diff --git a/GOTCHAS.md b/GOTCHAS.md new file mode 100644 index 0000000..4f6a1ec --- /dev/null +++ b/GOTCHAS.md @@ -0,0 +1,121 @@ +# Theseus gotchas + +Non-obvious things sessions keep re-deriving. If you found this file because +something broke in a way that felt spooky, the answer is probably here. + +## `build.files` in [package.json](package.json) is EXPLICIT + +electron-builder ships **only what's listed** in `build.files`. Every runtime- +loaded HTML/preload/module MUST be there. A missing entry causes the +`loadFile("foo.html")` in a WebContentsView to silently open blank in the +packaged app — visually indistinguishable from "the button does nothing". + +`npm start` (dev) never catches this because it reads from the source tree +directly. Only a real `npm run dist` + install exposes it. + +Every time you add a new `WebContentsView` or `loadFile`, add its HTML and +preload to the `files` array. Sanity check after building: + +``` +node -e "const b = require('fs').readFileSync('dist-public/win-unpacked/resources/app.asar'); for (const n of ['engine-picker.html','popover.html','downloads.html','engine-picker-preload.js','popover-preload.js','downloads-preload.js']) console.log(n, b.indexOf(Buffer.from(n)) >= 0 ? 'OK' : 'MISSING');" +``` + +This has bit us once (search-picker dropdown, shipped `6bbccf9c`, blank +picker). Do not let it bite twice. + +## Building — admin terminal the first time + +`npm run dist` needs an **admin** terminal on the machine's first Theseus +build so `electron-builder`'s `winCodeSign` package can extract its +`darwin/` symlinks (requires `SeCreateSymbolicLink`). Subsequent builds +reuse the cache under `$LOCALAPPDATA/electron-builder/Cache/winCodeSign/` +and don't need admin. + +If DNS is misbehaving on the machine, pin these hosts in +`C:\Windows\System32\drivers\etc\hosts` before building so electron-builder +can fetch: `github.com`, `codeload.github.com`, +`objects.githubusercontent.com`, `release-assets.githubusercontent.com`. +Strip them after. + +## Reproducible builds + +Set both before `npm run dist`: +- `SOURCE_DATE_EPOCH` — freezes timestamps so a rebuild with no content + changes produces the same hash. Bump per release, not per rebuild. +- `CSC_IDENTITY_AUTO_DISCOVERY=false` — stops electron-builder searching + for a signing cert (we don't sign; SECURITY.md rule 2). + +## Native `` popup uses the page's `color-scheme`. When it's +`"light dark"` (both accepted), Chromium picks by the OS scheme — so a +dark-themed app on a light OS shows a light popup and vice versa. + +Fix, currently in [settings.html](settings.html): +```css +:root { color-scheme: dark; } +@media (prefers-color-scheme: light) { :root { color-scheme: light; } } +``` +`nativeTheme.themeSource` (driven by `settings.theme`) sets +`prefers-color-scheme`, so this stays in sync automatically. Do not remove. + +Chromium also respects `select option { background; color }` in the popup +on Windows — a belt-and-braces override alongside `color-scheme`. + +## The resolver in Theseus is `resolver-web.mjs`, not `.js` + +Packaged builds ship `Argus/src/lib/resolver-web.js` as `resolver-web.mjs` +(see `extraResources` in [package.json](package.json)). Renamed because +`resources/` has no adjacent `package.json` so a `.js` gets treated as +CommonJS and its `export`s fail. Dev reads the engine copy directly (Argus +is `type: module` so `.js` works there). + +## The resolver's electrum WS `directIP` fallback + +[main.js](main.js) passes `directIP: true` to `resolveHost` so the engine +can dial the chipnet electrum servers by pinned IP if system DNS is dead. +Do not remove — this is what keeps `.bch` resolution working when the +adapter DNS is broken (a real failure mode we've hit). + +## Publishing new hashes end-to-end + +1. Build (see above). +2. Update `../site/releases-manifest.json` AND + `../site/tools/index.html` AND `../site/releases/index.html` with the + fresh SHA-256s + release date. All three must match. +3. Deploy: + ``` + scp dist-public/*.exe ../site/releases-manifest.json coinspectrum:/opt/silent-mode/dl/ + cd ../Argus && node src/lib/sia-upload.js ../site bns/silentmode + ``` +4. On-chain (wallet spend, user's action): + `releases.silentmode.bch` currently publishes + `{"u":"https://dl.silentmode.st/releases-manifest.json"}` — a compact + `u` record because on-chain hashes wouldn't fit the 200-byte + OP_RETURN. Only re-publish if the URL changes or if we ever put full + hashes on-chain. + +## Sia upload from this machine fails without a `hosts` pin + +`node src/lib/sia-upload.js` fails with `getaddrinfo EAI_FAIL +coinspectrum.duckdns.org` unless the host is pinned in +`C:\Windows\System32\drivers\etc\hosts`: +`195.184.247.106 coinspectrum.duckdns.org`. This is a DNS quirk of the +machine, not a