openclaw/dist/secret-file-QljTRMYg.js

Multi-channel AI gateway with extensible messaging integrations

import { c as resolveUserPath } from "./home-dir-BPhrG-aM.js";
import "./fs-safe-defaults-DGE52WTl.js";
import "./utils-P__uGsPB.js";
import { t as tightenPrivateDirChain } from "./private-dir-mode-CfIQtph_.js";
import path from "node:path";
import { DEFAULT_SECRET_FILE_MAX_BYTES as DEFAULT_SECRET_FILE_MAX_BYTES$1, PRIVATE_SECRET_DIR_MODE, PRIVATE_SECRET_DIR_MODE as PRIVATE_SECRET_DIR_MODE$1, PRIVATE_SECRET_FILE_MODE, createSecretFileAtomic, readSecretFile, readSecretFileSync, readSecretFileSync as readSecretFileSync$1, tryReadSecretFileSync, writeSecretFileAtomic } from "@openclaw/fs-safe/secret";
import { FsSafeError } from "@openclaw/fs-safe";
//#region src/infra/secret-file.ts
function tightenSecretDirectoryModes(params) {
	return tightenPrivateDirChain(params.rootDir, path.dirname(params.filePath), params.dirMode ?? PRIVATE_SECRET_DIR_MODE);
}
async function writePrivateSecretFileAtomic(params) {
	await tightenSecretDirectoryModes(params);
	await writeSecretFileAtomic(params);
}
async function createSecretFileAtomic$1(params) {
	await tightenSecretDirectoryModes(params);
	await createSecretFileAtomic(params);
}
function tryReadSecretFileSync$1(filePath, label, options = {}, diagnostic) {
	if ("credentialDiagnostic" in options) {
		const { credentialDiagnostic, ...readOptions } = options;
		if (!filePath?.trim()) return;
		try {
			return readSecretFileSync(filePath, label, readOptions);
		} catch (error) {
			if (!(error instanceof FsSafeError)) throw error;
			credentialDiagnostic.report({
				code: "CREDENTIAL_FILE_UNAVAILABLE",
				path: credentialDiagnostic.configPath,
				reason: error.code
			});
			return;
		}
	}
	if (!diagnostic) return tryReadSecretFileSync(filePath, label, options);
	if (!filePath?.trim()) return { status: "missing" };
	try {
		return {
			status: "available",
			value: readSecretFileSync(filePath, label, options)
		};
	} catch (error) {
		if (!(error instanceof FsSafeError)) throw error;
		return {
			status: "configured_unavailable",
			diagnostic: {
				code: "CREDENTIAL_FILE_UNAVAILABLE",
				path: diagnostic.configPath,
				reason: error.code
			}
		};
	}
}
/** @deprecated Use readSecretFileSync() or tryReadSecretFileSync(). */
function loadSecretFileSync(filePath, label, options = {}) {
	const trimmedPath = filePath.trim();
	const resolvedPath = resolveUserPath(trimmedPath);
	if (!resolvedPath) return {
		ok: false,
		message: `${label} file path is empty.`
	};
	try {
		return {
			ok: true,
			secret: readSecretFileSync(filePath, label, options),
			resolvedPath
		};
	} catch (error) {
		return {
			ok: false,
			message: error instanceof Error ? error.message : String(error),
			resolvedPath,
			error
		};
	}
}
//#endregion
export { loadSecretFileSync as a, tryReadSecretFileSync$1 as c, createSecretFileAtomic$1 as i, writePrivateSecretFileAtomic as l, PRIVATE_SECRET_DIR_MODE$1 as n, readSecretFile as o, PRIVATE_SECRET_FILE_MODE as r, readSecretFileSync$1 as s, DEFAULT_SECRET_FILE_MAX_BYTES$1 as t };