@seektier/node-sdk

Open-source Node.js SDK that will instrument secret usage in your application via safe monkey-patching.

Status: skeleton only — folder structure and tooling are in place; nothing is implemented yet.

Planned scope

| Category | What we will patch | | ---------------- | ------------------------------------------------------------------------- | | Env vars | process.env reads (Proxy-based) | | Secret managers | AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, HashiCorp Vault | | Crypto / KMS | node:crypto sign/verify/encrypt; AWS KMS, GCP KMS | | Outbound network | node:http / node:https / global fetch / undici |

Activation will be supported both programmatically (init({...})) and via preload (node --require @seektier/node-sdk/register app.js).

Layout

src/
├── index.ts                  # public entry — init(), shutdown(), types
├── register.ts               # --require preload entry
├── core/
│   ├── instrumentation.ts    # Instrumentation interface + base class
│   ├── patcher.ts            # wrap/unwrap helpers
│   ├── registry.ts           # active-patch registry (for shutdown)
│   ├── config.ts             # SdkConfig + env parser
│   ├── events.ts             # SecretAccessEvent
│   └── logger.ts             # internal logger
├── instrumentations/
│   ├── env.ts
│   ├── crypto.ts
│   ├── network.ts
│   └── secret-managers/
│       ├── index.ts
│       ├── aws-secrets-manager.ts
│       ├── gcp-secret-manager.ts
│       ├── azure-key-vault.ts
│       └── vault.ts
├── reporters/
│   ├── reporter.ts
│   └── console-reporter.ts
└── utils/
    ├── module-hooks.ts       # require-in-the-middle + import-in-the-middle wrappers
    └── redact.ts
test/                         # vitest tests live here

Commands

npm install
npm run build      # tsup -> dist/ (dual ESM + CJS, .d.ts)
npm test           # vitest
npm run typecheck  # tsc --noEmit
npm run format     # prettier

License

MIT