runlight 0.3.0 → 0.3.2

data/lib/runlight/accounts/web.rb

@@ -298,7 +298,7 @@ module Runlight
             "to" => invite["email"],
             "subject" => "#{invite["invitedBy"]} invited you to Runlight",
             "text" => "#{invite["invitedBy"]} invited you to the Runlight at #{host} as #{what}.\n\nChoose a password to join:\n#{link}\n\nThe link works for seven days.\n",
-            "html" => "<div style=\"font:15px/1.6 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;color:#111827;max-width:480px\"><img src=\"https://runlight.sh/icon-192.png\" width=\"48\" height=\"48\" alt=\"Runlight\" style=\"display:block;width:48px;height:48px;margin-bottom:24px;border:0;border-radius:10px\"><p>" \
+            "html" => "<div style=\"font:15px/1.6 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;color:#111827;max-width:480px\"><div role=\"img\" aria-label=\"Runlight\" style=\"width:48px;height:48px;margin-bottom:24px;border-radius:10px;background:#111827;color:#fff;font:700 26px/48px -apple-system,BlinkMacSystemFont,Helvetica,Arial,sans-serif;text-align:center\">R</div><p>" \
                       "#{esc(invite["invitedBy"])} invited you to the Runlight at #{esc(host)} as #{esc(what)}.</p><p><a href=\"#{esc(link)}\" " \
                       "style=\"display:inline-block;padding:10px 18px;border-radius:8px;background:#111827;color:#ffffff;text-decoration:none;font-weight:600\">" \
                       "Choose a password and join</a></p><p style=\"color:#6b7280;font-size:13px\">The link works for seven days. If you were not expecting this, " \
@@ -336,7 +336,7 @@ module Runlight
           "subject" => "Sign in to Runlight",
           "text" => "Someone, most likely you, signed in to Runlight at #{host} with your password while your account was held up by too many failed tries.\n\n" \
                     "Sign in with this link within fifteen minutes:\n#{link}\n\nIf this was not you, change your password, since someone knows it.\n",
-          "html" => "<div style=\"font:15px/1.6 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;color:#111827;max-width:480px\"><img src=\"https://runlight.sh/icon-192.png\" width=\"48\" height=\"48\" alt=\"Runlight\" style=\"display:block;width:48px;height:48px;margin-bottom:24px;border:0;border-radius:10px\">" \
+          "html" => "<div style=\"font:15px/1.6 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;color:#111827;max-width:480px\"><div role=\"img\" aria-label=\"Runlight\" style=\"width:48px;height:48px;margin-bottom:24px;border-radius:10px;background:#111827;color:#fff;font:700 26px/48px -apple-system,BlinkMacSystemFont,Helvetica,Arial,sans-serif;text-align:center\">R</div>" \
                     "<p>Someone, most likely you, signed in to Runlight at #{esc(host)} with your password while your account was held up by too many failed tries.</p>" \
                     "<p><a href=\"#{esc(link)}\" style=\"display:inline-block;padding:10px 18px;border-radius:8px;background:#111827;color:#ffffff;" \
                     "text-decoration:none;font-weight:600\">Sign in</a></p><p style=\"color:#6b7280;font-size:13px\">The link works for fifteen minutes. " \

