my-provider-dash-manager 0.4.1 → 0.6.0

package/README.md

@@ -1,10 +1,9 @@
 # My Provider Dash Manager
 
-**One desktop app for every cloud account you own.** Keep several Vercel, Netlify, Cloudflare,
-Railway, Render, Fly.io, Heroku, DigitalOcean, Supabase, Neon, GitHub, GitLab, npm, PyPI, Docker Hub,
-Hugging Face and Stripe accounts signed in at the same time, each in a fully isolated session, and
-switch between them instantly — the way a browser handles tabs, but built around *accounts* instead
-of pages.
+**One desktop app for every account you own.** Keep several Google, Microsoft, AWS, Vercel,
+Netlify, Cloudflare, Supabase, GitHub, npm, Stripe, Gmail, Outlook, Proton Mail (and 25 more) accounts
+signed in at the same time, each in a fully isolated session, and switch between them instantly — the
+way a browser handles tabs, but built around *accounts* instead of pages.
 
 <sub>Windows desktop app · Electron 43 · local-first · no telemetry, no account, no server ·
 source-available licence: free for personal and commercial use</sub>
@@ -73,6 +72,11 @@ Each provider lists its accounts; hovering one reveals open / sleep / close / fi
 
 ![A dashboard open in the app](docs/screenshots/dashboard.png)
 
+Browser controls appear in the strip while a tab is open: back, forward, reload, dashboard, and an
+address bar that navigates inside that account's own session.
+
+![Navigation bar with a Gmail sign-in open](docs/screenshots/navigation.png)
+
 **The top bar is only your open tabs** — filter them, or group them by provider with collapsible sections.
 Slept tabs stay in the strip (dimmed) and resume on click.
 
@@ -127,7 +131,10 @@ sessions, one place.
   hover actions: open, sleep, close, fill login, connect an API token, manage. Collapse any provider.
 - **Top bar — open tabs only.** A filter box and a group-by-provider toggle with collapsible groups.
 - **Home** is always one click (or `Esc`) away: a grid of every service and account with live status.
-- Keyboard: `Ctrl+W` sleep, `Ctrl+Shift+W` sleep all, `Ctrl+Tab` cycle, `Ctrl+1…9` jump.
+- **Browser controls** while a tab is open: back, forward, reload/stop, back-to-dashboard, and an
+  editable address bar that navigates inside that account's own session (http/https only).
+- Keyboard: `Ctrl+W` sleep, `Ctrl+Shift+W` sleep all, `Ctrl+Tab` cycle, `Ctrl+1…9` jump,
+  `Alt+Left`/`Alt+Right` back/forward, `Ctrl+R`/`F5` reload, `Alt+Home` dashboard, `Ctrl+L` address.
 
 ### Saved logins
 - **Remembers logins you type** inside an account tab, bound to *that* account, so two accounts on the
@@ -141,11 +148,26 @@ sessions, one place.
   account's login, and a saved password is never filled into a page outside the service's domains.
 
 ### Built-in services
-Seventeen services ship ready to use, grouped in the rail: **hosting** (Vercel, Netlify, Cloudflare,
-Railway, Render, Fly.io, Heroku, DigitalOcean), **data** (Supabase, Neon), **code and packages**
-(GitHub, GitLab, npm, PyPI, Docker Hub, Hugging Face) and **payments** (Stripe). Every login page is
-verified to load inside an isolated partition by `npm run smoke:services`. Anything else can be added
-by URL or as a plugin (below).
+Thirty-seven services ship ready to use, grouped by category. The rail and Home show only the ones
+you have accounts on; everything else sits one click away behind **Add account**, a searchable picker.
+
+| Category | Services |
+|---|---|
+| Hosting & deploy | Vercel, Netlify, Cloudflare, Railway, Render, Fly.io, Heroku, DigitalOcean |
+| Databases | Supabase, Neon |
+| Code & packages | GitHub, GitLab, npm, PyPI, Docker Hub, Hugging Face |
+| Payments | Stripe |
+| Google | Google Account, Gmail, Google Cloud, Firebase, Google Workspace Admin, Google Play Console, Google AI Studio |
+| Microsoft | Microsoft Account, Outlook, Azure, Microsoft 365 Admin |
+| Mail | Proton Mail, Zoho Mail, Fastmail, Yahoo Mail, Tuta Mail, iCloud Mail |
+| Cloud | AWS |
+| AI | OpenAI Platform, Claude Platform (Anthropic) |
+
+Every login page is verified to load inside an isolated partition, landing on a host the credential
+guard trusts, by `npm run smoke:services`. Google sign-in works directly in the app (verified against
+Google's own sign-in flow); "Continue with Google" buttons on *other* sites remain blocked by Google
+in embedded browsers, so use email/password or GitHub there. Anything else can be added by URL or as
+a plugin (below).
 
