diff --git a/.DS_Store b/.DS_Store index 3eee31f..0927f90 100644 Binary files a/.DS_Store and b/.DS_Store differ diff --git a/.env.example b/.env.example new file mode 100644 index 0000000..684297e --- /dev/null +++ b/.env.example @@ -0,0 +1,38 @@ +# ============================================================ +# Omnikon Website — environment variables +# Copy this file to `.env` and fill in your values. +# NEVER commit `.env` — it is gitignored. +# ============================================================ + +# --- Firebase Web config (PUBLIC BY DESIGN) --- +# Firebase web API keys are public identifiers, not secrets: the browser +# needs them to use Firebase Auth. Security comes from Firestore rules, +# not from hiding these. They are emitted to public/env-public.json. +FIREBASE_API_KEY= +FIREBASE_AUTH_DOMAIN= +FIREBASE_PROJECT_ID= +FIREBASE_STORAGE_BUCKET= +FIREBASE_MESSAGING_SENDER_ID= +FIREBASE_APP_ID= + +# --- Supabase (anon key is PUBLIC BY DESIGN) --- +# The anon key is meant to be embedded in clients; Supabase Row Level +# Security protects the data. Also emitted to public/env-public.json. +SUPABASE_URL= +SUPABASE_ANON_KEY= + +# --- SECRETS — server-side ONLY --- +# Consumed exclusively by Vercel serverless functions in api/. +# NEVER emitted to public/env-public.json; NEVER referenced in client code. + +# HuggingFace inference token — used by api/chat.js (chatbot proxy). +HF_TOKEN= + +# Blog admin secret — validated by api/blog-insert.js, never client-side. +ADMIN_SECRET= + +# --- CI-only secret --- +# GitHub Personal Access Token with repo read access, used by +# .github/workflows/update_projects.yml to refresh github_summary.json. +# Not used by the website at runtime. +GIT_OMNIKON_ALL= diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e1f5980..68ecba8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ jobs: - uses: actions/checkout@v4 - name: Check HTML exists - run: test -f index.html + run: test -f pages/index.html - name: Check CSS exists run: test -f style.css diff --git a/.gitignore b/.gitignore index 006ec36..14e80d4 100644 --- a/.gitignore +++ b/.gitignore @@ -13,6 +13,7 @@ dist-ssr/ *.env env.json public/env-public.json +public/env-public*.json # IDEs, Editors & OS files .DS_Store diff --git a/.vite/deps/_metadata.json b/.vite/deps/_metadata.json new file mode 100644 index 0000000..419955a --- /dev/null +++ b/.vite/deps/_metadata.json @@ -0,0 +1,8 @@ +{ + "hash": "f3206e1b", + "configHash": "aa4833a8", + "lockfileHash": "e3b0c442", + "browserHash": "5587a14b", + "optimized": {}, + "chunks": {} +} \ No newline at end of file diff --git a/.vite/deps/package.json b/.vite/deps/package.json new file mode 100644 index 0000000..3dbc1ca --- /dev/null +++ b/.vite/deps/package.json @@ -0,0 +1,3 @@ +{ + "type": "module" +} diff --git a/ads.txt b/ads.txt new file mode 100644 index 0000000..600eacf --- /dev/null +++ b/ads.txt @@ -0,0 +1 @@ +google.com, pub-8663425706426895, DIRECT, f08c47fec0942fa0 \ No newline at end of file diff --git a/api/blog-insert.js b/api/blog-insert.js new file mode 100644 index 0000000..e034c5e --- /dev/null +++ b/api/blog-insert.js @@ -0,0 +1,57 @@ +// api/blog-insert.js +// Vercel Serverless Function: publishes a blog post to Supabase. +// ADMIN_SECRET is validated server-side (process.env) — it never exists +// in any file served to the browser. + +export default async function handler(req, res) { + if (req.method === 'OPTIONS') { + res.setHeader('Access-Control-Allow-Origin', '*'); + res.setHeader('Access-Control-Allow-Methods', 'POST,OPTIONS'); + res.setHeader('Access-Control-Allow-Headers', 'Content-Type'); + res.status(200).end(); + return; + } + + if (req.method !== 'POST') { + return res.status(405).json({ error: 'Method not allowed' }); + } + + const { secret, blog } = req.body || {}; + const adminSecret = process.env.ADMIN_SECRET; + + if (!adminSecret || !secret || secret !== adminSecret) { + return res.status(403).json({ error: 'Unauthorized' }); + } + + const supabaseUrl = (process.env.SUPABASE_URL || '').replace(/\/+$/, ''); + const supabaseKey = process.env.SUPABASE_ANON_KEY; + + if (!supabaseUrl || !supabaseKey) { + return res.status(503).json({ error: 'Blog service is not configured' }); + } + + try { + const response = await fetch(`${supabaseUrl}/rest/v1/blogs`, { + method: 'POST', + headers: { + apikey: supabaseKey, + Authorization: `Bearer ${supabaseKey}`, + 'Content-Type': 'application/json', + Prefer: 'return=representation' + }, + body: JSON.stringify(blog || {}) + }); + + const data = await response.json(); + if (!response.ok) { + if (response.status === 409 || (data && data.code === '23505')) { + return res.status(409).json({ error: 'This article has already been added to the database.' }); + } + return res.status(response.status).json(data); + } + return res.status(200).json(data[0] || data); + } catch (e) { + console.error('Blog insert error:', e); + return res.status(502).json({ error: 'Blog service unavailable' }); + } +} diff --git a/api/chat.js b/api/chat.js new file mode 100644 index 0000000..39d6a7e --- /dev/null +++ b/api/chat.js @@ -0,0 +1,40 @@ +// api/chat.js +// Vercel Serverless Function: proxies chat completions to the HuggingFace +// inference router. HF_TOKEN stays server-side (process.env) and is never +// shipped to or fetched by the browser. + +export default async function handler(req, res) { + if (req.method === 'OPTIONS') { + res.setHeader('Access-Control-Allow-Origin', '*'); + res.setHeader('Access-Control-Allow-Methods', 'POST,OPTIONS'); + res.setHeader('Access-Control-Allow-Headers', 'Content-Type'); + res.status(200).end(); + return; + } + + if (req.method !== 'POST') { + return res.status(405).json({ error: 'Method not allowed' }); + } + + const token = process.env.HF_TOKEN; + if (!token) { + return res.status(503).json({ error: 'AI service is not configured' }); + } + + try { + const response = await fetch('https://router.huggingface.co/v1/chat/completions', { + method: 'POST', + headers: { + Authorization: `Bearer ${token}`, + 'Content-Type': 'application/json' + }, + body: JSON.stringify(req.body || {}) + }); + + const data = await response.json(); + return res.status(response.ok ? 200 : response.status).json(data); + } catch (e) { + console.error('Chat proxy error:', e); + return res.status(502).json({ error: 'AI service unavailable' }); + } +} diff --git a/assets/admin.js b/assets/admin.js index 4efcc5d..a32136a 100644 --- a/assets/admin.js +++ b/assets/admin.js @@ -611,7 +611,7 @@ async function loadAdminCampaigns() { ${c.status || 'active'}