data/lib/runlight/dates.rb

@@ -46,6 +46,44 @@ module Runlight
       "systemv/hst10" => "Etc/GMT+10",
       # Names the database dropped and ICU kept.
       "canada/east-saskatchewan" => "America/Regina", "us/pacific-new" => "America/Los_Angeles",
+      # Old names the time zone database keeps as links in its backward file. Debian, and Ubuntu from 26.04, ship
+      # them apart (tzdata-legacy), so a system may not have them; ICU reads them as the links. From tzdata 2026e.
+      "africa/asmera" => "Africa/Asmara", "america/argentina/comodrivadavia" => "America/Argentina/Catamarca",
+      "america/buenos_aires" => "America/Argentina/Buenos_Aires", "america/catamarca" => "America/Argentina/Catamarca",
+      "america/cordoba" => "America/Argentina/Cordoba", "america/fort_wayne" => "America/Indiana/Indianapolis",
+      "america/godthab" => "America/Nuuk", "america/indianapolis" => "America/Indiana/Indianapolis",
+      "america/jujuy" => "America/Argentina/Jujuy", "america/knox_in" => "America/Indiana/Knox",
+      "america/louisville" => "America/Kentucky/Louisville", "america/mendoza" => "America/Argentina/Mendoza",
+      "america/rosario" => "America/Argentina/Cordoba", "antarctica/south_pole" => "Antarctica/McMurdo",
+      "asia/ashkhabad" => "Asia/Ashgabat", "asia/calcutta" => "Asia/Kolkata", "asia/choibalsan" => "Asia/Ulaanbaatar",
+      "asia/chungking" => "Asia/Shanghai", "asia/dacca" => "Asia/Dhaka", "asia/katmandu" => "Asia/Kathmandu",
+      "asia/macao" => "Asia/Macau", "asia/rangoon" => "Asia/Yangon", "asia/saigon" => "Asia/Ho_Chi_Minh",
+      "asia/thimbu" => "Asia/Thimphu", "asia/ujung_pandang" => "Asia/Makassar", "asia/ulan_bator" => "Asia/Ulaanbaatar",
+      "atlantic/faeroe" => "Atlantic/Faroe", "australia/act" => "Australia/Sydney", "australia/lhi" => "Australia/Lord_Howe",
+      "australia/north" => "Australia/Darwin", "australia/nsw" => "Australia/Sydney",
+      "australia/queensland" => "Australia/Brisbane", "australia/south" => "Australia/Adelaide",
+      "australia/tasmania" => "Australia/Hobart", "australia/victoria" => "Australia/Melbourne",
+      "australia/west" => "Australia/Perth", "brazil/acre" => "America/Rio_Branco", "brazil/denoronha" => "America/Noronha",
+      "brazil/east" => "America/Sao_Paulo", "brazil/west" => "America/Manaus", "canada/atlantic" => "America/Halifax",
+      "canada/central" => "America/Winnipeg", "canada/eastern" => "America/Toronto", "canada/mountain" => "America/Edmonton",
+      "canada/newfoundland" => "America/St_Johns", "canada/pacific" => "America/Vancouver",
+      "canada/saskatchewan" => "America/Regina", "canada/yukon" => "America/Whitehorse",
+      "chile/continental" => "America/Santiago", "chile/easterisland" => "Pacific/Easter", "cst6cdt" => "America/Chicago",
+      "cuba" => "America/Havana", "egypt" => "Africa/Cairo", "eire" => "Europe/Dublin", "est5edt" => "America/New_York",
+      "europe/kiev" => "Europe/Kyiv", "europe/uzhgorod" => "Europe/Kyiv", "europe/zaporozhye" => "Europe/Kyiv",
+      "gb" => "Europe/London", "gb-eire" => "Europe/London", "gmt0" => "Etc/GMT", "greenwich" => "Etc/GMT",
+      "hongkong" => "Asia/Hong_Kong", "iceland" => "Atlantic/Reykjavik", "iran" => "Asia/Tehran", "israel" => "Asia/Jerusalem",
+      "jamaica" => "America/Jamaica", "japan" => "Asia/Tokyo", "kwajalein" => "Pacific/Kwajalein", "libya" => "Africa/Tripoli",
+      "mexico/bajanorte" => "America/Tijuana", "mexico/bajasur" => "America/Mazatlan", "mexico/general" => "America/Mexico_City",
+      "mst7mdt" => "America/Denver", "navajo" => "America/Denver", "nz" => "Pacific/Auckland", "nz-chat" => "Pacific/Chatham",
+      "pacific/enderbury" => "Pacific/Kanton", "pacific/ponape" => "Pacific/Pohnpei", "pacific/truk" => "Pacific/Chuuk",
+      "poland" => "Europe/Warsaw", "portugal" => "Europe/Lisbon", "prc" => "Asia/Shanghai", "pst8pdt" => "America/Los_Angeles",
+      "roc" => "Asia/Taipei", "rok" => "Asia/Seoul", "singapore" => "Asia/Singapore", "turkey" => "Europe/Istanbul",
+      "universal" => "Etc/UTC", "us/alaska" => "America/Anchorage", "us/aleutian" => "America/Adak",
+      "us/arizona" => "America/Phoenix", "us/central" => "America/Chicago", "us/east-indiana" => "America/Indiana/Indianapolis",
+      "us/eastern" => "America/New_York", "us/hawaii" => "Pacific/Honolulu", "us/indiana-starke" => "America/Indiana/Knox",
+      "us/michigan" => "America/Detroit", "us/mountain" => "America/Denver", "us/pacific" => "America/Los_Angeles",
+      "us/samoa" => "Pacific/Pago_Pago", "w-su" => "Europe/Moscow", "zulu" => "Etc/UTC",
     }.freeze
 
