
   const keySet = [...new Set(keys)];
   const loader = options.loader ?? loadInfisicalSecrets;
-  const getLocalIp = options.getLocalIp ?? getLocalIpAddress;
   let cachedSecrets = null;
-  const resolveValue = (value) => {
-    if (value === LOCAL_IP_VALUE)
-      return getLocalIp();
-    return value;
-  };
   const loadSecrets = async (force = false) => {
     const envSecrets = readEnvSecrets(keySet, force ? cachedSecrets : null);
     const keysMissingFromEnv = keySet.filter((key) => !envSecrets[key]);
@@ -165,7 +490,7 @@ async function defineSecretSet(keys, options) {
     }
     const nextSecrets = Object.fromEntries(keySet.map((key) => [
       key,
-      resolveValue(envSecrets[key] ?? loadedSecrets[key])
+      envSecrets[key] ?? loadedSecrets[key]
     ]));
     for (const [key, value] of Object.entries(nextSecrets)) {
       process.env[key] = value;
@@ -179,7 +504,7 @@ async function defineSecretSet(keys, options) {
       if (!value) {
         throw new Error(`Secret ${key} not found`);
       }
-      return resolveValue(value);
+      return value;
     },
     secrets() {
       if (!cachedSecrets) {
@@ -195,31 +520,6 @@ async function defineSecretSet(keys, options) {
   await loadSecrets();
   return secretSet;
 }
-async function loadInfisicalSecrets({
-  keys,
-  projectId,
-  environment,
-  siteUrl,
-  clientIdEnvKey,
-  clientSecretEnvKey
-}) {
-  const clientId = process.env[clientIdEnvKey];
-  const clientSecret = process.env[clientSecretEnvKey];
-  if (!clientId || !clientSecret) {
-    throw new Error("Missing Infisical credentials");
-  }
-  const client = new InfisicalSDK({ siteUrl });
-  await client.auth().universalAuth.login({
-    clientId,
-    clientSecret
-  });
-  const { secrets } = await client.secrets().listSecrets({
-    environment,
-    projectId
-  });
-  const wantedKeys = new Set(keys);
-  return Object.fromEntries(secrets.filter((secret) => wantedKeys.has(secret.secretKey)).map((secret) => [secret.secretKey, secret.secretValue]));
-}
 function resolveEnvironment(environment) {
   if (typeof environment === "function")
     return environment();
@@ -237,24 +537,9 @@ function readEnvSecrets(keys, previousSecrets = null) {
     return value && value !== previousSecrets?.[key];
   }).map((key) => [key, process.env[key]]));
 }
-function getLocalIpAddress() {
-  const interfaces = networkInterfaces();
-  for (const name of Object.keys(interfaces)) {
-    if (VPN_INTERFACE_RE.test(name))
-      continue;
-    const nets = interfaces[name];
-    if (!nets)
-      continue;
-    for (const net of nets) {
-      if (net.family === "IPv4" && !net.internal) {
-        return net.address;
-      }
-    }
-  }
-  return "127.0.0.1";
-}
 export {
   viteSecretSetPlugin,
+  loadInfisicalSecrets,
   getViteDefine,
   getSecretEnvironment,
   defineSecretSet