pithos/desktop/main.cjs

// Pithos desktop: an Electron window over the same control server the web
// console runs. The server binds a random loopback port and the window signs
// in with the one-time secret, so nothing else on the machine can drive it.

const { app, BrowserWindow, shell, Menu, dialog } = require('electron');
const path = require('node:path');
const { pathToFileURL } = require('node:url');

let pithos;
let win;

// Taskbar pins and notifications group under Pithos, not Electron.
if (process.platform === 'win32') app.setAppUserModelId('st.silentmode.pithos');

if (!app.requestSingleInstanceLock()) {
  app.quit();
} else {
  app.on('second-instance', () => {
    if (win) { if (win.isMinimized()) win.restore(); win.focus(); }
  });
  app.whenReady().then(start).catch((err) => {
    dialog.showErrorBox('Pithos failed to start', String(err?.stack || err));
    app.quit();
  });
}

async function start() {
  const { createPithos } = await import(pathToFileURL(path.join(__dirname, '..', 'core', 'server.js')).href);
  pithos = await createPithos({
    host: '127.0.0.1',
    port: 0,
    hostName: 'desktop',
    configFile: process.env.S3D_CONFIG_FILE || undefined,
    // The pinned s3d release installs here, outside the (read-only) app bundle.
    binDir: path.join(app.getPath('userData'), 'bin'),
    openExternal: (url) => shell.openExternal(url),
    // The pithos.sia website's "Open my Pithos" lands here; the user decides.
    confirmBrowserOpen: async () => {
      if (!win) return false;
      if (win.isMinimized()) win.restore();
      win.show();
      win.focus();
      const r = await dialog.showMessageBox(win, {
        type: 'question',
        buttons: ['Open in browser', 'Cancel'],
        defaultId: 1,
        cancelId: 1,
        title: 'Open Pithos in your browser?',
        message: 'Open Pithos in your browser?',
        detail: 'A browser on this computer asked to open Pithos, usually from "Open my Pithos" on the pithos.sia website. Allow it only if you just clicked that. That browser then has the same access as this window until you quit Pithos.',
      });
      return r.response === 0;
    },
  });

  Menu.setApplicationMenu(process.platform === 'darwin' ? Menu.buildFromTemplate([
    { role: 'appMenu' }, { role: 'editMenu' }, { role: 'viewMenu' }, { role: 'windowMenu' },
  ]) : null);

  win = new BrowserWindow({
    width: 1180,
    height: 800,
    minWidth: 380,
    minHeight: 500,
    title: 'Pithos',
    backgroundColor: '#0f1214',
    autoHideMenuBar: true,
    webPreferences: { contextIsolation: true, nodeIntegration: false, sandbox: true },
  });

  const origin = new URL(pithos.url).origin;
  // Keep the window on the console; anything else goes to the system browser.
  win.webContents.on('will-navigate', (e, url) => {
    if (new URL(url).origin !== origin) {
      e.preventDefault();
      if (url.startsWith('https://')) shell.openExternal(url);
    }
  });
  win.webContents.setWindowOpenHandler(({ url }) => {
    // HTML files opened as pages go to the system browser: the link carries
    // its own ticket, and the page is sandboxed by the server.
    const u = new URL(url);
    if (u.origin === origin && u.pathname.startsWith('/page/')) shell.openExternal(url);
    else if (url.startsWith('https://')) shell.openExternal(url);
    return { action: 'deny' };
  });

  win.loadURL(pithos.authUrl);
  win.on('closed', () => { win = null; });
}

let quitting = false;
app.on('before-quit', (e) => {
  if (quitting || !pithos) return;
  // Stop s3d cleanly so its upload buffer and database are flushed to disk.
  e.preventDefault();
  quitting = true;
  pithos.close().finally(() => app.quit());
});

app.on('window-all-closed', () => app.quit());