Init passphrase on deploy commands only

Author: jamesgibbons92

pkg/project/provider/provider.go

@@ -103,6 +103,18 @@ func Passphrase(backend Home, app, stage string) (string, error) {
 		return "", err
 	}
 
+	if passphrase != "" {
+		cache[app+stage] = passphrase
+	}
+	return passphrase, nil
+}
+
+func PassphraseInit(backend Home, app, stage string) (string, error) {
+	passphrase, err := Passphrase(backend, app, stage)
+	if err != nil {
+		return "", err
+	}
+
 	if passphrase == "" {
 		slog.Info("passphrase not found, setting passphrase", "app", app, "stage", stage)
 		passphrase = flag.SST_PASSPHRASE
@@ -118,9 +130,11 @@ func Passphrase(backend Home, app, stage string) (string, error) {
 		if err != nil {
 			return "", err
 		}
+
+		cache := passphraseCache[backend]
+		cache[app+stage] = passphrase
 	}
 
-	existingPassphrase, ok = cache[app+stage]
 	return passphrase, nil
 }
 

pkg/project/run.go

@@ -78,7 +78,12 @@ func (p *Project) RunNext(ctx context.Context, input *StackInput) error {
 	}
 	defer workdir.Cleanup()
 
-	passphrase, err := provider.Passphrase(p.home, p.app.Name, p.app.Stage)
+	var passphrase string
+	if input.Command == "deploy" || input.Dev {
+		passphrase, err = provider.PassphraseInit(p.home, p.app.Name, p.app.Stage)
+	} else {
+		passphrase, err = provider.Passphrase(p.home, p.app.Name, p.app.Stage)
+	}
 	if err != nil {
 		return err
 	}