@designfever/web-review-kit 0.7.0 → 0.7.1

package/dist/vite.cjs

@@ -374,6 +374,23 @@ function compareReviewFigmaSnapshotImages(a, b) {
 // src/vite/figma-image-store.image.ts
 var import_promises = require("fs/promises");
 var import_node_path = __toESM(require("path"), 1);
+function requireReviewFigmaRequestToken({
+  enabled,
+  env,
+  envKey,
+  requestToken,
+  token
+}) {
+  const tokenEnvKey = envKey ?? DEFAULT_REVIEW_FIGMA_TOKEN_ENV_KEY;
+  const figmaToken = readReviewFigmaToken({ token, env, envKey: tokenEnvKey, enabled }) || readReviewFigmaToken({
+    token: requestToken,
+    env: {},
+    envKey: tokenEnvKey,
+    enabled
+  });
+  if (!figmaToken) throw new ReviewFigmaTokenError(tokenEnvKey);
+  return figmaToken;
+}
 async function readReviewFigmaNodeName({
   apiBaseUrl,
   enabled,
@@ -382,14 +399,15 @@ async function readReviewFigmaNodeName({
   fetchOption,
   fileKey,
   nodeId,
-  token
+  token,
+  requestToken
 }) {
-  const explicitToken = typeof token === "string" ? token.trim() : token;
-  const figmaToken = explicitToken || requireReviewFigmaToken({
-    token: null,
+  const figmaToken = requireReviewFigmaRequestToken({
+    enabled,
     env,
-    envKey: envKey ?? DEFAULT_REVIEW_FIGMA_TOKEN_ENV_KEY,
-    enabled
+    envKey,
+    requestToken,
+    token
   });
   const fetchNode = fetchOption ?? globalThis.fetch;
   if (!fetchNode) throw new Error("Figma node name lookup requires fetch.");
@@ -427,7 +445,8 @@ async function createReviewFigmaImage({
   currentImages,
   env,
   input,
-  options
+  options,
+  requestToken
 }) {
   const ref = parseReviewFigmaNodeRef(input.figmaUrl);
   if (!ref) {
@@ -473,11 +492,11 @@ async function createReviewFigmaImage({
     fetchOption: options.fetch,
     fileKey: ref.fileKey,
     nodeId: ref.nodeId,
-    token: options.token
+    token: options.token,
+    requestToken
   }).catch(() => void 0);
   const targetImageFormat = input.imageFormat ?? options.imageFormat ?? "webp";
   const renderFormat = getStoreRenderFormat(options.renderFormat, targetImageFormat);
-  const explicitToken = typeof options.token === "string" ? options.token.trim() : options.token;
   const rendered = await renderReviewFigmaImage({
     figmaUrl: input.figmaUrl,
     format: renderFormat,
@@ -485,11 +504,12 @@ async function createReviewFigmaImage({
     useAbsoluteBounds: options.useAbsoluteBounds,
     apiBaseUrl: options.apiBaseUrl,
     fetch: options.fetch,
-    token: explicitToken || requireReviewFigmaToken({
-      token: null,
+    token: requireReviewFigmaRequestToken({
+      enabled: options.enabled,
       env,
-      envKey: options.envKey ?? DEFAULT_REVIEW_FIGMA_TOKEN_ENV_KEY,
-      enabled: options.enabled
+      envKey: options.envKey,
+      requestToken,
+      token: options.token
     })
   });
   const cachedAsset = await cacheReviewFigmaImageAsset({
@@ -722,7 +742,8 @@ async function handleReviewFigmaImageStoreRequest({
   pathname,
   requestUrl,
   body,
-  env
+  env,
+  requestToken
 }) {
   if (method === "OPTIONS") return { status: 204, body: null };
   if ((method === "GET" || method === "POST") && pathname === `${endpoint}/snapshot`) {
@@ -768,7 +789,8 @@ async function handleReviewFigmaImageStoreRequest({
       currentImages: data.images,
       env,
       input,
-      options
+      options,
+      requestToken
     });
     data.images = [image, ...data.images];
     await writeReviewFigmaImageStoreFile(dataFile, data);
@@ -1070,7 +1092,8 @@ var reviewFigmaImageStore = (options = {}) => {
             pathname,
             requestUrl,
             method: req.method ?? "GET",
-            body: await readJsonRequestBody(req)
+            body: await readJsonRequestBody(req),
+            requestToken: readRequestFigmaToken(req)
           });
           sendJson(res, response.status, response.body);
         } catch (error) {
@@ -1082,6 +1105,11 @@ var reviewFigmaImageStore = (options = {}) => {
     }
   };
 };
+function readRequestFigmaToken(req) {
+  const value = req.headers?.["x-figma-token"];
+  const token = Array.isArray(value) ? value[0] : value;
+  return typeof token === "string" ? token.trim() || null : null;
+}
 function getServerEnv() {
   const runtime = globalThis;
   return runtime.process?.env ?? {};