feat: enforce read-only wechat archive ingestion

2026-06-13 06:22:04 +00:00
parent edb040d31a
commit 37f48d4655
5 changed files with 250 additions and 37 deletions
@@ -980,6 +980,15 @@ function hasAllowAllNetworkPolicy(yaml: string, namespaceName: string): boolean
    && /^\s*podSelector:\s*\{\}\s*$/mu.test(document));
 }

+export function prepareLangBotSecretMaterial(): SecretMaterial {
+  return prepareSecretMaterial(readLangBotConfig());
+}
+
+export function readLangBotPostgresConninfo(): string {
+  const langbot = readLangBotConfig();
+  return postgresConninfo(langbot, prepareSecretMaterial(langbot));
+}
+
 function prepareSecretMaterial(langbot: LangBotConfig): SecretMaterial {
  const root = secretRoot(langbot);
  const dbSourcePath = join(root, langbot.runtime.database.sourceRef);