{"_id":"@varlock/azure-key-vault-plugin","_rev":"14-8d1362ee4d21626874a1ce7f4030f0e3","name":"@varlock/azure-key-vault-plugin","dist-tags":{"latest":"1.2.3"},"versions":{"0.0.0":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.0","author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://github.com/dmno-dev/varlock#readme","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"4d28b6c8bdb65798dc28db9957759883377423ad","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.0.tgz","fileCount":1,"integrity":"sha512-9V1WdVcm5LQw25X2BDGQAUYNCdIFPe3RoyWf+1Oo1x8XyWNfdFsNhTekXZwlgAXc8QqI9HG9pfppPeMsg/HNfA==","signatures":[{"sig":"MEUCIE/Q6aN9EwANB9K8bJPoXrUK5srrlTApKSG026jCGJwOAiEA1Uaqg8LcgMNea5MTe2xssagV5srXwS2NFoVgN8g3pjk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":345},"_from":"file:varlock-azure-key-vault-plugin-0.0.0.tgz","_npmUser":{"name":"theo","email":"theozero@gmail.com"},"_resolved":"/private/var/folders/tb/sqfkxrfs1mz2n2n_c2rpsthc0000gn/T/5dcf7a6455ab0dd95efccbfe042ea102/varlock-azure-key-vault-plugin-0.0.0.tgz","_integrity":"sha512-9V1WdVcm5LQw25X2BDGQAUYNCdIFPe3RoyWf+1Oo1x8XyWNfdFsNhTekXZwlgAXc8QqI9HG9pfppPeMsg/HNfA==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.6.2","description":"Varlock plugin to pull data from Azure Key Vault","directories":{},"_nodeVersion":"25.1.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.0_1770767570155_0.6246588008955949","host":"s3://npm-registry-packages-npm-production"}},"0.0.1":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.1","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.1","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"999cae7c360bc785e8ead471d1dae25496f8fbd1","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.1.tgz","fileCount":6,"integrity":"sha512-3lq1BKjLXrD1XCRBkoNxgxQQPeODFREYJrwobKIusmm1nRIfiE5BSbcQQSgnP+dxvNGxNXKZorQCyzX0GjMLsw==","signatures":[{"sig":"MEYCIQD6Z1XZSyy3mWyGgOZJatCsqxJfMnDc8Yh0ai7KrYJ0HQIhALHLUCnZEFKpsm+ieTovHqb5IvU7n2ZERnOIPGwamfTi","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":178382},"main":"dist/index.js","type":"module","_from":"file:varlock-azure-key-vault-plugin-0.0.1.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"_resolved":"/tmp/80ed8864f1997ebc61b2a90d261136f6/varlock-azure-key-vault-plugin-0.0.1.tgz","_integrity":"sha512-3lq1BKjLXrD1XCRBkoNxgxQQPeODFREYJrwobKIusmm1nRIfiE5BSbcQQSgnP+dxvNGxNXKZorQCyzX0GjMLsw==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.10.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.2.2","@types/node":"25.2.3","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^0.2.2"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.1_1770921694633_0.21172594045932103","host":"s3://npm-registry-packages-npm-production"}},"0.0.2":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.2","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.2","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"e501fe115a55c704bf039aa9fd54afdf8ed668f8","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.2.tgz","fileCount":5,"integrity":"sha512-a1op9p9j3NjXrHZQiRY9LpFZMbYjgrRGVNHC7W33KwFmMaqBv1Y2ti0paSAz5UNU5fVAVippC6TXMLEwpK1omg==","signatures":[{"sig":"MEQCIGKwEQt1B0nYLPoJ8DLLNanir56vB0hB9PNrcLQjqEknAiARx7BnyCAAKZKSH8KgdezowBVGWs+rDFSiD2Xc3nq9+A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":177301},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"gitHead":"5bb72aa5e01bf2086b18ef5b1a51aa83db8c6307","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.11.