@prover-coder-ai/docker-git 1.0.51 → 1.0.53

package/dist/src/docker-git/main.js

@@ -5825,14 +5825,37 @@ var ensureFileReady = (fs, resolved, onDirectoryMessage) => Effect.gen(function*
 	}
 	return "exists";
 });
+var appendKeyIfMissing = (fs, resolved, source, desiredContents) => Effect.gen(function* (_) {
+	const currentContents = yield* _(fs.readFileString(resolved));
+	if (currentContents.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0).includes(desiredContents)) return;
+	const normalizedCurrent = currentContents.trimEnd();
+	const nextContents = normalizedCurrent.length === 0 ? `${desiredContents}\n` : `${normalizedCurrent}\n${desiredContents}\n`;
+	yield* _(fs.writeFileString(resolved, nextContents));
+	yield* _(Effect.log(`Authorized keys appended from ${source} to ${resolved}`));
+});
+var resolveAuthorizedKeysSource = (fs, path, cwd) => Effect.gen(function* (_) {
+	const sshPrivateKey = yield* _(findSshPrivateKey(fs, path, cwd));
+	const matchingPublicKey = sshPrivateKey === null ? null : yield* _(findExistingPath(fs, `${sshPrivateKey}.pub`));
+	return matchingPublicKey === null ? yield* _(findAuthorizedKeysSource(fs, path, cwd)) : matchingPublicKey;
+});
 var ensureAuthorizedKeys = (baseDir, authorizedKeysPath) => withFsPathContext(({ fs, path }) => Effect.gen(function* (_) {
 	const resolved = resolveAuthorizedKeysPath(path, baseDir, authorizedKeysPath);
-	if ((yield* _(ensureFileReady(fs, resolved, (resolvedPath, backupPath) => `Authorized keys was a directory, moved to ${backupPath}. Creating a file at ${resolvedPath}.`))) === "exists") return;
-	const source = yield* _(findAuthorizedKeysSource(fs, path, process.cwd()));
+	const managedDefaultAuthorizedKeys = path.join(defaultProjectsRoot(process.cwd()), "authorized_keys");
+	const state = yield* _(ensureFileReady(fs, resolved, (resolvedPath, backupPath) => `Authorized keys was a directory, moved to ${backupPath}. Creating a file at ${resolvedPath}.`));
+	const source = yield* _(resolveAuthorizedKeysSource(fs, path, process.cwd()));
 	if (source === null) {
 		yield* _(Effect.logError(`Authorized keys not found. Create ${resolved} with your public key to enable SSH.`));
 		return;
 	}
+	const desiredContents = (yield* _(fs.readFileString(source))).trim();
+	if (desiredContents.length === 0) {
+		yield* _(Effect.logWarning(`Authorized keys source ${source} is empty. Skipping SSH key sync.`));
+		return;
+	}
+	if (state === "exists") {
+		if (resolved === managedDefaultAuthorizedKeys) yield* _(appendKeyIfMissing(fs, resolved, source, desiredContents));
+		return;
+	}
 	yield* _(fs.makeDirectory(path.dirname(resolved), { recursive: true }));
 	yield* _(fs.copyFile(source, resolved));
 	yield* _(Effect.log(`Authorized keys copied from ${source} to ${resolved}`));