@confkit/azure/dist/index.cjs

[](https://www.npmjs.com/package/@confkit/azure) [](https://github.com/alexdotpink/confkit/blob/main/LICENSE) ![node](https://img.shields.io/ba

"use strict";
var __defProp = Object.defineProperty;
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
var __getOwnPropNames = Object.getOwnPropertyNames;
var __hasOwnProp = Object.prototype.hasOwnProperty;
var __export = (target, all) => {
  for (var name in all)
    __defProp(target, name, { get: all[name], enumerable: true });
};
var __copyProps = (to, from, except, desc) => {
  if (from && typeof from === "object" || typeof from === "function") {
    for (let key of __getOwnPropNames(from))
      if (!__hasOwnProp.call(to, key) && key !== except)
        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
  }
  return to;
};
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

// src/index.ts
var index_exports = {};
__export(index_exports, {
  azureKeyVaultSource: () => azureKeyVaultSource,
  default: () => index_default
});
module.exports = __toCommonJS(index_exports);
var import_identity = require("@azure/identity");
var import_keyvault_secrets = require("@azure/keyvault-secrets");
function defaultKeyFromName(name) {
  return name.replace(/[^A-Za-z0-9_]/g, "_").toUpperCase();
}
function azureKeyVaultSource(opts) {
  const cred = opts.credential ?? new import_identity.DefaultAzureCredential();
  const client = new import_keyvault_secrets.SecretClient(opts.vaultUrl, cred);
  const mapNameToKey = opts.mapNameToKey ?? defaultKeyFromName;
  let cache;
  let timer;
  async function fetchNow() {
    const values = {};
    const versions = {};
    const names = [];
    for await (const prop of client.listPropertiesOfSecrets().byPage({ maxPageSize: 100 })) {
      for (const p of prop) {
        const name = p.name;
        if (opts.namePrefix && !name.startsWith(opts.namePrefix)) continue;
        names.push(name);
      }
    }
    const maxConc = Math.max(1, Math.min(opts.maxConcurrency ?? 8, 24));
    let i = 0;
    await Promise.all(
      Array.from({ length: maxConc }).map(async () => {
        while (i < names.length) {
          const idx = i++;
          const name = names[idx];
          const key = mapNameToKey(name);
          try {
            const s = await client.getSecret(name);
            const val = s.value ?? "";
            values[key] = val;
            versions[key] = s.properties.version;
          } catch {
          }
        }
      })
    );
    return { values, versions };
  }
  async function refresh() {
    const ttl = opts.ttlMs ?? 5 * 60 * 1e3;
    const jitter = opts.jitter ?? 0.1;
    const now = Date.now();
    const { values: nextValues, versions: nextVersions } = await fetchNow();
    if (cache) {
      const keys = /* @__PURE__ */ new Set([...Object.keys(cache.value), ...Object.keys(nextValues)]);
      for (const k of keys) {
        const prevV = cache.value[k];
        const curV = nextValues[k];
        const prevVer = cache.versions[k];
        const curVer = nextVersions[k];
        if ((prevV !== curV || prevVer !== curVer) && curV !== void 0 && opts.onRotate) {
          opts.onRotate(k, curV, { version: curVer });
        }
      }
    }
    const expires = now + Math.floor(ttl * (1 - jitter + Math.random() * jitter * 2));
    cache = { value: nextValues, expires, versions: nextVersions };
  }
  function schedule() {
    if (!opts.background) return;
    const now = Date.now();
    const ms = cache ? Math.max(0, cache.expires - now) : opts.ttlMs ?? 5 * 60 * 1e3;
    if (timer) clearTimeout(timer);
    timer = setTimeout(async () => {
      try {
        await refresh();
      } finally {
        schedule();
      }
    }, ms);
  }
  return async () => {
    const now = Date.now();
    if (!cache || now >= cache.expires) {
      await refresh();
      schedule();
    }
    return cache.value;
  };
}
var index_default = azureKeyVaultSource;
// Annotate the CommonJS export names for ESM import in node:
0 && (module.exports = {
  azureKeyVaultSource
});
//# sourceMappingURL=index.cjs.map