code bug — related to the strict-resolver behavior the +Ariadne daemon's EDNS fix addresses. + +## Deploy directory quirks + +- `/opt/silent-mode/dl/` is served as `dl.silentmode.st` — installers + + manifest live here. +- `silentmode.st` proxies to Sia (`bns/silentmode/`) — the HTML pages + live there. +- The `bns` gateway does NOT auto-index directories. `silentmode.st/apps/` + is a 404 (`NoSuchKey`); users must hit `/apps/index.html`. Fix upstream + in `bnsd.js` if it ever matters. + +## Firefox needs a restart after Ariadne CA install/rotation + +Firefox only reads root CAs at startup. The Ariadne installer offers a +`-CloseFirefox` task by default when Firefox is running so this doesn't +bite. Chrome/Edge pick up the new root immediately. diff --git a/PENDING.md b/PENDING.md new file mode 100644 index 0000000..994ccf8 --- /dev/null +++ b/PENDING.md @@ -0,0 +1,149 @@ +# Pending — uncommitted Theseus changes + +Working-tree state that hasn't been committed or shipped. Read this before +touching the same files. Update when you land or add work. + +Format: each group has a `session:` label so parallel sessions can see +what belongs to whom and coordinate. Naming convention: +`YYYY-MM-DD:short-slug` for date-bounded work, or `parallel:` for +work owned by a session that isn't the current one. + +Last updated: 2026-08-02. + +--- + +## session: `2026-08-02:theseus-ux-polish` + +Owner's focus: Theseus UX polish + downloads. Everything below bundles +into one commit + one Theseus rebuild + redeploy. + +### Settings — General + +- **Startup group** at the top of `#general` with "Open previous windows + and tabs" toggle (moved up from below). +- **Appearance** replaced with three visual **theme cards**: System / Light + / Dark. `System` follows `nativeTheme.themeSource = "system"` so it + tracks the OS. Legacy `settings.theme` values outside `{system, light, + dark}` fall back to `system`. +- Files: [settings.html](settings.html), [main.js](main.js) (`applyTheme` + already handles all three values). + +### Settings — new Search section + +- Sidebar gets a **Search** top-level item between General and Naming. +- Search-engine controls moved OUT of General into this section. +- Only **enabled** engines listed in the main "Additional search engines" + block, grouped by kind (`Search engines` / `AI answer engines`), + drag-reorder within a kind, toggle to disable, ✕ to delete custom. +- **+ Add search engine** button toggles a catalog panel below with + built-in engines the user hasn't enabled (each with `+ Add`) + a "Or add + a custom URL" form. +- Files: [settings.html](settings.html) (nav, section, CSS `.engcat`, JS). + +### Settings — dropdown color-scheme + layout + +- `:root { color-scheme: dark }` + `@media (prefers-color-scheme: light)` + override. Native `` groups options + with `` by kind. Drag-reorder constrained to same-kind (a + cross-kind drop would re-group on next render). + +### Chrome / toolbar + +- **Loadbar collapses to 0px when idle** (`.loadbar { height: 0 }`, + `.loadbar.on { height: 2px }`, 120ms transition). Previously reserved + a permanent 2px strip below the address bar. +- **Downloads button** (`#downloads`) between the search box and Tor + toggle. Subscribes to `onDownloads` for badge + spin/done/err class. +- Files: [chrome.html](chrome.html). + +### Downloads (new feature) + +- New files: [downloads.html](downloads.html), + [downloads-preload.js](downloads-preload.js). Both added to + `build.files` in [package.json](package.json). +- `installDownloadTracker()` in main.js hooks + `session.defaultSession.on("will-download", …)`. In-memory list only; + no cross-session persistence. +- IPC surface: `downloads-get`, `toggle-downloads`, `close-downloads`, + `downloads-resize`, `download-open`, `download-show`, `download-cancel`, + `download-clear`, `downloads-clear-all`. +- New `downloadsPop` WebContentsView, positioned via `positionDownloads()` + from `layout()`. +- Preload exposes `getDownloads`, `toggleDownloads`, `onDownloads`. + +### Preview harness + +- [_preview.html](_preview.html) — `window.DL_ITEMS` seed + + `__toggleDownloads` overlay; stub `window.theseus.getDownloads / + onDownloads / toggleDownloads`; `kind` on stub engines; LLM catalog + trimmed to Perplexity + Phind. +- [_settings-preview.html](_settings-preview.html) — `kind` on stub + engines; LLM catalog trimmed. + +--- + +## session: `parallel:collision-policy` + +Owner's focus: BCNR ↔ ICANN name collision handling. Present in the +working tree, not mine. Leave for that session to land or bundle by +explicit ask. + +### Chrome + main-process changes + +- [main.js](main.js) — big block of new IPC around collision policy + + soft-collision picker + electrum discovery. +- [popover.html](popover.html), [popover-preload.js](popover-preload.js) + — collision