 ### API status
 Paste a read-only API token into an account and its Home card shows live status — project, app,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-provider-dash-manager",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "description": "Manage many accounts per cloud service (Vercel, Netlify, Supabase, Cloudflare, Railway, Render, GitHub) in one desktop app \u2014 isolated persistent sessions, one tab per account.",
   "main": "src/main.js",
   "scripts": {

package/src/main.js

@@ -58,8 +58,12 @@ function userData(name) { return userDataPath(name); }
 // Built-in curated services + user-added generic ones (Phase 2) + plugin manifests (Phase 3).
 let pluginServices = [];
 let pluginErrors = [];
+// Sign-in infrastructure the managed services depend on but that is not a credential host: the
+// ad-blocker must leave these alone (EasyList rules hit e.g. accounts.youtube.com/CheckConnection,
+// which Google sign-in loads in an iframe). This list grants NO password trust — see serviceHosts.
+const AUTH_INFRA_HOSTS = ['accounts.youtube.com', 'accounts.google.com', 'gstatic.com', 'login.microsoftonline.com', 'login.live.com', 'msftauth.net', 'msauth.net', 'appleid.cdn-apple.com'];
 function refreshManagedHosts() {
-  const hosts = new Set();
+  const hosts = new Set(AUTH_INFRA_HOSTS);
   for (const s of allServices()) for (const h of serviceHosts(s.key)) hosts.add(h);
   content.setManagedHosts([...hosts]);
 }
@@ -266,14 +270,20 @@ class ViewManager {
     });
     const onNav = (_e, url2) => {
       tab.url = url2;
-      // conservative sign-in heuristic: sitting on the service's login page means not signed in
-      tab.lastState = url2.startsWith(service.loginUrl) ? 'signin' : 'ok';
+      // conservative sign-in heuristic: sitting on the service's login page means not signed in.
+      // When the service authenticates on a separate host (accounts.google.com, login.live.com,
+      // id.heroku.com…) any URL on that host counts as "signing in".
+      const loginHost = creds.hostOf(service.loginUrl);
+      const onAuthHost = loginHost && loginHost !== creds.hostOf(service.dashboardUrl) && creds.hostOf(url2) === loginHost;
+      tab.lastState = (url2.startsWith(service.loginUrl) || onAuthHost) ? 'signin' : 'ok';
       const a = findAccount(svc, id);
       if (a) { a.lastState = tab.lastState; store.save(); }
       this.emitState();
     };
     view.webContents.on('did-navigate', onNav);
     view.webContents.on('did-navigate-in-page', onNav); // dashboards route client-side (pushState) — must track too
+    view.webContents.on('did-start-loading', () => this.emitState());
+    view.webContents.on('did-stop-loading', () => this.emitState());
     view.webContents.on('render-process-gone', () => {
       console.error(`renderer gone: ${key}`);
       this.hibernate(key); // drop the dead view; partition survives, reopening rehydrates
@@ -431,12 +441,43 @@ class ViewManager {
           key: k, svc: s.svc, id: s.id, label: a.label || s.id, colorIdx: a.colorIdx || 0,
           title: t ? t.title : '', url: t ? t.url : s.url,
           live: !!t, visible: t ? t.visible : false,
+          canGoBack: !!(t && !t.view.webContents.isDestroyed() && t.view.webContents.navigationHistory.canGoBack()),
+          canGoForward: !!(t && !t.view.webContents.isDestroyed() && t.view.webContents.navigationHistory.canGoForward()),
+          loading: !!(t && !t.view.webContents.isDestroyed() && t.view.webContents.isLoading()),
           lastState: t ? t.lastState : (a.lastState || 'unknown'),
         };
       }),
     });
   }
 
