Source code for amoorion.vault.default

"""env backend: the `.env` setup, secrets as environment variables.

`bluesky/password` is read from AMOORION_SECRET_BLUESKY_PASSWORD. Meant for
development and tests; real secrets belong in one of the other backends.
"""

import os
from typing import ClassVar

from amoorion.core import AmoorionError
from amoorion.vault.base import BACKENDS, Vault




@BACKENDS.register
class EnvVault(Vault):
    """Secrets in AMOORION_SECRET_* variables: for development and sandboxes, not real accounts."""

    name: ClassVar[str] = "env"
    description: ClassVar[str] = (
        "secrets from environment variables (development only)"
    )



    @staticmethod
    def variable(name: str) -> str:
        """The variable of a secret: `x/api-key` is AMOORION_SECRET_X_API_KEY."""

        return (
            "AMOORION_SECRET_"
            + name.replace("/", "_").replace("-", "_").upper()
        )




    def get(
        self,
        name: str,
    ) -> str:
        """The variable's value; the error names the variable to set."""

        self.split(name)

        try:
            return os.environ[self.variable(name)]
        except KeyError:
            raise AmoorionError(
                f"secret {name!r} not found (set {self.variable(name)})"
            ) from None