${c.description || ''}

-

Target: ${c.target || 10} refs | Multiplier: ${c.multiplier || '1x'} | Reward: ${c.reward || 'Swag'}

+

Target: ${c.target || 10} refs | Multiplier: ${c.multiplier || '1x'} | Reward: ${c.reward || 'Certificate & Recognition'}

- -
-
- - -
`; - - const toggleBtn = document.getElementById('chatbot-toggle'); - const closeBtn = document.getElementById('chatbot-close'); - const sendBtn = document.getElementById('chatbot-send'); - const input = document.getElementById('chatbot-text'); - const messages = document.getElementById('chatbot-messages'); - - let orgData = null; - let chatHistory = []; - let isLoaded = false; - let hasGreeted = false; - - async function loadOrgData() { - try { - const res = await fetch('github_summary.json'); - if (res.ok) { - orgData = await res.json(); - } - } catch (e) { - console.warn('Could not load github_summary.json for chatbot context', e); - } - } - - function formatMarkdown(text) { - let escaped = text - .replace(/&/g, "&") - .replace(//g, ">") - .replace(/"/g, """) - .replace(/'/g, "'"); - - escaped = escaped.replace(/\*\*(.*?)\*\*/g, '$1'); - escaped = escaped.replace(/`(.*?)`/g, '$1'); - escaped = escaped.replace(/\[(.*?)\]\((.*?)\)/g, '$1'); - - const lines = escaped.split('\n'); - const formattedLines = lines.map(line => { - const trimmed = line.trim(); - if (trimmed.startsWith('- ') || trimmed.startsWith('* ')) { - return `
  • ${trimmed.substring(2)}
    • `; - } - return line; - }); - - return formattedLines.join('
    '); - } - - function getSystemPrompt() { - let context = ''; - if (orgData) { - const projects = orgData.repos - ? orgData.repos.map(r => `- ${r.name}: ${r.description || 'No description'} (${r.stars} stars, URL: ${r.html_url})`).join('\n') - : ''; - const members = orgData.members - ? orgData.members.map(m => `- ${m.login} (${m.html_url})`).join('\n') - : ''; - context = `Here is the current real-time data about the Omnikon organization:\n\nActive Projects:\n${projects}\n\nKey Members/Contributors:\n${members}`; - } - - return `You are the official AI Assistant for the Omnikon Open Source Organization. -Your sole purpose is to help users learn about the Omnikon community, its active projects, repositories, code of conduct, guidelines, and contributors. - -${context} - -RULES: -1. ONLY answer questions related to Omnikon, its projects, and its community. -2. If a query is unrelated to Omnikon (e.g. general knowledge, unrelated coding, general questions), politely refuse to answer. Say: "I am the Omnikon assistant, and I can only answer questions related to the organization." -3. Keep answers technical, concise, clear, and direct. -4. Respond in Markdown format where appropriate.`; - } - - const openModal = async () => { - modal.classList.add('open'); - modal.classList.remove('hidden'); - input.focus(); - - if (!isLoaded) { - await loadOrgData(); - isLoaded = true; - } - - if (!hasGreeted) { - appendMessage('Hello! I am the Omnikon AI Assistant. I can help you with questions about our active projects, guidelines, contributors, or how to get started in our community. What would you like to know?', 'bot'); - hasGreeted = true; - } - }; - - const closeModal = () => { - modal.classList.remove('open'); - setTimeout(() => modal.classList.add('hidden'), 300); - }; - - toggleBtn.addEventListener('click', openModal); - closeBtn.addEventListener('click', closeModal); - - const appendMessage = (text, role) => { - const msg = document.createElement('div'); - msg.className = `chatbot-msg ${role}`; - - if (role === 'bot') { - msg.innerHTML = formatMarkdown(text); - } else { - msg.textContent = text; - } - - messages.appendChild(msg); - messages.scrollTop = messages.scrollHeight; - }; - - const showTypingIndicator = () => { - const indicator = document.createElement('div'); - indicator.className = 'chatbot-msg bot typing-indicator'; - indicator.id = 'chatbot-typing'; - indicator.innerHTML = ` - - - - `; - messages.appendChild(indicator); - messages.scrollTop = messages.scrollHeight; - }; - - const removeTypingIndicator = () => { - const indicator = document.getElementById('chatbot-typing'); - if (indicator) { - indicator.remove(); - } - }; - - const