# @purista/infisical-secret-store API

Infisical adapter for PURISTA secret values.

---
Canonical: /handbook/api/modules/_purista_infisical-secret-store/
Format: Markdown for agents
---

Infisical adapter for PURISTA secret values.

Package: `@purista/infisical-secret-store`

## Signature

```typescript
@purista/infisical-secret-store
```

## Examples

```typescript
const store = new InfisicalSecretStore({
  bearerToken: process.env.INFISICAL_TOKEN ?? '',
  baseUrl: 'https://app.infisical.com',
  cacheTtl: 30_000,
})

const secret = await store.getSecret('ACME_PROD_PAYMENTS_API_TOKEN')
```

## Members

### Classes

- `class InfisicalClient` — HTTP client for the Infisical API used by `InfisicalSecretStore`.
- `class InfisicalSecretStore` — Secret store backed by Infisical.

### Type Aliases

- `type ClientConfig = Prettify<Required<Pick<HttpClientConfig<unknown>, "bearerToken">> & Omit<HttpClientConfig<HttpClientConfigCustom>, "bearerToken">>` — HTTP client configuration for `InfisicalClient`.
- `type DecryptInput = void` — Input required to decrypt an Infisical encrypted field.
- `type EncryptInput = void` — Input required to encrypt an Infisical secret field.
- `type HttpClientConfigCustom = EmptyObject` — Infisical client-specific HTTP configuration extension.
- `type InfisicalSecretConfig = ClientConfig` — Configuration for `InfisicalSecretStore`.
- `type Scope = void` — Environment and path scope granted to an Infisical service token.
- `type Secret = void` — Encrypted secret payload returned by the Infisical API.
- `type TokenData = void` — Service token metadata returned by Infisical.

### Variables

- `const puristaVersion: "3.0.1"` — The PURISTA package version embedded in the published runtime build.