@ibgib/space-gib 0.0.14 → 0.0.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ibgib/space-gib",
-  "version": "0.0.14",
+  "version": "0.0.17",
   "type": "module",
   "description": "ibgib storage and provider service — SaaS at ibgib.space",
   "scripts": {
@@ -12,11 +12,11 @@
     "build:test": "tsc -p tsconfig.test.json"
   },
   "dependencies": {
-    "@ibgib/core-gib": "^0.1.71",
-    "@ibgib/helper-gib": "^0.0.36",
+    "@ibgib/core-gib": "^0.1.73",
+    "@ibgib/helper-gib": "^0.0.37",
     "@ibgib/ts-gib": "^0.5.33",
-    "@ibgib/web-gib": "^0.0.57",
-    "@ibgib/node-gib": "^0.0.15"
+    "@ibgib/web-gib": "^0.0.59",
+    "@ibgib/node-gib": "^0.0.18"
   },
   "engines": {
     "node": ">=20.0.0"

package/src/client/AUTO-GENERATED-version.mts

@@ -8,4 +8,4 @@
 /**
  * Version of space-gib, auto-updated by the build process.
  */
-export const AUTO_GENERATED_VERSION = '0.0.14';
+export const AUTO_GENERATED_VERSION = '0.0.17';

package/src/client/bootstrap.mts

@@ -34,8 +34,24 @@ if (urlParams.has('code') && urlParams.has('state') && window.opener) {
 
 console.log(`[space-gib bootstrap] version: ${AUTO_GENERATED_VERSION}`);
 
-if ((process.env.KEYSTONE_PROFILE || '').toLowerCase() === 'test') {
-    console.warn(`%c⚠️ WARNING: KEYSTONE_PROFILE IS SET TO 'test'!\nALL GENERATED KEYSTONES USE LOW-SECURITY TEST PARAMETERS (12 CHALLENGES).\nFOR LOCAL TESTING ONLY — DO NOT USE FOR REAL SECRETS OR PRODUCTION DATA!`, 'background: #990000; color: #ffffff; font-size: 14px; font-weight: bold; padding: 8px; border-radius: 4px;');
+const clientProfiles = [
+    process.env.KEYSTONE_PROFILE_SOVEREIGN_PRIMARY,
+    process.env.KEYSTONE_PROFILE_SOVEREIGN_SYNC,
+    process.env.KEYSTONE_PROFILE_CUSTODIAN_SYNC,
+].filter(Boolean) as string[];
+
+const isProdEnv = process.env.NODE_ENV === 'production';
+const hasDevProfile = clientProfiles.some(p => p.endsWith('.dev'));
+const hasStagingProfile = clientProfiles.some(p => p.endsWith('.staging'));
+
+if (isProdEnv && (hasDevProfile || hasStagingProfile)) {
+    throw new Error(`Security Violation: Non-production keystone profiles are prohibited when NODE_ENV=production. Active client profiles: ${clientProfiles.join(', ')}. (E: 7a8b9c0d1e2f3456789abcdef0123456)`);
+}
+
+if (hasDevProfile) {
+    console.warn(`%c⚠️ WARNING: DEVELOPMENT KEYSTONE PROFILE ACTIVE (.dev)!\nGENERATED KEYSTONES USE LOW-SECURITY DEV PARAMETERS FOR RAPID TESTING.\nFOR LOCAL TESTING ONLY — DO NOT USE FOR REAL SECRETS OR PRODUCTION DATA!`, 'background: #990000; color: #ffffff; font-size: 14px; font-weight: bold; padding: 8px; border-radius: 4px;');
+} else if (hasStagingProfile) {
+    console.info(`%cℹ️ STAGING KEYSTONE PROFILE ACTIVE (.staging)`, 'background: #005599; color: #ffffff; font-size: 13px; font-weight: bold; padding: 6px; border-radius: 4px;');
 }
 
 // ---------------------------------------------------------------------------

package/src/server/server.mts

@@ -38,10 +38,22 @@ async function main(): Promise<void> {
         console.log(`${lc} starting...`);
         console.log(`${lc} dataDir: ${DATA_DIR}`);
 
-        if ((process.env.KEYSTONE_PROFILE || '').toLowerCase() === 'test') {
-            console.warn(`\n==========================================================\n⚠️ WARNING: KEYSTONE_PROFILE IS SET TO 'test'!\nALL GENERATED KEYSTONES USE LOW-SECURITY TEST PARAMETERS (12 CHALLENGES).\nFOR LOCAL TESTING ONLY — DO NOT USE FOR REAL SECRETS OR PRODUCTION DATA!\n==========================================================\n (W: 890123456789abcdef0123456789a123)`);
-        } else {
-            console.log(`process.env.KEYSTONE_PROFILE: ${process.env.KEYSTONE_PROFILE || ''} (I: 961014e2dd082293b83b917835c97e26)`)
+        const custodianPrimaryProfile = (process.env.KEYSTONE_PROFILE_CUSTODIAN_PRIMARY || '').trim();
+        if (!custodianPrimaryProfile) {
+            throw new Error(`${lc} Fatal Error: KEYSTONE_PROFILE_CUSTODIAN_PRIMARY environment variable is missing or blank. (E: 8a9b0c1d2e3f4567890123456789abcd)`);
+        }
+
+        const isProdEnv = process.env.NODE_ENV === 'production';
+        if (isProdEnv && !custodianPrimaryProfile.endsWith('.prod')) {
+            throw new Error(`${lc} Security Violation: Non-production keystone profile '${custodianPrimaryProfile}' is prohibited when NODE_ENV=production. (E: 9b0c1d2e3f4567890123456789abcdef)`);
+        }
+
+        console.log(`${lc} KEYSTONE_PROFILE_CUSTODIAN_PRIMARY: ${custodianPrimaryProfile} (I: 961014e2dd082293b83b917835c97e26)`);
+
+        if (custodianPrimaryProfile.endsWith('.dev')) {
+            console.warn(`\n==========================================================\n⚠️ WARNING: CUSTODIAN KEYSTONE PROFILE IS SET TO DEVELOPMENT ('${custodianPrimaryProfile}')!\nCUSTODIAL KEYSTONES WILL USE LOW-SECURITY DEV PARAMETERS.\nFOR LOCAL TESTING ONLY — DO NOT USE FOR REAL SECRETS OR PRODUCTION DATA!\n==========================================================\n (W: 890123456789abcdef0123456789a123)`);
+        } else if (custodianPrimaryProfile.endsWith('.staging')) {
+            console.info(`${lc} ℹ️ STAGING CUSTODIAN KEYSTONE PROFILE ACTIVE ('${custodianPrimaryProfile}')`);
         }
 
         const syncUpgradeHandler = new SyncUpgradeHandler();