Function resolveSecret

src/cli/commands/setup.ts:50–71

(assumeYes: boolean)

}

const resolveSecret = async (assumeYes: boolean): Promise<string> => {
  if (process.env.SECRET?.trim()) {
    return process.env.SECRET.trim()
  }

  if (!assumeYes && process.stdin.isTTY) {
    const value = await setupPrompts.text({
      message: 'SECRET env var value (hex recommended)',
      placeholder: 'openssl rand -hex 128',
      validate: (input) => (input.trim() ? undefined : 'SECRET is required'),
    })

    if (setupPrompts.isCancel(value)) {
      setupPrompts.cancel('Setup cancelled')
      throw new SetupCancelledError()
    }

    return value.trim()
  }

  return randomBytes(64).toString('hex')
}

const upsertSecret = (content: string, secret: string): string => {
  const normalized = content.length > 0 ? content : ''