feature: secret sync base + aws parameter store & github

frontend/src/components/secret-syncs/forms/schemas/aws-parameter-store-sync-destination-schema.ts

@@ -0,0 +1,28 @@
+import { z } from "zod";
+
+import { SecretSync } from "@app/hooks/api/secretSyncs";
+
+export const AwsParameterStoreSyncDestinationSchema = z.object({
+  destination: z.literal(SecretSync.AWSParameterStore),
+  destinationConfig: z.object({
+    path: z
+      .string()
+      .min(1, "Parameter Store Path required")
+      .superRefine((val, ctx) => {
+        if (!/^\/([/]|(([\w-]+\/)+))?$/.test(val)) {
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'Invalid path - must follow "/example/path/" format'
+          });
+        }
+
+        if (val.length > 2048) {
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "Cannot exceed 2048 characters"
+          });
+        }
+      }),
+    region: z.string().min(1, "Region required")
+  })
+});

frontend/src/components/secret-syncs/forms/schemas/github-sync-destination-schema.ts

@@ -0,0 +1,45 @@
+import { z } from "zod";
+
+import { SecretSync } from "@app/hooks/api/secretSyncs";
+import {
+  GitHubSyncScope,
+  GitHubSyncVisibility
+} from "@app/hooks/api/secretSyncs/types/github-sync";
+
+export const GitHubSyncDestinationSchema = z.object({
+  destination: z.literal(SecretSync.GitHub),
+  destinationConfig: z
+    .discriminatedUnion("scope", [
+      z.object({
+        scope: z.literal(GitHubSyncScope.Organization),
+        org: z.string().min(1, "Organization name required"),
+        visibility: z.nativeEnum(GitHubSyncVisibility),
+        selectedRepositoryIds: z.number().array().optional()
+      }),
+      z.object({
+        scope: z.literal(GitHubSyncScope.Repository),
+        owner: z.string().min(1, "Repository owner name required"),
+        repo: z.string().min(1, "Repository name required")
+      }),
+      z.object({
+        scope: z.literal(GitHubSyncScope.RepositoryEnvironment),
+        owner: z.string().min(1, "Repository owner name required"),
+        repo: z.string().min(1, "Repository name required"),
+        env: z.string().min(1, "Environment name required")
+      })
+    ])
+    .superRefine((options, ctx) => {
+      if (options.scope !== GitHubSyncScope.Organization) return;
+
+      if (
+        options.visibility === GitHubSyncVisibility.Selected &&
+        !options.selectedRepositoryIds?.length
+      ) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          message: "Select at least 1 repository",
+          path: ["selectedRepositoryIds"]
+        });
+      }
+    })
+});

frontend/src/components/secret-syncs/forms/schemas/index.ts

@@ -0,0 +1 @@
+export * from "./secret-sync-schema";

frontend/src/components/secret-syncs/forms/schemas/secret-sync-schema.ts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+import { GitHubSyncDestinationSchema } from "@app/components/secret-syncs/forms/schemas/github-sync-destination-schema";
+import { SecretSyncInitialSyncBehavior } from "@app/hooks/api/secretSyncs";
+import { slugSchema } from "@app/lib/schemas";
+
+import { AwsParameterStoreSyncDestinationSchema } from "./aws-parameter-store-sync-destination-schema";
+
+const BaseSecretSyncSchema = z.object({
+  name: slugSchema({ field: "Name" }),
+  description: z.string().trim().max(256, "Cannot exceed 256 characters").optional(),
+  connection: z.object({ name: z.string(), id: z.string().uuid() }),
+  environment: z.object({ slug: z.string(), id: z.string(), name: z.string() }),
+  secretPath: z.string().min(1, "Secret path required"),
+  syncOptions: z.object({
+    initialSyncBehavior: z.nativeEnum(SecretSyncInitialSyncBehavior),
+    prependPrefix: z
+      .string()
+      .trim()
+      .transform((str) => str.toUpperCase())
+      .optional(),
+    appendSuffix: z
+      .string()
+      .trim()
+      .transform((str) => str.toUpperCase())
+      .optional()
+  }),
+  isEnabled: z.boolean()
+});
+
+// TODO: union once more supported
+export const SecretSyncFormSchema = z
+  .discriminatedUnion("destination", [
+    AwsParameterStoreSyncDestinationSchema,
+    GitHubSyncDestinationSchema
+  ])
+  .and(BaseSecretSyncSchema);
+
+export type TSecretSyncForm = z.infer<typeof SecretSyncFormSchema>;