openclaw/dist/secret-contract-BmNerIOL.js

Multi-channel AI gateway with extensible messaging integrations

import { o as coerceSecretRef } from "./types.secrets-_0JOMGE5.js";
import { c as pushInactiveSurfaceWarning, i as hasOwnProperty, l as pushWarning, s as pushAssignment } from "./runtime-shared-DR5938Io.js";
import { a as getChannelSurface, l as resolveChannelAccountSurface } from "./channel-secret-basic-runtime-BTUuyj14.js";
import "./channel-secret-basic-runtime-DkPz7o71.js";
import "./secret-ref-runtime-DmIz2ZeY.js";
//#region extensions/googlechat/src/secret-contract.ts
const secretTargetRegistryEntries = [{
	id: "channels.googlechat.accounts.*.serviceAccount",
	targetType: "channels.googlechat.serviceAccount",
	targetTypeAliases: ["channels.googlechat.accounts.*.serviceAccount"],
	configFile: "openclaw.json",
	pathPattern: "channels.googlechat.accounts.*.serviceAccount",
	refPathPattern: "channels.googlechat.accounts.*.serviceAccountRef",
	secretShape: "sibling_ref",
	expectedResolvedValue: "string-or-object",
	includeInPlan: true,
	includeInConfigure: true,
	includeInAudit: true,
	accountIdPathSegmentIndex: 3
}, {
	id: "channels.googlechat.serviceAccount",
	targetType: "channels.googlechat.serviceAccount",
	configFile: "openclaw.json",
	pathPattern: "channels.googlechat.serviceAccount",
	refPathPattern: "channels.googlechat.serviceAccountRef",
	secretShape: "sibling_ref",
	expectedResolvedValue: "string-or-object",
	includeInPlan: true,
	includeInConfigure: true,
	includeInAudit: true
}];
function resolveSecretInputRef(params) {
	const explicitRef = coerceSecretRef(params.refValue, params.defaults);
	const inlineRef = explicitRef ? null : coerceSecretRef(params.value, params.defaults);
	return {
		explicitRef,
		inlineRef,
		ref: explicitRef ?? inlineRef
	};
}
function collectGoogleChatAccountAssignment(params) {
	const { explicitRef, ref } = resolveSecretInputRef({
		value: params.target.serviceAccount,
		refValue: params.target.serviceAccountRef,
		defaults: params.defaults
	});
	if (!ref) return;
	if (params.active === false) {
		pushInactiveSurfaceWarning({
			context: params.context,
			path: `${params.path}.serviceAccount`,
			details: params.inactiveReason
		});
		return;
	}
	if (explicitRef && params.target.serviceAccount !== void 0 && !coerceSecretRef(params.target.serviceAccount, params.defaults)) pushWarning(params.context, {
		code: "SECRETS_REF_OVERRIDES_PLAINTEXT",
		path: params.path,
		message: `${params.path}: serviceAccountRef is set; runtime will ignore plaintext serviceAccount.`
	});
	pushAssignment(params.context, {
		ref,
		path: `${params.path}.serviceAccount`,
		expected: "string-or-object",
		apply: (value) => {
			params.target.serviceAccount = value;
		}
	});
}
function collectRuntimeConfigAssignments(params) {
	const resolved = getChannelSurface(params.config, "googlechat");
	if (!resolved) return;
	const googleChat = resolved.channel;
	const surface = resolveChannelAccountSurface(googleChat);
	const topLevelServiceAccountActive = !surface.channelEnabled ? false : !surface.hasExplicitAccounts ? true : surface.accounts.some(({ account, enabled }) => enabled && !hasOwnProperty(account, "serviceAccount") && !hasOwnProperty(account, "serviceAccountRef"));
	collectGoogleChatAccountAssignment({
		target: googleChat,
		path: "channels.googlechat",
		defaults: params.defaults,
		context: params.context,
		active: topLevelServiceAccountActive,
		inactiveReason: "no enabled account inherits this top-level Google Chat serviceAccount."
	});
	if (!surface.hasExplicitAccounts) return;
	for (const { accountId, account, enabled } of surface.accounts) {
		if (!hasOwnProperty(account, "serviceAccount") && !hasOwnProperty(account, "serviceAccountRef")) continue;
		collectGoogleChatAccountAssignment({
			target: account,
			path: `channels.googlechat.accounts.${accountId}`,
			defaults: params.defaults,
			context: params.context,
			active: enabled,
			inactiveReason: "Google Chat account is disabled."
		});
	}
}
const channelSecrets = {
	secretTargetRegistryEntries,
	collectRuntimeConfigAssignments
};
//#endregion
export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };