Rotimi Best
d5b07d356e
New features: - HLS video encoding/streaming (hls routes, hls-encoder) and a media transcripts pipeline (transcripts route + media-transcript queries) - AI assistant chat vs. run model: agent-course-generation worker/queue, run-monitor pane, chat-changes card, content ask-ai bar - Per-theme course-page previews across org landing-page themes (bold, classic, corporate, editorial, etc.) with a shared course token/component set - View-as-student mode and login-link / link-invite invite flows Refactor: - Extract packages/core consolidating config (env, storage, dashboard-url), services and utils previously duplicated under apps/api/src/config - Remove legacy agent service modules (chat-tools, chat-context, context-window, document, fetch-url, lesson-content) - Relax Cross-Origin-Resource-Policy to allow cross-origin media embedding - Add format script to tenant-router so turbo run format covers it
104 lines
3.9 KiB
JavaScript
104 lines
3.9 KiB
JavaScript
import 'dotenv/config';
|
|
|
|
import adapterNode from '@sveltejs/adapter-node';
|
|
import { getCspDomains } from './src/lib/utils/csp-domains.js';
|
|
import path from 'path';
|
|
import { vitePreprocess } from '@sveltejs/vite-plugin-svelte';
|
|
|
|
const IS_CLOUDFLARE = process.env.CI_ENVIRONMENT === 'cloudflare';
|
|
|
|
const adapterCloudflare = IS_CLOUDFLARE ? (await import('@sveltejs/adapter-cloudflare')).default : null;
|
|
const isSelfHosted = process.env.PUBLIC_IS_SELFHOSTED === 'true';
|
|
const csp = getCspDomains(isSelfHosted, process.env.PUBLIC_SERVER_URL);
|
|
|
|
/** @type {import('@sveltejs/kit').Config} */
|
|
const config = {
|
|
preprocess: [vitePreprocess({})],
|
|
kit: {
|
|
// Default: Node server (Render, Docker). Opt into Cloudflare Pages only when CI_ENVIRONMENT=cloudflare.
|
|
adapter: IS_CLOUDFLARE ? adapterCloudflare() : adapterNode(),
|
|
alias: {
|
|
$lib: path.resolve('./src/lib'),
|
|
$features: path.resolve('./src/lib/features'),
|
|
$mail: path.resolve('./src/mail'),
|
|
'$src/tools': path.resolve('./node_modules/@cio/ui/src/tools/index.ts'),
|
|
'$src/base/*': path.resolve('./node_modules/@cio/ui/src/base/*'),
|
|
'@cio/ui': path.resolve('./node_modules/@cio/ui/src'),
|
|
'@cio/ui/*': path.resolve('./node_modules/@cio/ui/src/*'),
|
|
'@cio/api': path.resolve('./node_modules/@cio/api/dist'),
|
|
'@cio/api/*': path.resolve('./node_modules/@cio/api/dist/*'),
|
|
'@cio/utils': path.resolve('./node_modules/@cio/utils/dist'),
|
|
'@cio/utils/*': path.resolve('./node_modules/@cio/utils/dist/*'),
|
|
'@cio/db/types': path.resolve('./node_modules/@cio/db/src/types.ts')
|
|
},
|
|
csp: {
|
|
mode: 'auto',
|
|
directives: {
|
|
'default-src': ['self'],
|
|
'script-src': ['self', ...csp.scriptSrc, 'unsafe-hashes', 'unsafe-eval'],
|
|
'style-src': ['self', 'unsafe-inline', ...csp.styleSrc],
|
|
'style-src-elem': ['self', 'unsafe-inline', ...csp.styleSrc],
|
|
'font-src': ['self', ...csp.fontSrc],
|
|
'img-src': ['self', 'data:', ...csp.mediaSrc, 'blob:', 'http://localhost:9000'],
|
|
'media-src': [
|
|
'self',
|
|
...csp.mediaSrc,
|
|
'data:',
|
|
'blob:',
|
|
'http://localhost:9000',
|
|
...(csp.apiOrigin ? [csp.apiOrigin] : [])
|
|
],
|
|
'frame-src': ['self', ...csp.frameSrc],
|
|
'connect-src': [
|
|
'self',
|
|
'blob:',
|
|
'http://localhost:3002',
|
|
'http://localhost:9000',
|
|
...(csp.apiOrigin ? [csp.apiOrigin] : []),
|
|
...csp.connectSrc
|
|
],
|
|
'worker-src': ['self', 'blob:'],
|
|
'object-src': ['none'],
|
|
'base-uri': ['self'],
|
|
'form-action': ['self'],
|
|
// 'self' allows same-origin iframes (e.g. widget preview at /widget-preview). 'none' blocks all embedding.
|
|
'frame-ancestors': ['self'],
|
|
'upgrade-insecure-requests': true
|
|
},
|
|
reportOnly: {
|
|
'default-src': ['self'],
|
|
'script-src': ['self', ...csp.scriptSrc, 'unsafe-hashes', 'unsafe-eval'],
|
|
'style-src': ['self', 'unsafe-inline', ...csp.styleSrc],
|
|
'style-src-elem': ['self', 'unsafe-inline', ...csp.styleSrc],
|
|
'font-src': ['self', ...csp.fontSrc],
|
|
'img-src': ['self', 'data:', ...csp.mediaSrc, 'blob:', 'http://localhost:9000'],
|
|
'media-src': [
|
|
'self',
|
|
...csp.mediaSrc,
|
|
'data:',
|
|
'blob:',
|
|
'http://localhost:9000',
|
|
...(csp.apiOrigin ? [csp.apiOrigin] : [])
|
|
],
|
|
'frame-src': ['self', ...csp.frameSrc],
|
|
'connect-src': [
|
|
'self',
|
|
'blob:',
|
|
'http://localhost:3002',
|
|
'http://localhost:9000',
|
|
...(csp.apiOrigin ? [csp.apiOrigin] : []),
|
|
...csp.connectSrc
|
|
],
|
|
'worker-src': ['self', 'blob:'],
|
|
'object-src': ['none'],
|
|
'base-uri': ['self'],
|
|
'form-action': ['self'],
|
|
'frame-ancestors': ['self'],
|
|
'report-uri': ['/csp-report']
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
export default config;
|