1import fs from 'fs'
2import { pathDownJoin } from '../pathF.mts'
3import { secretsDir } from '../secretsDirF.mts'
4import { PtErr } from '../../sharedF/throwErrorF/sharedErrF.mts'
5
6export type secretNameType = string & { readonly __brand: unique symbol }
7
8export class SecretNotExistErr extends PtErr {
9  constructor(secretPath: string) {
10    super('!secretNotExist', { secretPath })
11  }
12}
13
14export type secretStrType = string & { readonly __brand: unique symbol }
15
16const plainSecretsH : Record<secretNameType, secretStrType> = {}
17
18const readSecretOrThrow = (secretPath: string) => {
19  try { return fs.readFileSync(secretPath, 'utf-8').trim() }
20  catch (err) { if ((err as NodeJS.ErrnoException).code === 'ENOENT') throw new SecretNotExistErr(secretPath); throw err }
21}
22
23export const getPlainNoMappedSec = (secName : secretNameType) => {
24  const secretPath = pathDownJoin(secretsDir, secName)
25  return plainSecretsH[secName] ||= readSecretOrThrow(secretPath) as secretStrType
26}
27
28export const getPlainSecOpt = (secName: secretNameType): secretStrType | undefined => {
29  try { return getPlainNoMappedSec(secName) }
30  catch (err) { if (err instanceof SecretNotExistErr) return undefined; throw err }
31}
32