src/devcore/security_middleware.py

import os

class SecurityMiddleware:
    def __init__(self):
        # Load from environment — never hardcode
        token = os.environ.get("VITALIS_SUPERUSER_TOKEN")
        self.authorized_tokens = [token] if token else []
        if not token:
            print("[SECURITY] WARNING: VITALIS_SUPERUSER_TOKEN not set in environment")

    def is_authorized(self, token):
        return token in self.authorized_tokens

class TokenValidator:
    def __init__(self):
        import os
        token = os.environ.get("VITALIS_SUPERUSER_TOKEN")
        self.authorized_tokens = [token] if token else []

    def validate_request(self, token: str) -> bool:
        if not self.authorized_tokens:
            return True
        return token in self.authorized_tokens