getHFToken = () => window.env?.HF_TOKEN || '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'; - - const sendMessage = async () => { - const userText = input.value.trim(); - if (!userText) return; - - appendMessage(userText, 'user'); - input.value = ''; - - if (!window.envLoaded) { - showTypingIndicator(); - await new Promise(resolve => window.addEventListener('envLoaded', resolve, { once: true })); - removeTypingIndicator(); - } - - const token = getHFToken(); - if (!token) { - appendMessage('API key missing. Please add HF_TOKEN to your .env file in the repository root to enable the AI assistant.', 'bot'); - return; - } - - showTypingIndicator(); - - const recentHistory = chatHistory.slice(-6).map(msg => ({ - role: msg.role, - content: msg.content - })); - - const payload = { - model: 'meta-llama/Llama-3.1-8B-Instruct:novita', - messages: [ - { role: 'system', content: getSystemPrompt() }, - ...recentHistory, - { role: 'user', content: userText } - ] - }; - - try { - const resp = await fetch('https://router.huggingface.co/v1/chat/completions', { - method: 'POST', - headers: { - Authorization: `Bearer ${token}`, - 'Content-Type': 'application/json' - }, - body: JSON.stringify(payload) - }); - - removeTypingIndicator(); - - if (!resp.ok) throw new Error('HuggingFace request failed'); - const data = await resp.json(); - const reply = data.choices?.[0]?.message?.content || 'No response'; - - appendMessage(reply, 'bot'); - - chatHistory.push({ role: 'user', content: userText }); - chatHistory.push({ role: 'assistant', content: reply }); - } catch (e) { - console.error(e); - removeTypingIndicator(); - appendMessage('Unable to connect to the AI service. Please verify your HF_TOKEN configuration.', 'bot'); - } - }; - - sendBtn.addEventListener('click', sendMessage); - input.addEventListener('keydown', (e) => { - if (e.key === 'Enter') sendMessage(); - }); -})(); diff --git a/chatbot.js b/chatbot.js index 2b1c157..2adec32 100644 --- a/chatbot.js +++ b/chatbot.js @@ -26,7 +26,7 @@ async function loadOrgData() { try { - const res = await fetch('github_summary.json'); + const res = await fetch('/github_summary.json'); if (res.ok) { orgData = await res.json(); } @@ -141,8 +141,6 @@ RULES: } }; - const getHFToken = () => window.env?.HF_TOKEN || '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'; - const sendMessage = async () => { const userText = input.value.trim(); if (!userText) return; @@ -150,18 +148,6 @@ RULES: appendMessage(userText, 'user'); input.value = ''; - if (!window.envLoaded) { - showTypingIndicator(); - await new Promise(resolve => window.addEventListener('envLoaded', resolve, { once: true })); - removeTypingIndicator(); - } - - const token = getHFToken(); - if (!token) { - appendMessage('API key missing. Please add HF_TOKEN to your .env file in the repository root to enable the AI assistant.', 'bot'); - return; - } - showTypingIndicator(); const recentHistory = chatHistory.slice(-6).map(msg => ({ @@ -179,10 +165,9 @@ RULES: }; try { - const resp = await fetch('https://router.huggingface.co/v1/chat/completions', { + const resp = await fetch('/api/chat', { method: 'POST', headers: { - Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' }, body: JSON.stringify(payload) @@ -190,7 +175,7 @@ RULES: removeTypingIndicator(); - if (!resp.ok) throw new Error('HuggingFace request failed'); + if (!resp.ok) throw new Error('AI service request failed'); const data = await resp.json(); const reply = data.choices?.[0]?.message?.content || 'No response'; @@ -201,7 +186,7 @@ RULES: } catch (e) { console.error(e); removeTypingIndicator(); - appendMessage('Unable to connect to the AI service. Please verify your HF_TOKEN configuration.', 'bot'); + appendMessage('Unable to connect to the AI service. Please try again later.', 'bot'); } }; diff --git a/dist/404err.html b/dist/404err.html deleted file mode 100644 index 6b31f3c..0000000 --- a/dist/404err.html +++ /dev/null @@ -1,185 +0,0 @@ - - - - - - - - - - - - - - - - -404err | Omnikon - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - -
    - -
    - -
    - -
    -
    -warning -System_Alert // CRITICAL -
    -
    -
    -
    -
    -
    -
    - -
    - -
    -

