veryfront 0.1.45 → 0.1.46

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.45",
+    "version": "0.1.46",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "exclude": [

package/esm/src/platform/adapters/fs/veryfront/content-metrics.js

@@ -61,7 +61,7 @@ export function endRequestMetrics(requestContext) {
     cumulativeMetrics.totalNetworkMs += req.networkMs;
     cumulativeMetrics.requestsTracked++;
     recordContentNetworkFetch(req.networkMs, req.isPreviewMode ?? false);
-    logger.info("REQUEST_SUMMARY", {
+    logger.debug("REQUEST_SUMMARY", {
         ...requestContext,
         durationMs,
         networkMs: req.networkMs,

package/esm/src/platform/adapters/fs/veryfront/read-operations.js

@@ -400,13 +400,13 @@ export class ReadOperations {
         return null;
     }
     async fetchDraftContent(normalizedPath, apiPath, cacheKey, shouldCache) {
-        logger.info("API_FETCH_START - fetching draft from API", {
+        logger.debug("API_FETCH_START - fetching draft from API", {
             path: normalizedPath,
             apiPath,
             cacheKey,
         });
         const content = await this.client.getFileContent(apiPath);
-        logger.info("API_FETCH_DONE - got content from API", {
+        logger.debug("API_FETCH_DONE - got content from API", {
             path: normalizedPath,
             contentLength: content.length,
             preview: previewText(content).replace(/\n/g, "\\n"),

package/esm/src/platform/adapters/fs/veryfront/websocket-manager.js

@@ -70,7 +70,7 @@ export class WebSocketManager {
             };
             this.ws.onmessage = (event) => {
                 this.wsLastPong = Date.now();
-                logger.info("WebSocket message received:", { data: event.data });
+                logger.debug("WebSocket message received:", { data: event.data });
                 this.handlePokeMessage(event);
             };
             this.ws.onclose = () => {

package/esm/src/proxy/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAOnD,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AA4EX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAWD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BAoI1B,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,YAAY,CAAC;0BAwNvC,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAlSrD,MAAM,EAAE;;EAgVpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAwB7F"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAOnD,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AA6EX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAmCD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BA6K1B,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,YAAY,CAAC;0BA+NvC,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAlVrD,MAAM,EAAE;;EAgYpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAwB7F"}

package/esm/src/proxy/handler.js

@@ -69,6 +69,30 @@ function extractUserToken(cookieHeader) {
     const match = cookieHeader.match(/(?:^|;\s*)authToken=([^;]+)/);
     return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
+function extractUserIdFromToken(token) {
+    try {
+        const payload = token.split(".")[1];
+        if (!payload)
+            return undefined;
+        // JWT payloads are base64url-encoded: normalize to standard base64 before decoding
+        let base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
+        const remainder = base64.length % 4;
+        if (remainder === 2)
+            base64 += "==";
+        else if (remainder === 3)
+            base64 += "=";
+        const decoded = JSON.parse(atob(base64));
+        return decoded?.userId;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isProjectMember(users, userId) {
+    if (!users || !userId)
+        return false;
+    return users.some((u) => u.id === userId);
+}
 export function createProxyHandler(options) {
     const { config, cache, logger } = options;
     const localProjects = config.localProjects ?? {};
@@ -145,20 +169,47 @@ export function createProxyHandler(options) {
         const returnPath = safePath + url.search;
         return `https://veryfront.com/sign-in?from=${encodeURIComponent(returnPath)}`;
     }
-    async function resolveReleaseAndProtection(req, token, userToken, lookupKey, envMatcher, logContext) {
-        const lookupResult = await lookupProjectByDomain(lookupKey, config.apiBaseUrl, token, logger);
-        if (!lookupResult)
-            return { projectId: undefined, releaseId: undefined };
-        const matchingEnv = lookupResult.environments?.find(envMatcher);
-        if (matchingEnv?.protected && !userToken) {
+    function checkProtectedAccess(req, matchingEnv, userToken, users, logContext) {
+        if (!matchingEnv?.protected)
+            return null;
+        if (!userToken) {
             const redirectUrl = makeAuthRedirectUrl(req);
             logger?.info("Protected environment requires authentication", {
                 ...logContext,
                 environmentName: matchingEnv.name,
                 redirectUrl,
             });
-            return { error: { status: 302, message: "Authentication required", redirectUrl } };
+            return { status: 302, message: "Authentication required", redirectUrl };
+        }
+        const userId = extractUserIdFromToken(userToken);
+        if (!userId) {
+            // Malformed token — treat as unauthenticated so user can re-sign-in
+            const redirectUrl = makeAuthRedirectUrl(req);
+            logger?.info("Could not extract userId from token", {
+                ...logContext,
+                environmentName: matchingEnv.name,
+                redirectUrl,
+            });
+            return { status: 302, message: "Authentication required", redirectUrl };
+        }
+        if (!isProjectMember(users, userId)) {
+            logger?.info("User is not a member of the project", {
+                ...logContext,
+                environmentName: matchingEnv.name,
+                userId,
+            });
+            return { status: 403, message: "Access denied" };
         }
+        return null;
+    }
+    async function resolveReleaseAndProtection(req, token, userToken, lookupKey, envMatcher, logContext) {
+        const lookupResult = await lookupProjectByDomain(lookupKey, config.apiBaseUrl, token, logger);
+        if (!lookupResult)
+            return { projectId: undefined, releaseId: undefined };
+        const matchingEnv = lookupResult.environments?.find(envMatcher);
+        const protectionError = checkProtectedAccess(req, matchingEnv, userToken, lookupResult.users, logContext);
+        if (protectionError)
+            return { error: protectionError };
         return {
             projectId: lookupResult.id,
             releaseId: matchingEnv?.active_release_id ?? undefined,
@@ -240,14 +291,9 @@ export function createProxyHandler(options) {
                 const matchingEnv = lookupResult.environments?.find((env) => env.domains?.some((d) => d.toLowerCase() === normalizedHost));
                 releaseId = matchingEnv?.active_release_id ?? undefined;
                 environmentId = matchingEnv?.id;
-                if (matchingEnv?.protected && !userToken) {
-                    const redirectUrl = makeAuthRedirectUrl(req);
-                    logger?.info("Protected environment requires authentication", {
-                        domain: host,
-                        environmentName: matchingEnv.name,
-                        redirectUrl,
-                    });
-                    return makeErrorContext(base, 302, "Authentication required", token, redirectUrl);
+                const protectionError = checkProtectedAccess(req, matchingEnv, userToken, lookupResult.users, { domain: host });
+                if (protectionError) {
+                    return makeErrorContext(base, protectionError.status, protectionError.message, token, protectionError.redirectUrl);
                 }
                 logger?.info("Resolved custom domain to project", {
                     domain: host,

