envilder 0.1.0__tar.gz

envilder-0.1.0/.gitignore

@@ -0,0 +1,389 @@
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
+
+# User-specific files
+*.rsuser
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+#env with credentials
+.env
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Mono auto generated files
+mono_crash.*
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+[Aa][Rr][Mm]/
+[Aa][Rr][Mm]64/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+[Ll]ogs/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUnit
+*.VisualState.xml
+TestResult.xml
+nunit-*.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_h.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*_wpftmp.csproj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+lib/
+dit/
+/package/
+envilder-*.tgz
+
+# GitHub Action compiled files - only track the bundle
+github-action/dist/
+!github-action/dist/index.js
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# NuGet Symbol Packages
+*.snupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+*.appxbundle
+*.appxupload
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!?*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+*- [Bb]ackup.rdl
+*- [Bb]ackup ([0-9]).rdl
+*- [Bb]ackup ([0-9][0-9]).rdl
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# CodeRush personal settings
+.cr/personal
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder
+.mfractor/
+
+# Local History for Visual Studio
+.localhistory/
+
+# BeatPulse healthcheck temp database
+healthchecksdb
+
+# Backup folder for Package Reference Convert tool in Visual Studio 2017
+MigrationBackup/
+
+# Ionide (cross platform F# VS Code tools) working folder
+.ionide/
+
+.DS_Store
+.vs
+
+
+coverage
+coveragereport
+*.cobertura.xml
+changed_files.txt
+
+# python venv
+*venv/
+deactivate/
+
+# draw io
+*.drawio.bkp
+*.drawio.dtmp
+
+# Rider
+.idea/
+
+# Playwright test results
+.playwright-mcp/
+
+dist/
+
+# Astro
+.astro/

envilder-0.1.0/PKG-INFO

@@ -0,0 +1,166 @@
+Metadata-Version: 2.4
+Name: envilder
+Version: 0.1.0
+Summary: Securely load environment variables from AWS SSM Parameter Store or Azure Key Vault.
+Project-URL: Homepage, https://github.com/macalbert/envilder
+Project-URL: Repository, https://github.com/macalbert/envilder
+Project-URL: Documentation, https://github.com/macalbert/envilder/tree/main/src/sdks/python
+Project-URL: Issues, https://github.com/macalbert/envilder/issues
+Author: macalbert
+License: MIT
+Keywords: aws,azure,envilder,environment,keyvault,secrets,ssm
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Requires-Dist: azure-identity>=1.14
+Requires-Dist: azure-keyvault-secrets>=4.7
+Requires-Dist: boto3>=1.26
+Provides-Extra: dev
+Requires-Dist: black>=24.0; extra == 'dev'
+Requires-Dist: boto3-stubs[ssm]>=1.26; extra == 'dev'
+Requires-Dist: isort>=5.13; extra == 'dev'
+Requires-Dist: mypy>=1.10; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: requests>=2.31; extra == 'dev'
+Requires-Dist: testcontainers[localstack]>=4.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# Envilder Python SDK
+
+Securely load environment variables from **AWS SSM Parameter Store** or **Azure Key Vault** directly into your Python application.
+Zero vendor lock-in — secrets stay in your cloud.
+
+Part of the [Envilder](https://github.com/macalbert/envilder) project.
+
+## Prerequisites
+
+- Python 3.10+
+- **AWS provider**: AWS credentials configured (CLI, environment variables, or IAM role)
+- **Azure provider**: Azure credentials via `az login`, managed identity, or environment variables
+
+## Install
+
+```bash
+pip install envilder
+```
+
+## Quick Start
+
+### Direct usage
+
+```python
+from envilder import (
+    EnvilderClient,
+    MapFileParser,
+    SecretProviderFactory,
+)
+
+json_content = open('secrets-map.json').read()
+map_file = MapFileParser().parse(json_content)
+provider = SecretProviderFactory.create(map_file.config)
+client = EnvilderClient(provider)
+secrets = client.resolve_secrets(map_file)
+
+print(secrets['DB_PASSWORD'])
+```
+
+### Inject into environment
+
+```python
+EnvilderClient.inject_into_environment(secrets)
+
+import os
+print(os.environ['DB_PASSWORD'])
+```
+
+### With runtime overrides (EnvilderOptions)
+
+Override the map file's `$config` at runtime — useful for switching providers per environment:
+
+```python
+from envilder import EnvilderOptions, SecretProviderType
+
+options = EnvilderOptions(
+    provider=SecretProviderType.AZURE,
+    vault_url='https://my-vault.vault.azure.net',
+)
+provider = SecretProviderFactory.create(map_file.config, options)
+```
+
+## Map File Format
+
+```json
+{
+  "$config": {
+    "provider": "aws",
+    "profile": "my-profile"
+  },
+  "DB_PASSWORD": "/app/prod/db-password",
+  "API_KEY": "/app/prod/api-key"
+}
+```
+
+Supported providers: `aws` (default), `azure`.
+
+For Azure, add `vaultUrl`:
+
+```json
+{
+  "$config": {
+    "provider": "azure",
+    "vaultUrl": "https://my-vault.vault.azure.net"
+  },
+  "DB_PASSWORD": "db-password",
+  "API_KEY": "api-key"
+}
+```
+
+## License
+
+MIT
+
+## Development
+
+### Setup
+
+```bash
+# From the repo root
+make install-sdk-python
+```
+
+### Quality checks
+
+```bash
+make check-sdk-python    # black + isort + mypy (no changes)
+make format-sdk-python   # auto-format
+```
+
+### Running tests
+
+Unit tests run without any external dependencies:
+
+```bash
+cd tests/sdks/python
+python -m pytest -v -m "not acceptance"
+```
+
+Acceptance tests require **Docker** and a **LocalStack auth token**:
+
+```bash
+export LOCALSTACK_AUTH_TOKEN=<your-token>
+cd tests/sdks/python
+python -m pytest -v -m acceptance
+```
+
+All tests:
+
+```bash
+make test-sdk-python
+```

