Function getAppConfigScript

server/src/http.ts:447–460

* Generate the script tags to inject app config and PostHog into HTML.

(user?: { id?: string; email: string; firstName?: string | null; lastName?: string | null; isMember?: boolean; isAdmin?: boolean } | null)

 * Generate the script tags to inject app config and PostHog into HTML.
 */
function getAppConfigScript(user?: { id?: string; email: string; firstName?: string | null; lastName?: string | null; isMember?: boolean; isAdmin?: boolean } | null): string {
  const config = buildAppConfig(user);
  const configScript = `<script>window.__APP_CONFIG__=${JSON.stringify(config)};</script>`;

  // Add PostHog script if API key is configured
  const posthogScript = POSTHOG_API_KEY
    ? `<script src="/posthog-init.js" defer></script>`
    : '';

  // csrf.js patches fetch() to include the X-CSRF-Token header on POSTs
  const csrfScript = `<script src="/csrf.js"></script>`;

  return `${configScript}\n${csrfScript}\n${posthogScript}`;
}

/**
 * Get user info from request for HTML config injection.