package/esm/src/server/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/src/server/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AA4B1D,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,OAAO,EAAE,cAAc,CAAC;IAExB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,CAAC;IAExB,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IAExB,+BAA+B;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAkDD,wBAAsB,SAAS,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAqG1B;AAED,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAa1B;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAyB1B"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/src/server/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AA4B1D,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,OAAO,EAAE,cAAc,CAAC;IAExB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,CAAC;IAExB,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IAExB,+BAA+B;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAmDD,wBAAsB,SAAS,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAqG1B;AAED,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAa1B;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC,CAyB1B"}

package/esm/src/server/bootstrap.js

@@ -5,7 +5,7 @@ import { enhanceAdapterWithFS } from "../platform/adapters/fs/integration.js";
 import { isExtendedFSAdapter } from "../platform/adapters/fs/wrapper.js";
 import { getEnv } from "../platform/compat/process.js";
 import { initializeEsbuild } from "../platform/compat/esbuild.js";
-import { logger } from "../utils/index.js";
+import { logger, refreshLoggerConfig } from "../utils/index.js";
 import { isDebugEnabled } from "../utils/constants/env.js";
 import { getEnvSource, hasEnvLoaded, loadEnv, markEnvLoaded, supportsEnvFiles, } from "../utils/env-loader.js";
 import { ReloadNotifier } from "./reload-notifier.js";
@@ -26,6 +26,7 @@ async function ensureEnvLoaded(projectDir, adapter) {
                 debug: isDebugEnabled(adapter.env),
             });
             refreshEnvironmentConfig();
+            refreshLoggerConfig();
         }
         catch (error) {
             bootstrapLog.warn("Failed to load .env files", {

package/esm/src/utils/index.d.ts

@@ -5,7 +5,7 @@
  * @module utils
  */
 export { type GlobalWithBun, type GlobalWithDeno, type GlobalWithProcess, hasBunRuntime, hasDenoRuntime, hasNodeProcess, } from "./runtime-guards.js";
-export { agentLogger, bundlerLogger, logger, rendererLogger, serverLogger, } from "./logger/index.js";
+export { agentLogger, bundlerLogger, logger, refreshLoggerConfig, rendererLogger, serverLogger, } from "./logger/index.js";
 export { BREAKPOINT_LG, BREAKPOINT_MD, BREAKPOINT_SM, BREAKPOINT_XL, BYTES_PER_KB, DEFAULT_ALLOWED_CDN_HOSTS, DEFAULT_BUILD_CONCURRENCY, DEFAULT_DASHBOARD_PORT, DEFAULT_LRU_MAX_ENTRIES, DEV_SERVER_ENDPOINTS, FORBIDDEN_PATH_PATTERNS, getDenoStdNodeBase, getReactImportMap, HASH_SEED_DJB2, HASH_SEED_FNV1A, HMR_CLIENT_RELOAD_DELAY_MS, HMR_CLOSE_MESSAGE_TOO_LARGE, HMR_CLOSE_NORMAL, HMR_CLOSE_RATE_LIMIT, HMR_MAX_MESSAGE_SIZE_BYTES, HMR_MAX_MESSAGES_PER_MINUTE, HMR_RATE_LIMIT_WINDOW_MS, HTTP_BAD_REQUEST, HTTP_CONTENT_TYPE_IMAGE_GIF, HTTP_CONTENT_TYPE_IMAGE_ICO, HTTP_CONTENT_TYPE_IMAGE_JPEG, HTTP_CONTENT_TYPE_IMAGE_PNG, HTTP_CONTENT_TYPE_IMAGE_SVG, HTTP_CONTENT_TYPE_IMAGE_WEBP, HTTP_CONTENT_TYPES, HTTP_MODULE_FETCH_TIMEOUT_MS, HTTP_NETWORK_CONNECT_TIMEOUT, HTTP_NOT_FOUND, HTTP_NOT_IMPLEMENTED, HTTP_OK, HTTP_REDIRECT_FOUND, HTTP_SERVER_ERROR, HTTP_STATUS_CLIENT_ERROR_MIN, HTTP_STATUS_REDIRECT_MIN, HTTP_STATUS_SERVER_ERROR_MIN, HTTP_STATUS_SUCCESS_MIN, HTTP_UNAVAILABLE, IMAGE_OPTIMIZATION, MAX_BATCH_SIZE, MAX_PATH_LENGTH, MAX_PATH_TRAVERSAL_DEPTH, MS_PER_SECOND, PREFETCH_DEFAULT_DELAY_MS, PREFETCH_DEFAULT_TIMEOUT_MS, PREFETCH_MAX_SIZE_BYTES, REACT_DEFAULT_VERSION, RESPONSIVE_IMAGE_WIDTH_LG, RESPONSIVE_IMAGE_WIDTHS, RSC_MANIFEST_CACHE_TTL_MS, TSX_LAYOUT_MAX_ENTRIES, Z_INDEX_DEV_INDICATOR, Z_INDEX_ERROR_OVERLAY, } from "./constants/index.js";
 export { VERSION } from "./version.js";
 export { type BundleCode as HashBundleCode, computeCodeHash, computeHash, fnv1aHash, shortHash, simpleHash, } from "./hash-utils.js";

