Function writeGeneratedRemoteConfig

src/cli/connection/generated-config.ts:16–35

(options: {
  stateDir: string;
  provider: string;
  profile: RemoteConfigProfile;
})

const GENERATED_REMOTE_CONFIG_SECRET_KEYS = new Set(['daemonAuthToken', 'metroBearerToken']);

export function writeGeneratedRemoteConfig(options: {
  stateDir: string;
  provider: string;
  profile: RemoteConfigProfile;
}): string {
  const normalized = normalizeJson(stripGeneratedProfileSecrets(options.profile));
  const configDir = path.join(options.stateDir, 'remote-connections', 'generated');
  fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });
  const configPath = path.join(
    configDir,
    `${safeProviderName(options.provider)}-${profileHash(normalized)}.json`,
  );
  fs.writeFileSync(configPath, `${JSON.stringify(normalized, null, 2)}\n`, { mode: 0o600 });
  try {
    fs.chmodSync(configPath, 0o600);
  } catch {
    // Best effort on filesystems that do not support POSIX mode bits.
  }
  return configPath;
}

function resolveGeneratedRemoteConfigProfile(options: {
  configPath: string;