@semiont/frontend 0.4.4 → 0.4.5

package/standalone/apps/frontend/.next/server/chunks/{730.js → 8835.js}

@@ -1,18 +1,22 @@
-exports.id = 730;
-exports.ids = [730];
+exports.id = 8835;
+exports.ids = [8835];
 exports.modules = {
 
-/***/ 43241:
-/***/ ((__unused_webpack___webpack_module__, __webpack_exports__, __webpack_require__) => {
+/***/ 35074:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 "use strict";
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   NE: () => (/* binding */ SemiontApiClient),
-/* harmony export */   k3: () => (/* binding */ JWTTokenSchema),
-/* harmony export */   lv: () => (/* binding */ validateData)
-/* harmony export */ });
-/* unused harmony exports APIError, EventBusClient, LOCALES, SSEClient, SSE_STREAM_CONNECTED, buildContentCache, createCircleSvg, createPolygonSvg, createRectangleSvg, decodeRepresentation, decodeWithCharset, extractBoundingBox, extractCharset, extractContext, findBestTextMatch, findTextWithContext, formatLocaleDisplay, getAllLocaleCodes, getAnnotationExactText, getBodySource, getBodyType, getChecksum, getCommentText, getCreator, getDerivedFrom, getExactText, getExtensionForMimeType, getLanguage, getLocaleEnglishName, getLocaleInfo, getLocaleNativeName, getMimeCategory, getNodeEncoding, getPrimaryMediaType, getPrimaryRepresentation, getPrimarySelector, getResourceEntityTypes, getResourceId, getStorageUri, getTargetSelector, getTargetSource, getTextQuoteSelector, hasTargetSelector, isArchived, isAssessment, isBodyResolved, isComment, isDraft, isHighlight, isImageMimeType, isPdfMimeType, isReference, isResolvedReference, isStubReference, isTag, isTextMimeType, isValidEmail, normalizeCoordinates, normalizeText, parseSvgSelector, scaleSvgToNative, validateAndCorrectOffsets, verifyPosition */
-/* harmony import */ var ky__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(30766);
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  NE: () => (/* reexport */ SemiontApiClient)
+});
+
+// UNUSED EXPORTS: APIError, EventBusClient, JWTTokenSchema, LOCALES, SSEClient, SSE_STREAM_CONNECTED, buildContentCache, createCircleSvg, createPolygonSvg, createRectangleSvg, decodeRepresentation, decodeWithCharset, extractBoundingBox, extractCharset, extractContext, findBestTextMatch, findTextWithContext, formatLocaleDisplay, getAllLocaleCodes, getAnnotationExactText, getBodySource, getBodyType, getChecksum, getCommentText, getCreator, getDerivedFrom, getExactText, getExtensionForMimeType, getFragmentSelector, getLanguage, getLocaleEnglishName, getLocaleInfo, getLocaleNativeName, getMimeCategory, getNodeEncoding, getPrimaryMediaType, getPrimaryRepresentation, getPrimarySelector, getResourceEntityTypes, getResourceId, getStorageUri, getSvgSelector, getTargetSelector, getTargetSource, getTextPositionSelector, getTextQuoteSelector, hasTargetSelector, isArchived, isAssessment, isBodyResolved, isComment, isDraft, isHighlight, isImageMimeType, isPdfMimeType, isReference, isResolvedReference, isStubReference, isTag, isTextMimeType, isValidEmail, normalizeCoordinates, normalizeText, parseSvgSelector, scaleSvgToNative, validateAndCorrectOffsets, validateData, validateSvgMarkup, verifyPosition
+
+// EXTERNAL MODULE: ../../node_modules/ky/distribution/index.js + 14 modules
+var distribution = __webpack_require__(30766);
+;// ../../packages/api-client/dist/index.js
 
 
 