     OFFSET = /\A([+\-]|−)([01][0-9]|2[0-3])(?::?([0-5][0-9]))?\z/

data/lib/runlight/oauth.rb

@@ -23,7 +23,8 @@ module Runlight
   #
   # The context the routes pass is a Hash: "runlight", "base", "isOwner" (callable(request) giving a bool), and
   # optionally "signIn" (String), "isReader" (callable(request) giving a bool), "accountOf" (callable(request)
-  # giving an account id or nil), and "tokenMade" (callable(token, by) giving a bool).
+  # giving an account id or nil), "tokenMade" (callable(token, by) giving a bool), and "csrf" (callable giving the
+  # token the consent form sends back in its csrf field).
   module OAuth
     CODE_MS = 5 * 60_000
     # An app stored before client ids were signed, which never finished connecting within a day, is removed.
@@ -206,6 +207,7 @@ module Runlight
           %w[response_type client_id redirect_uri code_challenge code_challenge_method state scope resource].each do |k|
             hidden << "<input type=\"hidden\" name=\"#{k}\" value=\"#{esc(form.get(k))}\">" unless form.get(k).nil?
           end
+          hidden << "<input type=\"hidden\" name=\"csrf\" value=\"#{esc(ctx["csrf"].call.to_s)}\">" if ctx["csrf"]
           # The app names itself, so the page also shows where the answer goes, which it cannot fake.
           sends_to = "<p class=\"note\">#{h.call("oauth.sendsTo", { "host" => "<strong>#{esc(Http::Url.new(redirect).host)}</strong>" })}</p>"
           buttons = "<div class=\"buttons\"><button type=\"submit\" name=\"decision\" value=\"deny\" class=\"ghost\">#{h.call("oauth.deny")}</button>" \

data/lib/runlight/reports.rb

@@ -183,7 +183,7 @@ module Runlight
       u = Http::Url.parse(links["dashboard"])
       where = u.nil? ? links["dashboard"] : u.host + u.pathname.sub(%r{/\z}, "")
       at = t.call("email.at", { "where" => where })
-      mark = "<img src=\"https://runlight.sh/icon-192.png\" width=\"48\" height=\"48\" alt=\"Runlight\" style=\"display:block;width:48px;height:48px;margin-bottom:24px;border:0;border-radius:10px\">"
+      mark = "<div role=\"img\" aria-label=\"Runlight\" style=\"width:48px;height:48px;margin-bottom:24px;border-radius:10px;background:#111827;color:#fff;font:700 26px/48px -apple-system,BlinkMacSystemFont,Helvetica,Arial,sans-serif;text-align:center\">R</div>"
 
       footer = t.call("email.footer", { "frequency" => t.call(monthly ? "email.monthly" : "email.weekly"), "site" => site["name"] })
       at_line = esc(t.call("email.at", { "where" => "\0" }))

data/lib/runlight/routes.rb

@@ -26,6 +26,10 @@ module Runlight
   # - cms: the CMS that adds the script to every page, such as "WordPress", when Runlight runs inside one. The
   #   dashboard then says so in place of the steps to add the script, and pages of the same origin, the CMS's own
   #   admin, may show the whole dashboard in a frame. The WordPress, Drupal, and Craft plugins set it.
+  # - csrf: a callable returning a token the dashboard sends back with every change it makes, in an x-runlight-csrf
+  #   header, and the OAuth consent form in a csrf field, for an authorize that checks where a change comes from, as
+  #   a CMS checks its own forms. Asked for each time the dashboard or the form is shown. The WordPress plugin gives
+  #   a nonce.
   # - origin: the address people open the app at, such as https://example.com.
   # - ownHosts: a callable returning more names the dashboard is reached at.
   # - accountOf: a callable taking the Request and returning the account it comes from, or nil (internal, for the
@@ -182,6 +186,7 @@ module Runlight
       oauth["signIn"] = @sign_in if !@sign_in.nil? && @sign_in != ""
       oauth["accountOf"] = @account_of unless @account_of.nil?
       oauth["tokenMade"] = @token_made unless @token_made.nil?
+      oauth["csrf"] = options["csrf"] unless options["csrf"].nil?
       @oauth = oauth
     end
 
