Spaces:
Running
Running
File size: 2,077 Bytes
ce4b4fb 89c7f9c c6353c0 ce4b4fb a1b8590 ce4b4fb a1b8590 ce4b4fb 523ba8d ce4b4fb | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 | import "dotenv/config";
import { z } from "zod";
const envSchema = z.object({
PORT: z.coerce.number().int().min(1).max(65535).default(4000),
TRUST_PROXY_HOPS: z.coerce.number().int().min(0).max(5).default(1),
NODE_ENV: z.enum(["development", "test", "production"]).default("development"),
FRONTEND_URL: z.string().url(),
BACKEND_URL: z.string().url(),
ANALYSIS_API_URL: z.string().url().default("http://127.0.0.1:8000"),
AGENT_API_URL: z.string().url().optional(),
AGENT_API_KEY: z.string().min(16).optional(),
HF_TOKEN: z.string().optional(),
ANALYSIS_PROXY_SECRET: z.string().min(32),
COLAB_WORKER_SECRET: z.string().optional(),
SUPABASE_URL: z.string().url(),
SUPABASE_ANON_KEY: z.string().min(1),
SUPABASE_SERVICE_ROLE_KEY: z.string().min(1),
});
const parsed = envSchema.safeParse(process.env);
if (!parsed.success) {
console.error("Invalid environment configuration:", parsed.error.flatten().fieldErrors);
process.exit(1);
}
export const env = parsed.data;
if (env.COLAB_WORKER_SECRET && env.COLAB_WORKER_SECRET.length < 32) {
console.error("COLAB_WORKER_SECRET must contain at least 32 characters when configured");
process.exit(1);
}
export const isProduction = env.NODE_ENV === "production";
// Production browsers reach auth through Cloudflare Pages, including OAuth.
export const authPublicOrigin = new URL(isProduction ? env.FRONTEND_URL : env.BACKEND_URL).origin;
if (isProduction) {
for (const name of ["FRONTEND_URL", "BACKEND_URL", "SUPABASE_URL"] as const) {
const url = new URL(env[name]);
if (url.protocol !== "https:" || ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname)) {
console.error(`${name} must use a public HTTPS URL in production`);
process.exit(1);
}
}
}
// Trusted identity headers must stay inside the combined backend.
const analysisUrl = new URL(env.ANALYSIS_API_URL);
if (analysisUrl.protocol !== "http:" || !["localhost", "127.0.0.1", "[::1]"].includes(analysisUrl.hostname)) {
console.error("ANALYSIS_API_URL must use HTTP on loopback");
process.exit(1);
}
|