package/esm/src/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/utils/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,aAAa,EACb,MAAM,EACN,cAAc,EACd,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,0BAA0B,EAC1B,2BAA2B,EAC3B,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,kBAAkB,EAClB,4BAA4B,EAC5B,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACpB,OAAO,EACP,mBAAmB,EACnB,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,wBAAwB,EACxB,aAAa,EACb,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACL,KAAK,UAAU,IAAI,cAAc,EACjC,eAAe,EACf,WAAW,EACX,SAAS,EACT,SAAS,EACT,UAAU,GACX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEpG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/utils/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,WAAW,EACX,aAAa,EACb,MAAM,EACN,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,0BAA0B,EAC1B,2BAA2B,EAC3B,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,kBAAkB,EAClB,4BAA4B,EAC5B,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACpB,OAAO,EACP,mBAAmB,EACnB,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,wBAAwB,EACxB,aAAa,EACb,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACL,KAAK,UAAU,IAAI,cAAc,EACjC,eAAe,EACf,WAAW,EACX,SAAS,EACT,SAAS,EACT,UAAU,GACX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEpG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE7F,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/esm/src/utils/index.js

@@ -5,7 +5,7 @@
  * @module utils
  */
 export { hasBunRuntime, hasDenoRuntime, hasNodeProcess, } from "./runtime-guards.js";
-export { agentLogger, bundlerLogger, logger, rendererLogger, serverLogger, } from "./logger/index.js";
+export { agentLogger, bundlerLogger, logger, refreshLoggerConfig, rendererLogger, serverLogger, } from "./logger/index.js";
 export { BREAKPOINT_LG, BREAKPOINT_MD, BREAKPOINT_SM, BREAKPOINT_XL, BYTES_PER_KB, DEFAULT_ALLOWED_CDN_HOSTS, DEFAULT_BUILD_CONCURRENCY, DEFAULT_DASHBOARD_PORT, DEFAULT_LRU_MAX_ENTRIES, DEV_SERVER_ENDPOINTS, FORBIDDEN_PATH_PATTERNS, getDenoStdNodeBase, getReactImportMap, HASH_SEED_DJB2, HASH_SEED_FNV1A, HMR_CLIENT_RELOAD_DELAY_MS, HMR_CLOSE_MESSAGE_TOO_LARGE, HMR_CLOSE_NORMAL, HMR_CLOSE_RATE_LIMIT, HMR_MAX_MESSAGE_SIZE_BYTES, HMR_MAX_MESSAGES_PER_MINUTE, HMR_RATE_LIMIT_WINDOW_MS, HTTP_BAD_REQUEST, HTTP_CONTENT_TYPE_IMAGE_GIF, HTTP_CONTENT_TYPE_IMAGE_ICO, HTTP_CONTENT_TYPE_IMAGE_JPEG, HTTP_CONTENT_TYPE_IMAGE_PNG, HTTP_CONTENT_TYPE_IMAGE_SVG, HTTP_CONTENT_TYPE_IMAGE_WEBP, HTTP_CONTENT_TYPES, HTTP_MODULE_FETCH_TIMEOUT_MS, HTTP_NETWORK_CONNECT_TIMEOUT, HTTP_NOT_FOUND, HTTP_NOT_IMPLEMENTED, HTTP_OK, HTTP_REDIRECT_FOUND, HTTP_SERVER_ERROR, HTTP_STATUS_CLIENT_ERROR_MIN, HTTP_STATUS_REDIRECT_MIN, HTTP_STATUS_SERVER_ERROR_MIN, HTTP_STATUS_SUCCESS_MIN, HTTP_UNAVAILABLE, IMAGE_OPTIMIZATION, MAX_BATCH_SIZE, MAX_PATH_LENGTH, MAX_PATH_TRAVERSAL_DEPTH, MS_PER_SECOND, PREFETCH_DEFAULT_DELAY_MS, PREFETCH_DEFAULT_TIMEOUT_MS, PREFETCH_MAX_SIZE_BYTES, REACT_DEFAULT_VERSION, RESPONSIVE_IMAGE_WIDTH_LG, RESPONSIVE_IMAGE_WIDTHS, RSC_MANIFEST_CACHE_TTL_MS, TSX_LAYOUT_MAX_ENTRIES, Z_INDEX_DEV_INDICATOR, Z_INDEX_ERROR_OVERLAY, } from "./constants/index.js";
 export { VERSION } from "./version.js";
 export { computeCodeHash, computeHash, fnv1aHash, shortHash, simpleHash, } from "./hash-utils.js";