@@ -736,9 +740,10 @@ var SemiontApiClient = class {
         const { baseUrl, timeout: timeout2 = 3e4, retry = 2, logger } = config;
         this.logger = logger;
         this.baseUrl = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-        this.http = ky__WEBPACK_IMPORTED_MODULE_0__/* ["default"] */ .Ay.create({
+        this.http = distribution/* default */.Ay.create({
             timeout: timeout2,
             retry,
+            credentials: "include",
             hooks: {
                 beforeRequest: [
                     (request, options)=>{
@@ -2406,275 +2411,59 @@ function getMimeCategory(mimeType) {
  //# sourceMappingURL=index.js.map
  //# sourceMappingURL=index.js.map
 
+;// __barrel_optimize__?names=SemiontApiClient!=!../../packages/api-client/dist/index.js
+
+
 
 /***/ }),
 
-/***/ 63986:
+/***/ 62100:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 "use strict";
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  N: () => (/* reexport */ authOptions)
-});
-
-// UNUSED EXPORTS: providers
-
-// EXTERNAL MODULE: ../../packages/api-client/dist/index.js
-var dist = __webpack_require__(43241);
-;// __barrel_optimize__?names=JWTTokenSchema,validateData!=!../../packages/api-client/dist/index.js
-
-
-// EXTERNAL MODULE: ../../packages/react-ui/dist/index.mjs
-var react_ui_dist = __webpack_require__(54736);
-;// __barrel_optimize__?names=OAuthUserSchema!=!../../packages/react-ui/dist/index.mjs
-
-
-// EXTERNAL MODULE: ./src/lib/env.ts
-var env = __webpack_require__(62100);
-// EXTERNAL MODULE: ../../node_modules/next-auth/providers/google.js
-var google = __webpack_require__(24743);
-// EXTERNAL MODULE: ../../node_modules/next-auth/providers/credentials.js
-var credentials = __webpack_require__(67960);
-;// ./src/lib/auth/providers.ts
-
-
-
-// Build providers array based on environment
-const providers = [];
-// Add Google provider if credentials are configured
-if (process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET) {
-    providers.push((0,google/* default */.A)({
-        clientId: process.env.GOOGLE_CLIENT_ID,
-        clientSecret: process.env.GOOGLE_CLIENT_SECRET
-    }));
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   IO: () => (/* binding */ NEXT_PUBLIC_BASE_URL),
+/* harmony export */   Vj: () => (/* binding */ SERVER_API_URL),
+/* harmony export */   _c: () => (/* binding */ NEXT_PUBLIC_SITE_NAME)
+/* harmony export */ });
+/* unused harmony exports NEXT_PUBLIC_BACKEND_URL, NEXT_PUBLIC_GOOGLE_CLIENT_ID, NEXT_PUBLIC_OAUTH_ALLOWED_DOMAINS, isDevelopment, isProduction, getAllowedDomains */
+// Environment configuration for Semiont Frontend
+// No validation at module load time - values are validated when actually used
+// API Configuration
+// SERVER_API_URL: Server-side API URL (runtime, used by Next.js server for MCP setup, etc.)
+// In Codespaces/Docker: Set to internal service name (e.g., http://backend:4000)
+const SERVER_API_URL = process.env.SERVER_API_URL || '';
+// NEXT_PUBLIC_BACKEND_URL: Client-side backend URL used by the browser to call the API directly.
+// Defaults to '' (relative URLs) when running behind Envoy on the same origin.
+const NEXT_PUBLIC_BACKEND_URL = process.env.NEXT_PUBLIC_BACKEND_URL || '';
+// Site Configuration
+const NEXT_PUBLIC_SITE_NAME = process.env.NEXT_PUBLIC_SITE_NAME || 'Semiont';
+const NEXT_PUBLIC_BASE_URL = process.env.NEXT_PUBLIC_BASE_URL || 'http://localhost:3000';
+// OAuth Configuration
+const NEXT_PUBLIC_GOOGLE_CLIENT_ID = process.env.NEXT_PUBLIC_GOOGLE_CLIENT_ID;
+// OAuth allowed domains (comma-separated list)
+const NEXT_PUBLIC_OAUTH_ALLOWED_DOMAINS = process.env.NEXT_PUBLIC_OAUTH_ALLOWED_DOMAINS || '';
+// Environment helpers
+const isDevelopment = (/* unused pure expression or super */ null && ("production" === 'development'));
+const isProduction = (/* unused pure expression or super */ null && ("production" === 'production'));
+// Helper to parse allowed domains from comma-separated string
+function getAllowedDomains() {
+    return NEXT_PUBLIC_OAUTH_ALLOWED_DOMAINS.split(',').map((d)=>d.trim()).filter((d)=>d.length > 0);
 }
-// Always add password/credentials provider - it will only be shown if configured
-providers.push((0,credentials/* default */.A)({
-    name: 'Password',
-    credentials: {
-        email: {
-            label: "Email",
-            type: "email",
