app/lib/admin/secrets.server.ts

Functions

Imports

It imports app/lib/secrets.mjs. Imported by app/routes/admin.tools.tsx.

Source

1// PRESENCE ONLY: return a name and a boolean, never a value, a masked value or a length (each leaks).
2// check:secrets matches `env.NAME`, so these dynamic `env[name]` reads are not in its count.
3
4// Relative, not `~`: test/secrets-audit.test.mjs runs under node:test, which cannot resolve the alias.
5import { REQUIRED_SECRETS } from "../secrets.mjs";
6
7export interface SecretPresence {
8  name: string;
9  present: boolean;
10}
11
12// Empty string counts as absent: a `.dev.vars` line with nothing after `=` stores one.
13export function auditSecrets(env: Record<string, unknown>): SecretPresence[] {
14  return REQUIRED_SECRETS.map((name) => ({
15    name,
16    // Tested and discarded in one expression, never bound, so no later edit can return it.
17    present: typeof env[name] === "string" && (env[name] as string).length > 0,
18  }));
19}