package/esm/src/utils/logger/index.d.ts

@@ -3,7 +3,7 @@
  *
  * @module utils/logger
  */
-export { __registerRequestContextGetter, __registerTraceContextGetter, __resetLoggerConfigForTests, __resetTraceContextGetterForTests, agentLogger, bundlerLogger, cliLogger, createRequestLogger, getBaseLogger, getDefaultLevel, type LogEntry, type LogFormat, type Logger, logger, LogLevel, proxyLogger, rendererLogger, serverLogger, } from "./logger.js";
+export { __registerRequestContextGetter, __registerTraceContextGetter, __resetLoggerConfigForTests, __resetTraceContextGetterForTests, agentLogger, bundlerLogger, cliLogger, createRequestLogger, getBaseLogger, getDefaultLevel, type LogEntry, type LogFormat, type Logger, logger, LogLevel, proxyLogger, refreshLoggerConfig, rendererLogger, serverLogger, } from "./logger.js";
 export { ANSI, colorize, formatContextText, formatErrorText, formatTimestamp, formatValue, isRecord, LEVEL_COLORS, LEVEL_GLYPHS, type LogLevelName, normalizeText, padTag, PREFIX_WIDTH, type SerializedError, serializeError, TAG_WIDTH, truncateText, } from "./core.js";
 export { getRequestContext, getRequestLogger, type RequestContext, requestContextStore, runWithRequestContext, runWithRequestContextAsync, } from "./request-context.js";
 export { type LogComponent, LogComponents } from "./components.js";

package/esm/src/utils/logger/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/utils/logger/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,2BAA2B,EAC3B,iCAAiC,EACjC,WAAW,EACX,aAAa,EACb,SAAS,EACT,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,KAAK,QAAQ,EACb,KAAK,SAAS,EACd,KAAK,MAAM,EACX,MAAM,EACN,QAAQ,EACR,WAAW,EACX,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,KAAK,YAAY,EACjB,aAAa,EACb,MAAM,EACN,YAAY,EACZ,KAAK,eAAe,EACpB,cAAc,EACd,SAAS,EACT,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,cAAc,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/utils/logger/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,2BAA2B,EAC3B,iCAAiC,EACjC,WAAW,EACX,aAAa,EACb,SAAS,EACT,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,KAAK,QAAQ,EACb,KAAK,SAAS,EACd,KAAK,MAAM,EACX,MAAM,EACN,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,KAAK,YAAY,EACjB,aAAa,EACb,MAAM,EACN,YAAY,EACZ,KAAK,eAAe,EACpB,cAAc,EACd,SAAS,EACT,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,cAAc,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/esm/src/utils/logger/index.js

@@ -3,7 +3,7 @@
  *
  * @module utils/logger
  */
-export { __registerRequestContextGetter, __registerTraceContextGetter, __resetLoggerConfigForTests, __resetTraceContextGetterForTests, agentLogger, bundlerLogger, cliLogger, createRequestLogger, getBaseLogger, getDefaultLevel, logger, LogLevel, proxyLogger, rendererLogger, serverLogger, } from "./logger.js";
+export { __registerRequestContextGetter, __registerTraceContextGetter, __resetLoggerConfigForTests, __resetTraceContextGetterForTests, agentLogger, bundlerLogger, cliLogger, createRequestLogger, getBaseLogger, getDefaultLevel, logger, LogLevel, proxyLogger, refreshLoggerConfig, rendererLogger, serverLogger, } from "./logger.js";
 export { ANSI, colorize, formatContextText, formatErrorText, formatTimestamp, formatValue, isRecord, LEVEL_COLORS, LEVEL_GLYPHS, normalizeText, padTag, PREFIX_WIDTH, serializeError, TAG_WIDTH, truncateText, } from "./core.js";
 export { getRequestContext, getRequestLogger, requestContextStore, runWithRequestContext, runWithRequestContextAsync, } from "./request-context.js";
 export { LogComponents } from "./components.js";

package/esm/src/utils/logger/logger.d.ts

@@ -59,11 +59,18 @@ export interface Logger {
     component(name: string): Logger;
 }
 /**
- * Reset the cached logger configuration.
- * This is only intended for testing purposes to ensure fresh config evaluation.
+ * Determine the log level based on environment variables.
+ * Exported for testing purposes.
  * @internal
  */
-export declare function __resetLoggerConfigForTests(): void;
+export declare function getDefaultLevel(envLevel?: string | undefined, debugFlag?: string | undefined): LogLevel;
+/**
+ * Re-read logger configuration from environment variables.
+ * Call after loading .env files so the logger picks up any overrides.
+ */
+export declare function refreshLoggerConfig(): void;
+/** @internal Alias kept for tests. */
+export declare const __resetLoggerConfigForTests: typeof refreshLoggerConfig;
 declare class ConsoleLogger implements Logger {
     private prefix;
     private boundContext;
@@ -80,12 +87,6 @@ declare class ConsoleLogger implements Logger {
     error(message: string, ...args: unknown[]): void;
     time<T>(label: string, fn: () => Promise<T>): Promise<T>;
 }
-/**
- * Determine the log level based on environment variables.
- * Exported for testing purposes.
- * @internal
- */
-export declare function getDefaultLevel(envLevel?: string | undefined, debugFlag?: string | undefined): LogLevel;
 /**
  * Register the request context getter.
  * Called by request-context.ts during module initialization.