-            placeholder: "admin@example.com"
-        },
-        password: {
-            label: "Password",
-            type: "password"
-        }
-    },
-    async authorize (credentials) {
-        if (!credentials?.email || !credentials?.password) {
-            return null;
-        }
-        const apiUrl = env/* SERVER_API_URL */.Vj;
-        try {
-            const response = await fetch(`${apiUrl}/api/tokens/password`, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json'
-                },
-                body: JSON.stringify({
-                    email: credentials.email,
-                    password: credentials.password
-                })
-            });
-            if (!response.ok) {
-                return null;
-            }
-            const data = await response.json();
-            // Return user object with backend token
-            return {
-                id: data.user.id,
-                email: data.user.email,
-                name: data.user.name || 'User',
-                image: data.user.image,
-                backendToken: data.token,
-                backendUser: data.user
-            };
-        } catch (error) {
-            console.error('Password authentication error:', error);
-            return null;
-        }
-    }
-}));
-
-;// ./src/lib/auth/config.ts
-
-
-
-
-const authOptions = {
-    providers: providers,
-    callbacks: {
-        async signIn ({ user, account }) {
-            // Local development auth - already validated
-            if (account?.provider === 'credentials') {
-                return true;
-            }
-            if (account?.provider === 'google') {
-                // Get allowed domains from environment
-                const allowedDomains = (0,env/* getAllowedDomains */.Kx)();
-                if (!allowedDomains || allowedDomains.length === 0) {
-                    console.error('site.oauthAllowedDomains is not configured - rejecting all OAuth logins');
-                    return false;
-                }
-                if (!user.email) {
-                    return false;
-                }
-                const emailParts = user.email.split('@');
-                if (emailParts.length !== 2 || !emailParts[1]) {
-                    return false;
-                }
-                const emailDomain = emailParts[1];
-                // Check if the domain is in the allowed list
-                if (!allowedDomains.includes(emailDomain)) {
-                    return false;
-                }
-                // Backend authentication for security validation and token generation
-                try {
-                    const apiUrl = env/* SERVER_API_URL */.Vj;
-                    const response = await fetch(`${apiUrl}/api/tokens/google`, {
-                        method: 'POST',
-                        headers: {
-                            'Content-Type': 'application/json'
-                        },
-                        body: JSON.stringify({
-                            access_token: account.access_token,
-                            email: user.email
-                        })
-                    });
-                    if (!response.ok) {
-                        console.error('Backend authentication failed:', await response.text());
-                        return false;
-                    }
-                    const data = await response.json();
-                    // Validate backend token
-                    const tokenValidation = (0,dist/* validateData */.lv)(dist/* JWTTokenSchema */.k3, data.token);
-                    if (!tokenValidation.success) {
-                        console.error('Invalid backend token received:', tokenValidation.error);
-                        return false;
-                    }
-                    // Validate user data
-                    const userValidation = (0,dist/* validateData */.lv)(react_ui_dist.OAuthUserSchema, data.user);
-                    if (!userValidation.success) {
-                        console.error('Invalid user data received:', userValidation.error);
-                        return false;
-                    }
-                    // Store our validated backend token and user in the user object
-                    user.backendToken = tokenValidation.data;
-                    // Convert null to undefined for name and image to match expected types
