@percher/shared 0.1.2 → 0.1.3

package/dist/app-name.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Valid app name: 3–40 chars, lowercase, starts with a letter,
+ * [a-z0-9-] only. App names become subdomains (name.percher.run),
+ * so changing this changes what hostnames the platform accepts.
+ */
+export declare const APP_NAME_RE: RegExp;
+//# sourceMappingURL=app-name.d.ts.map

package/dist/app-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-name.d.ts","sourceRoot":"","sources":["../src/app-name.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAA2B,CAAC"}

package/dist/app-name.js

@@ -0,0 +1,7 @@
+/**
+ * Valid app name: 3–40 chars, lowercase, starts with a letter,
+ * [a-z0-9-] only. App names become subdomains (name.percher.run),
+ * so changing this changes what hostnames the platform accepts.
+ */
+export const APP_NAME_RE = /^[a-z][a-z0-9-]{2,39}$/;
+//# sourceMappingURL=app-name.js.map

package/dist/app-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-name.js","sourceRoot":"","sources":["../src/app-name.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,7 @@
+export { APP_NAME_RE } from "./app-name";
+export { MAX_TARBALL_BYTES } from "./limits";
 export { MAX_LOG_SEARCH_LENGTH } from "./logs";
+export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime";
 export { TIMEOUTS, type TimeoutKey } from "./timeouts";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,7 @@
+export { APP_NAME_RE } from "./app-name";
+export { MAX_TARBALL_BYTES } from "./limits";
 export { MAX_LOG_SEARCH_LENGTH } from "./logs";
+export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime";
 export { TIMEOUTS } from "./timeouts";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAmB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAmB,MAAM,YAAY,CAAC"}

package/dist/limits.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Max accepted compressed app-tarball size in bytes (500 MB). Enforced
+ * server-side on upload (Content-Length pre-check + streamed byte cap)
+ * and on GitHub/Forgejo repo imports; the CLI pre-checks before upload.
+ * Distinct from the decompressed extraction cap in the API's tarball
+ * extractor, which guards against zip bombs.
+ */
+export declare const MAX_TARBALL_BYTES: number;
+//# sourceMappingURL=limits.d.ts.map

package/dist/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAoB,CAAC"}

package/dist/limits.js

@@ -0,0 +1,9 @@
+/**
+ * Max accepted compressed app-tarball size in bytes (500 MB). Enforced
+ * server-side on upload (Content-Length pre-check + streamed byte cap)
+ * and on GitHub/Forgejo repo imports; the CLI pre-checks before upload.
+ * Distinct from the decompressed extraction cap in the API's tarball
+ * extractor, which guards against zip bombs.
+ */
+export const MAX_TARBALL_BYTES = 500 * 1024 * 1024;
+//# sourceMappingURL=limits.js.map

package/dist/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC"}

package/dist/platform-env.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Env keys Percher injects into every user container at runtime. Treating
+ * these as "missing from your private settings" or "undeclared in
+ * percher.toml" produces false positives — the user can't (and shouldn't)
+ * set them; the platform does. Three consumers must stay locked together:
+ *
+ *   - the source-scan classifier (apps/dashboard env-scan UI hides these)
+ *   - the env gate (packages/api/src/pipeline/env-gate.ts auto-passes them)
+ *   - the AI agent contract (docs/CLAUDE.md "Do NOT include" list)
+ *
+ * Pre-2026-05-29 each consumer kept its own list and they drifted — the
+ * env gate had {NODE_ENV, PORT, DATABASE_URL, POCKETBASE_*, PERCHER_APP_*}
+ * but the dashboard "Scan code" UI had nothing, so it surfaced every
+ * single one as "Referenced in code but missing from your private
+ * settings" and panicked users into setting bogus values.
+ *
+ * Keep this list in lockstep with docs/CLAUDE.md → "Do NOT include
+ * (Percher sets these automatically)" and the egress-proxy wiring
+ * documented under "Outbound HTTPS".
+ */
+export declare const PERCHER_INJECTED_ENV_KEYS: ReadonlySet<string>;
+/**
+ * True iff Percher injects this env key into every user container.
+ *
+ * Case-aware for proxy variants only — POSIX env vars are case-sensitive
+ * in general, but HTTP-proxy libraries by convention accept both cases.
+ * We do NOT case-fold arbitrary keys (PATH vs path are genuinely
+ * different envs to most software).
+ */
+export declare function isPercherInjected(key: string): boolean;
+/**
+ * Canonical (uppercase) form of an injected proxy variant, or the key
+ * unchanged. Used by the scan classifier to collapse `http_proxy` +
+ * `HTTP_PROXY` into a single entry.
+ */
+export declare function canonicalInjectedKey(key: string): string;
+//# sourceMappingURL=platform-env.d.ts.map

package/dist/platform-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-env.d.ts","sourceRoot":"","sources":["../src/platform-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAqBxD,CAAC;AAcH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAItD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGxD"}