package/esm/src/utils/logger/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../../src/src/utils/logger/logger.ts"],"names":[],"mappings":"AAIA,OAAO,EAOL,KAAK,YAAY,EAEjB,KAAK,eAAe,EAErB,MAAM,WAAW,CAAC;AAEnB,oBAAY,QAAQ;IAClB,KAAK,IAAI;IACT,IAAI,IAAI;IACR,IAAI,IAAI;IACR,KAAK,IAAI;CACV;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExC;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IAChD;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAaD;;;;GAIG;AACH,wBAAgB,2BAA2B,IAAI,IAAI,CAMlD;AAkHD,cAAM,aAAc,YAAW,MAAM;IAKjC,OAAO,CAAC,MAAM;IAJhB,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,aAAa,CAAC,CAAS;gBAGrB,MAAM,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,aAAa,CAAC,EAAE,MAAM;IAMxB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAI/C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI/B,OAAO,CAAC,UAAU;IAwDlB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,GAAG;IAiBX,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI/C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI1C,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAa/D;AAcD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,GAAE,MAAM,GAAG,SAA+B,EAClD,SAAS,GAAE,MAAM,GAAG,SAAqC,GACxD,QAAQ,CAKV;AAsBD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GAC3C,IAAI,CAEN;AASD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,IAAI,CAEN;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,IAAI,IAAI,CAExD;AAsED,eAAO,MAAM,SAAS,QAA0C,CAAC;AACjE,eAAO,MAAM,YAAY,QAA6C,CAAC;AACvE,eAAO,MAAM,cAAc,QAA+C,CAAC;AAC3E,eAAO,MAAM,aAAa,QAA8C,CAAC;AACzE,eAAO,MAAM,WAAW,QAA4C,CAAC;AACrE,eAAO,MAAM,WAAW,QAA4C,CAAC;AACrE,eAAO,MAAM,MAAM,QAAuC,CAAC;AAE3D;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAiB3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACA,MAAM,CAER"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../../src/src/utils/logger/logger.ts"],"names":[],"mappings":"AAIA,OAAO,EAOL,KAAK,YAAY,EAEjB,KAAK,eAAe,EAErB,MAAM,WAAW,CAAC;AAEnB,oBAAY,QAAQ;IAClB,KAAK,IAAI;IACT,IAAI,IAAI;IACR,IAAI,IAAI;IACR,KAAK,IAAI;CACV;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExC;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IAChD;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAqBD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,GAAE,MAAM,GAAG,SAA+B,EAClD,SAAS,GAAE,MAAM,GAAG,SAAqC,GACxD,QAAQ,CAKV;AA2BD;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAK1C;AAED,sCAAsC;AACtC,eAAO,MAAM,2BAA2B,4BAAsB,CAAC;AA6E/D,cAAM,aAAc,YAAW,MAAM;IAKjC,OAAO,CAAC,MAAM;IAJhB,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,aAAa,CAAC,CAAS;gBAGrB,MAAM,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,aAAa,CAAC,EAAE,MAAM;IAMxB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAI/C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI/B,OAAO,CAAC,UAAU;IAwDlB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,GAAG;IAiBX,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI/C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAI1C,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAa/D;AAsBD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GAC3C,IAAI,CAEN;AASD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,IAAI,CAEN;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,IAAI,IAAI,CAExD;AAsED,eAAO,MAAM,SAAS,QAA0C,CAAC;AACjE,eAAO,MAAM,YAAY,QAA6C,CAAC;AACvE,eAAO,MAAM,cAAc,QAA+C,CAAC;AAC3E,eAAO,MAAM,aAAa,QAA8C,CAAC;AACzE,eAAO,MAAM,WAAW,QAA4C,CAAC;AACrE,eAAO,MAAM,WAAW,QAA4C,CAAC;AACrE,eAAO,MAAM,MAAM,QAAuC,CAAC;AAE3D;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAiB3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACA,MAAM,CAER"}

