Function syncEnvFileToDb

lib/services/env.ts:219–287

(projectId: string)

}

export async function syncEnvFileToDb(projectId: string): Promise<number> {
  const project = await ensureProject(projectId);
  const repoEnvPath = envFilePath(project);

  let fileContents = '';
  try {
    fileContents = await fs.readFile(repoEnvPath, 'utf8');
  } catch (error) {
    if ((error as NodeJS.ErrnoException).code === 'ENOENT') {
      return 0;
    }
    throw error;
  }

  const fileVars = parseEnvFile(fileContents);
  const existingVars = await prisma.envVar.findMany({
    where: { projectId },
  });

  const existingMap = new Map(existingVars.map((envVar) => [envVar.key, envVar]));
  const fileKeys = new Set(Object.keys(fileVars));
  let changes = 0;

  for (const [key, value] of Object.entries(fileVars)) {
    const current = existingMap.get(key);
    if (current) {
      let currentValue: string | null = null;
      try {
        currentValue = decrypt(current.valueEncrypted);
      } catch (error) {
        console.warn(`[EnvService] Failed to decrypt env var ${current.key}:`, error);
      }
      if (currentValue !== value) {
        await prisma.envVar.update({
          where: {
            projectId_key: { projectId, key },
          },
          data: { valueEncrypted: encrypt(value) },
        });
        changes += 1;
      }
    } else {
      await prisma.envVar.create({
        data: {
          projectId,
          key,
          valueEncrypted: encrypt(value),
          scope: 'runtime',
          varType: 'string',
          isSecret: true,
        },
      });
      changes += 1;
    }
  }

  for (const envVar of existingVars) {
    if (!fileKeys.has(envVar.key)) {