Function validateSpec

src/http.ts:303–311

(spec: ComputerSpec | null)

function authorizeAction(request: Request, action: string, env: CloudboxBindings): Response | null {
  if (request.headers.get("x-cloudbox-demo") === "1") return null;
  if (env.CLOUDBOX_INTERNAL_TOKEN && request.headers.get("x-cloudbox-internal-token") === env.CLOUDBOX_INTERNAL_TOKEN) return null;
  const token = env.CLOUDBOX_API_TOKEN;
  if (!token) return null;
  const got = request.headers.get("authorization")?.replace(/^Bearer\s+/i, "") ?? request.headers.get("x-cloudbox-token");
  return got === token ? null : jsonErrorResponse(401, "unauthorized", "valid Cloudbox token required");
}

function isPublicDemoSpec(spec: ComputerSpec | null): boolean {
  return !!spec?.name && spec.name === "agent-launch-readiness" && typeof spec.runId === "string" && spec.runId.startsWith("browser-");
}

function validateSpec(spec: ComputerSpec | null): Response | null {