Add Next.js 14 production-ready ARIV web console (Vercel-ready)

[harvatechs]

Motivation

• Provide a production-ready ChatGPT-inspired web UI to control, configure and view ARIV outputs using Next.js 14 + TypeScript + Tailwind and make it deployable to Vercel.
• Enforce strong security and operational controls (Auth.js, rate limiting, CSP/headers, Zod input validation) to safely bridge the UI to the ARIV backend.
• Deliver an accessible, responsive UI with a collapsible sidebar, main chat/command area, and a configuration panel, matching the project’s stack requirements (Zustand, Lucide, Radix primitives).

Description

• Scaffolds a complete web/ Next.js App Router app with TypeScript, Tailwind, package.json, tsconfig.json, next.config.js, and styling in app/globals.css for a dark ChatGPT-style UI.
• Adds UI components and pages: collapsible Sidebar, ChatWindow, settings page (app/settings/page.tsx), root app/page.tsx, and shared UI primitives (components/ui/{button,input,textarea,switch}.tsx).
• Implements secure backend bridge and server APIs in app/api/*: command, config, logs routes that validate/sanitize inputs via lib/security.ts (Zod) and forward requests to the ARIV backend using lib/ariv.ts.
• Adds authentication and middleware protections: auth.ts (NextAuth/NextAuth v5 placeholders for GitHub/Google), middleware.ts to protect API routes and apply per-IP rate limiting (lib/rate-limit.ts), environment parsing via lib/env.ts, and various UX/state utilities (lib/store/chat-store.ts, lib/utils.ts).
• Includes operational files and docs: .env.example with required env vars, web/README.md with local dev and Vercel deployment instructions, and security-oriented next.config.js headers/CSP hardening.

Testing

• Ran cd web && npm install which failed in this environment with an npm registry error (403 Forbidden) preventing installation of node_modules so runtime verification could not complete. (failed)
• Ran cd web && npm run typecheck which executed tsc --noEmit without installed dependencies and produced expected module-resolution/type errors due to missing node_modules. (ran, reported expected errors)
• Attempted a Playwright screenshot of http://127.0.0.1:3000 but the app was not running because dependencies could not be installed, resulting in ERR_EMPTY_RESPONSE. (failed)

---

Codex Task