Function migrateUserScriptSecretSettings

src/utils/userScriptSecrets.ts:706–773

(
	app: App | undefined,
	command: IUserScript,
	userScriptSettings: UserScriptSettingsDefinition | undefined,
)

}

export async function migrateUserScriptSecretSettings(
	app: App | undefined,
	command: IUserScript,
	userScriptSettings: UserScriptSettingsDefinition | undefined,
): Promise<boolean> {
	const secretOptionEntries = getSecretOptionEntries(userScriptSettings);
	if (secretOptionEntries.length === 0) return false;

	const secretStorage = getSecretStorage(app);
	if (!secretStorage?.getSecret || !secretStorage?.setSecret) {
		const hasLegacySecrets = secretOptionEntries.some(([name]) => {
			const value = command.settings?.[name];
			return typeof value === "string" && value.length > 0;
		});

		if (hasLegacySecrets) {
			log.logWarning(
				`SecretStorage unavailable; leaving plaintext user script secret settings for "${command.name}" unchanged.`,
			);
		}

		return false;
	}

	let migrated = false;

	for (const [settingName, option] of secretOptionEntries) {
		const value = command.settings?.[settingName];
		if (isUserScriptSecretRef(value)) continue;
		if (typeof value !== "string" || value.length === 0) {
			if (!optionDefinesStableSecretId(option)) continue;

			const secretRef = buildUserScriptSecretId(command, settingName, option);
			const existingSecret = await readSecretStorageEntry(app, secretRef);
			if (!existingSecret) continue;

			command.settings[settingName] = createUserScriptSecretRef(secretRef);
			for (const [existingName, existingValue] of Object.entries(
				command.settings,
			)) {
				if (
					existingName !== settingName &&
					isUserScriptSecretRef(existingValue) &&
					existingValue.secretRef === secretRef
				) {
					delete command.settings[existingName];
				}
			}
			migrated = true;
			continue;
		}

		const secretRef = await storeUserScriptSecret(
			app,
			command,
			settingName,
			value,
			undefined,