{
  "name": "@kitiumai/secrets",
  "version": "2.0.0",
  "description": "TypeScript secrets manager + CLI with encryption, audit logs, and pluggable storage backends (file, S3, GCS, Postgres)",
  "keywords": [
    "secrets",
    "secrets-manager",
    "secret-management",
    "secret-store",
    "secret-rotation",
    "encryption",
    "cryptography",
    "aes-256-gcm",
    "envelope-encryption",
    "rbac",
    "access-control",
    "least-privilege",
    "key-rotation",
    "key-management",
    "vault",
    "audit-log",
    "compliance",
    "governance",
    "typescript",
    "node",
    "nodejs",
    "cli",
    "devops",
    "kubernetes",
    "docker",
    "s3",
    "gcs",
    "postgres",
    "kitium",
    "kitiumai"
  ],
  "license": "MIT",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/kitium-ai/secrets.git"
  },
  "bugs": {
    "url": "https://github.com/kitium-ai/secrets/issues"
  },
  "homepage": "https://github.com/kitium-ai/secrets#readme",
  "sideEffects": false,
  "main": "dist/index.js",
  "module": "dist/index.mjs",
  "types": "dist/index.d.ts",
  "exports": {
    ".": {
      "types": "./dist/index.d.ts",
      "import": "./dist/index.mjs",
      "require": "./dist/index.js",
      "default": "./dist/index.mjs"
    },
    "./cli": {
      "types": "./dist/cli.d.ts",
      "import": "./dist/cli.mjs",
      "require": "./dist/cli.js",
      "default": "./dist/cli.mjs"
    },
    "./package.json": "./package.json"
  },
  "files": [
    "dist",
    "README.md",
    "LICENSE",
    "CHANGELOG.md",
    "SECURITY.md"
  ],
  "bin": {
    "secret-engine": "dist/cli.js"
  },
  "scripts": {
    "build": "tsup src/index.ts src/cli.ts --format cjs,esm --dts --sourcemap --clean --target es2020 --platform node",
    "test": "vitest run",
    "test:watch": "vitest",
    "start:server": "node dist/cjs/server.js",
    "dev:server": "ts-node src/server.ts",
    "dev:cli": "ts-node src/cli.ts",
    "typecheck": "tsc -b --noEmit",
    "lint": "eslint src",
    "lint:fix": "eslint src --fix",
    "lint:all": "node --input-type=module -e \"import { lintAll } from '@kitiumai/scripts/lint'; await lintAll(false);\"",
    "test:coverage": "node --input-type=module -e \"import { runTestsCoverage } from '@kitiumai/scripts/test'; await runTestsCoverage();\"",
    "format": "prettier --check .",
    "format:fix": "prettier --write .",
    "security:audit": "node --input-type=module -e \"import { auditDependencies } from '@kitiumai/scripts/security'; const summary = await auditDependencies({ severityThreshold: 'moderate' }); if ((summary.severityCounts?.critical || 0) + (summary.severityCounts?.high || 0) + (summary.severityCounts?.moderate || 0) > 0) { console.log(JSON.stringify(summary, null, 2)); process.exit(1); } console.log('No blocking vulnerabilities');\"",
    "security:secrets": "node --input-type=module -e \"import { scanSecrets } from '@kitiumai/scripts/security'; const result = await scanSecrets({ configPath: '.gitleaks.toml', failOnFinding: true }); if (result.findings?.length) { console.error(JSON.stringify(result.findings, null, 2)); process.exit(1); } console.log('No secrets detected');\"",
    "ci:verify": "pnpm run lint:all && pnpm run test:coverage && pnpm run typecheck",
    "changeset": "ensure-changeset && changeset",
    "version": "ensure-changeset && changeset version",
    "publish:set-token": "set-npm-token",
    "publish:setup": "set-npm-token",
    "publish:check": "npm whoami --registry https://registry.npmjs.org || npm login --registry https://registry.npmjs.org",
    "publish:login": "npm login --registry https://registry.npmjs.org",
    "publish:package": "pnpm run publish:check && pnpm publish --access public --no-git-checks --registry https://registry.npmjs.org",
    "publish:package:token": "pnpm run publish:setup && pnpm publish --access public --no-git-checks --registry https://registry.npmjs.org",
    "publish:package:otp": "pnpm run publish:check && pnpm publish --access public --no-git-checks --registry https://registry.npmjs.org --otp",
    "publish:dry-run": "pnpm publish --access public --no-git-checks --dry-run --registry https://registry.npmjs.org",
    "publish:dry-run:token": "pnpm run publish:setup && pnpm publish --access public --no-git-checks --dry-run --registry https://registry.npmjs.org",
    "release": "pnpm version && pnpm install --lockfile-only"
  },
  "dependencies": {
    "@aws-sdk/client-s3": "^3.490.0",
    "@google-cloud/storage": "^7.9.0",
    "commander": "^12.1.0",
    "express": "^4.19.2",
    "pg": "^8.11.3"
  },
  "devDependencies": {
    "@kitiumai/config": "^3.1.4",
    "@kitiumai/lint": "^3.0.0",
    "@kitiumai/scripts": "^2.0.0",
    "@kitiumai/vitest-helpers": "^3.0.0",
    "@types/express": "^4.17.21",
    "@types/node": "^24.10.1",
    "@types/pg": "^8.16.0",
    "husky": "^9.1.7",
    "ts-node": "^10.9.2",
    "tsup": "^8.2.4",
    "typescript": "^5.6.0",
    "vitest": "^2.1.8",
    "eslint": "^9.15.0"
  },
  "packageManager": "pnpm@10.26.0+sha512.3b3f6c725ebe712506c0ab1ad4133cf86b1f4b687effce62a9b38b4d72e3954242e643190fc51fa1642949c735f403debd44f5cb0edd657abe63a8b6a7e1e402"
}