@networkpro/web 1.25.0 → 1.25.2

package/CHANGELOG.md

@@ -22,6 +22,58 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.25.2]
+
+### Changed
+
+- **Unified Environment Detection (`env.js`)**
+  - Added support for server-side hostname injection via optional `hostOverride` parameter.
+  - Enables accurate audit environment detection on both server (`hooks.server.js`) and client.
+  - Logs the resolved environment and host when executed on the server.
+  - Maintains safe fallback behavior for client-only usage.
+
+- **CSP Handling (`hooks.server.js`)**
+  - Replaced reliance on `window.location` (unavailable on server) with `event.url.hostname` for host detection.
+  - Now correctly applies hardened audit-mode CSP in deployments matching `*.audit.netwk.pro`.
+  - Improved logging for audit/test/prod environment resolution during server request lifecycle.
+
+- **Build Diagnostics (`vite.config.js`)**
+  - Added `stderr` output for `audit` mode builds to ensure visibility in CI logs.
+  - Displays a prominent `🔒 Audit Mode Detected` tag during Vercel and local builds.
+  - Continues to log `ENV_MODE`, `PUBLIC_ENV_MODE`, and `NODE_ENV` for build-time inspection.
+
+- Bumped project version to `v1.25.2`.
+
+---
+
+## [1.25.1]
+
+### Added
+
+- Introduced new **environment diagnostics endpoint** at `src/routes/api/env-check/+server.js`.
+  - Returns resolved build and runtime environment data for verification.
+  - Useful for confirming `ENV_MODE` / `PUBLIC_ENV_MODE` propagation on Vercel builds.
+  - Helps troubleshoot environment mismatches between build-time and client-side contexts.
+
+### Changed
+
+- **vite.config.js**
+  - Enhanced configuration to log build mode and environment variables during bundling.
+  - Prints `mode`, `ENV_MODE`, `PUBLIC_ENV_MODE`, and `NODE_ENV` to aid CI/CD debugging.
+  - Uses color-coded console output for clear visibility in build logs.
+- **env.js**
+  - Simplified and stabilized environment detection logic for better cross-environment consistency.
+  - Removed redundant imports and corrected handling of static vs dynamic `BUILD_ENV_MODE`.
+  - Improved comments and type annotations for maintainability and IDE autocompletion.
+- Bumped project version to `v1.25.1`.
+
+### Developer Experience
+
+- Build logs now clearly display environment information before bundling.
+- `env-check` API endpoint provides real-time environment inspection without rebuilding.
+
+---
+
 ## [1.25.0]
 
 ### Added
@@ -60,6 +112,7 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
   - Simplified step output and summary formatting for clearer reporting in the Actions log and job summary.
   - Maintains lightweight permissions (`contents: read`) and executes entirely without repository writes.
   - Improves reliability of branch protection monitoring without affecting CI or merge operations.
+- Bumped project version to `v1.25.0`.
 
 ### Fixed
 
@@ -1583,7 +1636,9 @@ This enables analytics filtering and CSP hardening for the audit environment.
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.0...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.2...HEAD
+[1.25.2]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.2
+[1.25.1]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.1
 [1.25.0]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.0
 [1.24.5]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.24.5
 [1.24.4]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.24.4

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.25.0",
+  "version": "1.25.2",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",

package/src/hooks.server.js

@@ -14,9 +14,18 @@ import { detectEnvironment } from '$lib/utils/env.js';
  */
 export async function handle({ event, resolve }) {
   const response = await resolve(event);
-  const { isAudit, isTest, isProd } = detectEnvironment();
 
-  console.log('[CSP Debug ENV]', detectEnvironment());
+  const env = detectEnvironment(event.url.hostname);
+  const { isAudit, isTest, isProd, mode, effective } = env;
+
+  console.log('[CSP Debug ENV]', {
+    mode,
+    effective,
+    hostname: event.url.hostname,
+    isAudit,
+    isTest,
+    isProd,
+  });
 
   // Determine report URI
   const reportUri =

package/src/lib/stores/posthog.js

@@ -45,15 +45,28 @@ let ph = null;
 export async function initPostHog() {
   if (initialized || typeof window === 'undefined') return;
 
