vaultkeeper 0.2.0 → 0.3.0

package/dist/index.cjs

@@ -4,7 +4,7 @@ var child_process = require('child_process');
 var fs5 = require('fs/promises');
 var path5 = require('path');
 var os4 = require('os');
-var crypto3 = require('crypto');
+var crypto4 = require('crypto');
 var fs4 = require('fs');
 var jose = require('jose');
 
@@ -29,7 +29,7 @@ function _interopNamespace(e) {
 var fs5__namespace = /*#__PURE__*/_interopNamespace(fs5);
 var path5__namespace = /*#__PURE__*/_interopNamespace(path5);
 var os4__namespace = /*#__PURE__*/_interopNamespace(os4);
-var crypto3__namespace = /*#__PURE__*/_interopNamespace(crypto3);
+var crypto4__namespace = /*#__PURE__*/_interopNamespace(crypto4);
 var fs4__namespace = /*#__PURE__*/_interopNamespace(fs4);
 
 // src/errors.ts
@@ -197,6 +197,11 @@ var RotationInProgressError = class extends VaultError {
   }
 };
 
+// src/backend/types.ts
+function isListableBackend(backend) {
+  return "list" in backend && typeof backend.list === "function";
+}
+
 // src/backend/registry.ts
 var BackendRegistry = class {
   static backends = /* @__PURE__ */ new Map();
@@ -232,6 +237,33 @@ var BackendRegistry = class {
   static getTypes() {
     return Array.from(this.backends.keys());
   }
+  /**
+   * Returns backend types that are available on the current system.
+   *
+   * @remarks
+   * Creates each registered backend via its factory, calls `isAvailable()`,
+   * and returns only the type identifiers whose backend reports availability.
+   * If a backend's `isAvailable()` call throws, that backend is excluded from
+   * the result rather than propagating the error.
+   *
+   * @returns Promise resolving to an array of available backend type identifiers
+   * @public
+   */
+  static async getAvailableTypes() {
+    const entries = Array.from(this.backends.entries());
+    const results = await Promise.all(
+      entries.map(async ([type, factory]) => {
+        try {
+          const backend = factory();
+          const available = await backend.isAvailable();
+          return available ? type : null;
+        } catch {
+          return null;
+        }
+      })
+    );
+    return results.filter((type) => type !== null);
+  }
 };
 async function execCommand(command, args, options) {
   const result = await execCommandFull(command, args);
@@ -265,7 +297,7 @@ path5__namespace.join(".vaultkeeper", "file");
 path5__namespace.join(".vaultkeeper", "yubikey");
 function hashExecutable(filePath) {
   return new Promise((resolve, reject) => {
-    const hash = crypto3__namespace.createHash("sha256");
+    const hash = crypto4__namespace.createHash("sha256");
     const stream = fs4__namespace.createReadStream(filePath);
     stream.on("data", (chunk) => {
       hash.update(chunk);
@@ -565,10 +597,10 @@ var KeyManager = class {
   #rotating = false;
   /** Generate a new 32-byte key with a timestamp-based id. */
   generateKey() {
-    const randomSuffix = crypto3__namespace.randomBytes(4).toString("hex");
+    const randomSuffix = crypto4__namespace.randomBytes(4).toString("hex");
     return {
       id: `k-${String(Date.now())}-${randomSuffix}`,
-      key: new Uint8Array(crypto3__namespace.randomBytes(32)),
+      key: new Uint8Array(crypto4__namespace.randomBytes(32)),
       createdAt: /* @__PURE__ */ new Date()
     };
   }
@@ -1236,7 +1268,7 @@ var VaultKeeper = class _VaultKeeper {
     }
     const now = Math.floor(Date.now() / 1e3);
     const claims = {
-      jti: crypto3__namespace.randomUUID(),
+      jti: crypto4__namespace.randomUUID(),
       exp: now + ttlMinutes * 60,
       iat: now,
       sub: secretName,
@@ -1476,5 +1508,6 @@ exports.TokenRevokedError = TokenRevokedError;
 exports.UsageLimitExceededError = UsageLimitExceededError;
 exports.VaultError = VaultError;
 exports.VaultKeeper = VaultKeeper;
+exports.isListableBackend = isListableBackend;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map