    - ERR_404 -

    -

    - [ STATUS: NODE_OFFLINE ] -

    -
    - -
    -
    -> -Initializing diagnostic sequence... OK -
    -
    -> -Locating requested vector... FAILED -
    -
    -> -

    - PATH NOT FOUND. The requested node has been decommissioned or moved to a restricted sector. -

    -
    -
    -> -Awaiting user input_ -
    -
    - -
    - -Return_To_Base -arrow_forward - - -
    -
    - -
    -
    -
    -
    - -
    -
    - - - - - - - \ No newline at end of file diff --git a/dist/blogs.html b/dist/blogs.html deleted file mode 100644 index abc38f5..0000000 --- a/dist/blogs.html +++ /dev/null @@ -1,780 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - -Developer Blog | Omnikon - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - - -
    -
    -
    -
    -
    -
    - SYS.BLOG.INIT -
    -

    Blogs & Articles

    -

    - Insights, tutorials, project updates, and developer stories from the Omnikon community. -

    -
    - - - -
    - - -
    -
    -
    - description -
    -
    -
    0
    -
    Total Articles
    -
    -
    -
    -
    - person -
    -
    -
    0
    -
    Total Authors
    -
    -
    -
    -
    - rss_feed -
    -
    -
    0
    -
    Platforms
    -
    -
    -
    - - -
    - -
    - search - -
    - -
    - - -
    -
    - - -
    -
    -

    Loading article indexes...

    -
    - - - - - - -
    - - - - - - - - - - - - - - - - \ No newline at end of file diff --git a/dist/codeOfConduct.html b/dist/codeOfConduct.html deleted file mode 100644 index e1938a7..0000000 --- a/dist/codeOfConduct.html +++ /dev/null @@ -1,274 +0,0 @@ - - - - - - - - - - - - - - - - - - -codeOfConduct | Omnikon - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    -
    - - ->_ - Omnikon - - - - - - - -
    -
    - -
    - -
    - -
    -
    -
    -
    -SYS.DOC.INIT -
    -

    Code of Conduct

    -
    - -update - v2.1.0 - - -calendar_today - Last Modified: 2024-03-15 - -
    -
    - -
    - -
    - -
    -

    -01. - Our Pledge -

    -

    - In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation. -

    -
    - "We build systems, but we are a community of humans first." -
    -
    - -
    -

    -02. - Our Standards -

    -

    Examples of behavior that contributes to creating a positive environment include:

    -
      -
    • -[+] -Using welcoming and inclusive language. -
      • -
    • -[+] -Being respectful of differing viewpoints and experiences. -
      • -
    • -[+] -Gracefully accepting constructive criticism. -
      • -
    • -[+] -Focusing on what is best for the community. -
      • -
    • -[+] -Showing empathy towards other community members. -
      • -
    -

    Examples of unacceptable behavior by participants include:

    -
      -
    • -[-] -The use of sexualized language or imagery and unwelcome sexual attention or advances. -
      • -
    • -[-] -Trolling, insulting/derogatory comments, and personal or political attacks. -
      • -
    • -[-] -Public or private harassment. -
      • -
    • -[-] -Publishing others' private information, such as a physical or electronic address, without explicit permission. -
      • -
    -
    - -
    -

    -03. - Enforcement Responsibilities -

    -

    - Community leaders are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior. -

    -

    - Community leaders have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful. -

    - -
    -
    -Terminal ->_ -
    -
    -> $ contact --department=safety --priority=high
    -Executing protocol...
    -> If you experience or witness unacceptable behavior, report it immediately to: - safety@omnikon.dev -
    -
    -
    -
    -
    - - - - - - - \ No newline at end of file diff --git a/dist/faqs.html b/dist/faqs.html deleted file mode 100644 index 2e6659d..0000000 --- a/dist/faqs.html +++ /dev/null @@ -1,288 +0,0 @@ - - - - - - - - - - - - - - - -faqs | Omnikon - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - - -
    - -
    -
    -terminal -sys/query/index.sh -
    -

    -> FAQs -

    -

    - ACCESSING KNOWLEDGE BASE... ESTABLISHING SECURE CONNECTION... READY.
    - Consult the documented procedures below for operational clarity within the Omnikon framework. -

    -
    - -
    - - - -
    - -
    - -
    -
    -

    Omnikon is an open-source community focused on empowering student developers through collaborative learning and building real-world projects. We aim to bridge the gap between academic learning and industry experience.

    -
    -
    -
    - -
    - -
    -
    -

    Anyone with a passion for coding, learning, and collaborating! Whether you are a beginner taking your first steps in development or an experienced student looking to contribute to open-source projects, you are welcome here.

    -
    -
    -
    - -
    - -
    -
    -

    You can start by joining our Discord community and checking out our GitHub repositories. Look for issues labeled "good first issue" or "help wanted", read our Contribution Guidelines, and don't hesitate to ask for help in the channels!

    -
    -
    -
    - -
    - -
    -
    -

    Not at all! We encourage peer-to-peer learning. You can learn as you build by collaborating with other members and participating in community modules designed to help you upskill.

