o
    q\j                     @  s\   d Z ddlmZ ddlZddlZddlZddlZddlmZ d
ddZ	e
d	kr,ee	 dS )zDCreate a new external AES-256 keyring without printing key material.    )annotationsN)Pathreturnintc                  C  s  t  } | jddd | jddd |  }t|j}| r-tt	dt
|d dS |jjd	d
d
d |j|jttddid}t|tjtjB tjB d}tj|ddd}t|| |d W d    n1 stw   Y  tt	dt
||jd dS )Nz--pathz4/var/www/html/.platform-secrets/secrets-keyring.json)defaultz	--versionzkey-2026-01exists)statuspathr   i  T)modeparentsexist_ok    ascii)active_versionkeysi  wzutf-8)encoding
created)r   r	   r   )argparseArgumentParseradd_argument
parse_argsr   r	   r   printjsondumpsstrparentmkdirversionbase64urlsafe_b64encodeosurandomdecodeopenO_WRONLYO_CREATO_EXCLfdopendumpwrite)parserargsr	   payload
descriptorstream r1   scripts/init_secrets_keyring.pymain   s(   
r3   __main__)r   r   )__doc__
__future__r   r   r    r   r"   pathlibr   r3   __name__
SystemExitr1   r1   r1   r2   <module>   s   

