@pmate/cli 0.30.1 → 0.31.0

package/dist/templates/electron/main.cjs

@@ -0,0 +1,61 @@
+const { app, BrowserWindow, session, shell, Menu } = require('electron')
+const path = require('node:path')
+const { createResourceHandler } = require('./resources.cjs')
+const config = require('./desktop-config.json')
+const manifest = require('./resource-manifest.json')
+app.setName(config.productName)
+// Stable across installer versions; separate from every other packaged PMate app.
+app.setPath('userData', path.join(app.getPath('appData'), config.bundleId))
+const allowedNavigation = new Set([config.origin, ...config.authOrigins])
+let mainWindow
+function isAllowed(raw) { try { return allowedNavigation.has(new URL(raw).origin) } catch { return false } }
+function external(raw) {
+  try { if (['https:', 'http:', 'mailto:'].includes(new URL(raw).protocol)) void shell.openExternal(raw) } catch { /* Invalid links are not executable targets. */ }
+}
+function restrict(window) {
+  window.webContents.on('will-navigate', (event, url) => { if (!isAllowed(url)) { event.preventDefault(); external(url) } })
+  window.webContents.on('will-redirect', (event, url) => { if (!isAllowed(url)) event.preventDefault() })
+  window.webContents.on('will-attach-webview', event => event.preventDefault())
+  window.webContents.setWindowOpenHandler(({ url }) => {
+    if (!isAllowed(url)) { external(url); return { action: 'deny' } }
+    return { action: 'allow', overrideBrowserWindowOptions: { autoHideMenuBar: true, webPreferences: { session: window.webContents.session, nodeIntegration: false, contextIsolation: true, sandbox: true, webSecurity: true } } }
+  })
+  window.webContents.on('did-create-window', child => restrict(child))
+}
+function createWindow() {
+  mainWindow = new BrowserWindow({ width: 1180, height: 820, minWidth: 380, minHeight: 540, title: config.productName, backgroundColor: '#f6f8fb', webPreferences: { partition: 'persist:desktop', nodeIntegration: false, contextIsolation: true, sandbox: true, webSecurity: true } })
+  restrict(mainWindow)
+  mainWindow.webContents.on('did-fail-load', (_event, code, _description, url, mainFrame) => {
+    if (mainFrame && code !== -3 && url !== `${config.origin}/_desktop/offline`) void mainWindow.loadURL(`${config.origin}/_desktop/offline`)
+  })
+  void mainWindow.loadURL(config.origin)
+  mainWindow.on('closed', () => { mainWindow = null })
+}
+if (!app.requestSingleInstanceLock()) app.quit()
+else {
+  app.on('second-instance', () => { if (mainWindow) { if (mainWindow.isMinimized()) mainWindow.restore(); mainWindow.focus() } })
+  app.whenReady().then(() => {
+    const desktopSession = session.fromPartition('persist:desktop')
+    const resources = createResourceHandler(path.join(__dirname, 'renderer'), config.origin, manifest)
+    desktopSession.protocol.handle('https', request => {
+      if (request.url === `${config.origin}/_desktop/offline`) {
+        const escape = text => text.replace(/[&<>"']/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c])
+        return new Response(`<!doctype html><html><head><meta charset="utf-8"><title>${escape(config.productName)}</title></head><body style="font:18px system-ui;max-width:560px;margin:15vh auto;padding:24px"><h1>${escape(config.productName)}</h1><p>Connection unavailable. Your app is installed locally; sign-in and messages need an internet connection.</p><form action="/"><button style="padding:12px 24px">Try again</button></form></body></html>`, { headers: { 'content-type': 'text/html; charset=utf-8', 'content-security-policy': "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'" } })
+      }
+      return resources(request) ?? desktopSession.fetch(request, { bypassCustomProtocolHandlers: true })
+    })
+    desktopSession.setPermissionRequestHandler((contents, permission, callback, details) => {
+      let trusted = false
+      try { trusted = !!contents && new URL(contents.getURL()).origin === config.origin } catch {}
+      callback(Boolean(trusted && permission === 'media' && details.mediaTypes?.length && details.mediaTypes.every(type => type === 'audio')))
+    })
+    desktopSession.setPermissionCheckHandler((_contents, permission, origin, details) => origin === config.origin && permission === 'media' && details.mediaType === 'audio')
+    Menu.setApplicationMenu(Menu.buildFromTemplate([
+      { role: 'appMenu' }, { role: 'editMenu' }, { role: 'viewMenu' }, { role: 'windowMenu' },
+      { label: config.productName, submenu: [{ label: 'Back to app', click: () => { if (!mainWindow) createWindow(); else void mainWindow.loadURL(config.origin) } }] },
+    ]))
+    createWindow()
+    app.on('activate', () => { if (!mainWindow) createWindow() })
+  }).catch(error => { console.error('Desktop startup failed:', error.message); app.exit(1) })
+  app.on('window-all-closed', () => { if (process.platform !== 'darwin') app.quit() })
+}

package/dist/templates/electron/resources.cjs

@@ -0,0 +1,32 @@
+const fs = require('node:fs')
+const path = require('node:path')
+const crypto = require('node:crypto')
+const TYPES = { '.html': 'text/html; charset=utf-8', '.js': 'text/javascript', '.mjs': 'text/javascript', '.css': 'text/css', '.json': 'application/json', '.svg': 'image/svg+xml', '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.webp': 'image/webp', '.ico': 'image/x-icon', '.woff': 'font/woff', '.woff2': 'font/woff2', '.ttf': 'font/ttf', '.wasm': 'application/wasm', '.mp3': 'audio/mpeg', '.mp4': 'video/mp4' }
+function createResourceHandler(root, origin, manifest) {
+  // Reject a stale or altered renderer before displaying it.
+  for (const [file, digest] of Object.entries(manifest)) {
+    if (file.split(/[\\/]/).includes('..') || path.isAbsolute(file)) throw new Error('Invalid resource manifest')
+    if (crypto.createHash('sha256').update(fs.readFileSync(path.join(root, file))).digest('hex') !== digest) throw new Error(`Resource integrity check failed: ${file}`)
+  }
+  return (request) => {
+    const url = new URL(request.url)
+    if (url.origin !== origin) return null
+    if (!['GET', 'HEAD'].includes(request.method)) return new Response('Method not allowed', { status: 405 })
+    let name
+    try { name = decodeURIComponent(url.pathname).slice(1) } catch { return new Response('Invalid path', { status: 400 }) }
+    if (name.includes('\\') || name.includes('\0') || name.split('/').some(p => p === '..' || p === '.')) return new Response('Invalid path', { status: 400 })
+    // Exact files come from the build manifest. Only extensionless document routes get the SPA shell.
+    if (!Object.hasOwn(manifest, name)) {
+      if (!path.extname(name) && request.headers.get('sec-fetch-dest') === 'document') name = 'index.html'
+      else if (!name) name = 'index.html'
+      else return new Response('Resource not found', { status: 404 })
+    }
+    const bytes = fs.readFileSync(path.join(root, name))
+    return new Response(request.method === 'HEAD' ? null : bytes, { headers: {
+      'content-type': TYPES[path.extname(name)] || 'application/octet-stream',
+      'content-length': String(bytes.length), 'x-content-type-options': 'nosniff',
+      'content-security-policy': "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src https: wss:; media-src 'self' blob: https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'",
+    } })
+  }
+}
+module.exports = { createResourceHandler }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pmate/cli",
-  "version": "0.30.1",
+  "version": "0.31.0",
   "description": "CLI utilities for the pMate project",
   "license": "MIT",
   "bin": {