syncDopplerEnvVars.ts

import { syncEnvVars } from "@trigger.dev/build/extensions/core";
import { fetchSyncableDopplerSecrets, type DopplerSyncSource } from "../doppler/sync";

/**
 * Options for {@link syncDopplerEnvVars}.
 *
 * A proof-of-concept `syncDopplerEnvVars` build extension. It is a thin wrapper
 * over the built-in `syncEnvVars` extension that pulls your secrets from Doppler
 * at deploy time and syncs them into Trigger.dev. This is the deploy-time way of
 * syncing; the `sync-doppler-env-vars` task is the webhook-driven way, and both
 * share {@link fetchSyncableDopplerSecrets}.
 */
export type SyncDopplerEnvVarsOptions = DopplerSyncSource & {
  /**
   * Whether to mark the synced variables as secret in Trigger.dev, so their
   * values are redacted in the dashboard and API. Defaults to `true`, since they
   * originate from a secrets manager.
   */
  markAsSecret?: boolean;
};

export function syncDopplerEnvVars(
  options: SyncDopplerEnvVarsOptions = {}
): ReturnType<typeof syncEnvVars> {
  const { markAsSecret = true, ...source } = options;

  return syncEnvVars(async (ctx) => {
    const variables = await fetchSyncableDopplerSecrets(ctx.environment, source);

    return Object.entries(variables).map(([name, value]) => ({
      name,
      value,
      isSecret: markAsSecret,
    }));
  });
}