@37chengshan/ompweb 0.3.5

package/next.config.ts

@@ -0,0 +1,94 @@
+import type { NextConfig } from "next";
+import { readFileSync } from "fs";
+import { join } from "path";
+import { PHASE_DEVELOPMENT_SERVER } from "next/constants";
+
+const { version } = JSON.parse(readFileSync(join(__dirname, "package.json"), "utf8")) as { version: string };
+
+// Function form: `phase` is authoritative even when the host environment
+// carries a stray NODE_ENV (e.g. NODE_ENV=production inherited by `next dev`
+// processes). Relying on process.env.NODE_ENV here would apply the immutable
+// chunk rule in development, make the browser cache dev chunks forever, and
+// produce stale "module factory is not available" / hydration errors after
+// every restart.
+const nextConfig = (phase: string): NextConfig => {
+  const isDev = phase === PHASE_DEVELOPMENT_SERVER;
+  return {
+    // Keep standalone/server tracing inside this package. Without this explicit
+    // root, Next can choose a parent lockfile on Windows and traverse protected
+    // user-profile junctions while compiling.
+    outputFileTracingRoot: process.cwd(),
+    // undici is loaded from a runtime dependency (lib/http-dispatcher.ts) to
+    // honor HTTP(S)_PROXY for server-side fetch; keep it external so the
+    // bundler does not inline a second copy next to the global dispatcher.
+    serverExternalPackages: ["undici"],
+    webpack(config: Parameters<NonNullable<NextConfig["webpack"]>>[0]) {
+      // Next's entrypoint tracer does not automatically reject dynamic paths
+      // outside the project root. Add parent/profile patterns to its ignore list
+      // so user filesystem discovery remains request-time only during builds.
+      for (const plugin of config.plugins ?? []) {
+        const candidate = plugin as unknown as {
+          constructor?: { name?: string };
+          traceIgnores?: string[];
+        };
+        if (candidate.constructor?.name === "TraceEntryPointsPlugin") {
+          candidate.traceIgnores ??= [];
+          candidate.traceIgnores.push("**/../**", "**/Users/**", "**/Application Data/**");
+        }
+      }
+      return config;
+    },
+    allowedDevOrigins: ["127.0.0.1", "192.168.*.*"],
+    // Security: stop advertising the runtime, and surface dev-mode problems
+    // earlier. Source maps in the browser bundle leak server path layout and
+    // bloat downloads without helping end users of a published app.
+    poweredByHeader: false,
+    reactStrictMode: true,
+    productionBrowserSourceMaps: false,
+    // Next.js enables gzip/brotli compression for `next start` by default; no
+    // custom compression middleware is needed (and would require a custom server).
+    async headers() {
+      const securityHeaders = [
+        { key: "X-Content-Type-Options", value: "nosniff" },
+        { key: "X-Frame-Options", value: "DENY" },
+        { key: "Referrer-Policy", value: "no-referrer" },
+        { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" },
+        { key: "Content-Security-Policy", value: "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' ws: wss:; font-src 'self' data:" },
+      ];
+      const headers = [
+        {
+          source: "/:path*",
+          headers: securityHeaders,
+        },
+        {
+          // Hashed build output never changes, so browsers/proxies may cache it
+          // immutably for a year and skip revalidation entirely.
+          // NOTE: scoped to /_next/static/ only — broader /_next/ patterns would
+          // shadow the HMR WebSocket in development.
+          source: "/_next/static/:path*",
+          headers: [
+            { key: "Cache-Control", value: "public, max-age=31536000, immutable" },
+          ],
+        },
+        {
+          source: "/",
+          headers: [
+            { key: "Cache-Control", value: "private, no-cache, max-age=0, must-revalidate" },
+          ],
+        },
+      ];
+
+      // Dev chunks have stable URLs whose content changes in place; caching
+      // them immutably would serve stale module factories after a restart.
+      if (isDev) return [headers[0], headers[2]];
+
+      return headers;
+    },
+    env: {
+      NEXT_PUBLIC_APP_VERSION: version,
+      NEXT_PUBLIC_OMP_WEB_VERSION: version,
+    },
+  };
+};
+
+export default nextConfig;

package/package.json

@@ -0,0 +1,83 @@
+{
+  "name": "@37chengshan/ompweb",
+  "version": "0.3.5",
+  "description": "Web UI for the oh-my-pi (omp) coding agent",
+  "homepage": "https://github.com/kahme247/ompweb#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kahme247/ompweb.git"
+  },
+  "bugs": {
+    "url": "https://github.com/kahme247/ompweb/issues"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "bin": {
+    "ompweb": "bin/omp-web.js"
+  },
+  "files": [
+    "bin",
+    ".next",
+    "!.next/cache",
+    "!.next/dev",
+    "!.next/diagnostics",
+    "!.next/types",
+    "!.next/trace",
+    "!.next/trace-build",
+    "!.next/**/*.map",
+    "public",
+    "next.config.ts",
+    "package.json"
+  ],
+  "scripts": {
+    "dev": "next dev -H 127.0.0.1 -p 30178",
+    "dev:lan": "next dev -H 0.0.0.0 -p 30178",
+    "build": "next build --webpack",
+    "start": "next start -H 127.0.0.1 -p 30177",
+    "start:lan": "next start -H 0.0.0.0 -p 30177",
+    "test": "node --experimental-strip-types --test lib/*.test.mjs lib/omp/*.test.mjs components/*.test.mjs components/ui/*.test.mjs hooks/*.test.mjs bin/*.test.mjs",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "prepack": "npm run build",
+    "release:check": "npm run typecheck && npm run lint && npm test && npm run build"
+  },
+  "dependencies": {
+    "@base-ui/react": "^1.6.0",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/addon-web-links": "^0.12.0",
+    "@xterm/xterm": "^6.0.0",
+    "cmdk": "^1.1.1",
+    "lucide-react": "^1.27.0",
+    "next": "16.3.0",
+    "node-pty": "^1.1.0",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-syntax-highlighter": "^16.1.1",
+    "undici": "8.10.0",
+    "yaml": "^2"
+  },
+  "devDependencies": {
+    "@tailwindcss/postcss": "^4.2.2",
+    "@types/node": "^25",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "@types/react-syntax-highlighter": "^15.5.13",
+    "eslint": "^9",
+    "eslint-config-next": "16.3.0",
+    "jiti": "^2.7.0",
+    "katex": "^0.16.47",
+    "mammoth": "^1.12.0",
+    "mermaid": "^11.14.0",
+    "postcss": "^8",
+    "react-markdown": "^10.1.0",
+    "rehype-katex": "^7.0.1",
+    "rehype-raw": "^7.0.0",
+    "rehype-sanitize": "^6.0.0",
+    "remark-gfm": "^4.0.1",
+    "remark-math": "^6.0.0",
+    "tailwindcss": "^4.2.2",
+    "typescript": "^5"
+  }
+}