    -
    -
    -
    -
    -
    -
    - - - - - - - - \ No newline at end of file diff --git a/dist/guidelines.html b/dist/guidelines.html deleted file mode 100644 index a56e9a3..0000000 --- a/dist/guidelines.html +++ /dev/null @@ -1,285 +0,0 @@ - - - - - - - - - - - - - - - - - - -guidelines | Omnikon - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    -
    - - ->_ - Omnikon - - - - - - - -
    -
    - -
    - -
    - -
    -
    -
    -
    -SYS.DOC.INIT -
    -

    System Guidelines

    -
    - -update - v1.0.0 - - -calendar_today - Last Modified: 2024-03-15 - -
    -
    - -
    - -
    -
    -Terminal ->_ -
    -
    -> $ ./execute read_protocols.sh
    -Executing protocol...
    -[INFO] Loading community constraints...
    -[INFO] Parsing governance models...
    -> [OK] System ready. -
    -
    - - -
    - -
    -

    -01. - Community Standards -

    -
    - -
    -
    -

    Respect the Override

    -

    - Harassment, discrimination, and toxic behavior are treated as fatal errors. Violators will be permanently permabanned from all cluster nodes. Constructive criticism is required; flaming is discarded. -

    -
    - -
    -
    -

    Knowledge Transfer

    -

    - Information hoarding is a deprecated practice. Open source implies open minds. Document your solutions, assist initiates, and elevate the collective intelligence of the network. -

    -
    -
    -
    - - -
    - -
    -

    -02. - Contribution Rules -

    -
      -
    • -[::] -
      -Branch Naming Nomenclature -Use type/scope/description. Example: feat/ui/cyber-terminal. Commits must follow Conventional Commits specification. -
      -
      • -
    • -[::] -
      -PR Pipeline Integrity -All pull requests must pass automated CI/CD checks before human review. Ensure 90%+ test coverage on new modules. Draft PRs early to signal intent. -
      -
      • -
    • -[::] -
      -Style Constraints -Strict adherence to the provided Tailwind theme configuration is mandatory. Arbitrary values (e.g., bg-[#123]) will trigger automatic rejection. -
      -
      • -
    -
    - - -
    - -
    -

    -03. - Project Governance -

    -

    - Decision-making operates on a modified consensus model. Core maintainers hold merge rights, but architectural shifts require an RFC (Request for Comments) period of at least 72 hours. -

    -
    -
    -
    - - Core Active -
    -
    - - RFCs Open: 3 -
    -
    -
    -
    -
    -
    - - - - - - - - \ No newline at end of file diff --git a/dist/index.html b/dist/index.html deleted file mode 100644 index d34a9a3..0000000 --- a/dist/index.html +++ /dev/null @@ -1,1633 +0,0 @@ - - - - - - - - - - - - - - - -Omnikon | Open Source Community for Developers - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - -
    - -
    -
    Building Omnikon OS...
    -

    -Open Source. -Community Driven. -Student Powered. -

    -

    - We build developer centric open learning, and student developers to create real impact. -

    -
    -
    - bolt Omnikon Highlights -
    -
      -
    • › AI-Learning Hub
      • -
    • › Real-world impact
      • -
    • › Open contribution
      • -
    • › Student-first
      • -
    • › GitHub-native
      • -
    -
    -
    -
    -
    - - - - - - - -
    -
    - -
    - -
    - - -
    -
    -
    -
    - -
    -
    -
    - - -
    -
    -
    -
    -
    -
    -
    -
    - - - Omnikon community hero graphic -
    -
    - - -
    -
    -
    - - -
    -
    - deployed_code -
    -
    -
    15
    -
    Active Projects
    -
    -
    - - -
    -
    - group -
    -
    -
    400+
    -
    Students Engaged
    -
    -
    - - -
    -
    - architecture -
    -
    -
    50+
    -
    Contributors
    -
    -
    - - -
    -
    - workspace_premium -
    -
    -
    7
    -
    Ambassadors
    -
    -
    - - -
    -
    - visibility -
    -
    -
    19+
    -
    Repository Stars
    -
    -
    - - -
    -
    - article -
    -
    -
    15+
    -
    Articles Published
    -
    -
    - - - -
    - emoji_events -
    -
    -
    1.6K+
    -
    Quiz Registrations
    -
    -     - - - -
    - military_tech -
    -
    -
    1.4K+
    -
    Hackathon Registrations
    -
    -     - -
    -
    - - -
    - - - - - -
    - -
    - -
    - - -
    - - -
    - - -
    - - 🏆 National Hackathon 2026 - - - - - Registration Open - -
    - - -
    - -
    - Powered by -
    - - Unstop -
    -
    - -
    - Sponsored by -
    - - Upstox -
    -
    -
    - - -

    - Omnikon National Tech
    Hackathon 2026 -

    - - -

    - Join developers, designers, innovators, and students from across India to solve real-world problems, collaborate with amazing teammates, and compete for exciting prizes in Omnikon's flagship national hackathon. -