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"ky":"catalog:","tsup":"catalog:","vitest":"catalog:","varlock":"workspace:^","@types/node":"catalog:","@azure/identity":"^4.13.0","@env-spec/utils":"workspace:^","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"workspace:^"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.2_1772178523620_0.557289723044641","host":"s3://npm-registry-packages-npm-production"}},"0.0.3":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.3","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.3","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"5475c9825cf7c28095e60d810fdb2b207c4e0717","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.3.tgz","fileCount":5,"integrity":"sha512-jFEBiHIbKnxCt+WM3w3pmNRXzVYCe1QNfrWZw4/Ir9l3k6lwGnocliLFW3YedtNwZ10Y8pPgLeUAlqUBnJFqaQ==","signatures":[{"sig":"MEQCIAc6KPfEbfE3UaHitXqiyrN4Xy8pkfTCVMXWc5cdKGLWAiAsYgrgO9u6zWOS5h2pKRKixXwA9CeqNr+Y14Ymg7N0Vg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":177288},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"gitHead":"93e32d37c8ca99214a39e931c232aa2cb22a6ddd","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.11.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"22.22.0","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.4.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^0.4.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.3_1773107045986_0.4910032518733445","host":"s3://npm-registry-packages-npm-production"}},"0.0.4":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.4","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.4","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"ade1e9dc4d4d57674db93546061040069d23ef30","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.4.tgz","fileCount":5,"integrity":"sha512-mFBivGWYph4IewsFF/BCoBFXmZdH+1Pz+almQIRECwmxkEox4Bors+oIgU/v5teZKd87uAN4ndGNfT6h1kwGBg==","signatures":[{"sig":"MEUCIQCPOPCNYUuC5/GXKU9U857V4HCbKcmNfBHhYgcnHE/JfQIgb2O2978CYhugvbMROYCRCmbJI2iKZEQgCkTn75MWR+Y=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.0.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":177270},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.js"},"gitHead":"9ca3a770d82762e4793f8dceb31d296c4ded8588","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.11.1","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"22.22.1","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.5.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^0.5.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.4_1773453789985_0.64154503468671","host":"s3://npm-registry-packages-npm-production"}},"0.0.5":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.5","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.5","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"f6aaaaf039b38cdcb8d422930aea70810d5e57bd","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.5.tgz","fileCount":5,"integrity":"sha512-4xKopEXKiSyDdR2UZkUHmSyN4MsTcVtEHZf3eHH4XtPJdG9riopBqJKtGcnjC19n7emb0xDoxF0JpAHA03j7nA==","signatures":[{"sig":"MEQCIErdeMxMW3Mj15QqpbCr+dobkOasItY//dGOWDYV8E1VAiAi+Kf4Tv5sHijPRwku+1Q6kzLkfc/mJwyBUpQX6T+z/g==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.0.5","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":177966},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"gitHead":"6cd925c6b56e646c30d3f95af7a10087a5ef9b4a","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.12.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"22.22.1","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.6.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^0.6.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.5_1773906846300_0.3682706496213388","host":"s3://npm-registry-packages-npm-production"}},"0.0.6":{"name":"@varlock/azure-key-vault-plugin","version":"0.0.6","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.0.6","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"86c392a6b027aae2f66f9904b6963e19eb634c8f","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.0.6.tgz","fileCount":5,"integrity":"sha512-Sg9kzIJJyPP8aTRFMttuiAR2iNejq3DWv7cyUXIwCpSk2Ya3mvaZADMOqrpZpChoxnbkmEtnR4OYiKCLUaswMw==","signatures":[{"sig":"MEQCIFl4xKFN0vharNey589QvUfv0UoN+FculUq7DF5A4leLAiA6eXrqFBjnmihl6akn70isDzMN/RTz0ehRzWpu9zSuPg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.0.6","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":178183},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"gitHead":"47c28f36810bccd1c84bcd1f96b74a6a884f625e","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.12.1","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"22.22.1","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.7.