package/dist/platform-env.js

@@ -0,0 +1,79 @@
+/**
+ * Env keys Percher injects into every user container at runtime. Treating
+ * these as "missing from your private settings" or "undeclared in
+ * percher.toml" produces false positives — the user can't (and shouldn't)
+ * set them; the platform does. Three consumers must stay locked together:
+ *
+ *   - the source-scan classifier (apps/dashboard env-scan UI hides these)
+ *   - the env gate (packages/api/src/pipeline/env-gate.ts auto-passes them)
+ *   - the AI agent contract (docs/CLAUDE.md "Do NOT include" list)
+ *
+ * Pre-2026-05-29 each consumer kept its own list and they drifted — the
+ * env gate had {NODE_ENV, PORT, DATABASE_URL, POCKETBASE_*, PERCHER_APP_*}
+ * but the dashboard "Scan code" UI had nothing, so it surfaced every
+ * single one as "Referenced in code but missing from your private
+ * settings" and panicked users into setting bogus values.
+ *
+ * Keep this list in lockstep with docs/CLAUDE.md → "Do NOT include
+ * (Percher sets these automatically)" and the egress-proxy wiring
+ * documented under "Outbound HTTPS".
+ */
+export const PERCHER_INJECTED_ENV_KEYS = new Set([
+    // Container fundamentals
+    "NODE_ENV",
+    "PORT",
+    // Data backends (mode-specific but always one or the other; both safe
+    // to list — a key that's never set in the container still doesn't
+    // belong in the user's "private settings" UI)
+    "DATABASE_URL",
+    "POCKETBASE_URL",
+    "POCKETBASE_ADMIN_EMAIL",
+    "POCKETBASE_ADMIN_PASSWORD",
+    // App identity
+    "PERCHER_APP_NAME",
+    "PERCHER_APP_URL",
+    // Egress proxy (Percher injects these so app code can reach the
+    // public internet through the forward proxy — see docs/CLAUDE.md
+    // "Outbound HTTPS")
+    "HTTP_PROXY",
+    "HTTPS_PROXY",
+    "NO_PROXY",
+    "NODE_USE_ENV_PROXY",
+]);
+/**
+ * Lowercase proxy variants that libraries (curl, requests, undici-via-
+ * NODE_USE_ENV_PROXY) accept interchangeably with the uppercase form.
+ * Treated as the same env at classification time so the scan UI doesn't
+ * show duplicate "missing" rows for `HTTP_PROXY` and `http_proxy`.
+ */
+const PROXY_LOWERCASE_ALIASES = new Set([
+    "http_proxy",
+    "https_proxy",
+    "no_proxy",
+]);
+/**
+ * True iff Percher injects this env key into every user container.
+ *
+ * Case-aware for proxy variants only — POSIX env vars are case-sensitive
+ * in general, but HTTP-proxy libraries by convention accept both cases.
+ * We do NOT case-fold arbitrary keys (PATH vs path are genuinely
+ * different envs to most software).
+ */
+export function isPercherInjected(key) {
+    if (PERCHER_INJECTED_ENV_KEYS.has(key))
+        return true;
+    if (PROXY_LOWERCASE_ALIASES.has(key))
+        return true;
+    return false;
+}
+/**
+ * Canonical (uppercase) form of an injected proxy variant, or the key
+ * unchanged. Used by the scan classifier to collapse `http_proxy` +
+ * `HTTP_PROXY` into a single entry.
+ */
+export function canonicalInjectedKey(key) {
+    if (PROXY_LOWERCASE_ALIASES.has(key))
+        return key.toUpperCase();
+    return key;
+}
+//# sourceMappingURL=platform-env.js.map

package/dist/platform-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-env.js","sourceRoot":"","sources":["../src/platform-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAS;IAC5E,yBAAyB;IACzB,UAAU;IACV,MAAM;IACN,sEAAsE;IACtE,kEAAkE;IAClE,8CAA8C;IAC9C,cAAc;IACd,gBAAgB;IAChB,wBAAwB;IACxB,2BAA2B;IAC3B,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,gEAAgE;IAChE,iEAAiE;IACjE,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,UAAU;IACV,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAS;IACnE,YAAY;IACZ,aAAa;IACb,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percher/shared",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Shared constants and contracts (timeouts, etc.) used across the Percher CLI, API, MCP, and worker. Internal — values change in lockstep across packages.",
   "type": "module",
   "main": "./dist/index.js",
@@ -20,6 +20,11 @@
       "types": "./dist/runtime.d.ts",
       "import": "./dist/runtime.js",
       "default": "./dist/runtime.js"
+    },
+    "./platform-env": {
+      "types": "./dist/platform-env.d.ts",
+      "import": "./dist/platform-env.js",
+      "default": "./dist/platform-env.js"
     }
   },
   "files": [