vestauth 0.18.1 → 0.18.2

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/vestauth/vestauth/compare/v0.18.1...main)
+[Unreleased](https://github.com/vestauth/vestauth/compare/v0.18.2...main)
+
+## [0.18.2](https://github.com/vestauth/vestauth/compare/v0.18.1...v0.18.2) (2026-02-24)
+
+### Changed
+
+* Pass `--hostname` ([#35](https://github.com/vestauth/vestauth/pull/35))
 
 ## [0.18.1](https://github.com/vestauth/vestauth/compare/v0.18.0...v0.18.1) (2026-02-24)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vestauth",
-  "version": "0.18.1",
+  "version": "0.18.2",
   "description": "auth for agents–from the creator of dotenvx",
   "keywords": [
     "vestauth",

package/src/cli/actions/server/start.js

@@ -10,6 +10,7 @@ async function start () {
 
     await server.start({
       port: options.port,
+      hostname: options.hostname,
       databaseUrl: options.databaseUrl
     })
   } catch (error) {

package/src/cli/commands/server.js

@@ -1,8 +1,6 @@
 const { Command } = require('commander')
 const env = require('./../../lib/helpers/env')
 const databaseUrl = require('./../../lib/helpers/databaseUrl')
-const protocol = require('./../../lib/helpers/protocol')
-const hostname = require('./../../lib/helpers/hostname')
 
 const server = new Command('server')
 
@@ -15,8 +13,7 @@ const startAction = require('./../actions/server/start')
 server.command('start')
   .description('start vestauth server')
   .option('--port <port>', 'port', env('PORT'))
-  .option('--protocol <protocol>', 'https or http', protocol())
-  .option('--hostname <hostname>', 'localhost:3000', hostname())
+  .option('--hostname <hostname>', 'HOSTNAME', env('HOSTNAME'))
   .option('--database-url <databaseUrl>', 'DATABASE_URL', databaseUrl())
   .action(startAction)
 

package/src/lib/helpers/dbMigrate.js

@@ -31,7 +31,7 @@ async function dbMigrate ({ databaseUrl } = {}) {
     connection,
     ssl: { rejectUnauthorized: false },
     migrations: {
-      directory: path.resolve(__dirname, '../../db/migrations')
+      directory: path.resolve(__dirname, '../../server/db/migration')
     }
   })
 

package/src/lib/helpers/resolvePortAndHostname.js

@@ -0,0 +1,34 @@
+function resolvePortAndHostname ({ port, hostname } = {}) {
+  const hasPort = port !== undefined && port !== null && String(port).trim() !== ''
+  const inputPort = hasPort ? String(port).trim() : null
+  const inputHostname = typeof hostname === 'string' ? hostname.trim() : ''
+
+  if (!inputHostname) {
+    const PORT = inputPort || '3000'
+    return {
+      PORT,
+      HOSTNAME: `http://localhost:${PORT}`
+    }
+  }
+
+  const hasScheme = /^https?:\/\//i.test(inputHostname)
+  const bareHostname = hasScheme ? new URL(inputHostname).host : inputHostname
+  const bareHostNoPort = bareHostname.split(':')[0].toLowerCase()
+  const localHostnames = new Set(['localhost', '127.0.0.1'])
+  const defaultScheme = localHostnames.has(bareHostNoPort) ? 'http' : 'https'
+
+  const url = new URL(hasScheme ? inputHostname : `${defaultScheme}://${inputHostname}`)
+
+  const PORT = inputPort || url.port || '3000'
+
+  if (!url.port && localHostnames.has(url.hostname.toLowerCase())) {
+    url.port = PORT
+  }
+
+  return {
+    PORT,
+    HOSTNAME: url.toString().replace(/\/$/, '')
+  }
+}
+
+module.exports = resolvePortAndHostname

package/src/lib/helpers/serverStart.js

@@ -1,7 +1,7 @@
 const serverIndex = require('./../../server/index')
 
-function serverStart ({ port, databaseUrl }) {
-  return serverIndex.start({ port, databaseUrl })
+function serverStart ({ port, hostname, databaseUrl }) {
+  return serverIndex.start({ port, hostname, databaseUrl })
 }
 
 module.exports = serverStart

package/src/lib/helpers/subdomainBaseHost.js

@@ -0,0 +1,18 @@
+function subdomainBaseHost (hostname) {
+  if (!hostname) return null
+
+  const value = String(hostname).trim().toLowerCase()
+  if (!value) return null
+
+  if (value.startsWith('http://') || value.startsWith('https://')) {
+    try {
+      return new URL(value).hostname.toLowerCase()
+    } catch {
+      return null
+    }
+  }
+
+  return value.split('/')[0].split(':')[0]
+}
+
+module.exports = subdomainBaseHost

package/src/server/index.js

@@ -1,25 +1,31 @@
 const { logger } = require('./../shared/logger')
 const tool = require('./../lib/tool')
+const resolvePortAndHostname = require('./../lib/helpers/resolvePortAndHostname')
+const subdomainBaseHost = require('./../lib/helpers/subdomainBaseHost')
 const { connectOrm } = require('./models/index')
 const RegisterService = require('./services/registerService')
 const RegisterSerializer = require('./serializers/registerSerializer')
 
 const express = require('express')
 
-const app = express()
 let DB = null
 let HTTP_SERVER = null
 let CLOSE_PROMISE = null
 let SIGNAL_HANDLERS_INSTALLED = false
 let SIGNAL_HANDLERS = null
+let PORT = null
+let HOSTNAME = null
+
+const app = express()
 app.use(express.json())
 
 app.use((req, res, next) => {
   const hostNoPort = (req.headers.host || '').split(':')[0].toLowerCase()
+  const baseHost = subdomainBaseHost(HOSTNAME)
 
-  // agent-c235... .localhost
-  if (hostNoPort.endsWith('.localhost')) {
-    let sub = hostNoPort.slice(0, -'.localhost'.length) // "agent-c235..."
+  // agent-c235... .localhost or agent-c235... .example.com
+  if (baseHost && hostNoPort.endsWith(`.${baseHost}`)) {
+    let sub = hostNoPort.slice(0, -`.${baseHost}`.length) // "agent-c235..."
 
     // remove "agent-" prefix if present
     if (sub.startsWith('agent-')) {
@@ -90,8 +96,8 @@ app.get('/whoami', async (req, res) => {
   }
 })
 
-async function start ({ port, databaseUrl } = {}) {
-  const PORT = port || '3000'
+async function start ({ port, hostname, databaseUrl } = {}) {
+  ({ PORT, HOSTNAME } = resolvePortAndHostname({ port, hostname }))
 
   if (HTTP_SERVER) return HTTP_SERVER
 
@@ -102,7 +108,7 @@ async function start ({ port, databaseUrl } = {}) {
 
     HTTP_SERVER = await new Promise((resolve, reject) => {
       const server = app.listen(PORT, () => {
-        logger.success(`vestauth server listening on http://localhost:${PORT}`)
+        logger.success(`vestauth server listening on ${HOSTNAME}`)
         resolve(server)
       })
 
@@ -183,5 +189,6 @@ function removeSignalHandlers () {
 module.exports = {
   app,
   start,
-  close
+  close,
+  resolvePortAndHostname
 }