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^0.7.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.0.6_1774981003758_0.27348094767740916","host":"s3://npm-registry-packages-npm-production"}},"0.1.0":{"name":"@varlock/azure-key-vault-plugin","version":"0.1.0","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@0.1.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"c85f6f70a9bd1552cdc366cbe92aa9ed3b485907","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-0.1.0.tgz","fileCount":5,"integrity":"sha512-TwBKq/n/wom9ugwPP0kG9e/wJd6337t+2Hvu6VtIhh/aXixEupSAm7JUyUr3h2/lc+j9Y5/Emj1WKkBUpTTrOQ==","signatures":[{"sig":"MEYCIQDyaE+JXwGDKjPckhENh+i4alBsbNQKl4NWe0dj9baNdwIhAM32JiMGJbLspwsoJzdY8dRVPFduVChv1CnhlIoqFj43","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@0.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":184546},"main":"dist/index.js","type":"module","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"gitHead":"0fa901955455c8e31f0a874e22795623d24523ff","scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.12.1","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"24.14.1","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^0.9.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^0.9.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_0.1.0_1776459588186_0.384222008254512","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"@varlock/azure-key-vault-plugin","version":"1.0.0","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@1.0.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"98c50766df4332bce70099fafa5cb3541f7b7f59","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-1.0.0.tgz","fileCount":5,"integrity":"sha512-8nNMasBBYi2hG64osiPVfEpQz3MMaH1M5mEAVnVMBLn/J34wY1VjcZ5dvjVvFMM2XSXJczT3B/95XBewSHGTaw==","signatures":[{"sig":"MEUCIDKEb+QTkdnLYUSeMz7g9VZpAzJGl7d3TSplOPsOqbSoAiEAhwWGzr3aYWOsgNXw0MnoFeJS3DJAoW+icE+X56kWRzc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":184559},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.0.0.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.0.0.tgz","_integrity":"sha512-8nNMasBBYi2hG64osiPVfEpQz3MMaH1M5mEAVnVMBLn/J34wY1VjcZ5dvjVvFMM2XSXJczT3B/95XBewSHGTaw==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.13.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"24.14.1","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.0.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^1.0.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_1.0.0_1777497464183_0.7339325537862444","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@varlock/azure-key-vault-plugin","version":"1.1.0","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@1.1.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"5753afe174cd437327c891dc97b45af7afd77bf9","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-1.1.0.tgz","fileCount":5,"integrity":"sha512-6jojncZm9LWTM3GlE8zzK+tupGKk4VgHF6Da+TZ/OvUVI08x3Z0lGmdxT9ToOegsA5PZ6j+woyYRmJl6hUwnrg==","signatures":[{"sig":"MEUCIQDZ3elptXIKKtLrjekvfEPTvpcuyIauHjwxRrDPMr0PogIgc5UoKKsT5DNFhF7EJeB3VLjvWP+QDPgxJsLhgrXDBYg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":201522},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.1.0.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.1.0.tgz","_integrity":"sha512-6jojncZm9LWTM3GlE8zzK+tupGKk4VgHF6Da+TZ/OvUVI08x3Z0lGmdxT9ToOegsA5PZ6j+woyYRmJl6hUwnrg==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.13.