package/esm/src/utils/logger/logger.js

@@ -10,44 +10,30 @@ export var LogLevel;
     LogLevel[LogLevel["WARN"] = 2] = "WARN";
     LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
 })(LogLevel || (LogLevel = {}));
-let cachedConfig = null;
-let cachedEnvLevel;
-let cachedDebugFlag;
-let cachedEnvFormat;
-let cachedEnvMode;
+// ---- Config helpers (must be declared before the eager init below) ----
+const LOG_LEVEL_MAP = {
+    DEBUG: LogLevel.DEBUG,
+    INFO: LogLevel.INFO,
+    WARN: LogLevel.WARN,
+    ERROR: LogLevel.ERROR,
+};
+function parseLogLevel(levelString) {
+    if (!levelString)
+        return undefined;
+    return LOG_LEVEL_MAP[levelString.toUpperCase()];
+}
 /**
- * Reset the cached logger configuration.
- * This is only intended for testing purposes to ensure fresh config evaluation.
+ * Determine the log level based on environment variables.
+ * Exported for testing purposes.
  * @internal
  */
-export function __resetLoggerConfigForTests() {
-    cachedConfig = null;
-    cachedEnvLevel = undefined;
-    cachedDebugFlag = undefined;
-    cachedEnvFormat = undefined;
-    cachedEnvMode = undefined;
-}
-function resolveLoggerConfig() {
-    const envLevel = getEnv("LOG_LEVEL");
-    const debugFlag = getEnv("VERYFRONT_DEBUG");
-    const envFormat = getEnv("LOG_FORMAT");
-    const envMode = getEnv("NODE_ENV");
-    if (cachedConfig &&
-        envLevel === cachedEnvLevel &&
-        debugFlag === cachedDebugFlag &&
-        envFormat === cachedEnvFormat &&
-        envMode === cachedEnvMode) {
-        return cachedConfig;
-    }
-    cachedEnvLevel = envLevel;
-    cachedDebugFlag = debugFlag;
-    cachedEnvFormat = envFormat;
-    cachedEnvMode = envMode;
-    cachedConfig = {
-        level: getDefaultLevel(envLevel, debugFlag),
-        format: getDefaultFormat(envFormat, envMode),
-    };
-    return cachedConfig;
+export function getDefaultLevel(envLevel = getEnv("LOG_LEVEL"), debugFlag = getEnv("VERYFRONT_DEBUG")) {
+    const parsedLevel = parseLogLevel(envLevel);
+    if (parsedLevel !== undefined)
+        return parsedLevel;
+    if (debugFlag === "1" || debugFlag === "true")
+        return LogLevel.DEBUG;
+    return LogLevel.INFO;
 }
 /**
  * Determine log format from environment.
@@ -58,6 +44,32 @@ function getDefaultFormat(envFormat = getEnv("LOG_FORMAT"), envMode = getEnv("NO
         return envFormat;
     return envMode === "production" ? "json" : "text";
 }
+// ---- Eager config resolution ----
+/**
+ * Eagerly resolved at module load time so the config is captured from
+ * host process env vars BEFORE any per-request project env overlay is
+ * active. The project overlay blocks access to host env (for security),
+ * which would cause the logger to fall back to "text" format during SSR.
+ */
+let loggerConfig = {
+    level: getDefaultLevel(),
+    format: getDefaultFormat(),
+};
+/**
+ * Re-read logger configuration from environment variables.
+ * Call after loading .env files so the logger picks up any overrides.
+ */
+export function refreshLoggerConfig() {
+    loggerConfig = {
+        level: getDefaultLevel(),
+        format: getDefaultFormat(),
+    };
+}
+/** @internal Alias kept for tests. */
+export const __resetLoggerConfigForTests = refreshLoggerConfig;
+function resolveLoggerConfig() {
+    return loggerConfig;
+}
 /**
  * Extract context from variadic args.
  * First object argument becomes context, errors are handled specially.
@@ -238,30 +250,6 @@ class ConsoleLogger {
         }
     }
 }
-const LOG_LEVEL_MAP = {
-    DEBUG: LogLevel.DEBUG,
-    INFO: LogLevel.INFO,
-    WARN: LogLevel.WARN,
-    ERROR: LogLevel.ERROR,
-};
-function parseLogLevel(levelString) {
-    if (!levelString)
-        return undefined;
-    return LOG_LEVEL_MAP[levelString.toUpperCase()];
-}
-/**
- * Determine the log level based on environment variables.
- * Exported for testing purposes.
- * @internal
- */
-export function getDefaultLevel(envLevel = getEnv("LOG_LEVEL"), debugFlag = getEnv("VERYFRONT_DEBUG")) {
-    const parsedLevel = parseLogLevel(envLevel);
-    if (parsedLevel !== undefined)
-        return parsedLevel;
-    if (debugFlag === "1" || debugFlag === "true")
-        return LogLevel.DEBUG;
-    return LogLevel.INFO;
-}
 function createLogger(prefix) {
     return new ConsoleLogger(prefix);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.45",
+  "version": "0.1.46",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.45",
+  "version": "0.1.46",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "exclude": [

package/src/src/platform/adapters/fs/veryfront/content-metrics.ts

@@ -96,7 +96,7 @@ export function endRequestMetrics(
 
   recordContentNetworkFetch(req.networkMs, req.isPreviewMode ?? false);
 
-  logger.info("REQUEST_SUMMARY", {
+  logger.debug("REQUEST_SUMMARY", {
     ...requestContext,
     durationMs,
     networkMs: req.networkMs,

package/src/src/platform/adapters/fs/veryfront/read-operations.ts

@@ -622,7 +622,7 @@ export class ReadOperations {
     cacheKey: string,
     shouldCache: boolean,
   ): Promise<string> {
-    logger.info("API_FETCH_START - fetching draft from API", {
+    logger.debug("API_FETCH_START - fetching draft from API", {
       path: normalizedPath,
       apiPath,
       cacheKey,
@@ -630,7 +630,7 @@ export class ReadOperations {
 
     const content = await this.client.getFileContent(apiPath);
 
-    logger.info("API_FETCH_DONE - got content from API", {
+    logger.debug("API_FETCH_DONE - got content from API", {
       path: normalizedPath,
       contentLength: content.length,
       preview: previewText(content).replace(/\n/g, "\\n"),

package/src/src/platform/adapters/fs/veryfront/websocket-manager.ts

@@ -116,7 +116,7 @@ export class WebSocketManager {
 
       this.ws.onmessage = (event) => {
         this.wsLastPong = Date.now();
-        logger.info("WebSocket message received:", { data: event.data });
+        logger.debug("WebSocket message received:", { data: event.data });
         this.handlePokeMessage(event);
       };
 

package/src/src/proxy/handler.ts

@@ -26,6 +26,7 @@ interface DomainLookupResult {
   id: string;
   slug: string;
   name: string;
+  users?: Array<{ id: string }>;
   environments?: Array<{
     id: string;
     name: string;
@@ -150,6 +151,30 @@ function extractUserToken(cookieHeader: string): string | undefined {
   return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
 