-  const { isAudit, isDev, isTest, mode } = detectEnvironment();
+  const { isAudit, isDev, isTest, mode, effective } = detectEnvironment();
 
   // 🌐 Hybrid hostname + environment guard
   const host = window.location.hostname;
   const isAuditHost = /(^|\.)audit\.netwk\.pro$/i.test(host);
   const effectiveAudit = isAudit || isAuditHost;
 
+  // 🧭 Log environment context before any conditional logic
+  console.info('[PostHog ENV]', {
+    buildMode: mode,
+    effectiveMode: effective,
+    host,
+    effectiveAudit,
+    isDev,
+    isTest,
+  });
+
+  // 🚫 Skip analytics in audit context
   if (effectiveAudit) {
-    console.info(`[PostHog] Skipping analytics (${mode} mode, host: ${host}).`);
+    console.info(
+      `[PostHog] Skipping analytics (${effective} mode, host: ${host}).`,
+    );
     return;
   }
 

package/src/lib/utils/env.js

@@ -16,7 +16,7 @@ This file is part of Network Pro.
  *
  * @module src/lib/utils
  * @author Scott Lopez
- * @updated 2025-11-02
+ * @updated 2025-11-03
  *
  * @example
  * import { detectEnvironment } from '$lib/utils/env.js';
@@ -26,49 +26,55 @@ This file is part of Network Pro.
 
 /**
  * @typedef {object} EnvironmentInfo
- * @property {string} mode - The detected environment mode (`dev`, `prod`, `audit`, etc.).
- * @property {boolean} isDev - True when running in a development or local environment.
- * @property {boolean} isProd - True when running in production.
- * @property {boolean} isAudit - True when running in audit / staging environments.
- * @property {boolean} isCI - True when running in continuous integration (CI) pipelines.
- * @property {boolean} isTest - True when running under test or mock environments.
+ * @property {string} mode        - The build-time environment mode.
+ * @property {string} effective   - The environment actually being used (after host fallback).
+ * @property {boolean} isDev
+ * @property {boolean} isProd
+ * @property {boolean} isAudit
+ * @property {boolean} isCI
+ * @property {boolean} isTest
  */
 
 /**
- * Normalizes environment detection across client, SSR, and build contexts.
- * Uses `import.meta.env` for Vite build-time vars and `process.env` for runtime vars.
+ * Build-time mode injected by Vite.
+ * Always baked into the client bundle.
+ * Falls back to 'production' if nothing else is defined.
+ */
+export const BUILD_ENV_MODE =
+  import.meta.env.PUBLIC_ENV_MODE || import.meta.env.MODE || 'production';
+
+/**
+ * Detects the current environment, combining build-time and host-based checks.
+ * Supports browser, server, and build-time contexts.
  *
- * @returns {EnvironmentInfo} Normalized environment context flags.
+ * @param {string} [hostOverride] Optional hostname to use for environment resolution (e.g., from event.url.hostname)
+ * @returns {EnvironmentInfo}
  */
-export function detectEnvironment() {
-  /** @type {string | undefined} */
-  const viteMode = import.meta.env?.MODE;
-  /** @type {string | undefined} */
-  const publicEnvMode = import.meta.env?.PUBLIC_ENV_MODE;
+export function detectEnvironment(hostOverride) {
+  const mode = BUILD_ENV_MODE;
+
+  // Determine host based on execution context
+  const host =
+    hostOverride ||
+    (typeof window !== 'undefined' ? window.location.hostname : '');
+
+  const hostIsAudit = /(^|\.)audit\.netwk\.pro$/i.test(host);
 
-  /** @type {string | undefined} */
-  const nodeEnv =
-    typeof process !== 'undefined' && process?.env?.NODE_ENV
-      ? process.env.NODE_ENV
-      : undefined;
+  const isDev = ['development', 'dev'].includes(mode);
+  const isProd = ['production', 'prod'].includes(mode);
+  const isAudit = mode === 'audit' || hostIsAudit;
+  const isCI = mode === 'ci';
+  const isTest = mode === 'test';
 
-  /** @type {string | undefined} */
-  const envMode =
-    typeof process !== 'undefined' && process?.env?.ENV_MODE
-      ? process.env.ENV_MODE
-      : undefined;
+  const effective = hostIsAudit && !isAudit ? 'audit(host)' : mode;
 