    - - -
    - 💰 ₹10,000 Prize Pool - 🌐 Remote Participation - 👥 Solo & Team - 🇮🇳 National Level - 🧑‍💼 Industry Mentors - 📜 Certificates -
    - - -
    - -
      -
    1. - -
      Registration Open
      -
      Sign up now — spots are limited
      -
      2. -
    2. - -
      Problem Statements Released
      -
      Themes & challenges announced
      -
      3. -
    3. - -
      Submission Phase
      -
      Submit your project & demo
      -
      4. -
    4. - -
      Evaluation
      -
      Industry judges review projects
      -
      5. -
    5. - -
      Winners Announcement 🏆
      -
      Top teams celebrated & rewarded
      -
      6. -
    -
    - - -
    - - - - - - -
    - -
    - - - - - - -
    - - - -
    -
    -
    ₹10,000
    -
    Prize Pool
    -
    -
    -
    -
    ↑
    - Upstox -
    -
    Sponsored by
    -
    -
    -
    0+ Days
    -
    Event Duration
    -
    -
    -
    Nationwide
    -
    Competition
    -
    -
    - -
    -
    - -
    - - - - - - - - - - -
    -
    -
    -code -

    Developer Journey

    -
    - - Explore roles & modules arrow_forward - -
    -
    - - - - -
    -
    -school -
    -
    -

    Student

    -

    Start your learning journey

    -
    -
    -
    - -
    -menu_book -
    -
    -

    Learner

    -

    Learn, practice and build

    -
    -
    -
    - -
    -code -
    -
    -

    Builder

    -

    Build projects & solve problems

    -
    -
    -
    - -
    -groups -
    -
    -

    Contributor

    -

    Contribute to open source

    -
    -
    -
    - -
    -military_tech -
    -
    -

    Maintainer

    -

    Lead projects & mentor

    -
    -
    -
    -
    -
    -
    Your journey. Your impact.
    -
    -
    -
    - -
    - -
    -
    -

    - Omnikon Achievements -

    -

    - Real impact. Real numbers. Join the growing community of innovators. -

    -
    -
    - Build. Learn. Innovate. Compete. - • - Build. Learn. Innovate. Compete. - • - Build. Learn. Innovate. Compete. - • - Build. Learn. Innovate. Compete. - • - Build. Learn. Innovate. Compete. - • - Build. Learn. Innovate. Compete. - • - Build. Learn. Innovate. Compete. - • -
    -
    -
    - Explore Events -
    -
    - -
    - - -
    -
    - stars -
    -
    -
    - - workspace_premium ACHIEVEMENT - - Open Source -
    -

    Selected for Mentorship Programs

    - -
    - -
    -
    -
    - rocket_launch -
    -
    -

    Astrodex

    -

    Selected in GSSoC 2026

    -
    -
    - - open_in_new - -
    - - -
    -
    -
    - desktop_windows -
    -
    -

    CNTRL

    -

    Selected in ECSoC 2026

    -
    -
    - - open_in_new - -
    -
    -
    -
    - - -
    -
    -
    -
    -
    -
    - COMPLETED - Legacy -
    -
    - Quiz Arena Logo -
    -

    Frontend Quiz

    -

    Omnikon Quiz Arena

    -
    -
    - -
    -
    -
    0+
    -
    Registrations
    -
    -
    -
    0K
    -
    Impressions
    -
    -
    -
    0
    -
    Reviews
    -
    -
    -
    0%
    -
    Engineering
    -
    -
    -

    - Massive student engagement across domains. -

    -
    -
    - -
    -
    - - -
    - -
    -
    -
    - history -

    Recent Activity

    -
    -
    -
    - -
    - commit -
    -

    Dev PR merged in demon-structureize

    -
    - 2m ago -
    - -
    - upload -
    -

    Alina Push Layout & module progress

    -
    - 5m ago -
    - -
    - person_add -
    -

    New contributor joined: Aman

    -
    - 10m ago -
    - -
    - edit_document -
    -

    Documentation updated in #docs

    -
    - 15m ago -
    - -
    - security -
    -

    New security patch in attend-warden

    -
    - 20m ago -
    - -
    - commit -
    -

    John fixed an issue in ui-components

    -
    - 25m ago -
    - -
    - check_circle -
    -

    Sarah completed review for IssueSwipe

    -
    - 30m ago -
    -
    -
    - - - - -
    - -
    - -
    -
    - -
    -
    - -
    - -
    - -
    - < /> -
    -
    - + -
    -
    - -
    -
    - -
    Open Source Project -     -
    -

    - IssueSwipe -

    -

    - Swipe through GitHub issues like Tinder.
    - Find beginner-friendly issues.
    - Contribute faster.
    - Build your OSS profile. -

    - -
    - Good First Issues - Smart Matching - GitHub Sync - Open Source - Fast Review -
    -
    - - -
    - - - - - - -
    -
    - - - -
    -
    -
    - - - -
    - -
    - -
    -
    -
    -folder_open -

    Projects Explorer

    -
    - - View all arrow_forward - -
    -
    -
    Loading projects...
    -
    - -
    - -
    -
    -
    - account_circle -

    Member's Wall

    -
    -
    - - View all members arrow_forward - -
    - -
    - - - - - -
    - -
    -
    - -
    - - - - - - - -
    -
    -
    - -
    -
    - - - - - - - - - - - - - - - - -
    - -
    -
    -