+function extractUserIdFromToken(token: string): string | undefined {
+  try {
+    const payload = token.split(".")[1];
+    if (!payload) return undefined;
+    // JWT payloads are base64url-encoded: normalize to standard base64 before decoding
+    let base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
+    const remainder = base64.length % 4;
+    if (remainder === 2) base64 += "==";
+    else if (remainder === 3) base64 += "=";
+    const decoded = JSON.parse(atob(base64));
+    return decoded?.userId;
+  } catch {
+    return undefined;
+  }
+}
+
+function isProjectMember(
+  users: Array<{ id: string }> | undefined,
+  userId: string | undefined,
+): boolean {
+  if (!users || !userId) return false;
+  return users.some((u) => u.id === userId);
+}
+
 export function createProxyHandler(options: ProxyHandlerOptions) {
   const { config, cache, logger } = options;
   const localProjects = config.localProjects ?? {};
@@ -249,6 +274,48 @@ export function createProxyHandler(options: ProxyHandlerOptions) {
     return `https://veryfront.com/sign-in?from=${encodeURIComponent(returnPath)}`;
   }
 
+  function checkProtectedAccess(
+    req: dntShim.Request,
+    matchingEnv: NonNullable<DomainLookupResult["environments"]>[number] | undefined,
+    userToken: string | undefined,
+    users: DomainLookupResult["users"],
+    logContext: Record<string, unknown>,
+  ): { status: number; message: string; redirectUrl?: string } | null {
+    if (!matchingEnv?.protected) return null;
+
+    if (!userToken) {
+      const redirectUrl = makeAuthRedirectUrl(req);
+      logger?.info("Protected environment requires authentication", {
+        ...logContext,
+        environmentName: matchingEnv.name,
+        redirectUrl,
+      });
+      return { status: 302, message: "Authentication required", redirectUrl };
+    }
+
+    const userId = extractUserIdFromToken(userToken);
+    if (!userId) {
+      // Malformed token — treat as unauthenticated so user can re-sign-in
+      const redirectUrl = makeAuthRedirectUrl(req);
+      logger?.info("Could not extract userId from token", {
+        ...logContext,
+        environmentName: matchingEnv.name,
+        redirectUrl,
+      });
+      return { status: 302, message: "Authentication required", redirectUrl };
+    }
+    if (!isProjectMember(users, userId)) {
+      logger?.info("User is not a member of the project", {
+        ...logContext,
+        environmentName: matchingEnv.name,
+        userId,
+      });
+      return { status: 403, message: "Access denied" };
+    }
+
+    return null;
+  }
+
   async function resolveReleaseAndProtection(
     req: dntShim.Request,
     token: string,
@@ -265,15 +332,14 @@ export function createProxyHandler(options: ProxyHandlerOptions) {
 
     const matchingEnv = lookupResult.environments?.find(envMatcher);
 
-    if (matchingEnv?.protected && !userToken) {
-      const redirectUrl = makeAuthRedirectUrl(req);
-      logger?.info("Protected environment requires authentication", {
-        ...logContext,
-        environmentName: matchingEnv.name,
-        redirectUrl,
-      });
-      return { error: { status: 302, message: "Authentication required", redirectUrl } };
-    }
+    const protectionError = checkProtectedAccess(
+      req,
+      matchingEnv,
+      userToken,
+      lookupResult.users,
+      logContext,
+    );
+    if (protectionError) return { error: protectionError };
 
     return {
       projectId: lookupResult.id,
@@ -374,14 +440,21 @@ export function createProxyHandler(options: ProxyHandlerOptions) {
         releaseId = matchingEnv?.active_release_id ?? undefined;
         environmentId = matchingEnv?.id;
 
-        if (matchingEnv?.protected && !userToken) {
-          const redirectUrl = makeAuthRedirectUrl(req);
-          logger?.info("Protected environment requires authentication", {
-            domain: host,
-            environmentName: matchingEnv.name,
-            redirectUrl,
-          });
-          return makeErrorContext(base, 302, "Authentication required", token, redirectUrl);
+        const protectionError = checkProtectedAccess(
+          req,
+          matchingEnv,
+          userToken,
+          lookupResult.users,
+          { domain: host },
+        );
+        if (protectionError) {
+          return makeErrorContext(
+            base,
+            protectionError.status,
+            protectionError.message,
+            token,
+            protectionError.redirectUrl,
+          );
         }
 
         logger?.info("Resolved custom domain to project", {

package/src/src/server/bootstrap.ts

@@ -11,7 +11,7 @@ import { enhanceAdapterWithFS } from "../platform/adapters/fs/integration.js";
 import { isExtendedFSAdapter } from "../platform/adapters/fs/wrapper.js";
 import { getEnv } from "../platform/compat/process.js";
 import { initializeEsbuild } from "../platform/compat/esbuild.js";
-import { logger } from "../utils/index.js";
+import { logger, refreshLoggerConfig } from "../utils/index.js";
 import { isDebugEnabled } from "../utils/constants/env.js";
 import {
   getEnvSource,
@@ -59,6 +59,7 @@ async function ensureEnvLoaded(projectDir: string, adapter: RuntimeAdapter): Pro
         debug: isDebugEnabled(adapter.env),
       });
       refreshEnvironmentConfig();
+      refreshLoggerConfig();
     } catch (error) {
       bootstrapLog.warn("Failed to load .env files", {
         error: getErrorMessage(error),

package/src/src/utils/index.ts

@@ -18,6 +18,7 @@ export {
   agentLogger,
   bundlerLogger,
   logger,
+  refreshLoggerConfig,
   rendererLogger,
   serverLogger,
 } from "./logger/index.js";

package/src/src/utils/logger/index.ts

@@ -21,6 +21,7 @@ export {
   logger,
   LogLevel,
   proxyLogger,
+  refreshLoggerConfig,
   rendererLogger,
   serverLogger,
 } from "./logger.js";

package/src/src/utils/logger/logger.ts

@@ -89,52 +89,33 @@ type LoggerConfig = {
   format: LogFormat;
 };
 
