sandstream-kit 1.0.0

package/dist/secrets-rotate-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-rotate-cli.js","sourceRoot":"","sources":["../src/secrets-rotate-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,uBAAuB;QAAE,OAAO,SAAS,CAAC;IACrH,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAAE,OAAO,SAAS,CAAC;IACpG,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,YAAY,CAAC;IAC7E,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE;oBACL,yDAAyD;oBACzD,0CAA0C;oBAC1C,qDAAqD;oBACrD,iGAAiG;oBACjG,+DAA+D;iBAChE;gBACD,cAAc,EAAE,4BAA4B;gBAC5C,UAAU,EACR,qFAAqF;gBACvF,OAAO,EAAE,6CAA6C;aACvD,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE;oBACL,4DAA4D;oBAC5D,mEAAmE;oBACnE,kDAAkD;oBAClD,sEAAsE;oBACtE,4BAA4B;iBAC7B;gBACD,cAAc,EAAE,kCAAkC;gBAClD,UAAU,EACR,0HAA0H;gBAC5H,OAAO,EAAE,kFAAkF;aAC5F,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE;oBACL,uDAAuD;oBACvD,+EAA+E;oBAC/E,yEAAyE;iBAC1E;gBACD,cAAc,EAAE,0BAA0B;gBAC1C,UAAU,EACR,+EAA+E;gBACjF,OAAO,EAAE,sDAAsD;aAChE,CAAC;QACJ,KAAK,YAAY;YACf,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE;oBACL,uEAAuE;oBACvE,wCAAwC;oBACxC,oEAAoE;oBACpE,yBAAyB;iBAC1B;gBACD,cAAc,EAAE,oBAAoB;gBACpC,UAAU,EACR,qEAAqE;gBACvE,OAAO,EACL,qHAAqH;aACxH,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE;oBACL,8DAA8D;oBAC9D,0CAA0C;oBAC1C,yDAAyD;iBAC1D;gBACD,cAAc,EAAE,gDAAgD;gBAChE,UAAU,EAAE,2CAA2C;gBACvD,OAAO,EAAE,4EAA4E;aACtF,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,QAAQ;gBACR,KAAK,EAAE;oBACL,4DAA4D;oBAC5D,+DAA+D;oBAC/D,qEAAqE;iBACtE;gBACD,cAAc,EAAE,4BAA4B;aAC7C,CAAC;IACN,CAAC;AACH,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAA2B,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,SAAS,iBAAiB;IACxB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0I,EAC1I,OAAe,EACf,EAAE,WAAW,GAAG,KAAK,KAAgC,EAAE;IAEvD,MAAM,IAAI,GAA8E,EAAE,CAAC;IAC3F,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,+EAA+E;IAC/E,yEAAyE;IACzE,gDAAgD;IAChD,IAAI,GAAG,EAAE,WAAW;QAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;SAC9C,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACrH,IAAI,GAAG,EAAE,WAAW;QAAE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC;SAChD,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7E,IAAI,GAAG,EAAE,UAAU;QAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;SAC7C,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACrF,IAAI,GAAG,EAAE,UAAU;QAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,OAAe,EACf,IAAc;IAEd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,6CAA6C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAErD,qEAAqE;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,UAAU,GACd,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC5E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,0DAA0D,CAAC,CAAC,KAAK,EAAE,CAC5E,CAAC;QACF,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,6GAA6G,CAAC,CAAC,KAAK,EAAE,CAC/H,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4EAA4E;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,IAAI,GACN,OAAO,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACnF,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,mBAAmB,IAAI,kDAAkD,CAAC,CAAC,KAAK,EAAE,CAC3F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,KAAK,SAAS,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEvC,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,qDAAqD,CAAC,CAAC,IAAI,6CAA6C,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC,KAAK,EAAE,CACpK,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kEAAkE;IAClE,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,8BAA8B,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,6BAA6B,OAAO,CAAC,gBAAgB,eAAe,CAAC,CAAC,KAAK,EAAE,CACtF,CAAC;IACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,oBAAoB,OAAO,CAAC,OAAO,CAAC,kBAAkB,gBAAgB,OAAO,CAAC,OAAO,CAAC,iBAAiB,GAAG,CAAC,CAAC,KAAK,EAAE,CAC5H,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAE/B,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1G,sEAAsE;IACtE,yEAAyE;IACzE,6BAA6B;IAC7B,IACE,YAAY;QACZ,OAAO,CAAC,OAAO;QACf,IAAI,KAAK,iBAAiB;QAC1B,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB;QACnC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EACjC,CAAC;QACD,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,kEAAkE,CAAC,CAAC,KAAK,EAAE,CACpF,CAAC;QACF,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,mGAAmG,CAAC,CAAC,KAAK,EAAE,CACrH,CAAC;QACF,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,yBAAyB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,yEAAyE,CAAC,CAAC,KAAK,EAAE,CACzJ,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,kCAAkC,CAAC,CAAC,KAAK,IAAI,CACtG,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,MAAM,wEAAwE,CAAC,CAAC,KAAK,IAAI,CAC/F,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CACV,GAAG,CAAC,CAAC,MAAM,yGAAyG,CAAC,CAAC,KAAK,EAAE,CAC9H,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,mDAAmD,CAAC,CAAC,KAAK,IAAI,CACvE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,0