    - Ready to build
    the future together? -

    -

    - Join thousands of developers & students open source and creating impact. -

    -
    -
    - - - - - - - - -
    -
    -
    -
    - - - - - - - - - - - - - - - - \ No newline at end of file diff --git a/dist/licence.html b/dist/licence.html deleted file mode 100644 index 07236e6..0000000 --- a/dist/licence.html +++ /dev/null @@ -1,198 +0,0 @@ - - - - - - - - - - - - - - - -licence | Omnikon - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - -
    -
    -
    -
    -
    -
    -terminal -sys_license_viewer.exe -
    -
    -
    -
    -
    -
    -
    -
    -
    -> -cat LICENSE.txt -
    -
    - MIT License

    - Copyright (c) 2025 Omnikon Community

    - Permission is hereby granted, free of charge, to any person obtaining a copy
    - of this software and associated documentation files (the "Software"), to deal
    - in the Software without restriction, including without limitation the rights
    - to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    - copies of the Software, and to permit persons to whom the Software is
    - furnished to do so, subject to the following conditions:

    - The above copyright notice and this permission notice shall be included in all
    - copies or substantial portions of the Software.

    - THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    - IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    - FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    - AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    - LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    - OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
    - SOFTWARE. -
    -
    -> - -
    -
    -
    -
    - -System Operational -
    -
    -
    - - - - - - - \ No newline at end of file diff --git a/fetch_community_feed.js b/fetch_community_feed.js index fce8cee..255c396 100644 --- a/fetch_community_feed.js +++ b/fetch_community_feed.js @@ -7,8 +7,10 @@ await new Promise(resolve => window.addEventListener('envLoaded', resolve, { once: true })); } - const token = window.env?.GIT_OMNIKON_ALL || window.env?.GITHUB_TOKEN; - container.innerHTML = ''; + // No GitHub token is ever used in the browser. All authenticated org + // data is fetched server-side in CI (.github/workflows/update_projects.yml + // → public/github_summary.json). Anonymous REST calls are rate-limited + // to 60 req/hr per IP, which is sufficient for this feed. const renderItem = (userLogin, userAvatar, title, timeStr, link) => { const div = document.createElement('div'); @@ -72,72 +74,18 @@ return `${diffDays}d ago`; }; - if (token) { - try { - const query = ` - query { - repository(owner: "Omnikon-Org", name: "Website") { - discussions(first: 8, orderBy: {field: CREATED_AT, direction: DESC}) { - nodes { - title - url - createdAt - author { - login - avatarUrl - } - } - } - } - } - `; - const resp = await fetch('https://api.github.com/graphql', { - method: 'POST', - headers: { - Authorization: `bearer ${token}`, - 'Content-Type': 'application/json' - }, - body: JSON.stringify({ query }) - }); - if (resp.ok) { - const result = await resp.json(); - const nodes = result.data?.repository?.discussions?.nodes; - if (nodes && nodes.length > 0) { - nodes.forEach(node => { - renderItem( - node.author?.login || 'anonymous', - node.author?.avatarUrl, - node.title, - getTimeAgo(node.createdAt), - node.url - ); - }); - return; - } - } - } catch (e) { - console.warn('GraphQL query failed, falling back to REST issues', e); - } - } - let data; try { - const headers = token ? { Authorization: `token ${token}` } : {}; - let resp = await fetch('https://api.github.com/search/issues?q=org:Omnikon-Org+sort:created-desc', { headers }); - if (!resp.ok && resp.status === 401 && token) { - console.warn('GitHub search issues returned 401 with token, retrying anonymously...'); - resp = await fetch('https://api.github.com/search/issues?q=org:Omnikon-Org+sort:created-desc'); - } + const resp = await fetch('https://api.github.com/search/issues?q=org:Omnikon-Org+sort:created-desc'); if (!resp.ok) throw new Error('GitHub search issues failed'); data = await resp.json(); } catch (e) { - console.warn('Authenticated search failed, trying final anonymous request...', e); - const resp = await fetch('https://api.github.com/search/issues?q=org:Omnikon-Org+sort:created-desc'); - if (!resp.ok) throw new Error('Anonymous backup search failed'); - data = await resp.json(); + console.warn('Failed to load community feed:', e); + data = null; } - const items = data.items || []; + const items = (data && data.items) || []; + container.innerHTML = ''; if (items.length === 0) { container.innerHTML = '

    No discussions or activity found.

