app_for_indeed/App for Indeed/OpenAIConfiguration.swift

import Foundation

enum OpenAIConfiguration {
    private static let obfuscationKey: [UInt8] = [0xA7, 0x3C, 0x91, 0x5E]

    /// XOR-obfuscated default API key (not stored in plaintext).
    private static let obfuscatedDefaultKey: [UInt8] = [
        212, 87, 188, 45, 209, 95, 240, 61, 196, 72, 188, 23,
        200, 12, 244, 24, 223, 121, 197, 110, 214, 82, 243, 4,
        224, 73, 213, 61, 201, 88, 203, 56, 227, 84, 200, 56,
        230, 12, 219, 1, 203, 112, 218, 40, 236, 126, 163, 108,
        223, 76, 246, 27, 240, 109, 203, 26, 237, 125, 229, 19,
        227, 111, 169, 43, 200, 86, 233, 21, 197, 70, 221, 13,
        200, 74, 254, 56, 198, 102, 218, 51, 203, 86, 227, 11,
        192, 104, 162, 28, 203, 94, 250, 24, 237, 109, 221, 61,
        247, 80, 249, 10, 150, 95, 222, 102, 146, 100, 226, 21,
        201, 127, 195, 9, 222, 99, 247, 36, 138, 77, 220, 109,
        205, 99, 240, 63, 240, 85, 197, 55, 214, 112, 240, 55,
        194, 112, 221, 11, 158, 17, 225, 16, 215, 12, 192, 106,
        193, 117, 221, 14, 241, 17, 218, 46, 204, 88, 247, 6,
        228, 75, 240, 26, 213, 9, 225, 26, 233, 87, 208,
    ]

    /// `OPENAI_API_KEY` for local debug, otherwise the embedded obfuscated default.
    static var apiKey: String {
        let fromEnvironment = ProcessInfo.processInfo.environment["OPENAI_API_KEY"] ?? ""
        let trimmedEnvironment = fromEnvironment.trimmingCharacters(in: .whitespacesAndNewlines)
        if !trimmedEnvironment.isEmpty {
            return trimmedEnvironment
        }
        return deobfuscate(obfuscatedDefaultKey)
    }

    /// Whether `apiKey` is currently populated with a real value.
    static var hasAPIKey: Bool {
        !apiKey.isEmpty
    }

    private static func deobfuscate(_ bytes: [UInt8]) -> String {
        let decoded = bytes.enumerated().map { index, byte in
            byte ^ obfuscationKey[index % obfuscationKey.count]
        }
        return String(bytes: decoded, encoding: .utf8) ?? ""
    }
}