@gen3/workspaces 0.12.70 → 0.12.72

package/dist/server.d.ts

@@ -41,6 +41,19 @@ interface WorkspaceAssetsHandlerOptions {
      * `appName` JupyterLite reports internally.
      */
     pageTitle?: string;
+    /**
+     * Token extractor injected by the host application — used to add identity
+     * headers (`Authorization`, `REMOTE_USER`, `X-Gen3-User-ID`) when proxying
+     * server extension API calls to `serverExtensionProxyPath`.
+     *
+     * The workspace-proxy checks `X-Gen3-User-ID` / `REMOTE_USER` (injected by
+     * nginx in normal traffic) but server-side proxy calls bypass nginx, so these
+     * headers must be set explicitly.
+     *
+     * In gen3-vectis: `(req) => getAccessToken(req.headers['cookie'] ?? '') ?? null`
+     * When omitted, `extractTokenFallback` is used (Bearer header → access_token cookie).
+     */
+    getToken?: (req: NextApiRequest) => string | null;
     /**
      * Origin-relative path used to build the absolute `remoteKernelsBaseUrl`
      * injected into the remote tier (e.g. `/lw-workspace/proxy/jeg-proxy`).
@@ -51,8 +64,36 @@ interface WorkspaceAssetsHandlerOptions {
     remoteKernelsPath?: string;
     /** Override for the remote tier's `fullThemesUrl` (default: `/workspace-api/workspace-assets/remote/build/themes`). */
     fullThemesUrl?: string;
+    /**
+     * Origin-relative path to proxy server extension API calls for the remote tier
+     * (e.g. `/lw-workspace/proxy/jeg-proxy`).
+     *
+     * JupyterLab extensions such as `jupyterlmod` and `jupyter-server-proxy` make REST
+     * calls relative to the JupyterLite base URL.  Those requests land on this static-file
+     * handler and 404 because no matching file exists.  When this option is set, requests
+     * whose first path segment matches a known extension API prefix are proxied to
+     * `{origin}{serverExtensionProxyPath}/{rest}` instead.
+     *
+     * Omitted → extension API calls fall through to the static file handler (404).
+     */
+    serverExtensionProxyPath?: string;
+    /**
+     * Full base URL for proxying server extension API calls, overriding the
+     * origin resolved from the incoming request.
+     *
+     * Use this to target an internal Kubernetes service directly and avoid routing
+     * through the ingress (which may use a self-signed certificate).
+     * Example: `http://workspace-proxy-service.namespace.svc.cluster.local:8000`
+     *
+     * When set, the proxy target is built as
+     * `{serverExtensionProxyBaseUrl}{serverExtensionProxyPath}/{rest}`
+     * instead of `{requestOrigin}{serverExtensionProxyPath}/{rest}`.
+     *
+     * Omitted → origin is resolved from the incoming request headers (default behaviour).
+     */
+    serverExtensionProxyBaseUrl?: string;
 }
-declare function createWorkspaceAssetsHandler(options?: WorkspaceAssetsHandlerOptions): (req: NextApiRequest, res: NextApiResponse) => void;
+declare function createWorkspaceAssetsHandler(options?: WorkspaceAssetsHandlerOptions): (req: NextApiRequest, res: NextApiResponse) => Promise<void> | void;
 
 /**
  * Next.js config wrapper that adds all workspace-related plumbing.
@@ -199,7 +240,7 @@ declare function createKernelProxyHandler(config: KernelLifecycleProxyConfig): (
  * `next.config.js` (via `@gen3/workspaces/server`) where that I/O is wasted.
  */
 
-declare function handler$3(req: NextApiRequest, res: NextApiResponse): void;
+declare function handler$3(req: NextApiRequest, res: NextApiResponse): void | Promise<void>;
 
 declare function handler$2(req: NextApiRequest, res: NextApiResponse): Promise<void>;
 

package/jupyterlite-builds/remote-private/requirements.txt

@@ -3,3 +3,4 @@ jupyterlab>=4.6.3
 jupyterlite-pyodide-kernel
 jupyterlite-remote-server>=0.2.0
 jupyterlite-terminal
+jupyterlmod

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gen3/workspaces",
-  "version": "0.12.70",
+  "version": "0.12.72",
   "description": "Workspaces for Gen3",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -54,8 +54,8 @@
     "./jupyterlite-builds/*": "./dist/jupyterlite-builds/*"
   },
   "dependencies": {
-    "@gen3/core": "^0.12.70",
-    "@gen3/frontend": "^0.12.70",
+    "@gen3/core": "^0.12.72",
+    "@gen3/frontend": "^0.12.72",
     "camelcase-keys": "^10.0.2"
   },
   "peerDependencies": {
@@ -71,5 +71,5 @@
     "react-dom": "^19.2.4",
     "tailwindcss": "^3.4.18"
   },
-  "gitHead": "4441639497c4a78dc88f18f24175ed4bdfe97e27"
+  "gitHead": "6b0c382111e86fd5a5e3ae023e77e50a1b4ac183"
 }