@lowdefy/node-utils 0.0.0-experimental-20260928062533 → 0.0.0-experimental-20260928120643

package/dist/checkEnvironmentGuards.js

@@ -0,0 +1,34 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import { type } from '@lowdefy/helpers';
+import { ConfigError } from '@lowdefy/errors';
+import collectEnvironmentGuards from './collectEnvironmentGuards.js';
+// Checks the current environment's guards against this process's environment variables. The build
+// runs it before anything deploys, and the production server again at startup: an image built once
+// can be started with different variables. Values are never echoed: a failure names the variable,
+// not what it holds.
+function checkEnvironmentGuards({ name, guards, configKey }) {
+    const failures = collectEnvironmentGuards({
+        guards
+    }).filter(({ variable, pattern })=>{
+        const value = process.env[variable];
+        return !type.isString(value) || !new RegExp(pattern).test(value);
+    });
+    if (failures.length === 0) return;
+    throw new ConfigError(`Environment "${name}" guards failed: ${failures.map(({ label, variable })=>type.isString(process.env[variable]) ? `${label} does not match its guard` : `${label} is not set (${variable})`).join('; ')}. Update the guard in config.environments.${name}.guards together with the value, or fix the value.`, {
+        configKey
+    });
+}
+export default checkEnvironmentGuards;

package/dist/collectEnvironmentGuards.js

@@ -0,0 +1,45 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ // Guards pin an environment's secrets and environment variables to a pattern kept in code: the
+// value must match the regular expression, so changing a guarded value (the prod database URI,
+// say) takes a change to the deployment's variables AND a reviewed change to the app config — a
+// second factor for deploy-time configuration. Checked at build, before anything deploys.
+//
+//   guards:
+//     secrets: { MONGODB_URI: 'acme-prod\.a1b2c\.mongodb\.net' }   # LOWDEFY_SECRET_<NAME>
+//     env: { BETTER_AUTH_URL: '^https://app\.acme\.com$' }
+//
+// Values are never echoed: a failure names the variable, not what it holds.
+function collectEnvironmentGuards({ guards }) {
+    const checks = [];
+    Object.entries(guards?.secrets ?? {}).forEach(([name, pattern])=>{
+        if (name.startsWith('~')) return;
+        checks.push({
+            label: `secret "${name}"`,
+            variable: `LOWDEFY_SECRET_${name}`,
+            pattern
+        });
+    });
+    Object.entries(guards?.env ?? {}).forEach(([name, pattern])=>{
+        if (name.startsWith('~')) return;
+        checks.push({
+            label: `environment variable "${name}"`,
+            variable: name,
+            pattern
+        });
+    });
+    return checks;
+}
+export default collectEnvironmentGuards;

package/dist/index.js

@@ -12,7 +12,9 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ import cleanDirectory from './cleanDirectory.js';
+*/ import checkEnvironmentGuards from './checkEnvironmentGuards.js';
+import cleanDirectory from './cleanDirectory.js';
+import collectEnvironmentGuards from './collectEnvironmentGuards.js';
 import copyFileOrDirectory from './copyFileOrDirectory.js';
 import createClientAddressResolver from './createClientAddressResolver.js';
 import createSecretScrubber from './createSecretScrubber.js';
@@ -30,4 +32,4 @@ import spawnProcess from './spawnProcess.js';
 import readFile from './readFile.js';
 import writeFile from './writeFile.js';
 import writeFileIfChanged from './writeFileIfChanged.js';
-export { cleanDirectory, copyFileOrDirectory, createClientAddressResolver, createSecretScrubber, findAvailablePort, getDevInstancePath, getFileExtension, getFileSubExtension, getProcessStartTime, getSecretsFromEnv, installIfPackageJsonChanged, isPidAlive, isPortAvailable, parseIpRange, readDevInstance, spawnProcess, readFile, writeFile, writeFileIfChanged };
+export { checkEnvironmentGuards, cleanDirectory, collectEnvironmentGuards, copyFileOrDirectory, createClientAddressResolver, createSecretScrubber, findAvailablePort, getDevInstancePath, getFileExtension, getFileSubExtension, getProcessStartTime, getSecretsFromEnv, installIfPackageJsonChanged, isPidAlive, isPortAvailable, parseIpRange, readDevInstance, spawnProcess, readFile, writeFile, writeFileIfChanged };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/node-utils",
-  "version": "0.0.0-experimental-20260928062533",
+  "version": "0.0.0-experimental-20260928120643",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -34,8 +34,8 @@
     "dist/*"
   ],
   "dependencies": {
-    "@lowdefy/errors": "0.0.0-experimental-20260928062533",
-    "@lowdefy/helpers": "0.0.0-experimental-20260928062533",
+    "@lowdefy/errors": "0.0.0-experimental-20260928120643",
+    "@lowdefy/helpers": "0.0.0-experimental-20260928120643",
     "fs-extra": "11.3.4"
   },
   "devDependencies": {