autokap 1.0.7 → 1.0.10

package/dist/env-validation.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Startup validation for required environment variables.
+ * Call immediately after loading .env to fail fast with a clear message.
+ */
+export declare function validateRequiredEnv(): void;

package/dist/env-validation.js

@@ -0,0 +1,63 @@
+/**
+ * Startup validation for required environment variables.
+ * Call immediately after loading .env to fail fast with a clear message.
+ */
+const REQUIRED_ENV_VARS = [
+    'SUPABASE_SERVICE_ROLE_KEY',
+];
+const REQUIRED_WITH_PUBLIC_FALLBACK = [
+    { key: 'SUPABASE_URL', fallback: 'NEXT_PUBLIC_SUPABASE_URL' },
+];
+export function validateRequiredEnv() {
+    const missing = [];
+    const invalid = [];
+    for (const key of REQUIRED_ENV_VARS) {
+        const value = process.env[key];
+        if (!value) {
+            missing.push(key);
+        }
+        else if (!looksLikeStrongSecret(value)) {
+            invalid.push(key);
+        }
+    }
+    for (const { key, fallback } of REQUIRED_WITH_PUBLIC_FALLBACK) {
+        if (!process.env[key] && !process.env[fallback]) {
+            missing.push(`${key} (or ${fallback})`);
+        }
+    }
+    for (const key of OPTIONAL_STRONG_SECRET_VARS) {
+        const value = process.env[key];
+        if (value && !looksLikeStrongSecret(value)) {
+            invalid.push(key);
+        }
+    }
+    if (missing.length > 0 || invalid.length > 0) {
+        const lines = [
+            missing.length > 0
+                ? `[AutoKap] Missing required environment variables:\n${missing.map((v) => `  - ${v}`).join('\n')}`
+                : null,
+            invalid.length > 0
+                ? `[AutoKap] Invalid or placeholder secrets detected:\n${invalid.map((v) => `  - ${v}`).join('\n')}`
+                : null,
+        ].filter(Boolean);
+        console.error(`\n${lines.join('\n\n')}\n\nCopy .env.example to .env and fill in the values.\n`);
+        process.exit(1);
+    }
+}
+const OPTIONAL_STRONG_SECRET_VARS = [
+    'PRESET_CREDENTIALS_ENCRYPTION_SECRET',
+    'AUTOKAP_WEBHOOK_SECRET',
+    'INTERACTIVE_DEMO_TRACKING_SECRET',
+];
+function looksLikeStrongSecret(value) {
+    const trimmed = value.trim();
+    if (trimmed.length < 24)
+        return false;
+    const upper = trimmed.toUpperCase();
+    return !(upper === 'CHANGE_ME'
+        || upper === 'CHANGEME'
+        || upper.includes('YOUR_')
+        || upper.includes('PLACEHOLDER')
+        || upper.includes('EXAMPLE'));
+}
+//# sourceMappingURL=env-validation.js.map