CAA0C;IAC1C,MAAM,IAAI,GAAG,IAAI,KAAK,iBAAiB;QACrC,CAAC,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,4DAA4D;IAC5D,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACxB,MAAM,UAAU,GACd,IAAI,KAAK,iBAAiB;YACxB,CAAC,CAAC,gEAAgE;YAClE,CAAC,CAAC,+CAA+C,CAAC;QACtD,0EAA0E;QAC1E,qFAAqF;QACrF,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5B,UAAU,EACV,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC5C,IAAI,KAAK,iBAAiB,CAC3B,CAAC;QACF,IAAI,CAAC,EAAE,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,KAAK,IAAI,iBAAiB,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,8FAA8F,CAAC,CAAC,KAAK,EAAE,CAChH,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,gBAAgB,CAAC,CAAC,GAAG,gBAAgB,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,EAAE,CACtG,CAAC;IAEF,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC7D,OAAO,CAAC,IAAI,CACV,GAAG,CAAC,CAAC,MAAM,8EAA8E,CAAC,CAAC,KAAK,IAAI,CACrG,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAC5C,MAAM,CAAC,OAAO,CAAC,KAAK,EACpB,OAAO,EACP,QAAQ,EACR,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CACzC,CAAC;IAEF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,yBAAyB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,MAAM,kDAAkD,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CACtF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,oBAAoB,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,4BAA4B,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,8BAA8B,CAAC,CAAC,KAAK,IAAI,CAC1H,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,6EAA6E,CAAC,CAAC,KAAK,EAAE,CAC/F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,UAAqC,CAAC;IAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvD,4EAA4E;IAC5E,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;QAChC,OAAO,MAAM,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAC5E,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,gEAAgE;IAChE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC,KAAK,IAAI,CACrH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CACT,SAAS;gBACP,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE;gBAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CACtC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,EAAE,CACpF,CAAC;QACF,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,yCAAyC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,wCAAwC,CAAC,CAAC,IAAI,sBAAsB,OAAO,iBAAiB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,2CAA2C,CAAC,CAAC,KAAK,IAAI,CAC1K,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,0CAA0C,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,CAC7G,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;QACnD,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IAEH,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC/B,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,UAAU,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,UAAU,CAAC,CAAC,KAAK,IAAI,CACzI,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,2DAA2D,CAAC,CAAC,KAAK,IAAI,CAC/E,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sDAAsD;IACtD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,gDAAgD;IAChD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpF,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAC5C,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,GAAG,EACR,KAAK,EACL,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;IAE/D,4EAA4E;IAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CACX,GAAG,CAAC,CAAC,GAAG,2CAA2C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CACtF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,MAAM,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAA8B,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,SAAS,IAAI,CAAC;YAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,WAAW,IAAI,CAAC;YAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,iBAAiB,IAAI,CAAC;YAAE,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,YAAY,IAAI,CAAC;YAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,SAAS,IAAI,CAAC;YAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtD,IAAI,cAAc,IAAI,CAAC;YAAE,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QAEzE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,SAAS,GAAG,KAAK,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,MAAM,gHAAgH,CAAC,CAAC,KAAK,IAAI,CACvI,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,WAAW,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,2DAA2D,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,0BAA0B,CAAC,CAAC,KAAK,IAAI,CAChJ,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/secrets-rotate.d.ts

@@ -0,0 +1,38 @@
+import type { SecretsConfig } from "./config.js";
+/**
+ * Generates a cryptographically random opaque token suitable for rotating
+ * services that accept arbitrary high-entropy secrets (signing keys, HMAC
+ * shared-secrets, generic API tokens). Returns base64url so the value is
+ * safe to embed in headers, env vars, and shell-pipe inputs.
