Function cliEnv

packages/plugins/onepassword/src/sdk/service.ts:190–197

(auth: ResolvedAuth)

const cliPromptLock = Semaphore.makeUnsafe(1);

const cliEnv = (auth: ResolvedAuth): Record<string, string | undefined> => {
  const env: Record<string, string | undefined> = { ...process.env };
  // An inherited token would override `--account` and silently route a
  // desktop-app call to whatever service account the parent process carries.
  delete env["OP_SERVICE_ACCOUNT_TOKEN"];
  if (auth.kind === "service-account") env["OP_SERVICE_ACCOUNT_TOKEN"] = auth.token;
  return env;
};

const cliArgs = (auth: ResolvedAuth, base: readonly string[]): readonly string[] =>
  auth.kind === "desktop-app" ? [...base, `--account=${auth.accountName}`] : base;