autokap 1.0.8 → 1.1.0

package/dist/env-validation.js

@@ -4,26 +4,60 @@
  */
 const REQUIRED_ENV_VARS = [
     'SUPABASE_SERVICE_ROLE_KEY',
-    'OPENROUTER_API_KEY',
 ];
 const REQUIRED_WITH_PUBLIC_FALLBACK = [
     { key: 'SUPABASE_URL', fallback: 'NEXT_PUBLIC_SUPABASE_URL' },
 ];
 export function validateRequiredEnv() {
     const missing = [];
+    const invalid = [];
     for (const key of REQUIRED_ENV_VARS) {
-        if (!process.env[key]) {
+        const value = process.env[key];
+        if (!value) {
             missing.push(key);
         }
+        else if (!looksLikeStrongSecret(value)) {
+            invalid.push(key);
+        }
     }
     for (const { key, fallback } of REQUIRED_WITH_PUBLIC_FALLBACK) {
         if (!process.env[key] && !process.env[fallback]) {
             missing.push(`${key} (or ${fallback})`);
         }
     }
-    if (missing.length > 0) {
-        console.error(`\n[AutoKap] Missing required environment variables:\n${missing.map((v) => `  - ${v}`).join('\n')}\n\nCopy .env.example to .env and fill in the values.\n`);
+    for (const key of OPTIONAL_STRONG_SECRET_VARS) {
+        const value = process.env[key];
+        if (value && !looksLikeStrongSecret(value)) {
+            invalid.push(key);
+        }
+    }
+    if (missing.length > 0 || invalid.length > 0) {
+        const lines = [
+            missing.length > 0
+                ? `[AutoKap] Missing required environment variables:\n${missing.map((v) => `  - ${v}`).join('\n')}`
+                : null,
+            invalid.length > 0
+                ? `[AutoKap] Invalid or placeholder secrets detected:\n${invalid.map((v) => `  - ${v}`).join('\n')}`
+                : null,
+        ].filter(Boolean);
+        console.error(`\n${lines.join('\n\n')}\n\nCopy .env.example to .env and fill in the values.\n`);
         process.exit(1);
     }
 }
+const OPTIONAL_STRONG_SECRET_VARS = [
+    'PRESET_CREDENTIALS_ENCRYPTION_SECRET',
+    'AUTOKAP_WEBHOOK_SECRET',
+    'INTERACTIVE_DEMO_TRACKING_SECRET',
+];
+function looksLikeStrongSecret(value) {
+    const trimmed = value.trim();
+    if (trimmed.length < 24)
+        return false;
+    const upper = trimmed.toUpperCase();
+    return !(upper === 'CHANGE_ME'
+        || upper === 'CHANGEME'
+        || upper.includes('YOUR_')
+        || upper.includes('PLACEHOLDER')
+        || upper.includes('EXAMPLE'));
+}
 //# sourceMappingURL=env-validation.js.map