🧱 update CI workflow and remove alpinejs frontend files

frontend/main.ts

@@ -0,0 +1,75 @@
+import { AlpineApp } from "@dx/alpine-server";
+import { Context, Router } from "@oak/oak";
+
+let config = {
+  api_url: Deno.env.get("API_URL") || "http://localhost:8080",
+  port: parseInt(Deno.env.get("PORT") || "8090"),
+};
+
+try {
+  const configFile = await Deno.readTextFile("./config.json");
+  const fileConfig = JSON.parse(configFile);
+  config = { ...config, ...fileConfig };
+  // deno-lint-ignore no-explicit-any
+} catch (e: any) {
+  console.warn("Could not read config.json, using defaults", e.message);
+}
+
+const app = new AlpineApp({
+  app: {
+    dev: true,
+    staticFilesPath: "./public",
+  },
+  oak: {
+    listenOptions: { port: config.port },
+  },
+});
+
+const healthRouter = new Router();
+healthRouter.get("/health", (ctx: Context) => {
+  ctx.response.body = { status: "ok" };
+  ctx.response.status = 200;
+});
+app.append(healthRouter);
+
+app.use(async (ctx: Context, next: () => Promise<unknown>) => {
+  await next();
+  const contentType = ctx.response.headers.get("content-type") || "";
+  if (contentType.includes("text/html")) {
+    let csp = ctx.response.headers.get("Content-Security-Policy");
+    if (!csp) {
+      // securityHeaders might not have set it yet if it runs after us in the call stack
+      // but in run(), securityHeaders is app.use()ed BEFORE user middlewares.
+      // So when we are here (after await next()), securityHeaders has already finished its await next()
+      // and set the headers.
+      csp = [
+        "default-src 'self'",
+        "base-uri 'self'",
+        "object-src 'none'",
+        "frame-ancestors 'none'",
+        "script-src 'self' 'unsafe-eval'",
+        "style-src 'self'",
+        "img-src 'self' data:",
+        "font-src 'self'",
+        "connect-src 'self'",
+        "media-src 'self'",
+      ].join("; ");
+    }
+    const updatedCsp = csp.replace(
+      "connect-src 'self'",
+      `connect-src 'self' ${config.api_url} ws:`,
+    );
+    ctx.response.headers.set("Content-Security-Policy", updatedCsp);
+  }
+});
+
+console.log(`URL: http://localhost:${config.port}`);
+console.log(`API: ${config.api_url}`);
+
+// Create config.js file in public directory
+await Deno.writeTextFile(
+  "./public/config.js",
+  `window.APP_CONFIG = ${JSON.stringify(config)};`,
+);
+
+await app.run();