@zerotal/monitor 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -8,6 +8,23 @@ follows the Zerotal monorepo's unified versioning.
 
 ## [Unreleased]
 
+## [1.6.0] — 2026-08-15
+
+### Fixed
+
+- **System info reported the runtime mode as the environment.** The panel showed `web`
+  rather than `production` or `staging`, because it read `APP_ENV` after `setAppEnv()`
+  had overwritten it. It reads `deployEnv()` now.
+
+## [1.5.1] — 2026-08-15
+
+### Fixed
+
+- **Open-by-default access in development never applied.** The predicate read `APP_ENV`,
+  which holds the runtime mode once the app has booted, so the panel demanded an explicit
+  `auth` predicate even on a developer's machine. It asks `devSurfacesEnabled()` now — and
+  still requires one anywhere that is not explicitly a development environment.
+
 ## [1.5.0] — 2026-08-15
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zerotal/monitor",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "license": "MIT",
   "maturity": "stable",
   "private": false,
@@ -29,14 +29,14 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@zerotal/core": "1.5.0",
-    "@zerotal/flow-ui": "1.5.0",
-    "@zerotal/flow": "1.5.0"
+    "@zerotal/core": "1.6.0",
+    "@zerotal/flow-ui": "1.6.0",
+    "@zerotal/flow": "1.6.0"
   },
   "devDependencies": {
-    "@zerotal/queue": "1.5.0",
-    "@zerotal/scheduler": "1.5.0",
-    "@zerotal/telemetry": "1.5.0"
+    "@zerotal/queue": "1.6.0",
+    "@zerotal/scheduler": "1.6.0",
+    "@zerotal/telemetry": "1.6.0"
   },
   "peerDependencies": {
     "@zerotal/queue": "^1.0.0",

package/src/config.ts

@@ -7,7 +7,7 @@
  *     auth: (user) => user?.role === "admin",
  *   });
  */
-import { deepMerge, isDevSurfaceAllowed } from "@zerotal/core";
+import { deepMerge, devSurfacesEnabled } from "@zerotal/core";
 import type { RetentionMode } from "./store/MonitorDb.ts";
 import type { AlertThresholds } from "./alerting.ts";
 
@@ -129,7 +129,7 @@ export interface ResolvedMonitorConfig extends MonitorConfigShape {
 // documented `APP_ENV=production` deploy would otherwise expose the panel.
 // Only explicitly non-prod envs get open-by-default access; everything else
 // (unset, staging, production) must supply an explicit `auth` predicate.
-const defaultAuthOpen = (): boolean => isDevSurfaceAllowed(Bun.env["APP_ENV"] ?? "");
+const defaultAuthOpen = (): boolean => devSurfacesEnabled();
 
 const defaults: ResolvedMonitorConfig = {
   path: "/monitor",

package/src/sources/system.ts

@@ -7,6 +7,7 @@
 import { cpus, loadavg, totalmem, freemem } from "node:os";
 import { readFileSync } from "node:fs";
 import { currentApp } from "@zerotal/core";
+import { deployEnv } from "@zerotal/core";
 import { httpMetrics } from "@zerotal/core/metrics";
 import { ZEROTAL_VERSION_TAG } from "../version.ts";
 import type { Gauge, SystemMeta } from "../store/types.ts";
@@ -142,7 +143,7 @@ export function systemMeta(opts: {
     zerotal: opts.zerotal ?? ZEROTAL_VERSION_TAG,
     region: opts.region ?? process.env.FLY_REGION ?? process.env.AWS_REGION ?? "local",
     deploy: opts.deploy ?? process.env.DEPLOY_SHA?.slice(0, 7) ?? "dev",
-    environment: process.env.APP_ENV ?? process.env.NODE_ENV ?? "development",
+    environment: deployEnv() || process.env.NODE_ENV || "development",
   };
 }