@optifye/dashboard-core 4.2.2 → 4.2.3

package/dist/index.js

@@ -139,8 +139,9 @@ var DEFAULT_ENDPOINTS_CONFIG = {
   whatsapp: "/api/send-whatsapp-direct",
   agnoApiUrl: process.env.NEXT_PUBLIC_AGNO_URL || "https://optifye-agent-production.up.railway.app",
   // Default AGNO API URL
-  // Hard-coded Slack webhook so the Help page works out-of-the-box without any config
-  slackWebhookUrl: "https://hooks.slack.com/services/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",
+  // Use environment variable for Slack webhook URL for privacy/security
+  // Note: SLACK_WEBHOOK_URL is server-side only, NEXT_PUBLIC_SLACK_WEBHOOK_URL works client-side but is less secure
+  slackWebhookUrl: process.env.SLACK_WEBHOOK_URL || process.env.NEXT_PUBLIC_SLACK_WEBHOOK_URL || void 0,
   slackProxyEndpoint: void 0
 };
 var DEFAULT_THEME_CONFIG = {
@@ -25156,6 +25157,17 @@ var SlackAPI = class {
       const config = _getDashboardConfigInstance();
       const endpointsConfig = config.endpoints ?? DEFAULT_ENDPOINTS_CONFIG;
       const { slackWebhookUrl, slackProxyEndpoint } = endpointsConfig;
+      console.log("SlackAPI Debug - Configuration check:", {
+        hasConfig: !!config,
+        hasEndpoints: !!config.endpoints,
+        slackWebhookUrl: slackWebhookUrl ? "configured" : "not configured",
+        slackProxyEndpoint: slackProxyEndpoint ? "configured" : "not configured",
+        envVariable: process.env.SLACK_WEBHOOK_URL ? "set" : "not set",
+        publicEnvVariable: process.env.NEXT_PUBLIC_SLACK_WEBHOOK_URL ? "set" : "not set"
+      });
+      if (process.env.NEXT_PUBLIC_SLACK_WEBHOOK_URL && !process.env.SLACK_WEBHOOK_URL) {
+        console.warn("\u26A0\uFE0F SECURITY WARNING: Using NEXT_PUBLIC_SLACK_WEBHOOK_URL exposes your webhook URL to the client. Consider using a server-side proxy instead.");
+      }
       if (slackWebhookUrl) {
         const slackMessage = this.formatSlackMessage(ticket);
         const response = await fetch(slackWebhookUrl, {
@@ -25190,6 +25202,10 @@ var SlackAPI = class {
         return;
       }
       console.warn("Slack notification skipped: No webhook or proxy endpoint configured");
+      console.info("To fix this, either:");
+      console.info("1. Set up a server-side proxy endpoint and configure slackProxyEndpoint in your dashboard config");
+      console.info("2. For development only: use NEXT_PUBLIC_SLACK_WEBHOOK_URL (not recommended for production)");
+      console.info("3. Configure the webhook URL directly in your dashboard config at runtime");
     } catch (error) {
       console.error("Failed to send Slack notification:", error);
       throw error;

package/dist/index.mjs

@@ -110,8 +110,9 @@ var DEFAULT_ENDPOINTS_CONFIG = {
   whatsapp: "/api/send-whatsapp-direct",
   agnoApiUrl: process.env.NEXT_PUBLIC_AGNO_URL || "https://optifye-agent-production.up.railway.app",
   // Default AGNO API URL
-  // Hard-coded Slack webhook so the Help page works out-of-the-box without any config
-  slackWebhookUrl: "https://hooks.slack.com/services/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",
+  // Use environment variable for Slack webhook URL for privacy/security
+  // Note: SLACK_WEBHOOK_URL is server-side only, NEXT_PUBLIC_SLACK_WEBHOOK_URL works client-side but is less secure
+  slackWebhookUrl: process.env.SLACK_WEBHOOK_URL || process.env.NEXT_PUBLIC_SLACK_WEBHOOK_URL || void 0,
   slackProxyEndpoint: void 0
 };
 var DEFAULT_THEME_CONFIG = {
@@ -25127,6 +25128,17 @@ var SlackAPI = class {
       const config = _getDashboardConfigInstance();
       const endpointsConfig = config.endpoints ?? DEFAULT_ENDPOINTS_CONFIG;
       const { slackWebhookUrl, slackProxyEndpoint } = endpointsConfig;
+      console.log("SlackAPI Debug - Configuration check:", {
+        hasConfig: !!config,
+        hasEndpoints: !!config.endpoints,
+        slackWebhookUrl: slackWebhookUrl ? "configured" : "not configured",
+        slackProxyEndpoint: slackProxyEndpoint ? "configured" : "not configured",
+        envVariable: process.env.SLACK_WEBHOOK_URL ? "set" : "not set",
+        publicEnvVariable: process.env.NEXT_PUBLIC_SLACK_WEBHOOK_URL ? "set" : "not set"
+      });
+      if (process.env.NEXT_PUBLIC_SLACK_WEBHOOK_URL && !process.env.SLACK_WEBHOOK_URL) {
+        console.warn("\u26A0\uFE0F SECURITY WARNING: Using NEXT_PUBLIC_SLACK_WEBHOOK_URL exposes your webhook URL to the client. Consider using a server-side proxy instead.");
+      }
       if (slackWebhookUrl) {
         const slackMessage = this.formatSlackMessage(ticket);
         const response = await fetch(slackWebhookUrl, {
@@ -25161,6 +25173,10 @@ var SlackAPI = class {
         return;
       }
       console.warn("Slack notification skipped: No webhook or proxy endpoint configured");
+      console.info("To fix this, either:");
+      console.info("1. Set up a server-side proxy endpoint and configure slackProxyEndpoint in your dashboard config");
+      console.info("2. For development only: use NEXT_PUBLIC_SLACK_WEBHOOK_URL (not recommended for production)");
+      console.info("3. Configure the webhook URL directly in your dashboard config at runtime");
     } catch (error) {
       console.error("Failed to send Slack notification:", error);
       throw error;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@optifye/dashboard-core",
-  "version": "4.2.2",
+  "version": "4.2.3",
   "description": "Reusable UI & logic for Optifye dashboard",
   "main": "dist/index.js",
   "module": "dist/index.mjs",