1import { getReqAppCfg } from '../k8sF/ctxF/appCfgCtxF.mts'
2import { execAsyncR } from '../../serverF/childProcF/exec1AsyncRF.mts'
3import { pathDownJoin } from '../../serverF/pathF.mts'
4import { ptDir } from '../../serverF/ptDirF.mts'
5import { secretsRelDir } from '../../serverF/secretsDirF.mts'
6import { assertDefined } from '../../sharedF/assertsF/assertDefinedF.mts'
7import { throwIf } from '../../sharedF/throwErrorF/throwIfF.mts'
8import { getProcArgv } from '../../serverF/isDirectlyRunF.mts'
9import { doPrompt } from '../readlineF/guardPromptF.mts'
10import type { PtAction } from '../ctxF/availActionsCtxF.mts'
11
12export const doZipSecrets = async ({secretNameA, name = 'pt', zipPassword}: {
13  secretNameA: string[], name?: string, zipPassword?: string,
14}) => {
15  const secretPaths = secretNameA.map(secretName => pathDownJoin(secretsRelDir, secretName))
16  const zipName = pathDownJoin(ptDir, `${[name, 'secrets'].filter(Boolean).join('_')}.zip`)
17  console.log(`zipping ${secretNameA.length} secret(s) -> ${zipName}:`, secretNameA)
18  const pwArg = zipPassword ? `-P '${zipPassword}'` : ''
19  await execAsyncR(`zip ${zipName} ${pwArg} -j ${secretPaths.join(' ')}`)
20}
21
22export const zipsecrets: PtAction = async () => {
23  const {secretNames, name} = getReqAppCfg()
24  assertDefined(secretNames, {name})
25  const requestedA = getProcArgv().slice(3).filter(a => !a.startsWith('-'))
26  const invalidA = requestedA.filter(s => !secretNames.includes(s))
27  throwIf(() => invalidA.length > 0, {invalidA, secretNames})
28  const zipPassword = process.env.ZIP_PASSWORD ?? await doPrompt('ZIP_PASSWORD (blank for no password): ')
29  await doZipSecrets({secretNameA: requestedA.length ? requestedA : secretNames, name, zipPassword})
30}
31zipsecrets.cliSchema = {}
32zipsecrets.cliAcceptsPositional = true
33zipsecrets.cliDescript = `zip all ref'd secretNames for distribution to another dev (optional: list specific secrets to include only those)`
34