@burdenoff/fe-libs 2026.514.1 → 2026.514.2

package/dist/shared/config/gatewayUrls.d.ts

@@ -23,12 +23,22 @@ export declare const PROD_HOSTS: Set<string>;
 export declare const ALPHA_HOSTS: Set<string>;
 export declare function getCurrentHostname(): string;
 /**
- * Resolve runtime gateway URLs from the current hostname.
+ * Resolve runtime gateway URLs from the current hostname, with an optional
+ * env-driven override for localhost dev servers.
  *
  * Priority:
- * 1. Known production domains (all products) → production gateways
- * 2. Known alpha/staging domains (all products) → alpha gateways
- * 3. Everything else → local development defaults
+ * 1. Known production domains → PROD_GATEWAYS (hostname always wins for real deploys)
+ * 2. Known alpha/staging domains → ALPHA_GATEWAYS
+ * 3. Localhost-like host: `VITE_GATEWAY_TARGET` env var, case-insensitive
+ *    - `'prod'`  → PROD_GATEWAYS (emits a one-time console warning — mutations write to real data)
+ *    - `'alpha'` → ALPHA_GATEWAYS
+ *    - `'local'` or anything else → LOCAL_DEFAULTS
+ * 4. Everything else (unknown deployed domain, or localhost with no env):
+ *    LOCAL_DEFAULTS (fails loud against a missing local stack rather than
+ *    silently writing to prod — see BOFF-2507).
+ *
+ * Set the override in `<app-shell>/.env.local` (gitignored by Vite) to test
+ * a localhost dev server against a remote backend without editing source.
  */
 export declare function resolveGatewayUrls(): RuntimeGatewayUrls;
 //# sourceMappingURL=gatewayUrls.d.ts.map

package/dist/shared/config/gatewayUrls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatewayUrls.d.ts","sourceRoot":"","sources":["../../../src/shared/config/gatewayUrls.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAoBD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,UAkC/B,CAAC;AAEF,eAAO,MAAM,UAAU,aAGrB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,WAAW,aAA2D,CAAC;AAEpF,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,CASvD"}
+{"version":3,"file":"gatewayUrls.d.ts","sourceRoot":"","sources":["../../../src/shared/config/gatewayUrls.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAoBD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,UAkC/B,CAAC;AAEF,eAAO,MAAM,UAAU,aAGrB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,WAAW,aAA2D,CAAC;AAEpF,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AA8BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,CA6BvD"}

package/dist/shared/config/gatewayUrls.js

@@ -15,9 +15,33 @@ var e = {
 function o() {
 	return typeof window > "u" ? "" : window.location.hostname.toLowerCase();
 }
-function s() {
+function s(e) {
+	return e ? e === "localhost" || e === "127.0.0.1" || e === "0.0.0.0" || e === "[::1]" || e === "::1" || e.endsWith(".localhost") || e.endsWith(".local.burdenoff.com") : !1;
+}
+var c = !1;
+function l() {
 	let r = o();
-	return i.has(r) ? t : a.has(r) ? e : n;
+	if (i.has(r)) return t;
+	if (a.has(r)) return e;
+	if (s(r)) {
+		let n = u();
+		if (n === "prod") return c || (c = !0, console.warn("[gatewayUrls] WARNING: localhost dev server is configured to hit PRODUCTION backends (VITE_GATEWAY_TARGET=prod). Any mutation will modify real prod data. Remove the env var or delete .env.local to disable.")), t;
+		if (n === "alpha") return e;
+	}
+	return n;
+}
+function u() {
+	try {
+		return {
+			BASE_URL: "/",
+			DEV: !1,
+			MODE: "production",
+			PROD: !0,
+			SSR: !1
+		}?.VITE_GATEWAY_TARGET?.toLowerCase();
+	} catch {
+		return;
+	}
 }
 //#endregion
-export { r as ALL_PRODUCT_DOMAINS, a as ALPHA_HOSTS, i as PROD_HOSTS, o as getCurrentHostname, s as resolveGatewayUrls };
+export { r as ALL_PRODUCT_DOMAINS, a as ALPHA_HOSTS, i as PROD_HOSTS, o as getCurrentHostname, l as resolveGatewayUrls };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.514.1",
+  "version": "2026.514.2",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "imports": {