npm - @sandprivacy/sandgate - Versions diffs - 0.1.2 → 0.1.3 - Mend

@sandprivacy/sandgate 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/relay/pwa-page.js CHANGED Viewed

@@ -13,18 +13,28 @@ import { GLYPH_SVG_RECTS } from "./icons.js";
  * (copy → install → paste); Android installs in place via
  * beforeinstallprompt and shares storage with the browser.
  */
-export const PWA_MANIFEST = JSON.stringify({
-    name: "sandgate",
-    short_name: "sandgate",
-    start_url: "/",
-    display: "standalone",
-    background_color: "#141210",
-    theme_color: "#141210",
-    icons: [
-        { src: "/icon-192.png", sizes: "192x192", type: "image/png" },
-        { src: "/icon-512.png", sizes: "512x512", type: "image/png" },
-    ],
-});
+/**
+ * Two manifests on purpose. Chrome requires start_url for installability
+ * and shares storage with the installed app, so Android gets "/". iOS home
+ * -screen apps have isolated storage, but WITHOUT a manifest start_url iOS
+ * captures the CURRENT page URL — fragment included. The page keeps the
+ * pairing link in the address bar on iOS Safari, so Add to Home Screen
+ * produces an app that opens already paired. No copy-paste.
+ */
+export function pwaManifest(opts) {
+    return JSON.stringify({
+        name: "sandgate",
+        short_name: "sandgate",
+        ...(opts.includeStartUrl ? { start_url: "/" } : {}),
+        display: "standalone",
+        background_color: "#141210",
+        theme_color: "#141210",
+        icons: [
+            { src: "/icon-192.png", sizes: "192x192", type: "image/png" },
+            { src: "/icon-512.png", sizes: "512x512", type: "image/png" },
+        ],
+    });
+}
 export const PWA_SW = `
 self.addEventListener("install", function () { self.skipWaiting(); });
 self.addEventListener("activate", function (e) { e.waitUntil(self.clients.claim()); });
@@ -186,6 +196,16 @@ export const PWA_HTML = `<!doctype html>
     color: var(--ink); font: 14px ui-monospace, monospace;
   }
   .setup input:focus { outline: 2px solid var(--accent); outline-offset: -1px; }
+  .hist { margin-top: 30px; }
+  .hist h3 { font-size: 11px; letter-spacing: .08em; text-transform: uppercase; color: var(--soft); margin: 0 0 8px; }
+  .hrow { display: flex; gap: 10px; align-items: baseline; padding: 8px 0; border-bottom: 1px solid var(--line); font-size: 13.5px; }
+  .hrow .time { color: var(--soft); font-variant-numeric: tabular-nums; font-size: 12px; min-width: 74px; }
+  .hrow .t { flex: 1; color: #cfc6b2; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+  .hrow .d { font-weight: 650; font-size: 10.5px; letter-spacing: .05em; text-transform: uppercase; }
+  .d.approved { color: #7fbf9a; }
+  .d.denied { color: #d98a76; }
+  .d.expired { color: var(--soft); }
 </style>
 </head>
 <body>
@@ -197,7 +217,7 @@ export const PWA_HTML = `<!doctype html>
   </div>
   <div class="pill warn" id="status">starting</div>
 </header>
-<main><div id="banner"></div><div id="list"></div></main>
+<main><div id="banner"></div><div id="list"></div><div id="hist"></div></main>
 <script>
 (function () {
   var PAIR_KEY = "sandgate_pair";
@@ -240,7 +260,13 @@ export const PWA_HTML = `<!doctype html>
   var pair = parsePairing(location.hash);
   if (pair) {
     try { localStorage.setItem(PAIR_KEY, JSON.stringify(pair)); } catch (e) {}
-    history.replaceState(null, "", location.pathname);
+    // iOS Safari (not installed): KEEP the pairing link in the address bar.
+    // With no start_url in the Apple manifest, Add to Home Screen captures
+    // this exact URL — fragment included — so the installed app opens
+    // already paired despite iOS's isolated storage.
+    if (!(isIOS && !standalone)) {
+      history.replaceState(null, "", location.pathname);
+    }
   } else {
     try { pair = JSON.parse(localStorage.getItem(PAIR_KEY)); } catch (e) {}
   }
@@ -282,16 +308,10 @@ export const PWA_HTML = `<!doctype html>
     if (isIOS) {
       b.innerHTML =
         '<h2>Install sandgate to get push notifications</h2>' +
-        '<ol><li>Tap the button below to copy your pairing link</li>' +
-        '<li>Tap Share, then "Add to Home Screen"</li>' +
-        '<li>Open sandgate from your home screen and paste the link</li></ol>' +
-        '<button class="act" id="copyLink">Copy pairing link</button>';
+        '<ol><li>Tap Share (the square with an arrow)</li>' +
+        '<li>Choose "Add to Home Screen"</li>' +
+        '<li>Open sandgate from your home screen — your pairing carries over</li></ol>';
       bannerEl.textContent = ""; bannerEl.appendChild(b);
-      document.getElementById("copyLink").addEventListener("click", function () {
-        navigator.clipboard.writeText(pairLink).then(function () {
-          document.getElementById("copyLink").textContent = "Copied — now: Share → Add to Home Screen";
-        });
-      });
     } else {
       b.innerHTML =
         '<h2>Install sandgate to get push notifications</h2>' +
@@ -392,6 +412,47 @@ export const PWA_HTML = `<!doctype html>
   setInterval(function () { if (!document.hidden) fetchPending(); }, 45000); // safety net
   document.addEventListener("visibilitychange", function () { if (!document.hidden) fetchPending(); });
+  // --- local decision history (on-device only; synced history is a paid
+  // --- gateway feature, not the PWA's business) ----------------------------
+  var HIST_KEY = "sandgate_history";
+  var histEl = document.getElementById("hist");
+  function loadHist() {
+    try { return JSON.parse(localStorage.getItem(HIST_KEY)) || []; } catch (e) { return []; }
+  }
+  function recordHist(title, decision) {
+    var entries = loadHist();
+    entries.unshift({ t: title, d: decision, ts: Date.now() });
+    entries = entries.slice(0, 30);
+    try { localStorage.setItem(HIST_KEY, JSON.stringify(entries)); } catch (e) {}
+    renderHist();
+  }
+  function histTime(ts) {
+    var d = new Date(ts), now = new Date();
+    var hm = ("0" + d.getHours()).slice(-2) + ":" + ("0" + d.getMinutes()).slice(-2);
+    if (d.toDateString() === now.toDateString()) return hm;
+    return ("0" + d.getDate()).slice(-2) + "/" + ("0" + (d.getMonth() + 1)).slice(-2) + " " + hm;
+  }
+  function renderHist() {
+    var entries = loadHist();
+    histEl.textContent = "";
+    if (!entries.length) return;
+    var section = document.createElement("div");
+    section.className = "hist";
+    var h = document.createElement("h3");
+    h.textContent = "Recent — this device";
+    section.appendChild(h);
+    entries.forEach(function (entry) {
+      var row = document.createElement("div"); row.className = "hrow";
+      var time = document.createElement("span"); time.className = "time"; time.textContent = histTime(entry.ts);
+      var t = document.createElement("span"); t.className = "t"; t.textContent = entry.t;
+      var d = document.createElement("span"); d.className = "d " + entry.d; d.textContent = entry.d;
+      row.appendChild(time); row.appendChild(t); row.appendChild(d);
+      section.appendChild(row);
+    });
+    histEl.appendChild(section);
+  }
+  renderHist();
   // --- approval cards: stable DOM, in-place countdowns ---------------------
   var cards = {}; // requestId -> {el, leftEl, fillEl, barEl, rowEl, req, done}
   var emptyEl = null;
@@ -466,6 +527,7 @@ export const PWA_HTML = `<!doctype html>
         c.rowEl.remove();
         c.leftEl.textContent = "expired — denied";
         c.fillEl.style.width = "0%";
+        recordHist(c.req.title, "expired");
       }
       return;
     }
@@ -495,7 +557,11 @@ export const PWA_HTML = `<!doctype html>
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({ pairId: pair.pairId, requestId: id, payload: payload }),
       });
-      if (cards[id]) { cards[id].el.remove(); delete cards[id]; }
+      if (cards[id]) {
+        recordHist(cards[id].req.title, cls === "ok" ? "approved" : "denied");
+        cards[id].el.remove();
+        delete cards[id];
+      }
       ensureEmpty(Object.keys(cards).length === 0);
     };
     return b;

package/dist/relay/server.js CHANGED Viewed

@@ -2,7 +2,7 @@ import { createServer } from "node:http";
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import webpush from "web-push";
-import { PWA_HTML, PWA_SW, PWA_MANIFEST } from "./pwa-page.js";
+import { PWA_HTML, PWA_SW, pwaManifest } from "./pwa-page.js";
 import { ICON_SVG, iconPng } from "./icons.js";
 const MAX_BODY = 64 * 1024;
 const REQUEST_TTL_MS = 30 * 60 * 1000;
@@ -91,8 +91,12 @@ export async function startRelay(opts) {
                 return res.end(PWA_SW);
             }
             if (req.method === "GET" && url.pathname === "/manifest.webmanifest") {
-                res.writeHead(200, { "Content-Type": "application/manifest+json" });
-                return res.end(PWA_MANIFEST);
+                const isApple = /iPhone|iPad|iPod/.test(req.headers["user-agent"] ?? "");
+                res.writeHead(200, {
+                    "Content-Type": "application/manifest+json",
+                    Vary: "User-Agent",
+                });
+                return res.end(pwaManifest({ includeStartUrl: !isApple }));
             }
             if (req.method === "GET" && url.pathname === "/icon.svg") {
                 res.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "max-age=86400" });

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@sandprivacy/sandgate",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "The human gateway for AI agents — approvals, 2FA codes and email verification, self-hosted. Your agent asks; you decide; secrets never touch the LLM.",
   "license": "AGPL-3.0-only",
   "type": "module",