reposets 0.4.1 → 0.4.3

package/services/CredentialResolver.js

@@ -0,0 +1,40 @@
+import { ResolveError } from "../errors.js";
+import { OnePasswordClient } from "./OnePasswordClient.js";
+import { Context, Effect, Layer } from "effect";
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+
+//#region src/services/CredentialResolver.ts
+var CredentialResolver = class extends Context.Tag("CredentialResolver")() {};
+const CredentialResolverLive = Layer.effect(CredentialResolver, Effect.gen(function* () {
+	const opClient = yield* OnePasswordClient;
+	return { resolveAll(profile, basePath) {
+		return Effect.gen(function* () {
+			const result = /* @__PURE__ */ new Map();
+			const resolveSection = profile.resolve;
+			if (!resolveSection) return result;
+			if (resolveSection.value) for (const [label, val] of Object.entries(resolveSection.value)) if (typeof val === "string") result.set(label, val);
+			else result.set(label, JSON.stringify(val));
+			if (resolveSection.file) for (const [label, filePath] of Object.entries(resolveSection.file)) {
+				const fullPath = isAbsolute(filePath) ? filePath : resolve(basePath, filePath);
+				const content = yield* Effect.try({
+					try: () => readFileSync(fullPath, "utf-8").trim(),
+					catch: (error) => new ResolveError({ message: `Failed to read file for label '${label}': ${error instanceof Error ? error.message : String(error)}` })
+				});
+				result.set(label, content);
+			}
+			if (resolveSection.op) {
+				const opToken = profile.op_service_account_token;
+				if (!opToken) return yield* Effect.fail(new ResolveError({ message: "No 1Password service account token provided but resolve.op entries are defined" }));
+				for (const [label, reference] of Object.entries(resolveSection.op)) {
+					const value = yield* opClient.resolve(reference, opToken).pipe(Effect.mapError((err) => new ResolveError({ message: `Failed to resolve label '${label}': ${err.message}` })));
+					result.set(label, value);
+				}
+			}
+			return result;
+		});
+	} };
+}));
+
+//#endregion
+export { CredentialResolver, CredentialResolverLive };