config.ts

1export type BucketSource =2	| {3			kind: "s3";4			endpoint: string;5			name: string;6			region: string;7			accessKeyId: string;8			secretAccessKey: string;9	  }10	// A directory laid out exactly like the bucket (Koh 3's folder remote), for development and tests.11	| { kind: "folder"; path: string };1213export type Config = {14	domain: string;15	dataDir: string;16	adminPasswordHash: string;17	bucket: BucketSource;18};1920export class ConfigError extends Error {}2122export function parseConfig(text: string): Config {23	let raw: unknown;24	try {25		raw = Bun.TOML.parse(text);26	} catch (cause) {27		throw new ConfigError(`kepr.toml is not valid TOML: ${(cause as Error).message}`);28	}29	const top = asTable(raw, "kepr.toml");30	const bucket = asTable(top.bucket, "[bucket]");31	const adminPasswordHash = requireString(top, "admin_password_hash");32	if (!adminPasswordHash.startsWith("$argon2id$")) {33		throw new ConfigError("admin_password_hash must be an Argon2id hash ($argon2id$...)");34	}35	return {36		domain: requireString(top, "domain"),37		dataDir: requireString(top, "data_dir"),38		adminPasswordHash,39		bucket: parseBucket(bucket),40	};41}4243export async function loadConfig(path: string): Promise<Config> {44	const file = Bun.file(path);45	if (!(await file.exists())) throw new ConfigError(`${path} not found`);46	return parseConfig(await file.text());47}4849function parseBucket(bucket: Record<string, unknown>): BucketSource {50	if (bucket.folder !== undefined) {51		const s3Keys = ["endpoint", "name", "region", "access_key_id", "secret_access_key"];52		const mixed = s3Keys.filter((key) => bucket[key] !== undefined);53		if (mixed.length > 0) {54			throw new ConfigError(`[bucket] folder cannot be combined with ${mixed.join(", ")}`);55		}56		return { kind: "folder", path: requireString(bucket, "folder", "[bucket] ") };57	}58	const endpoint = requireString(bucket, "endpoint", "[bucket] ");59	if (!URL.canParse(endpoint)) throw new ConfigError("[bucket] endpoint must be a URL");60	return {61		kind: "s3",62		endpoint,63		name: requireString(bucket, "name", "[bucket] "),64		region: requireString(bucket, "region", "[bucket] "),65		accessKeyId: requireString(bucket, "access_key_id", "[bucket] "),66		secretAccessKey: requireString(bucket, "secret_access_key", "[bucket] "),67	};68}6970function asTable(value: unknown, name: string): Record<string, unknown> {71	if (typeof value !== "object" || value === null || Array.isArray(value)) {72		throw new ConfigError(`${name} is missing or not a table`);73	}74	return value as Record<string, unknown>;75}7677function requireString(table: Record<string, unknown>, key: string, section = ""): string {78	const value = table[key];79	if (typeof value !== "string" || value.trim() === "") {80		throw new ConfigError(`${section}${key} is required and must be a non-empty string`);81	}82	return value;83}