+ *
+ * For services with a native rotation API (Stripe `roll-keys`, AWS IAM
+ * `create-access-key`, GCP service-account-key-create), prefer the
+ * service-specific flow in PR R3 — that's the only way to get a key the
+ * service will recognize. This helper is only for opaque secrets.
+ */
+export declare function generateRandomToken(byteLength?: number): string;
+export interface RotationPlan {
+    key: string;
+    store: SecretsConfig["store"];
+    source: "explicit" | "random";
+    newValueLength: number;
+    /** Refs the user should also update outside kit (deploy platforms) */
+    externalTargets: string[];
+}
+/**
+ * Builds a rotation plan from a key name + the user's CLI flags.
+ *
+ * - `--value <v>`     explicit new value
+ * - `--random [N]`    generate a fresh base64url token (N bytes, default 32)
+ *
+ * Per-service rotation (Stripe / AWS IAM / GCP IAM) is deferred to PR R3.
+ */
+export declare function planRotation(key: string, config: SecretsConfig, flags: {
+    value?: string;
+    random?: number | true;
+}): {
+    plan: RotationPlan;
+    value: string;
+} | {
+    error: string;
+};

package/dist/secrets-rotate.js

@@ -0,0 +1,65 @@
+import { randomBytes } from "node:crypto";
+/**
+ * Generates a cryptographically random opaque token suitable for rotating
+ * services that accept arbitrary high-entropy secrets (signing keys, HMAC
+ * shared-secrets, generic API tokens). Returns base64url so the value is
+ * safe to embed in headers, env vars, and shell-pipe inputs.
+ *
+ * For services with a native rotation API (Stripe `roll-keys`, AWS IAM
+ * `create-access-key`, GCP service-account-key-create), prefer the
+ * service-specific flow in PR R3 — that's the only way to get a key the
+ * service will recognize. This helper is only for opaque secrets.
+ */
+export function generateRandomToken(byteLength = 32) {
+    return randomBytes(byteLength).toString("base64url");
+}
+/**
+ * Builds a rotation plan from a key name + the user's CLI flags.
+ *
+ * - `--value <v>`     explicit new value
+ * - `--random [N]`    generate a fresh base64url token (N bytes, default 32)
+ *
+ * Per-service rotation (Stripe / AWS IAM / GCP IAM) is deferred to PR R3.
+ */
+export function planRotation(key, config, flags) {
+    if (!config.keys || !config.keys[key]) {
+        return { error: `Key "${key}" not found in [secrets.keys]` };
+    }
+    let value;
+    let source;
+    if (typeof flags.value === "string" && flags.value.length > 0) {
+        value = flags.value;
+        source = "explicit";
+    }
+    else if (flags.random !== undefined) {
+        const bytes = typeof flags.random === "number" ? flags.random : 32;
+        if (bytes < 16 || bytes > 256) {
+            return { error: `--random <N> must be between 16 and 256 bytes` };
+        }
+        value = generateRandomToken(bytes);
+        source = "random";
+    }
+    else {
+        return {
+            error: "Provide --value <new> (explicit) or --random [N] (generate fresh). Per-service rotation (Stripe/AWS IAM/GCP) coming in PR R3.",
+        };
+    }
+    // External-target hints — surface where else the user has to update the
+    // key after the vault write. We don't push these in MVP; that's PR R2.
+    const externalTargets = [];
+    // Heuristic: common platforms users tend to configure.
+    // We can't introspect them here (no .kit-targets.json yet), so list
+    // the ones any deploy pipeline commonly touches.