+  // Browser-style navigation for the ACTIVE tab. `navigate` accepts http(s) only — the address bar
+  // must never become a way to launch other schemes from the chrome.
+  nav(action, url) {
+    const t = this.tabs.get(this.activeKey);
+    if (!t || t.view.webContents.isDestroyed()) return false;
+    const wc = t.view.webContents;
+    switch (action) {
+      case 'back': if (wc.navigationHistory.canGoBack()) wc.navigationHistory.goBack(); break;
+      case 'forward': if (wc.navigationHistory.canGoForward()) wc.navigationHistory.goForward(); break;
+      case 'reload': wc.reload(); break;
+      case 'stop': wc.stop(); break;
+      case 'dashboard': { const svc = serviceByKey(t.svc); if (svc) wc.loadURL(svc.dashboardUrl).catch(() => {}); break; }
+      case 'navigate': {
+        let target = String(url || '').trim();
+        if (!target) return false;
+        if (!/^[a-z][a-z0-9+.-]*:/i.test(target)) target = `https://${target}`; // "example.com/path" → https
+        let parsed;
+        try { parsed = new URL(target); } catch { return false; }
+        if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') return false;
+        wc.loadURL(parsed.href).catch(err => console.error(`navigate failed ${this.activeKey}:`, err.message));
+        break;
+      }
+      default: return false;
+    }
+    this.emitState();
+    return true;
+  }
+
   snapshotMemory() {
     // Summing workingSetSize over-reports badly: Chromium maps shared pages (the framework binary and
     // friends) into every process, so they are counted once per process — with 10 processes that read
@@ -567,6 +608,25 @@ async function runSmoke() {
   const mem = vm.snapshotMemory();
   check('live-tabs', mem.liveTabs === 3, `${mem.totalMB}MB`);
 
+  // browser-style navigation on the active tab (address bar, back, dashboard) — http(s) only
+  const key = accountKey('netlify', 'a1');
+  vm.activate(key);
+  const urlOf = () => vm.tabs.get(key).view.webContents.getURL();
+  const waitFor = async (pred, ms = 15000) => { const t0 = Date.now(); while (Date.now() - t0 < ms) { if (pred()) return true; await sleep(250); } return pred(); };
+  check('nav-rejects-javascript-scheme', vm.nav('navigate', 'javascript:alert(1)') === false && !urlOf().startsWith('javascript:'));
+  check('nav-rejects-file-scheme', vm.nav('navigate', 'file:///C:/Windows') === false && !urlOf().startsWith('file:'));
+  check('nav-rejects-empty', vm.nav('navigate', '   ') === false);
+  vm.nav('navigate', 'example.com'); // bare host → https
+  check('nav-address-goes-there', await waitFor(() => /^https:\/\/example\.com\/?$/.test(urlOf())), urlOf());
+  check('nav-can-go-back', vm.tabs.get(key).view.webContents.navigationHistory.canGoBack());
+  vm.nav('back');
+  check('nav-back-returns', await waitFor(() => /netlify\.com/.test(urlOf())), urlOf());
+  vm.nav('navigate', 'https://example.org/');
+  await waitFor(() => /example\.org/.test(urlOf()));
+  vm.nav('dashboard');
+  check('nav-dashboard-returns-to-service', await waitFor(() => /app\.netlify\.com/.test(urlOf())), urlOf());
+  check('nav-noop-without-active-tab', (() => { const k = vm.activeKey; vm.activeKey = null; const r = vm.nav('reload'); vm.activeKey = k; return r === false; })());
+
   fs.writeFileSync(path.join(__dirname, '..', 'smoke-report.json'), JSON.stringify(results, null, 2));
   app.exit(results.checks.every(c => c.ok) ? 0 : 1);
 }
@@ -609,8 +669,9 @@ async function runSmokeServices() {
   const check = (name, ok, detail = '') => { results.checks.push({ name, ok, detail }); console.log(`[smoke:services] ${ok ? 'PASS' : 'FAIL'} ${name} ${detail}`); };
   const keys = SERVICES.map(s => s.key);
   check('unique-keys', new Set(keys).size === keys.length, `${keys.length} services`);
-  check('definitions-complete', SERVICES.every(s => s.name && /^https:\/\//.test(s.dashboardUrl) && /^https:\/\//.test(s.loginUrl) && /^https:\/\//.test(s.signupUrl) && /^#[0-9a-f]{6}$/i.test(s.color) && ['ok', 'warn', 'one-per-person'].includes(s.multiAccountPolicy)));
+  check('definitions-complete', SERVICES.every(s => s.name && /^https:\/\//.test(s.dashboardUrl) && /^https:\/\//.test(s.loginUrl) && /^https:\/\//.test(s.signupUrl) && /^#[0-9a-f]{6}$/i.test(s.color) && ['ok', 'warn', 'one-per-person'].includes(s.multiAccountPolicy) && typeof s.category === 'string' && s.category));
   check('partition-ids-safe', SERVICES.every(s => /^[a-z0-9_-]+$/.test(s.key)), keys.join(','));
+  check('extra-hosts-are-specific', SERVICES.every(s => (s.extraHosts || []).every(h => /^[a-z0-9.-]+\.[a-z]+$/.test(h) && h.split('.').length >= 3)));
   check('extra-hosts-in-guard', serviceHosts('dockerhub').includes('login.docker.com') && originAllowed('dockerhub', 'https://login.docker.com/u/login?x=1') && !originAllowed('dockerhub', 'https://evil.example/'));
 
