import os


def resolve_admin_password() -> str:
    p = os.environ.get('PIC_ADMIN_PASS', '').strip()
    if p:
        return p
    candidate = os.path.normpath(
        os.path.join(os.path.dirname(__file__), '..', '..', '..', 'data', 'api', '.admin_initial_password')
    )
    if os.path.exists(candidate):
        return open(candidate).read().strip()
    raise RuntimeError(
        "Admin password unknown. Set PIC_ADMIN_PASS env var or run: "
        "make reset-test-admin-pass PIC_TEST_ADMIN_PASS=<password>"
    )