+    externalTargets.push("Vercel project env (per environment)", "GitHub repo secrets", "CI provider env vars");
+    return {
+        plan: {
+            key,
+            store: config.store,
+            source,
+            newValueLength: value.length,
+            externalTargets,
+        },
+        value,
+    };
+}
+//# sourceMappingURL=secrets-rotate.js.map

package/dist/secrets-rotate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-rotate.js","sourceRoot":"","sources":["../src/secrets-rotate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,EAAE;IACjD,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACvD,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,MAAqB,EACrB,KAAiD;IAEjD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,QAAQ,GAAG,+BAA+B,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,MAA8B,CAAC;IACnC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACpB,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;QACpE,CAAC;QACD,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,OAAO;YACL,KAAK,EACH,+HAA+H;SAClI,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,uDAAuD;IACvD,oEAAoE;IACpE,iDAAiD;IACjD,eAAe,CAAC,IAAI,CAClB,sCAAsC,EACtC,qBAAqB,EACrB,sBAAsB,CACvB,CAAC;IAEF,OAAO;QACL,IAAI,EAAE;YACJ,GAAG;YACH,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,MAAM;YAC5B,eAAe;SAChB;QACD,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/secrets-service.d.ts

@@ -0,0 +1,73 @@
+import type { Secret, EncryptionKey, SecretShare, SecretAccessLog, VaultMetrics, SecretType, RotationPolicy, AccessLevel } from "./secrets-model.js";
+/**
+ * Initialize vault encryption key for team
+ */
+export declare function initializeVault(team_id: string): {
+    key: EncryptionKey;
+    error?: string;
+};
+/**
+ * Store encrypted secret
+ */
+export declare function storeSecret(team_id: string, name: string, secret_value: string, type: SecretType, created_by: string, access_level?: AccessLevel, rotation_policy?: RotationPolicy, description?: string, expires_at?: string, tags?: string[]): {
+    secret: Secret;
+    error?: string;
+};
+/**
+ * Retrieve and decrypt secret (audit logged)
+ */
+export declare function retrieveSecret(team_id: string, secret_id: string, user_id: string, ip_address?: string): {
+    value: string;
+    error?: string;
+};
+/**
+ * Rotate secret (new encryption key, retain value)
+ */
+export declare function rotateSecret(team_id: string, secret_id: string, rotated_by: string, reason?: "scheduled" | "manual" | "compromised"): {
+    secret: Secret;
+    error?: string;
+};
+/**
+ * Share secret with user or team
+ */
+export declare function shareSecret(team_id: string, secret_id: string, shared_by: string, shared_with_user_id?: string, shared_with_team_id?: string, access_expires_at?: string, one_time?: boolean): {
+    share: SecretShare;
+    error?: string;
+};
+/**
+ * Revoke secret access
+ */
+export declare function revokeSecret(team_id: string, secret_id: string, revoked_by: string): {
+    success: boolean;
+    error?: string;
+};
+/**
+ * Get secret metadata (without value)
+ */
+export declare function getSecretMetadata(team_id: string, secret_id: string): {
+    secret: Omit<Secret, "encrypted_value"> | null;
+};
+/**
+ * List team secrets (metadata only)
+ */
+export declare function listSecrets(team_id: string, type?: SecretType): {
+    secrets: Omit<Secret, "encrypted_value">[];
+};
+/**
+ * Rotate encryption key (decommission old key)
+ */
+export declare function rotateEncryptionKey(team_id: string, rotated_by: string): {
+    key: EncryptionKey;
+    error?: string;
+};
+/**
+ * Get vault metrics
+ */
+export declare function getVaultMetrics(team_id: string): VaultMetrics;
+/**
+ * Get access audit logs
+ */
+export declare function getAccessLogs(team_id: string, limit?: number): {
+    logs: SecretAccessLog[];
+    total: number;
+};

package/dist/secrets-service.js

@@ -0,0 +1,283 @@
+import { randomUUID } from "node:crypto";
+const secrets = new Map();
+const encryptionKeys = new Map();
+const secretShares = new Map();
+const accessLogs = [];
+const rotationHistory = [];
+/**
+ * Initialize vault encryption key for team
+ */
+export function initializeVault(team_id) {
+    const existing = Array.from(encryptionKeys.values()).find((k) => k.team_id === team_id && k.status === "active");
+    if (existing) {
+        return { key: existing };
+    }
+    const key = {
+        id: `key_${randomUUID()}`,
+        team_id,
+        key_version: 1,
+        algorithm: "aes-256-gcm",
+        created_at: new Date().toISOString(),
+        status: "active",
+    };
+    encryptionKeys.set(key.id, key);
+    logAccess(team_id, "system", "created", "success");
+    return { key };
+}
+/**
+ * Store encrypted secret
+ */
+export function storeSecret(team_id, name, secret_value, type, created_by, access_level = "team", rotation_policy = "never", description, expires_at, tags) {
+    if (!name || !secret_value) {
+        return { secret: {}, error: "Name and value required" };
+    }
+    // Get active encryption key
+    const activeKey = Array.from(encryptionKeys.values()).find((k) => k.team_id === team_id && k.status === "active");
+    if (!activeKey) {
+        return { secret: {}, error: "Vault not initialized" };