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"24.14.1","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.1.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^1.1.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_1.1.0_1778048916011_0.15776449612572319","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@varlock/azure-key-vault-plugin","version":"1.2.0","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@1.2.0","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"d2681358fbe01b439f08c9d2c8721062bf29541c","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-1.2.0.tgz","fileCount":5,"integrity":"sha512-ZZuwuOxJxrakXIdOKzz+a64d+McRlEjGhTOF/zMHJNeQyE/wGo5jtPpHr2YTQiRlYY0WaogEGwFkfRY97TcyBg==","signatures":[{"sig":"MEUCIE13QdtrOVg0KCswhZ+QwQGJqIKwjACtbewm814aHABJAiEAyRwSoOkfH/s1CzXIQAx3H31FpIU9zXz81U/WeRhoDkY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":206478},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.0.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.0.tgz","_integrity":"sha512-ZZuwuOxJxrakXIdOKzz+a64d+McRlEjGhTOF/zMHJNeQyE/wGo5jtPpHr2YTQiRlYY0WaogEGwFkfRY97TcyBg==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.16.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"24.16.0","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.6.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^1.6.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_1.2.0_1781077952522_0.468615227516628","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"name":"@varlock/azure-key-vault-plugin","version":"1.2.1","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@1.2.1","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"b2525c88034f25fd94b9fd45b6e27651b8d64982","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-1.2.1.tgz","fileCount":5,"integrity":"sha512-MLYHxMvQgwWB/XWow7RKtQAOOWTDeyn6nmcI264ImBICO3EG/v4CI/a7EBkCf7Oa7xyRdLxqbW8t+LY82VCPDg==","signatures":[{"sig":"MEYCIQDNv6M7iALCu02W//ePe6RthC5WK3UK8g9LQKFjVbHEPgIhAJz7TnlPEQFNUPX40SeMDh6by+L5ffr7DikR5TWF4GkQ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@1.2.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":209660},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.1.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.1.tgz","_integrity":"sha512-MLYHxMvQgwWB/XWow7RKtQAOOWTDeyn6nmcI264ImBICO3EG/v4CI/a7EBkCf7Oa7xyRdLxqbW8t+LY82VCPDg==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.17.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"24.16.0","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.8.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^1.8.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_1.2.1_1782284253762_0.17946919651024396","host":"s3://npm-registry-packages-npm-production"}},"1.2.2":{"name":"@varlock/azure-key-vault-plugin","version":"1.2.2","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","_id":"@varlock/azure-key-vault-plugin@1.2.2","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"dist":{"shasum":"ec659481ee25e35016ddb86bbe26d2502f96ceba","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-1.2.2.tgz","fileCount":5,"integrity":"sha512-wjM1v6spZNGXg9/dtfm+K+6JQmiqPu91S8KI+/dACzbcVMQN7k1bj6HEzEcie8AI3nptsBG7MNd9tzk8l1acpA==","signatures":[{"sig":"MEUCIAp3hTlzIZEulHXX7J0llxgweVQDbjCo3bENZ5nzZUCvAiEA+0FFU2bPUoWz3+l0Be6uDmFyOpNCYxbVINSPcOCRUE0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@1.2.