Files
CapaKraken/packages/api/package.json
T
Hartmut 93a7fbaa4c security: fail-fast dev-bypass flag in production (#42)
Both auth.ts and trpc.ts now delegate the E2E_TEST_MODE-in-production
check to a single shared helper (packages/api/src/lib/runtime-security.ts).
trpc.ts used to only console.warn; it now throws at module load time,
matching the behaviour already enforced by assertSecureRuntimeEnv on the
auth side. A future refactor can no longer silently drop the guard on
either side.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17 08:56:27 +02:00

46 lines
1.3 KiB
JSON

{
"name": "@capakraken/api",
"version": "0.1.0",
"private": true,
"type": "module",
"exports": {
".": "./src/index.ts",
"./router": "./src/router/index.ts",
"./trpc": "./src/trpc.ts",
"./sse": "./src/sse/index.ts",
"./lib/audit": "./src/lib/audit.ts",
"./lib/reminder-scheduler": "./src/lib/reminder-scheduler.ts",
"./lib/logger": "./src/lib/logger.ts",
"./lib/runtime-security": "./src/lib/runtime-security.ts",
"./middleware/rate-limit": "./src/middleware/rate-limit.ts"
},
"scripts": {
"typecheck": "tsc --noEmit",
"test:unit": "vitest run",
"test:assistant-split": "node ./scripts/run-assistant-tool-split-regression.mjs"
},
"dependencies": {
"@capakraken/application": "workspace:*",
"@capakraken/db": "workspace:*",
"@capakraken/engine": "workspace:*",
"@capakraken/shared": "workspace:*",
"@capakraken/staffing": "workspace:*",
"@node-rs/argon2": "^2.0.2",
"@trpc/server": "^11.0.0",
"@types/nodemailer": "^7.0.11",
"ioredis": "^5.10.0",
"nodemailer": "^8.0.5",
"openai": "^6.27.0",
"otpauth": "^9.5.0",
"pino": "^10.3.1",
"zod": "^3.23.8"
},
"devDependencies": {
"@capakraken/tsconfig": "workspace:*",
"@types/node": "^22.10.2",
"typescript": "^5.6.3",
"vitest": "^2.1.8",
"@vitest/coverage-v8": "^2.1.9"
}
}