-                    const validatedUser = userValidation.data;
-                    user.backendUser = {
-                        ...validatedUser,
-                        name: validatedUser.name === null ? undefined : validatedUser.name,
-                        image: validatedUser.image === null ? undefined : validatedUser.image
-                    };
-                    // Store isNewUser in a way TypeScript accepts
-                    if ('__isNewUser' in user) {
-                        user.__isNewUser = data.isNewUser;
-                    } else {
-                        Object.defineProperty(user, '__isNewUser', {
-                            value: data.isNewUser,
-                            writable: true,
-                            configurable: true
-                        });
-                    }
-                    return true;
-                } catch (error) {
-                    console.error('Authentication error:', error);
-                    return false;
-                }
-            }
-            return true;
-        },
-        async jwt ({ token, user }) {
-            // Pass backend token to JWT
-            if (user?.backendToken) {
-                // Validate token structure before storing
-                const validation = (0,dist/* validateData */.lv)(dist/* JWTTokenSchema */.k3, user.backendToken);
-                if (validation.success && user.backendUser) {
-                    token.backendToken = validation.data;
-                    token.backendUser = user.backendUser;
-                    if ('__isNewUser' in user && typeof user.__isNewUser === 'boolean') {
-                        token.isNewUser = user.__isNewUser;
-                    }
-                } else {
-                    console.error('Invalid token in JWT callback:', validation.success ? 'No backend user' : validation.error);
-                }
-            }
-            return token;
-        },
-        async session ({ session, token }) {
-            // Pass backend token to session
-            if (token.backendToken && token.backendUser) {
-                // Re-validate token before adding to session
-                const validation = (0,dist/* validateData */.lv)(dist/* JWTTokenSchema */.k3, token.backendToken);
-                if (validation.success) {
-                    session.backendToken = validation.data;
-                    session.backendUser = token.backendUser;
-                    // Also populate standard session.user fields with isAdmin
-                    if (session.user && token.backendUser) {
-                        session.user.isAdmin = token.backendUser.isAdmin;
-                    }
-                    if (token.isNewUser !== undefined) {
-                        session.isNewUser = token.isNewUser;
-                    }
-                } else {
-                    console.error('Invalid token in session callback:', validation.success ? 'Unknown error' : validation.error);
-                    // Don't pass invalid tokens to the client
-                    delete session.backendToken;
-                    delete session.backendUser;
-                }
-            }
-            return session;
-        }
-    },
-    pages: {
-        signIn: '/auth/signin',
-        error: '/auth/error'
-    },
-    // Add security options
-    session: {
-        strategy: 'jwt',
-        maxAge: 8 * 60 * 60
-    },
-    jwt: {
-        maxAge: 8 * 60 * 60
-    },
-    cookies: {
-        sessionToken: {
-            name: 'next-auth.session-token',
-            options: {
-                httpOnly: true,
-                sameSite: 'lax',
-                path: '/',
-                secure: "production" === 'production'
-            }
-        }
-    }
-};
-
-;// ./src/lib/auth/index.ts
-
-
 
 
 /***/ }),
 
-/***/ 66725:
-/***/ ((__unused_webpack_module, __unused_webpack_exports, __webpack_require__) => {
+/***/ 80408:
+/***/ (() => {
 
-Promise.resolve(/* import() eager */).then(__webpack_require__.bind(__webpack_require__, 41513));
 
 
 /***/ }),
 
-/***/ 72805:
-/***/ ((__unused_webpack_module, __unused_webpack_exports, __webpack_require__) => {
+/***/ 87032:
+/***/ (() => {
 
-Promise.resolve(/* import() eager */).then(__webpack_require__.bind(__webpack_require__, 54736));
 
 
 /***/ })