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":211635},"main":"dist/index.js","type":"module","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.2.tgz","types":"dist/index.d.ts","engines":{"node":">=22"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsup --watch","test":"vitest","build":"tsup","typecheck":"tsc --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:ebda413b-ea07-40d7-953e-5eca9e832949"}},"_resolved":"/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.2.tgz","_integrity":"sha512-wjM1v6spZNGXg9/dtfm+K+6JQmiqPu91S8KI+/dACzbcVMQN7k1bj6HEzEcie8AI3nptsBG7MNd9tzk8l1acpA==","repository":{"url":"git+https://github.com/dmno-dev/varlock.git","type":"git","directory":"packages/plugins/azure-key-vault"},"_npmVersion":"11.17.0","description":"Varlock plugin to load secrets from Azure Key Vault","directories":{},"_nodeVersion":"24.17.0","_hasShrinkwrap":false,"devDependencies":{"ky":"^1.14.3","tsup":"^8.5.1","vitest":"^4.0.18","varlock":"^1.9.0","@types/node":"25.3.2","@azure/identity":"^4.13.0","@env-spec/utils":"^0.0.0","@azure/keyvault-secrets":"^4.10.0"},"peerDependencies":{"varlock":"^1.9.0"},"_npmOperationalInternal":{"tmp":"tmp/azure-key-vault-plugin_1.2.2_1782498554378_0.16887949608757102","host":"s3://npm-registry-packages-npm-production"}},"1.2.3":{"name":"@varlock/azure-key-vault-plugin","description":"Varlock plugin to load secrets from Azure Key Vault","version":"1.2.3","type":"module","homepage":"https://varlock.dev/plugins/azure-key-vault/","bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"repository":{"type":"git","url":"git+https://github.com/dmno-dev/varlock.git","directory":"packages/plugins/azure-key-vault"},"exports":{"./plugin":"./dist/plugin.cjs"},"scripts":{"dev":"tsdown --watch","build":"tsdown","test":"vitest","typecheck":"tsc --noEmit"},"keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"author":{"name":"dmno-dev"},"license":"MIT","engines":{"node":">=22"},"peerDependencies":{"varlock":"^1.17.1"},"devDependencies":{"@azure/identity":"^4.13.0","@azure/keyvault-secrets":"^4.10.0","@env-spec/utils":"^0.0.0","@types/node":"25.3.2","ky":"^1.14.3","tsdown":"^0.22.14","varlock":"^1.17.1","vitest":"^4.0.18"},"_id":"@varlock/azure-key-vault-plugin@1.2.3","_integrity":"sha512-KQ+YzS+b5636jQFdpg6L8+fhLgl3Vcr3vE+dp9HPhw1inBIT3W0tzt7lzNP6OLH92F3h5kc3vu1BOBE2XPcm0Q==","_resolved":"/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.3.tgz","_from":"file:/home/runner/work/varlock/varlock/packages/plugins/azure-key-vault/varlock-azure-key-vault-plugin-1.2.3.tgz","_nodeVersion":"24.19.0","_npmVersion":"12.0.2","dist":{"integrity":"sha512-KQ+YzS+b5636jQFdpg6L8+fhLgl3Vcr3vE+dp9HPhw1inBIT3W0tzt7lzNP6OLH92F3h5kc3vu1BOBE2XPcm0Q==","shasum":"9c4f0c1bcd4be716a7d73838f58a8ab064e283b0","tarball":"https://registry.npmjs.org/@varlock/azure-key-vault-plugin/-/azure-key-vault-plugin-1.2.3.tgz","fileCount":5,"unpackedSize":184941,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@varlock%2fazure-key-vault-plugin@1.2.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIC5UJsbzgxgXsvT0AEMKDCdCU/l0Ub/NkDehrTSz1uEYAiADxjIGqrGI3JH4ePkrVBS/KzADf/TVmNBv4eAF6gZeQA=="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:52cf8aa7-2b8b-42b0-be34-efbeee57dd22"}},"directories":{},"maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/azure-key-vault-plugin_1.2.3_1787637792266_0.8737891604534658"},"_hasShrinkwrap":false}},"time":{"created":"2026-02-10T23:52:50.068Z","modified":"2026-08-25T06:03:13.020Z","0.0.0":"2026-02-10T23:52:50.304Z","0.0.1":"2026-02-12T18:41:34.775Z","0.0.2":"2026-02-27T07:48:43.760Z","0.0.3":"2026-03-10T01:44:06.133Z","0.0.4":"2026-03-14T02:03:10.138Z","0.0.5":"2026-03-19T07:54:06.449Z","0.0.6":"2026-03-31T18:16:43.939Z","0.1.0":"2026-04-17T20:59:48.314Z","1.0.0":"2026-04-29T21:17:44.413Z","1.1.0":"2026-05-06T06:28:36.169Z","1.2.0":"2026-06-10T07:52:32.648Z","1.2.1":"2026-06-24T06:57:33.946Z","1.2.2":"2026-06-26T18:29:14.516Z","1.2.3":"2026-08-25T06:03:12.400Z"},"bugs":{"url":"https://github.com/dmno-dev/varlock/issues"},"author":{"name":"dmno-dev"},"license":"MIT","homepage":"https://varlock.dev/plugins/azure-key-vault/","keywords":["varlock","plugin","varlock-plugin","azure","key-vault","akv","secrets","env",".env","dotenv","environment variables","env vars","config"],"repository":{"type":"git","url":"git+https://github.com/dmno-dev/varlock.git","directory":"packages/plugins/azure-key-vault"},"description":"Varlock