openclaw/dist/node-startup-env-C5ZHYlJG.js

Multi-channel AI gateway with extensible messaging integrations

import { m as readNonBlankString } from "./string-coerce-CIXf7egm.js";
import fs from "node:fs";
//#region src/bootstrap/node-extra-ca-certs.ts
const LINUX_CA_BUNDLE_PATHS = [
	"/etc/ssl/certs/ca-certificates.crt",
	"/etc/pki/tls/certs/ca-bundle.crt",
	"/etc/ssl/ca-bundle.pem"
];
/**
* Version manager path markers (Linux subset), mirroring VERSION_MANAGER_MARKERS
* in src/daemon/runtime-paths.ts. Not imported directly because bootstrap code
* must avoid daemon-layer dependencies at startup.
* Version-manager-installed Node does not inherit system CA certificates,
* so we detect this to auto-inject NODE_EXTRA_CA_CERTS.
*/
const VERSION_MANAGER_PATH_MARKERS = [
	"/.nvm/",
	"/.fnm/",
	"/.local/share/fnm/",
	"/.volta/",
	"/.asdf/",
	"/.local/share/mise/",
	"/.n/",
	"/.nodenv/",
	"/.nodebrew/",
	"/nvs/",
	"/.nvs/"
];
function resolveAutoNodeExtraCaCerts(params = {}) {
	const env = params.env ?? process.env;
	if (env.NODE_EXTRA_CA_CERTS?.trim()) return;
	const platform = params.platform ?? process.platform;
	const execPath = params.execPath ?? process.execPath;
	if (platform !== "linux") return;
	if (!(Boolean(env.NVM_DIR?.trim()) || VERSION_MANAGER_PATH_MARKERS.some((marker) => execPath.includes(marker)))) return;
	const accessSync = params.accessSync ?? fs.accessSync.bind(fs);
	for (const candidate of LINUX_CA_BUNDLE_PATHS) try {
		accessSync(candidate, fs.constants.R_OK);
		return candidate;
	} catch {
		continue;
	}
}
//#endregion
//#region src/bootstrap/node-startup-env.ts
/** Resolves NODE_* TLS env values without overwriting user-provided settings. */
function resolveNodeStartupTlsEnvironment(params = {}) {
	const env = params.env ?? process.env;
	const platform = params.platform ?? process.platform;
	const includeDarwinDefaults = params.includeDarwinDefaults ?? true;
	return {
		NODE_EXTRA_CA_CERTS: readNonBlankString(env.NODE_EXTRA_CA_CERTS) ?? (platform === "darwin" && includeDarwinDefaults ? "/etc/ssl/cert.pem" : resolveAutoNodeExtraCaCerts({
			env,
			platform,
			execPath: params.execPath,
			accessSync: params.accessSync
		})),
		NODE_USE_SYSTEM_CA: env.NODE_USE_SYSTEM_CA ?? (platform === "darwin" && includeDarwinDefaults ? "1" : void 0)
	};
}
//#endregion
export { resolveNodeStartupTlsEnvironment as t };