import type { NextConfig } from 'next';

const apiOrigin = process.env.WURSOR_API_URL ?? 'http://localhost:3000';

const config: NextConfig = {
  reactStrictMode: true,
  // `next dev` blocks its dev endpoints for any host but localhost, so a phone on the same Wi-Fi gets the HTML but a page that
  // never hydrates (menu, search and theme buttons all dead). Allow private-network addresses. Dev only; no effect on `next build`.
  allowedDevOrigins: ['10.*.*.*', '192.168.*.*', '172.*.*.*'],
  // Do not let `next dev` write its own agent instructions into web/. The repository's AGENTS.md is the guide.
  agentRules: false,
  // Interim: the Sprint 1 shell at /app still calls the API on the same origin.
  // Replaced by server-held sessions (ADR 0018, step C).
  async rewrites() {
    return ['/auth/:path*', '/chat/:path*', '/chat', '/sites/:path*', '/sites', '/health'].map(
      (source) => ({ source, destination: `${apiOrigin}${source}` }),
    );
  },
};

export default config;