veryfront 0.1.1092 → 0.1.1093

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1092",
+    "version": "0.1.1093",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/server/project-env/fetcher.d.ts

@@ -6,7 +6,8 @@
 /**
  * Fetch environment variables for a project from the Veryfront API.
  *
- * Calls: GET {apiBaseUrl}/projects/{projectSlug}/environment-variables?environment_id={environmentId}&limit=100
+ * Hosted runtimes call the internal Basic-auth endpoint first. Older API deployments
+ * without that endpoint fall back to the bearer-auth management endpoint.
  * Response: { data: [{ key: string, value: string }] }
  */
 export declare function fetchProjectEnvVars(apiBaseUrl: string, projectSlug: string, environmentId: string, token: string): Promise<Record<string, string>>;

package/esm/src/server/project-env/fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgEjC"}
+{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgDH;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA2EjC"}

package/esm/src/server/project-env/fetcher.js

@@ -5,25 +5,24 @@
  */
 import { getBaseLogger } from "../../utils/index.js";
 import { NETWORK_ERROR } from "../../errors/index.js";
+import { getHostEnv } from "../../platform/compat/process.js";
 const baseLogger = getBaseLogger("PROJECT-ENV");
 const logger = baseLogger.component("project-env");
 /** Max env vars per request. API enforces a hard cap of 100. */
 const ENV_VARS_FETCH_LIMIT = 100;
-/**
- * Fetch environment variables for a project from the Veryfront API.
- *
- * Calls: GET {apiBaseUrl}/projects/{projectSlug}/environment-variables?environment_id={environmentId}&limit=100
- * Response: { data: [{ key: string, value: string }] }
- */
-export async function fetchProjectEnvVars(apiBaseUrl, projectSlug, environmentId, token) {
-    const url = `${apiBaseUrl}/projects/${encodeURIComponent(projectSlug)}/environment-variables?environment_id=${encodeURIComponent(environmentId)}&limit=${ENV_VARS_FETCH_LIMIT}`;
-    // Separate try-catch blocks eliminate the need to re-detect "our own" thrown errors
-    // by message string matching. Each catch handles a distinct failure mode.
-    let response;
+const MASKED_ENV_VALUE = "********";
+function getInternalAuthorization() {
+    const username = getHostEnv("VERYFRONT_API_INTERNAL_USER");
+    const password = getHostEnv("VERYFRONT_API_INTERNAL_PASS");
+    if (!username || !password)
+        return undefined;
+    return `Basic ${globalThis.btoa(`${username}:${password}`)}`;
+}
+async function fetchEnvironmentVariables(url, authorization, projectSlug, environmentId) {
     try {
-        response = await fetch(url, {
+        return await fetch(url, {
             headers: {
-                Authorization: `Bearer ${token}`,
+                Authorization: authorization,
                 Accept: "application/json",
             },
         });
@@ -36,6 +35,25 @@ export async function fetchProjectEnvVars(apiBaseUrl, projectSlug, environmentId
         });
         throw error;
     }
+}
+/**
+ * Fetch environment variables for a project from the Veryfront API.
+ *
+ * Hosted runtimes call the internal Basic-auth endpoint first. Older API deployments
+ * without that endpoint fall back to the bearer-auth management endpoint.
+ * Response: { data: [{ key: string, value: string }] }
+ */
+export async function fetchProjectEnvVars(apiBaseUrl, projectSlug, environmentId, token) {
+    const managementUrl = `${apiBaseUrl}/projects/${encodeURIComponent(projectSlug)}/environment-variables?environment_id=${encodeURIComponent(environmentId)}&limit=${ENV_VARS_FETCH_LIMIT}`;
+    const internalUrl = `${apiBaseUrl}/internal/project-environment-variables?environment_id=${encodeURIComponent(environmentId)}`;
+    const internalAuthorization = getInternalAuthorization();
+    let response = internalAuthorization
+        ? await fetchEnvironmentVariables(internalUrl, internalAuthorization, projectSlug, environmentId)
+        : await fetchEnvironmentVariables(managementUrl, `Bearer ${token}`, projectSlug, environmentId);
+    if (internalAuthorization && response.status === 404) {
+        await response.body?.cancel();
+        response = await fetchEnvironmentVariables(managementUrl, `Bearer ${token}`, projectSlug, environmentId);
+    }
     if (!response.ok) {
         await response.body?.cancel();
         logger.warn("Failed to fetch env vars", {
@@ -50,6 +68,11 @@ export async function fetchProjectEnvVars(apiBaseUrl, projectSlug, environmentId
         const result = {};
         if (body.data) {
             for (const entry of body.data) {
+                if (entry.value === MASKED_ENV_VALUE) {
+                    throw NETWORK_ERROR.create({
+                        detail: "Refusing masked environment variable response",
+                    });
+                }
                 result[entry.key] = entry.value;
             }
         }

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1092";
+export declare const VERSION = "0.1.1093";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1092";
+export const VERSION = "0.1.1093";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.1092",
+  "version": "0.1.1093",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -328,10 +328,10 @@
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "ws": "8.21.0",
-    "@veryfront/ext-bundler-esbuild": "0.1.1092",
-    "@veryfront/ext-content-mdx": "0.1.1092",
-    "@veryfront/ext-css-tailwind": "0.1.1092",
-    "@veryfront/ext-parser-babel": "0.1.1092"
+    "@veryfront/ext-bundler-esbuild": "0.1.1093",
+    "@veryfront/ext-content-mdx": "0.1.1093",
+    "@veryfront/ext-css-tailwind": "0.1.1093",
+    "@veryfront/ext-parser-babel": "0.1.1093"
   },
   "devDependencies": {
     "@types/node": "20.9.0"