plugin to load secrets from Azure Key Vault","maintainers":[{"name":"philmillman","email":"philmillman@gmail.com"},{"name":"theo","email":"theozero@gmail.com"}],"readme":"# @varlock/azure-key-vault-plugin\n\n[![npm version](https://img.shields.io/npm/v/@varlock/azure-key-vault-plugin.svg)](https://npmx.dev/package/@varlock/azure-key-vault-plugin) [![GitHub stars](https://img.shields.io/github/stars/dmno-dev/varlock.svg?style=social&label=Star)](https://github.com/dmno-dev/varlock) [![license](https://img.shields.io/npm/l/@varlock/azure-key-vault-plugin.svg)](https://github.com/dmno-dev/varlock/blob/main/LICENSE)\n\nThis package is a [Varlock](https://varlock.dev) [plugin](https://varlock.dev/guides/plugins/) that enables loading data from [Azure Key Vault](https://azure.microsoft.com/en-us/products/key-vault) into your configuration.\n\n## Features\n\n- **Zero-config authentication** - Just provide your vault URL, authentication happens automatically\n- **Managed Identity support** - No credentials needed for Azure-hosted apps (App Service, Container Instances, VMs, Functions, AKS)\n- **Azure CLI authentication** - Works seamlessly with `az login` for local development\n- **Auto-infer secret names** from environment variable names (e.g., `DATABASE_URL` → `database-url`)\n- **OIDC workload identity** - Authenticate from Vercel, GitHub Actions, and other platforms using federated credentials\n- Support for service principal credentials (for non-Azure environments)\n- Support for versioned secrets\n- Extract individual values from JSON-encoded secrets\n- Automatic token caching and renewal\n- Lightweight implementation using REST API (47 KB bundle, no heavy Azure SDK dependencies)\n\n## Installation\n\nIf you are in a JavaScript based project and have a package.json file, you can either install the plugin explicitly \n```bash\nnpm install @varlock/azure-key-vault-plugin\n```\nAnd then register the plugin without any version number\n```env-spec title=\".env.schema\"\n# @plugin(@varlock/azure-key-vault-plugin)\n```\n\nOtherwise just set the explicit version number when you register it\n```env-spec title=\".env.schema\"\n# @plugin(@varlock/azure-key-vault-plugin@1.2.3)\n```\n\nSee our [Plugin Guide](https://varlock.dev/guides/plugins/#installation) for more details.\n\n## Setup + Auth\n\nAfter registering the plugin, you must initialize it with the `@initAzure` root decorator.\n\n### Automatic auth\n\nFor most use cases, you only need to provide the vault URL:\n\n```env-spec\n# @plugin(@varlock/azure-key-vault-plugin)\n# @initAzure(vaultUrl=\"https://my-vault.vault.azure.net/\")\n```\n\n**How this works:**\n\n- **Local development:** Run `az login` → automatically uses Azure CLI credentials\n- **Azure-hosted apps** (App Service, Container Instances, VMs, Functions, AKS): Enable Managed Identity → automatically authenticates (no secrets needed!)\n- **Works everywhere** with zero configuration beyond the vault URL!\n\n### Explicit credentials (For non-Azure environments)\n\nIf you're deploying outside of Azure (e.g., AWS, GCP, on-premises), wire up service principal credentials:\n\n```env-spec\n# @plugin(@varlock/azure-key-vault-plugin)\n# @initAzure(\n#   vaultUrl=\"https://my-vault.vault.azure.net/\",\n#   tenantId=$AZURE_TENANT_ID,\n#   clientId=$AZURE_CLIENT_ID,\n#   clientSecret=$AZURE_CLIENT_SECRET\n# )\n# ---\n\n# @type=azureTenantId\nAZURE_TENANT_ID=\n\n# @type=azureClientId\nAZURE_CLIENT_ID=\n\n# @type=azureClientSecret @sensitive @internal\nAZURE_CLIENT_SECRET=\n```\n\nYou would then need to inject these env vars using your CI/CD system.\n\n> `@internal` keeps this credential out of your app's environment — varlock only uses it to fetch your secrets. If you need the credential at runtime for other purposes (e.g. via the Azure SDK), set `@internal=false` to keep it injected.