envilder-0.1.0/README.md

@@ -0,0 +1,132 @@
+# Envilder Python SDK
+
+Securely load environment variables from **AWS SSM Parameter Store** or **Azure Key Vault** directly into your Python application.
+Zero vendor lock-in — secrets stay in your cloud.
+
+Part of the [Envilder](https://github.com/macalbert/envilder) project.
+
+## Prerequisites
+
+- Python 3.10+
+- **AWS provider**: AWS credentials configured (CLI, environment variables, or IAM role)
+- **Azure provider**: Azure credentials via `az login`, managed identity, or environment variables
+
+## Install
+
+```bash
+pip install envilder
+```
+
+## Quick Start
+
+### Direct usage
+
+```python
+from envilder import (
+    EnvilderClient,
+    MapFileParser,
+    SecretProviderFactory,
+)
+
+json_content = open('secrets-map.json').read()
+map_file = MapFileParser().parse(json_content)
+provider = SecretProviderFactory.create(map_file.config)
+client = EnvilderClient(provider)
+secrets = client.resolve_secrets(map_file)
+
+print(secrets['DB_PASSWORD'])
+```
+
+### Inject into environment
+
+```python
+EnvilderClient.inject_into_environment(secrets)
+
+import os
+print(os.environ['DB_PASSWORD'])
+```
+
+### With runtime overrides (EnvilderOptions)
+
+Override the map file's `$config` at runtime — useful for switching providers per environment:
+
+```python
+from envilder import EnvilderOptions, SecretProviderType
+
+options = EnvilderOptions(
+    provider=SecretProviderType.AZURE,
+    vault_url='https://my-vault.vault.azure.net',
+)
+provider = SecretProviderFactory.create(map_file.config, options)
+```
+
+## Map File Format
+
+```json
+{
+  "$config": {
+    "provider": "aws",
+    "profile": "my-profile"
+  },
+  "DB_PASSWORD": "/app/prod/db-password",
+  "API_KEY": "/app/prod/api-key"
+}
+```
+
+Supported providers: `aws` (default), `azure`.
+
+For Azure, add `vaultUrl`:
+
+```json
+{
+  "$config": {
+    "provider": "azure",
+    "vaultUrl": "https://my-vault.vault.azure.net"
+  },
+  "DB_PASSWORD": "db-password",
+  "API_KEY": "api-key"
+}
+```
+
+## License
+
+MIT
+
+## Development
+
+### Setup
+
+```bash
+# From the repo root
+make install-sdk-python
+```
+
+### Quality checks
+
+```bash
+make check-sdk-python    # black + isort + mypy (no changes)
+make format-sdk-python   # auto-format
+```
+
+### Running tests
+
+Unit tests run without any external dependencies:
+
+```bash
+cd tests/sdks/python
+python -m pytest -v -m "not acceptance"
+```
+
+Acceptance tests require **Docker** and a **LocalStack auth token**:
+
+```bash
+export LOCALSTACK_AUTH_TOKEN=<your-token>
+cd tests/sdks/python
+python -m pytest -v -m acceptance
+```
+
+All tests:
+
+```bash
+make test-sdk-python
+```

envilder-0.1.0/envilder/__init__.py

@@ -0,0 +1,29 @@
+from envilder.application.envilder_client import EnvilderClient
+from envilder.application.map_file_parser import MapFileParser
+from envilder.domain.envilder_options import EnvilderOptions
+from envilder.domain.map_file_config import MapFileConfig
+from envilder.domain.parsed_map_file import ParsedMapFile
+from envilder.domain.ports.secret_provider import ISecretProvider
+from envilder.domain.secret_provider_type import SecretProviderType
+from envilder.infrastructure.aws.aws_ssm_secret_provider import (
+    AwsSsmSecretProvider,
+)
+from envilder.infrastructure.azure.azure_key_vault_secret_provider import (
+    AzureKeyVaultSecretProvider,
+)
+from envilder.infrastructure.secret_provider_factory import (
+    SecretProviderFactory,
+)
+
+__all__ = [
+    "AwsSsmSecretProvider",
+    "AzureKeyVaultSecretProvider",
+    "EnvilderClient",
+    "EnvilderOptions",
+    "ISecretProvider",
+    "MapFileConfig",
+    "MapFileParser",
+    "ParsedMapFile",
+    "SecretProviderFactory",
+    "SecretProviderType",
+]

envilder-0.1.0/envilder/application/__init__.py

@@ -0,0 +1,7 @@
+from envilder.application.envilder_client import EnvilderClient
+from envilder.application.map_file_parser import MapFileParser
+
+__all__ = [
+    "EnvilderClient",
+    "MapFileParser",
+]