Function buildApp

apps/api/src/app.ts:80–429

(
  options: BuildAppOptions = {},
)

}

export async function buildApp(
  options: BuildAppOptions = {},
): Promise<FastifyInstance> {
  const { testing = false } = options;

  const fastify = Fastify({
    maxParamLength: 15_000,
    bodyLimit: 1_048_576 * 500,
    disableRequestLogging: true,
    genReqId: (req) =>
      req.headers['request-id']
        ? String(req.headers['request-id'])
        : generateId(),
    ...(testing
      ? { logger: false }
      : { loggerInstance: logger as FastifyBaseLogger }),
  });

  fastify.setValidatorCompiler(validatorCompiler);
  fastify.setSerializerCompiler(serializerCompiler);

  // Env is read once at startup — changing CORS origins requires a
  // restart, which is already true for every other env-driven piece
  // of the server.
  const dashboardOrigins = [
    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL,
    ...(process.env.API_CORS_ORIGINS?.split(',') ?? []),
  ].filter(Boolean) as string[];
  const corsPaths = ['/trpc', '/live', '/webhook', '/oauth', '/misc', '/ai'];

  fastify.register(cors, () => {
    return (
      req: FastifyRequest,
      callback: (error: Error | null, options: FastifyCorsOptions) => void,
    ) => {
      const isPrivatePath = corsPaths.some((p) => req.url.startsWith(p));

      if (isPrivatePath) {
        const origin = req.headers.origin;
        const isAllowed = origin && dashboardOrigins.includes(origin);
        return callback(null, { origin: isAllowed ? origin : false, credentials: true });
      }

      return callback(null, { origin: '*', maxAge: 86_400 * 7 });
    };
  });

  await fastify.register(import('fastify-raw-body'), { global: false });

  fastify.addHook('onRequest', requestIdHook);
  fastify.addHook('onRequest', timestampHook);
  fastify.addHook('onRequest', ipHook);
  fastify.addHook('onResponse', requestLoggingHook);

  fastify.register(compress, { global: false, encodings: ['gzip', 'deflate'] });

  // Dashboard API
  fastify.register(async (instance) => {