\n\n### OIDC workload identity (For Vercel, GitHub Actions, etc.)\n\nIf you're deploying on a platform that supports OIDC, you can authenticate without a client secret:\n\n```env-spec\n# @plugin(@varlock/azure-key-vault-plugin)\n# @initAzure(\n#   vaultUrl=\"https://my-vault.vault.azure.net/\",\n#   tenantId=$AZURE_TENANT_ID,\n#   clientId=$AZURE_CLIENT_ID\n# )\n# ---\n\n# @type=azureTenantId\nAZURE_TENANT_ID=\n\n# @type=azureClientId\nAZURE_CLIENT_ID=\n```\n\nWhen `tenantId` and `clientId` are provided without `clientSecret`, the plugin automatically uses the platform's OIDC token as a federated credential. You need to configure a federated credential on your Azure App Registration.\n\nSee the [OIDC Workload Identity guide](https://varlock.dev/guides/oidc/) for full setup instructions.\n\n### Authentication Priority\n\nThe plugin tries authentication methods in this order:\n1. **Service Principal** - If all three credentials (`tenantId`, `clientId`, `clientSecret`) are provided and non-empty\n2. **OIDC Federated Credential** - If `tenantId` and `clientId` are provided without `clientSecret`, and an OIDC token is available\n3. **Managed Identity** - Automatically used when running on Azure infrastructure\n4. **Azure CLI** - Falls back to `az login` for local development\n\n### Multiple vaults\nIf you need to connect to multiple vaults, but never at the same time, you can alter the vault URL using a function:\n```env-spec\n# @initAzure(vaultUrl=\"https://my-vault-${ENV}.vault.azure.net/\")\n```\n\nOr if in some cases you need to connect to both, or you want more explicit separation, you can register multiple named instances:\n```env-spec\n# @initAzure(id=prod, vaultUrl=\"https://my-vault-prod.vault.azure.net/\")\n# @initAzure(id=dev, vaultUrl=\"https://my-vault-dev.vault.azure.net/\")\n```\n\n\n## Reading secrets\n\nThis plugin introduces a new function `azureSecret()` to fetch secret values from your vaults.\n\n```env-spec title=\".env.schema\"\n# @plugin(@varlock/azure-key-vault-plugin)\n# @initAzure(vaultUrl=\"https://my-vault.vault.azure.net/\")\n# ---\n\n# Auto-infer secret names (DATABASE_URL -> \"database-url\")\nDATABASE_URL=azureSecret()\nAPI_KEY=azureSecret()\n\n# Explicit secret names\nCUSTOM_SECRET=azureSecret(\"my-custom-secret-name\")\n\n# Versioned secrets - using @ suffix or named version= param\nAPI_KEY_V1=azureSecret(\"api-key@abc123def456\")\nAPI_KEY_V2=azureSecret(\"api-key\", version=abc123def456)\n\n# Extract a value from a JSON-encoded secret - using # suffix or named key= param\n# (e.g. the secret \"db-creds\" holds `{\"username\":\"admin\",\"password\":\"...\"}`)\nDB_PASSWORD=azureSecret(\"db-creds#password\")\nDB_USERNAME=azureSecret(\"db-creds\", key=username)\n\n# If using multiple named vault instances\nPROD_SECRET=azureSecret(prod, \"database-url\")\nDEV_SECRET=azureSecret(dev, \"database-url\")\n```\n\n---\n\n## Reference\n\n### Root decorators\n\n#### `@initAzure()`\n\nInitialize an Azure Key Vault plugin instance.\n\n**Parameters:**\n\n- `vaultUrl: string` (required) - Azure Key Vault URL (e.g., `https://my-vault.vault.azure.net/`)\n- `tenantId?: string` - Azure AD tenant ID (directory ID)\n- `clientId?: string` - Service principal application (client) ID\n- `clientSecret?: string` - Service principal client secret (password)\n- `oidcToken?: string` - Explicit OIDC JWT token (auto-detected from platform if not provided)\n- `cacheTtl?: string | number` - Cache resolved values from `azureSecret()` for the provided TTL (`\"5m\"`, `\"1h\"`, `\"1d\"`, or `\"forever\"` to cache until manually cleared); set to `false` (or an empty string) to disable caching\n- `id?: string` - Instance identifier for multiple vaults (defaults to `_default`)\n\n### Functions\n#### `azureSecret()`\n\nFetch a secret from Azure Key Vault.