secret-rotation-kit · packages

Orchestrates zero-downtime secret rotation lifecycles, including propagation verification, rollback logic, and state management. It provides a `RotationManager` class that requires a pluggable provider adapter to interface with specific secret management services.

Provides structured JSON logging and a Prometheus-compatible metrics registry for the Secret Rotation Kit. It exports `LoggerService` and `MetricsService` classes that generate newline-delimited JSON logs and Prometheus-formatted metric strings, respectively.

AWS Secrets Manager adapter for the Secret Rotation Kit, providing a `SecretProvider` implementation as a class (`AWSProvider`) that handles CRUD, version management (AWSCURRENT, AWSPENDING, AWSPREVIOUS), and rotation sessions via the AWS SDK v3.

A class (`GCPProvider`) that implements the `SecretProvider` interface from the Secret Rotation Kit, backed by the `

Provides a `VaultProvider` class that implements the `SecretProvider` interface for HashiCorp Vault KV v2 engines. It requires the `node-vault` package at runtime to facilitate secret CRUD operations and rotation lifecycle management.

Exposes a REST API and SSE stream for managing secret rotations, health checks, and Prometheus metrics. It provides a `SidecarServer` class that wraps a `RotationManager` instance from the Secret Rotation Kit to handle HTTP requests.

Provides TypeScript interfaces, abstract base classes, and error definitions for building custom secret rotation providers and consumers. This package contains no runtime code and serves as the shared type contract for the Secret Rotation Kit ecosystem.