openclaw/dist/node-startup-env-CnxxjID9.mjs

Multi-channel AI gateway with extensible messaging integrations

import { m as readNonBlankString } from "./string-coerce-1VuiLaaR.mjs";
import { t as matchesVersionManagerPath } from "./version-manager-path-CORhhR2Q.mjs";
import fs from "node:fs";
//#region src/bootstrap/node-extra-ca-certs.ts
const LINUX_CA_BUNDLE_PATHS = [
	"/etc/ssl/certs/ca-certificates.crt",
	"/etc/pki/tls/certs/ca-bundle.crt",
	"/etc/ssl/ca-bundle.pem"
];
function resolveAutoNodeExtraCaCerts(params = {}) {
	const env = params.env ?? process.env;
	if (env.NODE_EXTRA_CA_CERTS?.trim()) return;
	const platform = params.platform ?? process.platform;
	const execPath = params.execPath ?? process.execPath;
	if (platform !== "linux") return;
	if (!(Boolean(env.NVM_DIR?.trim()) || matchesVersionManagerPath(execPath, "linux-ca"))) return;
	const accessSync = params.accessSync ?? fs.accessSync.bind(fs);
	for (const candidate of LINUX_CA_BUNDLE_PATHS) try {
		accessSync(candidate, fs.constants.R_OK);
		return candidate;
	} catch {
		continue;
	}
}
//#endregion
//#region src/bootstrap/node-startup-env.ts
/** Resolves NODE_* TLS env values without overwriting user-provided settings. */
function resolveNodeStartupTlsEnvironment(params = {}) {
	const env = params.env ?? process.env;
	const platform = params.platform ?? process.platform;
	const includeDarwinDefaults = params.includeDarwinDefaults ?? true;
	return {
		NODE_EXTRA_CA_CERTS: readNonBlankString(env.NODE_EXTRA_CA_CERTS) ?? (platform === "darwin" && includeDarwinDefaults ? "/etc/ssl/cert.pem" : resolveAutoNodeExtraCaCerts({
			env,
			platform,
			execPath: params.execPath,
			accessSync: params.accessSync
		})),
		NODE_USE_SYSTEM_CA: env.NODE_USE_SYSTEM_CA ?? (platform === "darwin" && includeDarwinDefaults ? "1" : void 0)
	};
}
//#endregion
export { resolveNodeStartupTlsEnvironment as t };