+    }
+    // Simulate encryption (in production, use real encryption)
+    const encrypted_value = Buffer.from(secret_value).toString("base64");
+    const secret = {
+        id: `secret_${randomUUID()}`,
+        team_id,
+        name,
+        description,
+        type,
+        encrypted_value,
+        encryption_key_id: activeKey.id,
+        access_level,
+        created_by,
+        created_at: new Date().toISOString(),
+        updated_at: new Date().toISOString(),
+        expires_at,
+        rotation_policy,
+        tags,
+    };
+    // Set next rotation date
+    if (rotation_policy !== "never") {
+        const days = parseInt(rotation_policy);
+        secret.next_rotation_at = new Date(Date.now() + days * 24 * 60 * 60 * 1000).toISOString();
+    }
+    secrets.set(secret.id, secret);
+    logAccess(team_id, created_by, "created", "success", secret.id);
+    return { secret };
+}
+/**
+ * Retrieve and decrypt secret (audit logged)
+ */
+export function retrieveSecret(team_id, secret_id, user_id, ip_address) {
+    const secret = secrets.get(secret_id);
+    if (!secret || secret.team_id !== team_id) {
+        logAccess(team_id, user_id, "read", "denied", secret_id, "Secret not found");
+        return { value: "", error: "Secret not found" };
+    }
+    // Check expiry
+    if (secret.expires_at && new Date(secret.expires_at) < new Date()) {
+        logAccess(team_id, user_id, "read", "denied", secret_id, "Secret expired");
+        return { value: "", error: "Secret expired" };
+    }
+    // Simulate decryption (in production, use real decryption)
+    const decrypted = Buffer.from(secret.encrypted_value, "base64").toString("utf-8");
+    logAccess(team_id, user_id, "read", "success", secret_id, undefined, ip_address);
+    return { value: decrypted };
+}
+/**
+ * Rotate secret (new encryption key, retain value)
+ */
+export function rotateSecret(team_id, secret_id, rotated_by, reason = "manual") {
+    const secret = secrets.get(secret_id);
+    if (!secret || secret.team_id !== team_id) {
+        return { secret: {}, error: "Secret not found" };
+    }
+    const oldKeyId = secret.encryption_key_id;
+    // Rotate encryption key first (creates new active key)
+    const currentActiveKey = Array.from(encryptionKeys.values()).find((k) => k.team_id === team_id && k.status === "active");
+    if (!currentActiveKey) {
+        return { secret: {}, error: "Vault not initialized" };
+    }
+    // Create new key and retire old one
+    currentActiveKey.status = "retired";
+    currentActiveKey.retired_at = new Date().toISOString();
+    const newKey = {
+        id: `key_${randomUUID()}`,
+        team_id,
+        key_version: currentActiveKey.key_version + 1,
+        algorithm: "aes-256-gcm",
+        created_at: new Date().toISOString(),
+        status: "active",
+    };
+    encryptionKeys.set(newKey.id, newKey);
+    // Decrypt with old key, re-encrypt with new key (simulated)
+    const decrypted = Buffer.from(secret.encrypted_value, "base64").toString("utf-8");
+    const newEncrypted = Buffer.from(decrypted).toString("base64");
+    secret.encryption_key_id = newKey.id;
+    secret.encrypted_value = newEncrypted;
+    secret.last_rotated_at = new Date().toISOString();
+    secret.updated_at = new Date().toISOString();
+    if (secret.rotation_policy !== "never") {
+        const days = parseInt(secret.rotation_policy);
+        secret.next_rotation_at = new Date(Date.now() + days * 24 * 60 * 60 * 1000).toISOString();
+    }
+    // Record rotation history
+    const history = {
+        id: `rot_${randomUUID()}`,
+        secret_id,
+        team_id,
+        rotated_by,
+        old_key_id: oldKeyId,
+        new_key_id: newKey.id,
+        rotated_at: secret.last_rotated_at,
+        reason,
+    };
+    rotationHistory.push(history);
+    logAccess(team_id, rotated_by, "rotated", "success", secret_id);
+    return { secret };
+}
+/**
+ * Share secret with user or team
+ */
+export function shareSecret(team_id, secret_id, shared_by, shared_with_user_id, shared_with_team_id, access_expires_at, one_time = false) {
+    const secret = secrets.get(secret_id);
+    if (!secret || secret.team_id !== team_id) {
+        return { share: {}, error: "Secret not found" };
+    }
+    if (!shared_with_user_id && !shared_with_team_id) {
+        return { share: {}, error: "Must specify user or team" };
+    }
+    const share = {
+        id: `share_${randomUUID()}`,
+        secret_id,
+        team_id,
+        shared_by,
+        shared_with_user_id,
+        shared_with_team_id,
+        access_expires_at,
+        one_time,
+        created_at: new Date().toISOString(),
+    };
+    secretShares.set(share.id, share);
+    logAccess(team_id, shared_by, "shared", "success", secret_id);
+    return { share };
+}
+/**
+ * Revoke secret access
+ */
+export function revokeSecret(team_id, secret_id, revoked_by) {
+    const secret = secrets.get(secret_id);
+    if (!secret || secret.team_id !== team_id) {
+        return { success: false, error: "Secret not found" };
+    }
+    // Revoke all shares
+    Array.from(secretShares.values())
+        .filter((s) => s.secret_id === secret_id)
+        .forEach((s) => secretShares.delete(s.id));
+    // Delete secret
