fix(backend): harden runtime config and verification access

2026-03-19 16:36:28 +01:00
parent 8d0ef309e6
commit 2f25d10368
15 changed files with 262 additions and 14 deletions
--- a/backend/command-api/src/worker-app.js
+++ b/backend/command-api/src/worker-app.js
@@ -1,10 +1,12 @@
 import express from 'express';
 import pino from 'pino';
 import pinoHttp from 'pino-http';
+import { assertSafeWorkerRuntimeConfig } from './lib/runtime-safety.js';

 const logger = pino({ level: process.env.LOG_LEVEL || 'info' });

 export function createWorkerApp({ dispatch = async () => ({}) } = {}) {
+  assertSafeWorkerRuntimeConfig();
  const app = express();

  app.use(