-let cachedConfig: LoggerConfig | null = null;
-let cachedEnvLevel: string | undefined;
-let cachedDebugFlag: string | undefined;
-let cachedEnvFormat: string | undefined;
-let cachedEnvMode: string | undefined;
+// ---- Config helpers (must be declared before the eager init below) ----
+
+const LOG_LEVEL_MAP: Record<string, LogLevel> = {
+  DEBUG: LogLevel.DEBUG,
+  INFO: LogLevel.INFO,
+  WARN: LogLevel.WARN,
+  ERROR: LogLevel.ERROR,
+};
+
+function parseLogLevel(levelString: string | undefined): LogLevel | undefined {
+  if (!levelString) return undefined;
+  return LOG_LEVEL_MAP[levelString.toUpperCase()];
+}
 
 /**
- * Reset the cached logger configuration.
- * This is only intended for testing purposes to ensure fresh config evaluation.
+ * Determine the log level based on environment variables.
+ * Exported for testing purposes.
  * @internal
  */
-export function __resetLoggerConfigForTests(): void {
-  cachedConfig = null;
-  cachedEnvLevel = undefined;
-  cachedDebugFlag = undefined;
-  cachedEnvFormat = undefined;
-  cachedEnvMode = undefined;
-}
-
-function resolveLoggerConfig(): LoggerConfig {
-  const envLevel = getEnv("LOG_LEVEL");
-  const debugFlag = getEnv("VERYFRONT_DEBUG");
-  const envFormat = getEnv("LOG_FORMAT");
-  const envMode = getEnv("NODE_ENV");
-
-  if (
-    cachedConfig &&
-    envLevel === cachedEnvLevel &&
-    debugFlag === cachedDebugFlag &&
-    envFormat === cachedEnvFormat &&
-    envMode === cachedEnvMode
-  ) {
-    return cachedConfig;
-  }
-
-  cachedEnvLevel = envLevel;
-  cachedDebugFlag = debugFlag;
-  cachedEnvFormat = envFormat;
-  cachedEnvMode = envMode;
-
-  cachedConfig = {
-    level: getDefaultLevel(envLevel, debugFlag),
-    format: getDefaultFormat(envFormat, envMode),
-  };
-
-  return cachedConfig;
+export function getDefaultLevel(
+  envLevel: string | undefined = getEnv("LOG_LEVEL"),
+  debugFlag: string | undefined = getEnv("VERYFRONT_DEBUG"),
+): LogLevel {
+  const parsedLevel = parseLogLevel(envLevel);
+  if (parsedLevel !== undefined) return parsedLevel;
+  if (debugFlag === "1" || debugFlag === "true") return LogLevel.DEBUG;
+  return LogLevel.INFO;
 }
 
 /**
@@ -149,6 +130,37 @@ function getDefaultFormat(
   return envMode === "production" ? "json" : "text";
 }
 
+// ---- Eager config resolution ----
+
+/**
+ * Eagerly resolved at module load time so the config is captured from
+ * host process env vars BEFORE any per-request project env overlay is
+ * active. The project overlay blocks access to host env (for security),
+ * which would cause the logger to fall back to "text" format during SSR.
+ */
+let loggerConfig: LoggerConfig = {
+  level: getDefaultLevel(),
+  format: getDefaultFormat(),
+};
+
+/**
+ * Re-read logger configuration from environment variables.
+ * Call after loading .env files so the logger picks up any overrides.
+ */
+export function refreshLoggerConfig(): void {
+  loggerConfig = {
+    level: getDefaultLevel(),
+    format: getDefaultFormat(),
+  };
+}
+
+/** @internal Alias kept for tests. */
+export const __resetLoggerConfigForTests = refreshLoggerConfig;
+
+function resolveLoggerConfig(): LoggerConfig {
+  return loggerConfig;
+}
+
 /**
  * Extract context from variadic args.
  * First object argument becomes context, errors are handled specially.
@@ -361,33 +373,6 @@ class ConsoleLogger implements Logger {
   }
 }
 
-const LOG_LEVEL_MAP: Record<string, LogLevel> = {
-  DEBUG: LogLevel.DEBUG,
-  INFO: LogLevel.INFO,
-  WARN: LogLevel.WARN,
-  ERROR: LogLevel.ERROR,
-};
-
-function parseLogLevel(levelString: string | undefined): LogLevel | undefined {
-  if (!levelString) return undefined;
-  return LOG_LEVEL_MAP[levelString.toUpperCase()];
-}
-
-/**
- * Determine the log level based on environment variables.
- * Exported for testing purposes.
- * @internal
- */
-export function getDefaultLevel(
-  envLevel: string | undefined = getEnv("LOG_LEVEL"),
-  debugFlag: string | undefined = getEnv("VERYFRONT_DEBUG"),
-): LogLevel {
-  const parsedLevel = parseLogLevel(envLevel);
-  if (parsedLevel !== undefined) return parsedLevel;
-  if (debugFlag === "1" || debugFlag === "true") return LogLevel.DEBUG;
-  return LogLevel.INFO;
-}
-
 function createLogger(prefix: string): ConsoleLogger {
   return new ConsoleLogger(prefix);
 }