@bstage-sdk/cli 0.1.0 → 0.2.0

package/dist/{chunk-S6HGR2U3.js → chunk-FER3TEK7.js}

@@ -65,6 +65,11 @@ var DEFAULT_TRANSLATION_TIER = "inhouse";
 var TRANSLATION_CDN_ORIGIN = "https://cdn.static.bstage.in";
 var TRANSLATION_CDN_BASE_KEY = "static/i18n";
 var TRANSLATION_CDN_BUCKET_PREFIX = "cdn.bstage.in/";
+var PORTAL_HOSTS = {
+  real: "portal.bstage.in",
+  sandbox: "bstage-portal.sandbox.bstage.systems"
+};
+var PORTAL_HOST_ENV_KEY = "VITE_BSTAGE_PORTAL_HOST";
 function getAuthHost(mode, phase, tenantId) {
   if (mode === "admin") {
     const fn2 = ADMIN_AUTH_HOSTS[phase];
@@ -513,11 +518,26 @@ function stripResponseCookies(headers, extraCookies) {
     headers["set-cookie"] = cookies;
   }
 }
-function collectBody(req) {
-  return new Promise((resolve2) => {
+var MAX_REQUEST_BODY_BYTES = 10 * 1024 * 1024;
+function collectBody(req, maxBytes = MAX_REQUEST_BODY_BYTES) {
+  return new Promise((resolve2, reject) => {
     const chunks = [];
-    req.on("data", (c) => chunks.push(c));
-    req.on("end", () => resolve2(Buffer.concat(chunks)));
+    let total = 0;
+    let overflowed = false;
+    req.on("data", (c) => {
+      if (overflowed) return;
+      total += c.length;
+      if (total > maxBytes) {
+        overflowed = true;
+        chunks.length = 0;
+        reject(new Error(`Request body exceeds ${maxBytes} bytes`));
+        return;
+      }
+      chunks.push(c);
+    });
+    req.on("end", () => {
+      if (!overflowed) resolve2(Buffer.concat(chunks));
+    });
   });
 }
 
@@ -568,7 +588,7 @@ var DEFAULT_PHASE = "sandbox";
 function isPhase(value) {
   return PHASES.includes(value);
 }
-function resolvePhase(explicit, cwd = process.cwd()) {
+function resolvePhase(explicit, cwd = process.cwd(), env = process.env) {
   if (explicit) {
     if (!isPhase(explicit)) {
       throw new Error(
@@ -578,7 +598,7 @@ function resolvePhase(explicit, cwd = process.cwd()) {
     return { phase: explicit, source: "flag" };
   }
   const fileEnv = loadEnv3("development", cwd, "");
-  const fromEnv = process.env.VITE_BSTAGE_PHASE || fileEnv.VITE_BSTAGE_PHASE || "";
+  const fromEnv = env.VITE_BSTAGE_PHASE || fileEnv.VITE_BSTAGE_PHASE || "";
   if (fromEnv) {
     if (isPhase(fromEnv)) return { phase: fromEnv, source: "env" };
     return { phase: DEFAULT_PHASE, source: "default", ignoredEnvValue: fromEnv };
@@ -1729,13 +1749,13 @@ async function refreshAccessToken(mode, phase, hosts, tenantId, accessToken, coo
       headers,
       body: Buffer.from(postBody)
     });
-    const text = result.body.toString("utf-8");
-    const json = JSON.parse(text);
-    if (result.statusCode === 200 && json.accessToken) {
+    const json = JSON.parse(result.body.toString("utf-8"));
+    const newToken = json.accessToken ?? json.data?.accessToken;
+    if (result.statusCode === 200 && newToken) {
       console.info(`[bstage] token refreshed (${mode})`);
-      return json.accessToken;
+      return newToken;
     }
-    console.warn("[bstage] token refresh failed:", result.statusCode, text);
+    console.warn(`[bstage] token refresh failed (mode=${mode}, status=${result.statusCode})`);
     return null;
   } catch {
     return null;
@@ -1821,10 +1841,15 @@ function handleGatewayProxy(mode, phase, hosts, req, res) {
       res.writeHead(result.statusCode, result.headers);
       res.end(result.body);
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      console.error("[bstage] gateway proxy error:", err instanceof Error ? err.message : err);
       res.writeHead(502, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ message: "Gateway proxy error", error: message }));
+      res.end(JSON.stringify({ message: "Gateway proxy error" }));
     }
+  }).catch((err) => {
+    console.error("[bstage] request body rejected:", err instanceof Error ? err.message : err);
+    if (res.headersSent) return;
+    res.writeHead(413, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ message: "Request body too large" }));
   });
 }
 function subpathOf(source) {
@@ -1895,18 +1920,22 @@ function handleAuthProxy(mode, phase, hosts, req, res) {
         }
       } else {
         console.warn(
-          `[bstage] auth proxy upstream non-2xx (mode=${mode}, status=${result.statusCode}):`,
-          textBody.slice(0, 500)
+          `[bstage] auth proxy upstream non-2xx (mode=${mode}, status=${result.statusCode})`
         );
       }
       stripResponseCookies(result.headers, extraCookies);
       res.writeHead(result.statusCode, result.headers);
       res.end(textBody);
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      console.error("[bstage] auth proxy error:", err instanceof Error ? err.message : err);
       res.writeHead(502, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ message: "Auth proxy error", error: message }));
+      res.end(JSON.stringify({ message: "Auth proxy error" }));
     }
+  }).catch((err) => {
+    console.error("[bstage] request body rejected:", err instanceof Error ? err.message : err);
+    if (res.headersSent) return;
+    res.writeHead(413, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ message: "Request body too large" }));
   });
 }
 function bstageDevPlugin(options = {}) {
@@ -2063,11 +2092,14 @@ function createViteConfig(options = {}) {
 
 export {
   LOGIN_PATH,
+  isPublicPhase,
   TRANSLATION_LANGUAGES,
   DEFAULT_TRANSLATION_TIER,
   TRANSLATION_CDN_ORIGIN,
   TRANSLATION_CDN_BASE_KEY,
   TRANSLATION_CDN_BUCKET_PREFIX,
+  PORTAL_HOSTS,
+  PORTAL_HOST_ENV_KEY,
   resolveProjectTarget,
   resolvePhase,
   describePhase,