@castlekit/castle 0.1.6 → 0.3.0

package/src/lib/types/search.ts

@@ -0,0 +1,60 @@
+// ============================================================================
+// Universal Search — Type System
+// ============================================================================
+//
+// Discriminated union so every result carries its type and the dialog can
+// render + navigate each type differently. Adding a new searchable content
+// type later requires only:
+//
+//   1. Add a new interface extending SearchResultBase
+//   2. Add it to the SearchResult union
+//   3. Add a renderer in the search dialog
+//   4. Add a search function in the API
+//
+// No changes to the dialog, hook, provider, keyboard shortcuts, or routing.
+
+// --- Content type registry ---
+
+export type SearchResultType = "message" | "task" | "note" | "project";
+// ^ Extend this union as new content types are added
+
+// --- Base result shape (shared fields) ---
+
+export interface SearchResultBase {
+  id: string;
+  type: SearchResultType;
+  title: string;        // Primary display text
+  subtitle?: string;    // Secondary line (sender, project name, etc.)
+  snippet: string;      // Content excerpt with match context
+  timestamp: number;    // For sorting / display
+  href: string;         // Where to navigate on click
+}
+
+// --- Content-specific result types ---
+
+export interface MessageSearchResult extends SearchResultBase {
+  type: "message";
+  channelId: string;
+  channelName: string;
+  messageId: string;
+  senderType: "user" | "agent";
+  senderName: string;
+  archived?: boolean;
+}
+
+// Future examples (not implemented in v1):
+// export interface TaskSearchResult extends SearchResultBase {
+//   type: "task";
+//   projectId: string;
+//   status: "todo" | "in_progress" | "done";
+// }
+//
+// export interface NoteSearchResult extends SearchResultBase {
+//   type: "note";
+//   notebookId: string;
+// }
+
+// --- Discriminated union ---
+
+export type SearchResult = MessageSearchResult;
+// ^ Becomes: MessageSearchResult | TaskSearchResult | NoteSearchResult | ...

package/src/middleware.ts

@@ -0,0 +1,52 @@
+import { NextRequest, NextResponse } from "next/server";
+
+/**
+ * Next.js Middleware — applies security checks to all API routes.
+ *
+ * In production, rejects requests from non-localhost IPs.
+ * Castle is a local-first app and should never be exposed to the internet.
+ */
+
+const LOCALHOST_HOSTS = new Set([
+  "localhost",
+  "127.0.0.1",
+  "::1",
+  "::ffff:127.0.0.1",
+]);
+
+export function middleware(request: NextRequest) {
+  // Only enforce in production — dev is always allowed
+  if (process.env.NODE_ENV === "development") {
+    return NextResponse.next();
+  }
+
+  // Check if the request originates from localhost
+  const host = request.headers.get("host") || "";
+  const hostname = host.split(":")[0];
+
+  const forwarded = request.headers.get("x-forwarded-for");
+  const clientIp = forwarded?.split(",")[0].trim();
+
+  // If x-forwarded-for is present and it's not localhost, reject
+  if (clientIp && !LOCALHOST_HOSTS.has(clientIp)) {
+    return NextResponse.json(
+      { error: "Forbidden — Castle is only accessible from localhost" },
+      { status: 403 }
+    );
+  }
+
+  // If the host header isn't a localhost variant, reject
+  if (hostname && !LOCALHOST_HOSTS.has(hostname)) {
+    return NextResponse.json(
+      { error: "Forbidden — Castle is only accessible from localhost" },
+      { status: 403 }
+    );
+  }
+
+  return NextResponse.next();
+}
+
+// Only run middleware on API routes
+export const config = {
+  matcher: "/api/:path*",
+};

package/vitest.config.ts

@@ -0,0 +1,13 @@
+import { defineConfig } from "vitest/config";
+import { resolve } from "path";
+
+export default defineConfig({
+  test: {
+    globals: true,
+    environment: "node",
+    include: ["src/**/*.test.ts", "src/**/*.test.tsx"],
+    alias: {
+      "@": resolve(__dirname, "src"),
+    },
+  },
+});