-  // Fallback order — guarantees a mode string even if nothing is set
-  /** @type {string} */
-  const mode = envMode || publicEnvMode || viteMode || nodeEnv || 'unknown';
+  if (typeof window === 'undefined') {
+    console.log('[detectEnvironment] Server-side build mode:', mode);
+    console.log('[detectEnvironment] Hostname:', host || '(none)');
+    if (hostIsAudit && mode !== 'audit') {
+      console.log('[detectEnvironment] Host suggests audit, overriding mode.');
+    }
+  }
 
-  // Return a normalized, typed object
-  return {
-    mode,
-    isDev: ['development', 'dev'].includes(mode),
-    isProd: ['production', 'prod'].includes(mode),
-    isAudit: mode === 'audit',
-    isCI: mode === 'ci',
-    isTest: mode === 'test',
-  };
+  return { mode, effective, isDev, isProd, isAudit, isCI, isTest };
 }

package/src/routes/status/+page.server.js

@@ -12,11 +12,11 @@ This file is part of Network Pro.
  * Logs runtime environment variables for debugging purposes.
  * This function executes on the server during SSR and is used to verify
  * that environment variables (e.g., ENV_MODE and NODE_ENV) are properly
- * injected and available during runtime in Netlify's SSR context.
+ * injected and available during runtime in Vercel's SSR context.
  *
  * @module src/routes/status
  * @author Scott Lopez
- * @updated 2025-05-31
+ * @updated 2025-11-03
  */
 
 export const prerender = false;

package/vite.config.js

@@ -17,20 +17,51 @@ import tsconfigPaths from 'vite-tsconfig-paths'; // NEW: tsconfig/jsconfig alias
 // Compute absolute project root
 const projectRoot = fileURLToPath(new URL('.', import.meta.url));
 
-export default defineConfig({
-  plugins: [
-    tsconfigPaths(), // Insert before sveltekit()
-    devtoolsJson({
-      projectRoot: resolve(projectRoot), // Correct key name
-      normalizeForWindowsContainer: true, // optional, helps with path consistency on Windows or WSL
-      uuid: 'ad0db4f4-6172-4c1e-ae17-26b1bee53764',
-    }),
-    sveltekit(),
-    lightningcssPlugin({
-      minify: process.env.NODE_ENV === 'production',
-      pruneUnusedFontFaceRules: true,
-      pruneUnusedKeyframes: true,
-      removeUnusedFontFaces: true,
-    }),
-  ],
+export default defineConfig(({ mode }) => {
+  // --- 🧩 Log Build Environment Info -------------------------------------
+  console.log(
+    '\x1b[36m%s\x1b[0m',
+    '──────────────────────────────────────────────',
+  );
+  console.log('\x1b[33m%s\x1b[0m', `📦 Building Network Pro — mode: ${mode}`);
+  console.log(
+    '\x1b[36m%s\x1b[0m',
+    '──────────────────────────────────────────────',
+  );
+  console.log('ENV_MODE:', process.env.ENV_MODE);
+  console.log('PUBLIC_ENV_MODE:', process.env.PUBLIC_ENV_MODE);
+  console.log('NODE_ENV:', process.env.NODE_ENV);
+  if (
+    process.env.ENV_MODE === 'audit' ||
+    process.env.PUBLIC_ENV_MODE === 'audit' ||
+    mode === 'audit'
+  ) {
+    process.stderr.write(
+      '🔒 Audit Mode Detected — hardened CSP and no analytics will be applied.\n',
+    );
+  }
+  console.log(
+    '\x1b[36m%s\x1b[0m',
+    '──────────────────────────────────────────────',
+  );
+
+  // -----------------------------------------------------------------------
+
+  return {
+    plugins: [
+      tsconfigPaths(),
+      devtoolsJson({
+        projectRoot: resolve(projectRoot),
+        normalizeForWindowsContainer: true,
+        uuid: 'ad0db4f4-6172-4c1e-ae17-26b1bee53764',
+      }),
+      sveltekit(),
+      lightningcssPlugin({
+        minify: process.env.NODE_ENV === 'production',
+        pruneUnusedFontFaceRules: true,
+        pruneUnusedKeyframes: true,
+        removeUnusedFontFaces: true,
+      }),
+    ],
+  };
 });