\n\n**Signatures:**\n\n- `azureSecret()` - Auto-infers secret name from variable name (`DATABASE_URL` → `database-url`)\n- `azureSecret(secretName)` - Fetch by explicit secret name\n- `azureSecret(instanceId, secretName)` - Fetch from a specific vault instance\n- `azureSecret(secretName, version=versionId)` - Fetch a specific version\n- `azureSecret(secretName, key=jsonKey)` - Extract a value from a JSON-encoded secret\n\n**Named parameters:**\n\n- `version=` - Secret version (alternative to `@version` suffix in the secret name)\n- `key=` - Key to extract from a JSON-encoded secret value (alternative to `#key` suffix in the secret name)\n\n**Secret Name Formats:**\n\n- Latest version: `\"my-secret\"`\n- Specific version: `\"my-secret@abc123def456\"` or `azureSecret(\"my-secret\", version=abc123def456)`\n- JSON key extraction: `\"my-secret#password\"` or `azureSecret(\"my-secret\", key=password)`\n- Combined: `\"my-secret@abc123def456#password\"`\n\n### Data Types\n\n- `azureTenantId` - Azure AD tenant ID (UUID format)\n- `azureClientId` - Service principal application ID (UUID format)\n- `azureClientSecret` - Service principal client secret (sensitive)\n\n---\n\n### Azure Setup\n\n### Required Permissions\n\nYour managed identity, service principal, or user needs one of:\n\n- **Access Policy**: \"Get\" permission for secrets\n- **RBAC**: \"Key Vault Secrets User\" role\n\n### Enable Managed Identity (Recommended for Azure-hosted apps)\n\nManaged Identity is the Azure-native way to authenticate - no credentials needed!\n\n**Enable system-assigned managed identity:**\n\n```bash\n# For App Service\naz webapp identity assign --name my-app --resource-group my-rg\n\n# For Container Instance\naz container create --assign-identity --name my-container ...\n\n# For VM\naz vm identity assign --name my-vm --resource-group my-rg\n```\n\n**Grant Key Vault access to the identity:**\n\n```bash\n# Get the identity's principal ID\nPRINCIPAL_ID=$(az webapp identity show --name my-app --resource-group my-rg --query principalId -o tsv)\n\n# Grant RBAC role\naz role assignment create \\\n  --role \"Key Vault Secrets User\" \\\n  --assignee $PRINCIPAL_ID \\\n  --scope /subscriptions/<sub-id>/resourceGroups/<rg>/providers/Microsoft.KeyVault/vaults/<vault-name>\n\n# Or set Access Policy\naz keyvault set-policy \\\n  --name my-vault \\\n  --object-id $PRINCIPAL_ID \\\n  --secret-permissions get\n```\n\nThat's it! Your app will now automatically authenticate using Managed Identity.\n\n### Create a Service Principal (For non-Azure environments)\n\n```bash\n# Create service principal\naz ad sp create-for-rbac --name \"varlock-keyvault-reader\"\n\n# Grant access (Access Policy)\naz keyvault set-policy \\\n  --name my-vault \\\n  --spn <appId> \\\n  --secret-permissions get\n\n# Or grant access (RBAC)\naz role assignment create \\\n  --role \"Key Vault Secrets User\" \\\n  --assignee <appId> \\\n  --scope /subscriptions/<sub-id>/resourceGroups/<rg>/providers/Microsoft.KeyVault/vaults/<vault-name>\n```\n\n### Find Your Key Vault URL\n\n```bash\naz keyvault show --name my-vault --query properties.vaultUri -o tsv\n# Output: https://my-vault.vault.azure.net/\n```\n\n## Troubleshooting\n\n### Secret not found\n- Verify the secret exists: `az keyvault secret list --vault-name my-vault`\n- Remember: Azure uses hyphens, not underscores (use `database-url` not `database_url`)\n\n### Permission denied\n- Check your RBAC role: `az role assignment list --assignee <your-id> --scope <vault-scope>`\n- Or check access policies: `az keyvault show --name my-vault --query properties.accessPolicies`\n\n### Authentication failed\n- **Local dev:** Run `az login` and ensure your env vars (`AZURE_TENANT_ID`, etc.) are empty\n- **Azure-hosted apps:** Verify Managed Identity is enabled and has Key Vault permissions\n- **Other environments:** Verify service principal credentials are correct and properly injected\n","readmeFilename":"README.md"}