+    secrets.delete(secret_id);
+    logAccess(team_id, revoked_by, "revoked", "success", secret_id);
+    return { success: true };
+}
+/**
+ * Get secret metadata (without value)
+ */
+export function getSecretMetadata(team_id, secret_id) {
+    const secret = secrets.get(secret_id);
+    if (!secret || secret.team_id !== team_id) {
+        return { secret: null };
+    }
+    const { encrypted_value, ...metadata } = secret;
+    return { secret: metadata };
+}
+/**
+ * List team secrets (metadata only)
+ */
+export function listSecrets(team_id, type) {
+    const filtered = Array.from(secrets.values())
+        .filter((s) => s.team_id === team_id && (!type || s.type === type))
+        .map(({ encrypted_value, ...s }) => s);
+    return { secrets: filtered };
+}
+/**
+ * Rotate encryption key (decommission old key)
+ */
+export function rotateEncryptionKey(team_id, rotated_by) {
+    const activeKey = Array.from(encryptionKeys.values()).find((k) => k.team_id === team_id && k.status === "active");
+    if (!activeKey) {
+        return { key: {}, error: "No active key found" };
+    }
+    // Retire old key
+    activeKey.status = "retired";
+    activeKey.retired_at = new Date().toISOString();
+    // Create new key
+    const newKey = {
+        id: `key_${randomUUID()}`,
+        team_id,
+        key_version: activeKey.key_version + 1,
+        algorithm: "aes-256-gcm",
+        created_at: new Date().toISOString(),
+        status: "active",
+    };
+    encryptionKeys.set(newKey.id, newKey);
+    logAccess(team_id, rotated_by, "rotated", "success");
+    return { key: newKey };
+}
+/**
+ * Get vault metrics
+ */
+export function getVaultMetrics(team_id) {
+    const teamSecrets = Array.from(secrets.values()).filter((s) => s.team_id === team_id);
+    const expiring = teamSecrets.filter((s) => s.expires_at && new Date(s.expires_at) < new Date(Date.now() + 7 * 24 * 60 * 60 * 1000));
+    const pendingRotation = teamSecrets.filter((s) => s.next_rotation_at &&
+        new Date(s.next_rotation_at) < new Date() &&
+        s.rotation_policy !== "never");
+    const secretsByType = {
+        api_key: 0,
+        password: 0,
+        oauth_token: 0,
+        database_url: 0,
+        ssh_key: 0,
+        certificate: 0,
+        custom: 0,
+    };
+    teamSecrets.forEach((s) => {
+        secretsByType[s.type]++;
+    });
+    const activeKeys = Array.from(encryptionKeys.values()).filter((k) => k.team_id === team_id && k.status === "active").length;
+    const teamShares = Array.from(secretShares.values()).filter((s) => s.team_id === team_id);
+    return {
+        total_secrets: teamSecrets.length,
+        secrets_by_type: secretsByType,
+        expiring_soon: expiring.length,
+        pending_rotation: pendingRotation.length,
+        total_shares: teamShares.length,
+        active_keys: activeKeys,
+    };
+}
+/**
+ * Get access audit logs
+ */
+export function getAccessLogs(team_id, limit = 100) {
+    const filtered = accessLogs
+        .filter((log) => log.team_id === team_id)
+        .sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime())
+        .slice(0, limit);
+    return { logs: filtered, total: accessLogs.filter((l) => l.team_id === team_id).length };
+}
+/**
+ * Log access event
+ */
+function logAccess(team_id, user_id, action, status, secret_id, reason, ip_address) {
+    const log = {
+        id: `log_${randomUUID()}`,
+        secret_id: secret_id || "",
+        team_id,
+        user_id,
+        action: action,
+        status,
+        reason,
+        ip_address,
+        timestamp: new Date().toISOString(),
+    };
+    accessLogs.push(log);
+}
+//# sourceMappingURL=secrets-service.js.map

package/dist/secrets-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-service.js","sourceRoot":"","sources":["../src/secrets-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC1C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;AACxD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;AACpD,MAAM,UAAU,GAAsB,EAAE,CAAC;AACzC,MAAM,eAAe,GAAsB,EAAE,CAAC;AAE9C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACvD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtD,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,GAAkB;QACzB,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO;QACP,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,QAAQ;KACjB,CAAC;IAEF,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEnD,OAAO,EAAE,GAAG,EAAE,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAAY,EACZ,YAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,eAA4B,MAAM,EAClC,kBAAkC,OAAO,EACzC,WAAoB,EACpB,UAAmB,EACnB,IAAe;IAEf,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,EAAY,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACpE,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtD,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,EAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAClE,CAAC;IAED,2DAA2D;IAC3D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAErE,MAAM,MAAM,GAAW;QACrB,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE;QAC5B,OAAO;QACP,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE,SAAS,CAAC,EAAE;QAC/B,YAAY;QACZ,UAAU;QACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU;QACV,eAAe;QACf,IAAI;KACL,CAAC;IAEF,yBAAyB;IACzB,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,CAAC,gBAAgB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAEhE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,SAAiB,EACjB,OAAe,EACf,UAAmB;IAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAC7E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAClE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAChD,CAAC;IAED,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAElF,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAEjF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,SAAiB,EACjB,UAAkB,EAClB,SAAiD,QAAQ;IAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,EAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE1C,uDAAuD;IACvD,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC/D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtD,CAAC;IAEF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,EAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAClE,CAAC;IAED,oCAAoC;IACpC,gBAAgB,CAAC,MAAM,GAAG,SAAS,CAAC;IACpC,gBAAgB,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEvD,MAAM,MAAM,GAAkB;QAC5B,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO;QACP,WAAW,EAAE,gBAAgB,CAAC,WAAW,GAAG,CAAC;QAC7C,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,QAAQ;KACjB,CAAC;IAEF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAEtC,4DAA4D;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE/D,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC;IACrC,MAAM,CAAC,eAAe,GAAG,YAAY,CAAC;IACtC,MAAM,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE7C,IAAI,MAAM,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5F,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAoB;QAC/B,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,SAAS;QACT,OAAO;QACP,UAAU;QACV,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,MAAM,CAAC,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC,eAAe;QAClC,MAAM;KACP,CAAC;IAEF,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEhE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,SAAiB,EACjB,SAAiB,EACjB,mBAA4B,EAC5B,mBAA4B,EAC5B,iBAA0B,EAC1B,WAAoB,KAAK;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,EAAiB,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,mBAAmB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjD,OAAO,EAAE,KAAK,EAAE,EAAiB,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,SAAS,UAAU,EAAE,EAAE;QAC3B,SAAS;QACT,OAAO;QACP,SAAS;QACT,mBAAmB;QACnB,mBAAmB;QACnB,iBAAiB;QACjB,QAAQ;QACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAE9D,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,SAAiB,EACjB,UAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACvD,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7C,gBAAgB;IAChB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1B,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEhE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,SAAiB;IAEjB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,EAAE,eAAe,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;SAClE,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAEzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,UAAkB;IAElB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtD,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,EAAE,EAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACpE,CAAC;IAED,iBAAiB;IACjB,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEhD,iBAAiB;IACjB,MAAM,MAAM,GAAkB;QAC5B,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,WAAW,GAAG,CAAC;QACtC,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,QAAQ;KACjB,CAAC;IAEF,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAErD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAEtF,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAC/F,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,gBAAgB;QAClB,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,IAAI,IAAI,EAAE;QACzC,CAAC,CAAC,eAAe,KAAK,OAAO,CAChC,CAAC;IAEF,MAAM,aAAa,GAA+B;QAChD,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,CAAC;QACd,MAAM,EAAE,CAAC;KACV,CAAC;IAEF,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtD,CAAC,MAAM,CAAC;IAET,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAE1F,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,MAAM;QACjC,eAAe,EAAE,aAAa;QAC9B,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,gBAAgB,EAAE,eAAe,CAAC,MAAM;QACxC,YAAY,EAAE,UAAU,CAAC,MAAM;QAC/B,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,KAAK,GAAG,GAAG;IAEX,MAAM,QAAQ,GAAG,UAAU;SACxB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;SACjF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEnB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAChB,OAAe,EACf,OAAe,EACf,MAAc,EACd,MAA4B,EAC5B,SAAkB,EAClB,MAAe,EACf,UAAmB;IAEnB,MAAM,GAAG,GAAoB;QAC3B,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,SAAS,EAAE,SAAS,IAAI,EAAE;QAC1B,OAAO;QACP,OAAO;QACP,MAAM,EAAE,MAAa;QACrB,MAAM;QACN,MAAM;QACN,UAAU;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/secrets-set.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `kit secrets set-value <KEY> <VALUE> --env <env>` — write a single
+ * key/value to the configured vault backend without going through the
+ * full migrate flow. Replaces the manual `nano .env.production`
+ * workflow.
