fix: cors for chat agent (#36)

* fix: cors for chat agent

* feat: clean up routing and use proxy in all environments

* chore: clean up vite config

Author: MSevey

CLAUDE.md

@@ -295,6 +295,54 @@ src/components/
 - React Context for local/auth state
 - Form state via React Hook Form
 
+### API Routing Pattern
+
+**Service-Prefixed Routes** (Unified Architecture):
+
+All API requests use service-prefixed paths that are proxied by Vite to backend services:
+
+```
+/server/*  → Backend API server
+/chat/*    → Chat agent service
+/rpc/*     → Ethereum RPC node
+```
+
+**Key Files**:
+- `src/shared/config/api-routes.ts` - Single source of truth for all API routes
+- `vite.config.ts` - Proxy configuration (strips prefixes before forwarding)
+- `src/shared/config/runtime.ts` - Minimal config (only environment flags)
+
+**Example Usage**:
+```typescript
+import { API_PATHS } from '@/shared/config/api-routes';
+
+// Backend API call
+fetch(`${API_PATHS.SERVER_API}/auth/login`);  // → /server/api/v1/auth/login
+
+// Chat agent call
+fetch(API_PATHS.CHAT_STREAM);                  // → /chat/api/v1/chat/stream
+
+// RPC call (uses proxy in dev, external HTTPS in production)
+new Web3Provider(DEFAULT_ETHEREUM_RPC_URL);    // → /rpc or https://...
+```
+
+**Environment Variables**:
+- **Runtime** (application code):
+  - `VITE_SERVER_ENVIRONMENT`: 'local' | 'staging' | 'sandbox' | 'production'
+  - `VITE_ETHEREUM_RPC_URL`: Optional external RPC URL (production only)
+  
+- **Vite Config** (proxy targets):
+  - `VITE_SERVER_URL`: Backend service URL (for proxy)
+  - `VITE_CHAT_AGENT_URL`: Chat agent service URL (for proxy)
+  - `VITE_ETHEREUM_RPC_URL`: RPC node URL (for proxy)
+
+**Benefits**:
+- Single source of truth prevents path inconsistencies
+- Type-safe route references
+- No hardcoded URLs in API clients
+- Vite proxy handles dev/production routing automatically
+- Avoids mixed content errors (HTTPS page → HTTP API)
+
 ## Important Notes
 
 ### TypeScript Configuration

Dockerfile

@@ -48,17 +48,32 @@ COPY <<EOF /docker-entrypoint.sh
 
 # Simple startup logging
 echo "🚀 Starting Unified Arda Platform with Vite Preview Server"
-echo "Backend: \${VITE_SERVER_URL:-http://localhost:8080}"
-echo "Chat Agent: \${VITE_CHAT_AGENT_URL:-http://localhost:3002}"
-echo "Environment: \${VITE_SERVER_ENVIRONMENT:-production}"
+echo "📋 Configuration:"
+echo "  - Environment: \${VITE_SERVER_ENVIRONMENT:-production}"
+echo "  - RPC URL: \${VITE_ETHEREUM_RPC_URL:-(using /rpc proxy)}"
+echo ""
+echo "📡 Proxy Configuration (vite.config.ts):"
+echo "  - /server/* -> Backend service"
+echo "  - /chat/* -> Chat agent service"
+echo "  - /rpc/* -> Ethereum RPC"
 
 # Inject environment variables into the built app
+# 
+# SIMPLIFIED CONFIGURATION:
+# =========================
+# Only environment flags and optional external endpoints.
+# All API routing uses service-prefixed paths proxied by Vite:
+#   - /server/* → Backend API (see vite.config.ts)
+#   - /chat/*   → Chat agent (see vite.config.ts)
+#   - /rpc/*    → Ethereum RPC (see vite.config.ts)
+# 
+# Environment variables (injected at runtime):
+#   - VITE_SERVER_ENVIRONMENT: Environment flag (local/staging/sandbox/production)
+#   - VITE_ETHEREUM_RPC_URL: Optional external HTTPS RPC endpoint (production only)
 cat > /app/dist/env-config.js << EOL
 window.__ENV__ = {
-  VITE_SERVER_URL: "\${VITE_SERVER_URL:-http://arda-credit_server:8080}",
   VITE_SERVER_ENVIRONMENT: "\${VITE_SERVER_ENVIRONMENT:-production}",
-  VITE_CHAT_AGENT_URL: "\${VITE_CHAT_AGENT_URL:-http://arda-credit_chat-agent:3002}",
-  VITE_ETHEREUM_RPC_URL: "\${VITE_ETHEREUM_RPC_URL:-http://127.0.0.1:8545}"
+  VITE_ETHEREUM_RPC_URL: "\${VITE_ETHEREUM_RPC_URL:-}"
 };
 EOL
 

README.md

@@ -130,10 +130,17 @@ cp apps/idr/.env.example apps/idr/.env
 ```
 
 Update the `.env` files with your configuration:
-- `VITE_API_URL`: Backend API endpoint
+- `VITE_SERVER_URL`: Backend API endpoint (empty string in production for relative paths)
+- `VITE_CHAT_AGENT_URL`: Chat agent endpoint (empty string in production for relative paths)
 - `VITE_CREDIT_APP_URL`: Credit App URL (for Platform redirects)
 - `VITE_IDR_URL`: IDR URL (for Platform redirects)
 
+> **📖 Important**: See [URL Configuration Guide](./docs/URL_CONFIGURATION.md) for detailed information about our unified URL pattern, including:
+> - How empty URLs enable relative paths in production
+> - Vite proxy configuration for development and production
+> - Deployment configurations for Docker, Kubernetes, and cloud platforms
+> - Troubleshooting mixed content errors
+
 ### Development
 
 #### Run All Applications

docker-compose.yml

@@ -14,10 +14,13 @@ services:
       - arda-network
     restart: unless-stopped
     environment:
+      # Environment configuration for Vite proxy targets and runtime
+      # These env vars are used by vite.config.ts to configure proxy routing
+      # Application code uses service-prefixed paths (/server, /chat, /rpc)
       - VITE_SERVER_URL=${VITE_SERVER_URL:-http://localhost:8080}
-      - VITE_SERVER_ENVIRONMENT=${VITE_SERVER_ENVIRONMENT:-production}
       - VITE_CHAT_AGENT_URL=${VITE_CHAT_AGENT_URL:-http://localhost:3002}
       - VITE_ETHEREUM_RPC_URL=${VITE_ETHEREUM_RPC_URL:-http://127.0.0.1:8545}
+      - VITE_SERVER_ENVIRONMENT=${VITE_SERVER_ENVIRONMENT:-local}
     env_file:
       - .env
     healthcheck:

src/App.tsx

@@ -208,7 +208,6 @@ function AppContent() {
       {isAuthenticated && (
         <ChatWidget 
           context={appContext}
-          apiEndpoint={getConfig().CHAT_AGENT_URL}
           authToken={localStorage.getItem('arda_token') || undefined}
           contextData={chatContextData}
         />

src/credit/hooks/useNetworkConfig.ts

@@ -1,11 +1,15 @@
 // Blockchain utility functions for transaction links and formatting
 import { getConfig } from '../../shared/config/runtime';
+import { API_ROUTES } from '../../shared/config/api-routes';
 
 /**
  * Default Ethereum RPC URL
- * Uses runtime config or falls back to local Anvil devnet
+ * 
+ * Priority:
+ * 1. Runtime config (for production external HTTPS endpoints)
+ * 2. Proxy path /rpc (for development/staging with local nodes)
  */
-export const DEFAULT_ETHEREUM_RPC_URL = getConfig().ETHEREUM_RPC_URL;
+export const DEFAULT_ETHEREUM_RPC_URL = getConfig().ETHEREUM_RPC_URL || API_ROUTES.RPC;
 
 export const BLOCKCHAIN_NETWORKS = {
 	mainnet: {

src/credit/utils/blockchain.ts

@@ -88,13 +88,11 @@ export class TokenHandler {
   }
 
   /**
-   * Redirect to Platform for authentication
+   * Redirect to login page (unified app - no longer redirects to separate platform)
    */
   static redirectToPlatform(): void {
-    const { getConfig } = require('../config/runtime');
-    const platformUrl = getConfig().PLATFORM_URL;
-    const returnUrl = window.location.href;
-    window.location.href = `${platformUrl}?return_to=${encodeURIComponent(returnUrl)}`;
+    const returnUrl = window.location.pathname + window.location.search;
+    window.location.href = `/auth/login?return_to=${encodeURIComponent(returnUrl)}`;
   }
 
   /**

src/credit/utils/tokenHandler.ts

@@ -1,11 +1,14 @@
 /**
  * IDR App API Client
- * Uses shared @arda/api-client package
+ * Uses shared @arda/api-client package with service-prefixed routing
+ * 
+ * All API requests use /server prefix which is proxied by Vite to the backend service.
+ * See: src/shared/config/api-routes.ts for route definitions
+ * See: vite.config.ts for proxy configuration
  */
 
 import { createArdaAPI } from '@arda/api-client';
 import type { ArdaAPI } from '@arda/api-client';
-import { getConfig } from '../../shared/config/runtime';
 
 // Get auth token from localStorage
 function getAuthToken(): string | null {
@@ -40,8 +43,9 @@ function handleAuthError(): void {
 }
 
 // Create and export the API client
+// baseURL is empty - API paths use /server prefix which Vite proxy handles
 export const api: ArdaAPI = createArdaAPI({
-  baseURL: getConfig().SERVER_URL,
+  baseURL: '',
   getAuthToken,
   onAuthError: handleAuthError,
   enableLogging: true,

src/idr/lib/api.ts

@@ -1,11 +1,15 @@
 /**
  * Chat Agent API Client for IDR
  * Handles communication with the chat-agent service for AI-powered document analysis
+ * 
+ * Uses /chat prefix which is proxied by Vite to the chat agent service.
+ * See: src/shared/config/api-routes.ts for route definitions
+ * See: vite.config.ts for proxy configuration
  */
 
-import { getConfig } from '../../shared/config/runtime';
+import { API_PATHS } from '../../shared/config/api-routes';
 
-const API_ENDPOINT = getConfig().CHAT_AGENT_URL;
+const API_ENDPOINT = API_PATHS.CHAT_API;
 
 export interface ProgressEvent {
   type: 'tool_start' | 'tool_complete' | 'iteration' | 'progress' | 'text_chunk';
@@ -63,7 +67,7 @@ export async function sendChatMessage(
   request: ChatRequest,
   onProgress?: (event: ProgressEvent) => void
 ): Promise<ChatResponse> {
-  const STREAM_ENDPOINT = API_ENDPOINT.replace('/chat', '/chat/stream');
+  const STREAM_ENDPOINT = API_PATHS.CHAT_STREAM;
 
   return new Promise((resolve, reject) => {
     let accumulatedText = '';
@@ -192,7 +196,7 @@ export async function sendChatMessageSync(request: ChatRequest): Promise<ChatRes
  */
 export async function checkChatAgentHealth(): Promise<boolean> {
   try {
-    const response = await fetch(API_ENDPOINT.replace('/api/v1/chat', '/health'));
+    const response = await fetch(API_PATHS.CHAT_HEALTH);
     return response.ok;
   } catch {
     return false;