    '; return; diff --git a/fetch_recent_activity.js b/fetch_recent_activity.js index a4f3e84..64f7ecc 100644 --- a/fetch_recent_activity.js +++ b/fetch_recent_activity.js @@ -7,23 +7,19 @@ await new Promise(resolve => window.addEventListener('envLoaded', resolve, { once: true })); } - const token = window.env?.GIT_OMNIKON_ALL || window.env?.GITHUB_TOKEN; - let events; + // No GitHub token is ever used in the browser. All authenticated org + // data is fetched server-side in CI (.github/workflows/update_projects.yml + // → public/github_summary.json). Anonymous REST calls are rate-limited + // to 60 req/hr per IP, which is sufficient for this feed. + let events; try { - const headers = token ? { Authorization: `token ${token}` } : {}; - let resp = await fetch('https://api.github.com/orgs/Omnikon-Org/events', { headers }); - if (!resp.ok && resp.status === 401 && token) { - console.warn('GitHub events request returned 401 with token, retrying anonymously...'); - resp = await fetch('https://api.github.com/orgs/Omnikon-Org/events'); - } + const resp = await fetch('https://api.github.com/orgs/Omnikon-Org/events'); if (!resp.ok) throw new Error('GitHub events request failed'); events = await resp.json(); } catch (e) { - console.warn('Authenticated fetch failed, trying final anonymous request...', e); - const resp = await fetch('https://api.github.com/orgs/Omnikon-Org/events'); - if (!resp.ok) throw new Error('Anonymous backup request failed'); - events = await resp.json(); + console.warn('Failed to load recent activity:', e); + events = null; } container.innerHTML = ''; diff --git a/firebase.json b/firebase.json new file mode 100644 index 0000000..0207c3f --- /dev/null +++ b/firebase.json @@ -0,0 +1,5 @@ +{ + "firestore": { + "rules": "firestore.rules" + } +} diff --git a/firestore.rules b/firestore.rules index 6029048..f3e5f55 100644 --- a/firestore.rules +++ b/firestore.rules @@ -20,8 +20,8 @@ service cloud.firestore { // USERS / AMBASSADORS COLLECTION match /users/{userId} { - // Authenticated users can read profiles for leaderboard and dashboard - allow read: if isAuthenticated(); + // Public access to read profiles for leaderboard and community listings + allow read: if true; // Users can create their own profile, but cannot assign themselves 'admin' or set verified counts allow create: if isOwner(userId) diff --git a/generate-env.js b/generate-env.js index 1c762b3..b20e0b8 100644 --- a/generate-env.js +++ b/generate-env.js @@ -1,6 +1,14 @@ const fs = require('fs'); const path = require('path'); +// Only PUBLIC-BY-DESIGN identifiers are emitted to the client. +// These are required by the browser SDKs (Firebase auth, Supabase reads) and are +// NOT secrets: Firebase web API keys and Supabase anon keys are public by design, +// access control is enforced by Firestore rules / Supabase RLS. +// +// NEVER add secrets here (HF_TOKEN, ADMIN_SECRET, GIT_OMNIKON_ALL, ...). +// Secrets live only in .env / Vercel env vars and are consumed server-side by +// the Vercel functions in api/ (api/chat.js, api/blog-insert.js). const envKeys = [ 'FIREBASE_API_KEY', 'FIREBASE_AUTH_DOMAIN', @@ -9,14 +17,12 @@ const envKeys = [ 'FIREBASE_MESSAGING_SENDER_ID', 'FIREBASE_APP_ID', 'SUPABASE_URL', - 'SUPABASE_ANON_KEY', - 'HF_TOKEN', - 'ADMIN_SECRET' + 'SUPABASE_ANON_KEY' ]; const envData = {}; -// Fallback to local .env if available (for local builds) +// Read from local .env (for local builds) try { const envFile = fs.readFileSync(path.join(__dirname, '.env'), 'utf-8'); envFile.split('\n').forEach(line => { @@ -24,7 +30,7 @@ try { if (parts.length >= 2) { const key = parts[0].trim(); const val = parts.slice(1).join('=').trim().replace(/^["']|["']$/g, ''); - if (envKeys.includes(key)) { + if (envKeys.includes(key) && val) { envData[key] = val; } } @@ -33,22 +39,10 @@ try { // .env might not exist on Vercel, which is fine } -// Fallback default public keys for Firebase -const defaultPublicKeys = { - FIREBASE_API_KEY: 'AIzaSyBiNIObFcI06vECfiBivu967NLq0EbxNlg', - FIREBASE_AUTH_DOMAIN: 'omnikon-web-auth-2026.firebaseapp.com', - FIREBASE_PROJECT_ID: 'omnikon-web-auth-2026', - FIREBASE_STORAGE_BUCKET: 'omnikon-web-auth-2026.firebasestorage.app', - FIREBASE_MESSAGING_SENDER_ID: '1003258119714', - FIREBASE_APP_ID: '1:1003258119714:web:e10c18f3955a9862242c7b' -}; - // Override with process.env (Vercel Environment Variables) envKeys.forEach(key => { if (process.env[key]) { envData[key] = process.env[key]; - } else if (defaultPublicKeys[key]) { - envData[key] = defaultPublicKeys[key]; } }); @@ -59,4 +53,4 @@ if (!fs.existsSync(publicDir)) { } fs.writeFileSync(path.join(publicDir, 'env-public.json'), JSON.stringify(envData, null, 2)); -console.log('Successfully generated public/env-public.json from environment variables.'); +console.log('Generated public/env-public.json (public config only, no secrets).'); diff --git a/404err.html b/pages/404err.html similarity index 90% rename from 404err.html rename to pages/404err.html index 0628adb..fc8778f 100644 --- a/404err.html +++ b/pages/404err.html @@ -2,7 +2,7 @@ - + @@ -13,8 +13,8 @@ - - + + 404err | Omnikon @@ -39,21 +39,21 @@ - - + + - + - + - - @@ -171,8 +171,8 @@

    - - + +