@@ -387,7 +392,7 @@ module Runlight
       # The dashboard's page, which holds no data: the API it calls checks access. `embed` is the dashboard inside a
       # CMS's admin pages: { "session", "origin" }, its session (empty once its ticket was used or ran out) and the
       # admin origin that frames it.
-      def dashboard(base, share = "", sign_out = "", geo_credit = false, accounts = false, sign_in = "", embed = nil, cms = "")
+      def dashboard(base, share = "", sign_out = "", geo_credit = false, accounts = false, sign_in = "", embed = nil, cms = "", csrf = "")
         b = escape_attr(base)
         hash = build_hash("dashboardHash")
         attributes = (share != "" ? " data-share=\"#{escape_attr(share)}\"" : "") +
@@ -396,6 +401,7 @@ module Runlight
                      (geo_credit ? ' data-geo-credit=""' : "") +
                      (accounts ? ' data-accounts=""' : "") +
                      (cms != "" ? " data-cms=\"#{escape_attr(cms)}\"" : "") +
+                     (csrf != "" ? " data-csrf=\"#{escape_attr(csrf)}\"" : "") +
                      (embed.nil? ? "" : " data-embed=\"#{escape_attr(embed["session"])}\" data-embed-origin=\"#{escape_attr(embed["origin"])}\"")
         "<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<meta name=\"robots\" content=\"noindex\">\n<title>Runlight</title>\n" \
           "<link rel=\"icon\" href=\"#{Brand.runlight_icon}\">\n" \
@@ -1258,7 +1264,7 @@ module Runlight
             "to" => to,
             "subject" => t.call("email.test.subject"),
             "text" => t.call("email.test.body", { "service" => name }),
-            "html" => "<img src=\"https://runlight.sh/icon-192.png\" width=\"48\" height=\"48\" alt=\"Runlight\" style=\"display:block;width:48px;height:48px;margin-bottom:24px;border:0;border-radius:10px\"><p style=\"font-family:sans-serif;font-size:15px\">#{escape_html(t.call("email.test.body", { "service" => name }))}</p>",
+            "html" => "<div role=\"img\" aria-label=\"Runlight\" style=\"width:48px;height:48px;margin-bottom:24px;border-radius:10px;background:#111827;color:#fff;font:700 26px/48px -apple-system,BlinkMacSystemFont,Helvetica,Arial,sans-serif;text-align:center\">R</div><p style=\"font-family:sans-serif;font-size:15px\">#{escape_html(t.call("email.test.body", { "service" => name }))}</p>",
           })
           # Counted once it went out, so a test that failed can be tried again as soon as the setting is fixed.
           @lock.synchronize { @sample_sent[tested] = @rl.now }
@@ -2730,7 +2736,7 @@ module Runlight
         # the page explains how to sign in when it is refused.
         # Inside a CMS, its admin, on this same origin, shows the whole dashboard in a frame; nothing else may.
         cms = @options["cms"].to_s
-        return Http::Response.new(dashboard(base, "", @sign_out || "", Js.truthy?(@options["geoCredit"]), !@web.nil?, @sign_in || "", nil, cms), status: 200, headers: {
+        return Http::Response.new(dashboard(base, "", @sign_out || "", Js.truthy?(@options["geoCredit"]), !@web.nil?, @sign_in || "", nil, cms, @options["csrf"].nil? ? "" : @options["csrf"].call.to_s), status: 200, headers: {
           "content-type" => "text/html; charset=utf-8",
           "cache-control" => "no-store",
           "content-security-policy" => cms != "" ? DASHBOARD_CSP.sub("frame-ancestors 'none'", "frame-ancestors 'self'") : DASHBOARD_CSP,

data/lib/runlight/version.rb

@@ -4,7 +4,7 @@ require "json"
 
 module Runlight
   # The gem's own version, which the release keeps equal to the npm package's.
-  GEM_VERSION = "0.3.0"
+  GEM_VERSION = "0.3.2"
 
   # The SDK's version and the HTTP API's, read from assets/build.json, which
   # scripts/ruby-assets.mts writes from the TypeScript SDK, so the two always

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: runlight
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.2
 platform: ruby
 authors:
 - Jon C. Phillips
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-10-24 00:00:00.000000000 Z
+date: 2026-10-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord