@proton-app/main 0.1.5 → 0.1.6

package/dist/communication.d.ts

@@ -1,4 +1,3 @@
-import { type IpcRenderer } from "electron";
 import Storage from "electron-store";
 export declare function setupAppIpc<T extends Record<string, any>>(storage: Storage<T>): void;
 export type IpcSchema = Record<string, {
@@ -36,11 +35,6 @@ export interface AppBridge {
     setValue: <T>(key: string, value: T) => T;
     syncAuth: (accessToken: string) => void;
 }
-type IpcClient = Pick<IpcRenderer, "send" | "invoke">;
-/**
- * Creates the standard application controls exposed by an Electron preload.
- */
-export declare function createAppBridge(ipc: IpcClient): AppBridge;
 type KebabToCamel<S extends string> = S extends `${infer A}-${infer B}` ? `${A}${Capitalize<KebabToCamel<B>>}` : S;
 type NamespaceApi<S extends IpcSchema> = {
     [K in keyof S & string as KebabToCamel<K>]: (input: S[K]["input"]) => Promise<S[K]["result"]>;

package/dist/communication.js

@@ -2,7 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.APP_CHANNELS = exports.IpcManager = void 0;
 exports.setupAppIpc = setupAppIpc;
-exports.createAppBridge = createAppBridge;
 exports.createIpcManager = createIpcManager;
 const electron_1 = require("electron");
 const files_1 = require("./files");
@@ -65,34 +64,6 @@ exports.APP_CHANNELS = {
     setValue: "app:set-value",
     syncAuth: "app:sync-auth"
 };
-/**
- * Creates the standard application controls exposed by an Electron preload.
- */
-function createAppBridge(ipc) {
-    return {
-        minimize: () => {
-            ipc.send(exports.APP_CHANNELS.minimize);
-        },
-        close: () => {
-            ipc.send(exports.APP_CHANNELS.close);
-        },
-        choosePath: () => {
-            return ipc.invoke(exports.APP_CHANNELS.choosePath);
-        },
-        openLink: (url) => {
-            ipc.send(exports.APP_CHANNELS.openLink, url);
-        },
-        getValue: (key) => {
-            return ipc.invoke(exports.APP_CHANNELS.getValue, key);
-        },
-        setValue: (key, value) => {
-            return ipc.invoke(exports.APP_CHANNELS.setValue, key, value);
-        },
-        syncAuth: (accessToken) => {
-            return ipc.send(exports.APP_CHANNELS.syncAuth, accessToken);
-        }
-    };
-}
 function createIpcManager() {
     return (namespace) => new IpcManager(namespace);
 }

package/dist/csp.d.ts

@@ -1,17 +1,3 @@
-/**
- * Content Security Policies.
- *
- * Production:
- *  - Restrict all resources to the app bundle (`'self'`) by default.
- *  - Allow network access only to Supabase.
- *  - Enable safe playback of audio/media via `blob:` and `data:` URLs.
- *  - Explicitly disable dangerous features such as plugins and framing.
- *
- * Development:
- *  - Relax restrictions to support hot reload, devtools, and local servers.
- *  - Allow inline scripts and eval (required by some bundlers/dev servers).
- *  - Permit WebSocket connections to localhost.
-**/
-export declare const csp: string;
-export declare const devCsp: string;
-export declare const setupCspPolicy: () => void;
+export declare const buildCsp: (connectSrc?: string[]) => string;
+export declare const buildDevCsp: (connectSrc?: string[]) => string;
+export declare const setupCspPolicy: (connectSrc?: string[]) => void;

package/dist/csp.js

@@ -1,50 +1,40 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.setupCspPolicy = exports.devCsp = exports.csp = void 0;
+exports.setupCspPolicy = exports.buildDevCsp = exports.buildCsp = void 0;
 const electron_1 = require("electron");
-const ts_1 = require("@bouko/ts");
-/**
- * Content Security Policies.
- *
- * Production:
- *  - Restrict all resources to the app bundle (`'self'`) by default.
- *  - Allow network access only to Supabase.
- *  - Enable safe playback of audio/media via `blob:` and `data:` URLs.
- *  - Explicitly disable dangerous features such as plugins and framing.
- *
- * Development:
- *  - Relax restrictions to support hot reload, devtools, and local servers.
- *  - Allow inline scripts and eval (required by some bundlers/dev servers).
- *  - Permit WebSocket connections to localhost.
-**/
-exports.csp = "default-src 'self'; " +
+const buildCsp = (connectSrc = []) => "default-src 'self'; " +
     "script-src 'self'; " +
     "style-src 'self'; " +
     "img-src 'self' data: https:; " +
     "font-src 'self' data:; " +
-    `connect-src 'self' blob: ${(0, ts_1.getEnv)("BASE_URL")} ${(0, ts_1.getEnv)("DB_URL")}; ` +
+    `connect-src ${["'self'", "blob:", ...connectSrc].join(" ")}; ` +
     "media-src 'self' blob: data:; " +
     "worker-src 'self' blob:; " +
     "object-src 'none'; " +
     "base-uri 'self'; " +
     "frame-ancestors 'none';";
-exports.devCsp = "default-src 'self' http://localhost:* blob: data:; " +
+exports.buildCsp = buildCsp;
+const buildDevCsp = (connectSrc = []) => "default-src 'self' http://localhost:* blob: data:; " +
     "script-src 'self' 'unsafe-eval' 'unsafe-inline' http://localhost:*; " +
     "style-src 'self' 'unsafe-inline' http://localhost:*; " +
     "img-src 'self' data: blob: http://localhost:* https:; " +
     "media-src 'self' blob: data:; " +
     "worker-src 'self' blob: http://localhost:*; " +
-    `connect-src 'self' blob: http://localhost:* ws://localhost:* ${(0, ts_1.getEnv)("BASE_URL")} ${(0, ts_1.getEnv)("DB_URL")};`;
-const setupCspPolicy = () => electron_1.session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
-    if (details.url.startsWith("file://") || details.url.startsWith("http://localhost")) {
-        callback({
-            responseHeaders: {
-                ...details.responseHeaders,
-                "Content-Security-Policy": [!electron_1.app.isPackaged ? exports.devCsp : exports.csp],
-            },
-        });
-        return;
-    }
-    callback({ responseHeaders: details.responseHeaders });
-});
+    `connect-src ${["'self'", "blob:", "http://localhost:*", "ws://localhost:*", ...connectSrc].join(" ")};`;
+exports.buildDevCsp = buildDevCsp;
+const setupCspPolicy = (connectSrc = []) => {
+    const policy = electron_1.app.isPackaged ? (0, exports.buildCsp)(connectSrc) : (0, exports.buildDevCsp)(connectSrc);
+    electron_1.session.defaultSession.webRequest.onHeadersReceived((details, callback) => {
+        if (details.url.startsWith("file://") || details.url.startsWith("http://localhost")) {
+            callback({
+                responseHeaders: {
+                    ...details.responseHeaders,
+                    "Content-Security-Policy": [policy],
+                },
+            });
+            return;
+        }
+        callback({ responseHeaders: details.responseHeaders });
+    });
+};
 exports.setupCspPolicy = setupCspPolicy;

package/dist/setup.d.ts

@@ -2,5 +2,6 @@ import Storage from "electron-store";
 export type Options = {
     width: number;
     height: number;
+    connectSrc?: string[];
 };
 export declare function setupApp<T extends Record<string, any>>(app: Electron.App, storage: Storage<T>, opts: Options): void;

package/dist/setup.js

@@ -28,8 +28,8 @@ function setupApp(app, storage, opts) {
         return mainWindow;
     }
     app.on("ready", () => {
+        (0, csp_1.setupCspPolicy)(opts.connectSrc);
         createWindow();
-        (0, csp_1.setupCspPolicy)();
     });
     app.on("activate", () => {
         if (electron_1.BrowserWindow.getAllWindows().length === 0)

package/package.json

@@ -1,7 +1,7 @@
 {
 
   "name": "@proton-app/main",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "",
   "keywords": [],
   "author": "",