   const win = new BaseWindow({ width: 1280, height: 800, show: false });
@@ -929,8 +990,20 @@ function runInteractive(captureMode = false) {
         })),
       ],
     },
+    {
+      label: 'Navigate',
+      submenu: [
+        { label: 'Back', accelerator: 'Alt+Left', click: () => vm.nav('back') },
+        { label: 'Forward', accelerator: 'Alt+Right', click: () => vm.nav('forward') },
+        { label: 'Reload', accelerator: 'CmdOrCtrl+R', click: () => vm.nav('reload') },
+        { label: 'Reload', accelerator: 'F5', click: () => vm.nav('reload') },
+        { label: 'Dashboard', accelerator: 'Alt+Home', click: () => vm.nav('dashboard') },
+        { type: 'separator' },
+        { label: 'Focus Address Bar', accelerator: 'CmdOrCtrl+L', click: () => { if (win.webContents && !win.webContents.isDestroyed()) win.webContents.send('focus-address'); } },
+      ],
+    },
     { label: 'Edit', submenu: [{ role: 'copy' }, { role: 'paste' }, { role: 'selectAll' }] },
-    { label: 'View', submenu: [{ role: 'reload' }, { role: 'forceReload' }, { type: 'separator' }, { role: 'zoomIn' }, { role: 'zoomOut' }, { role: 'zoomReset' }, { type: 'separator' }, { role: 'toggleDevTools' }] },
+    { label: 'View', submenu: [{ role: 'zoomIn' }, { role: 'zoomOut' }, { role: 'zoomReset' }, { type: 'separator' }, { role: 'toggleDevTools' }] },
   ]);
   Menu.setApplicationMenu(menu);
 
@@ -980,6 +1053,7 @@ function runInteractive(captureMode = false) {
     return key;
   });
   ipcMain.handle('activate-tab', (_e, key) => vm.activate(key));
+  ipcMain.handle('nav', (_e, action, url) => vm.nav(String(action || ''), url));
   ipcMain.handle('sleep-tab', (_e, key) => vm.hibernate(key));
   ipcMain.handle('sleep-all', () => vm.hibernateAll());
   ipcMain.handle('update-account', (_e, svc, id, patch) => vm.updateAccount(svc, id, patch || {}));