lade-sdk 0.2.0

Load automatically and hierarchically env variables from secret stores (Infisical/Dopper/1Password).
Documentation
use anyhow::{anyhow, bail, Ok, Result};
use async_process::{Command, Stdio};
use async_trait::async_trait;
use futures::future::try_join_all;
use itertools::Itertools;
use log::{debug, info};
use serde::Deserialize;
use std::{collections::HashMap, fs::File, io::Write};
use tempfile::tempdir;
use url::Url;

use crate::Hydration;

use super::Provider;

#[derive(Default)]
pub struct Infisical {
    urls: Vec<Url>,
}

impl Infisical {
    pub fn new() -> Self {
        Default::default()
    }
}

#[derive(Deserialize)]
struct InfisicalExport {
    key: String,
    value: String,
}

#[async_trait]
impl Provider for Infisical {
    fn add(&mut self, value: String) -> Result<()> {
        match Url::parse(&value) {
            std::result::Result::Ok(url) if url.scheme() == "infisical" => {
                self.urls.push(url);
                Ok(())
            }
            _ => bail!("Not an infisical scheme"),
        }
    }
    async fn resolve(&self) -> Result<Hydration> {
        let fetches = self
            .urls
            .iter()
            .into_group_map_by(|u| u.host().expect("Missing host"))
            .into_iter()
            .flat_map(|(host, group)| {
                group
                    .into_iter()
                    .into_group_map_by(|u| u.path().split('/').nth(1).expect("Missing project"))
                    .into_iter()
                    .flat_map(|(project, group)| {
                        group
                            .into_iter()
                            .into_group_map_by(|u| {
                                (u.path().split('/').nth(2)).expect("Missing env")
                            })
                            .into_iter()
                            .map(|(env, group)| {
                                let vars = group
                                    .into_iter()
                                    .map(|u| {
                                        (
                                            u.path().split('/').nth(3).expect("Missing variable"),
                                            u.to_string(),
                                        )
                                    })
                                    .collect::<HashMap<_, _>>();

                                let host = host.clone();
                                async move {
                                    let cmd = [
                                        "infisical",
                                        "--domain",
                                        &format!("https://{}/api", host),
                                        "export",
                                        "--env",
                                        env,
                                        "--format",
                                        "json",
                                    ];
                                    info!("{}", cmd.join(" "));

                                    let temp_dir = tempdir()?;
                                    let config = HashMap::from([
                                        ("workspaceId", project),
                                        ("defaultEnvironment", ""),
                                    ]);
                                    let path = temp_dir.path().join(".infisical.json");
                                    let mut file = File::create(path)?;
                                    write!(file, "{}", serde_json::to_string(&config)?)?;
                                    drop(file);

                                    let child = Command::new(cmd[0])
                                        .args(&cmd[1..])
                                        .current_dir(temp_dir.path())
                                        .stdout(Stdio::piped())
                                        .output()
                                        .await
                                        .expect("error running infisical");

                                    temp_dir.close()?;

                                    let loaded = serde_json::from_slice::<Vec<InfisicalExport>>(
                                        &child.stdout,
                                    )
                                    .map_err(|_| {
                                        anyhow!(
                                            "Doppler error: {:?}",
                                            serde_json::from_slice::<serde_json::Value>(
                                                &child.stdout,
                                            )
                                        )
                                    })?
                                    .into_iter()
                                    .map(|e| (e.key, e.value))
                                    .collect::<Hydration>();

                                    let hydration = vars
                                        .into_iter()
                                        .map(|(key, var)| {
                                            (
                                                var,
                                                loaded
                                                    .get(key)
                                                    .expect("Variable not found")
                                                    .clone(),
                                            )
                                        })
                                        .collect::<Hydration>();

                                    debug!("hydration: {:?}", hydration);
                                    Ok(hydration)
                                }
                            })
                            .collect::<Vec<_>>()
                    })
                    .collect::<Vec<_>>()
            })
            .collect::<Vec<_>>();

        Ok(try_join_all(fetches).await?.into_iter().flatten().collect())
    }
}