+ *
+ * Honors read-only mode (delegates to writeSecretToBackend which has the
+ * gate). Audit-log entry written by the underlying backend write.
+ */
+import type { SecretsConfig } from "./config.js";
+export interface SetValueOptions {
+    /** Override config.secrets.store with this backend. */
+    store?: SecretsConfig["store"];
+    /** Vault path / project / region overrides (per-backend). */
+    vault?: string;
+    project?: string;
+    region?: string;
+    vaultPath?: string;
+}
+export interface SetValueResult {
+    ok: boolean;
+    detail: string;
+    ref?: string;
+}
+export declare function setSecretValue(config: SecretsConfig | undefined, key: string, value: string, opts?: SetValueOptions): Promise<SetValueResult>;

package/dist/secrets-set.js

@@ -0,0 +1,33 @@
+/**
+ * `kit secrets set-value <KEY> <VALUE> --env <env>` — write a single
+ * key/value to the configured vault backend without going through the
+ * full migrate flow. Replaces the manual `nano .env.production`
+ * workflow.
+ *
+ * Honors read-only mode (delegates to writeSecretToBackend which has the
+ * gate). Audit-log entry written by the underlying backend write.
+ */
+import { writeSecretToBackend, isValidKeyName } from "./secrets-migrate.js";
+export async function setSecretValue(config, key, value, opts = {}) {
+    if (!isValidKeyName(key)) {
+        return { ok: false, detail: `invalid key name "${key}"` };
+    }
+    if (!value) {
+        return { ok: false, detail: `empty value for "${key}"` };
+    }
+    const store = opts.store ?? config?.store;
+    if (!store || store === "env") {
+        return {
+            ok: false,
+            detail: "no vault backend configured (set [secrets].store first)",
+        };
+    }
+    const backendOpts = {
+        vault: opts.vault,
+        project: opts.project,
+        region: opts.region,
+        vaultPath: opts.vaultPath,
+    };
+    return writeSecretToBackend(store, key, value, backendOpts);
+}
+//# sourceMappingURL=secrets-set.js.map

package/dist/secrets-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-set.js","sourceRoot":"","sources":["../src/secrets-set.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkB5E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAiC,EACjC,GAAW,EACX,KAAa,EACb,OAAwB,EAAE;IAE1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,GAAG,GAAG,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,GAAG,GAAG,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,EAAE,KAAK,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,yDAAyD;SAClE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAoB;QACnC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;IACF,OAAO,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC"}

package/dist/secrets-sync.d.ts

@@ -0,0 +1,21 @@
+import type { SecretsConfig } from "./config.js";
+export interface SyncResult {
+    target: string;
+    synced: string[];
+    skipped: string[];
+    failed: string[];
+    dryRun: boolean;
+    message: string;
+}
+type SyncTarget = "github" | "dotenv-ci" | "stdout";
+export interface SecretsSyncOptions {
+    target: SyncTarget;
+    dryRun?: boolean;
+    projectPath?: string;
+}
+/**
+ * Resolve secret values from the configured store, then push them to the
+ * requested target (GitHub Actions secrets, .env.ci, or stdout export lines).
+ */
+export declare function syncSecrets(secrets: SecretsConfig, options: SecretsSyncOptions): Promise<SyncResult>;
+export {};