From f2e32dae92f1f118512cb91b31a0e7657a36b247 Mon Sep 17 00:00:00 2001
From: Ricky Stretch <rick@stretchy.ca>
Date: Fri, 20 Mar 2026 12:37:25 -0400
Subject: [PATCH] v0.10.2 build rules update

---
 backend/package.json     |  2 +-
 backend/src/models/db.js | 13 ++++++++++++-
 build.sh                 |  4 ++--
 frontend/package.json    |  2 +-
 4 files changed, 16 insertions(+), 5 deletions(-)

diff --git a/backend/package.json b/backend/package.json
index c1dcecc..8571eff 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "jama-backend",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "description": "TeamChat backend server",
   "main": "src/index.js",
   "scripts": {
diff --git a/backend/src/models/db.js b/backend/src/models/db.js
index 1617de9..01d5763 100644
--- a/backend/src/models/db.js
+++ b/backend/src/models/db.js
@@ -14,7 +14,18 @@ const fs   = require('fs');
 const path = require('path');
 const bcrypt = require('bcryptjs');
 
-const APP_TYPE = process.env.APP_TYPE || 'selfhost';
+// APP_TYPE validation — host mode requires HOST_DOMAIN and HOST_ADMIN_KEY.
+// If either is missing, fall back to selfhost and warn rather than silently
+// exposing a broken or insecure host control plane.
+let APP_TYPE = (process.env.APP_TYPE || 'selfhost').toLowerCase().trim();
+if (APP_TYPE === 'host') {
+  if (!process.env.HOST_DOMAIN || !process.env.HOST_ADMIN_KEY) {
+    console.warn('[DB] WARNING: APP_TYPE=host requires HOST_DOMAIN and HOST_ADMIN_KEY to be set.');
+    console.warn('[DB] WARNING: Falling back to APP_TYPE=selfhost for safety.');
+    APP_TYPE = 'selfhost';
+  }
+}
+if (APP_TYPE !== 'host') APP_TYPE = 'selfhost'; // only two valid values
 
 // ── Connection pool ───────────────────────────────────────────────────────────
 
diff --git a/build.sh b/build.sh
index fe95f19..c2f69d7 100644
--- a/build.sh
+++ b/build.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # ─────────────────────────────────────────────────────────────
-# jama — Docker build & release script...
+# jama — Docker build & release script
 #
 # Usage:
 #   ./build.sh              # builds jama:latest
@@ -13,7 +13,7 @@
 # ─────────────────────────────────────────────────────────────
 set -euo pipefail
 
-VERSION="${1:-0.10.1}"
+VERSION="${1:-0.10.2}"
 ACTION="${2:-}"
 REGISTRY="${REGISTRY:-}"
 IMAGE_NAME="jama"
diff --git a/frontend/package.json b/frontend/package.json
index 5ed0688..0161a7d 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "jama-frontend",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "private": true,
   "scripts": {
     "dev": "vite",