switcher on the site-info popover. +- [preload.js](preload.js) — `collisionSwitch` + `collisionState`. +- [settings-preload.js](settings-preload.js) — same. + +### Settings + +- Entire **Naming** section in [settings.html](settings.html) (BCNR/ICANN + collision policy radio group + remembered choices reset button). + Untouched by my changes. + +### New files (untracked in git) + +- [collision.html](collision.html), [collision-preload.js](collision-preload.js) + — the soft-collision "Open with…" prompt window (referenced from + `main.js:219`). + +--- + +## Live state + +Shipped hashes live at `../site/releases-manifest.json` and +`https://dl.silentmode.st/releases-manifest.json`. On-chain pointer at +`releases.silentmode.bch`. See [GOTCHAS.md](GOTCHAS.md) for the release +gotchas. diff --git a/downloads-preload.js b/downloads-preload.js new file mode 100644 index 0000000..4b176f4 --- /dev/null +++ b/downloads-preload.js @@ -0,0 +1,11 @@ +const { contextBridge, ipcRenderer } = require("electron"); +contextBridge.exposeInMainWorld("dl", { + onDownloads: (cb) => ipcRenderer.on("downloads", (_e, d) => cb(d)), + close: () => ipcRenderer.invoke("close-downloads"), + resize: (h) => ipcRenderer.invoke("downloads-resize", h), + open: (id) => ipcRenderer.invoke("download-open", id), + show: (id) => ipcRenderer.invoke("download-show", id), + cancel: (id) => ipcRenderer.invoke("download-cancel", id), + clear: (id) => ipcRenderer.invoke("download-clear", id), + clearAll: () => ipcRenderer.invoke("downloads-clear-all"), +}); diff --git a/downloads.html b/downloads.html new file mode 100644 index 0000000..297cce5 --- /dev/null +++ b/downloads.html @@ -0,0 +1,101 @@ + + + + +
+
+ Downloads + +
+
+
+ + diff --git a/engine-picker.html b/engine-picker.html index 89054cd..9fc44a6 100644 --- a/engine-picker.html +++ b/engine-picker.html @@ -21,8 +21,7 @@
-
Search with
-
+
⚙️Search settings…
@@ -32,16 +31,27 @@ const $ = (id) => document.getElementById(id); const esc = (s) => String(s || "").replace(/ { try { window.picker.resize(document.querySelector(".menu").offsetHeight); } catch (e) {} }); } - window.picker.onData ? null : null; + const KINDS = [ + { key: "search", label: "Search with" }, + { key: "llm", label: "Ask an AI" }, + ]; + const row = (e, current) => { + const ic = e.favicon + ? `` + : `${e.sym || "🔍"}`; + return `
${ic}${esc(e.name)}${e.id === current ? '✓' : ""}
`; + }; window.picker.onEngines((d) => { - const list = $("list"); - list.innerHTML = (d.engines || []).map((e) => { - const ic = e.favicon - ? `` - : `${e.sym || "🔍"}`; - return `
${ic}${esc(e.name)}${e.id === d.current ? '✓' : ""}
`; + const engines = d.engines || []; + const groups = $("groups"); + // Preserve engineOrder within each kind (engines already come sorted). + const sections = KINDS.map(({ key, label }) => { + const rows = engines.filter((e) => (e.kind || "search") === key).map((e) => row(e, d.current)).join(""); + if (!rows) return ""; // hide a section with no engines + return `
${label}
${rows}`; }).join(""); - list.querySelectorAll(".item").forEach((el) => el.onclick = () => window.picker.pick(el.dataset.id)); + groups.innerHTML = sections; + groups.querySelectorAll(".item").forEach((el) => el.onclick = () => window.picker.pick(el.dataset.id)); report(); }); $("settings").onclick = () => window.picker.openSettings(); diff --git a/main.js b/main.js index fbfb09d..77b91a9 100644 --- a/main.js +++ b/main.js @@ -24,28 +24,43 @@ const RESOLVER = app.isPackaged // Built-in engines. Users can also add their own (settings.customEngines, // each { id, name, url } where the url contains "%s" for the query). // Catalog of built-in engines (users pick which to enable + can add their own). -// fav = the domain to load a real favicon from; sym = emoji fallback. +// fav = the domain to load a real favicon from; sym = emoji fallback. // kind = "search" (traditional search engines) or "llm" (AI answer engines). -// The picker + settings render each kind in its own section; kind stays a -// display-only grouping (URL routing is the same for both). +// tier = "catalog" (curated first-class options shown in the primary Add +// panel) or "extra" (a wider bank hidden behind a filter box for +// discovery). Missing tier defaults to "catalog". +// URL routing is identical for all — kind and tier are display-only grouping. const SEARCH_ENGINES = { - duckduckgo: { kind: "search", name: "DuckDuckGo", sym: "🦆", fav: "duckduckgo.com", url: (q) => "https://duckduckgo.com/?q=" + encodeURIComponent(q) }, - google: { kind: "search", name: "Google", sym: "🔵", fav: "www.google.com", url: (q) => "https://www.google.com/search?q=" + encodeURIComponent(q) }, - brave: { kind: "search", name: "Brave", sym: "🦁", fav: "search.brave.com", url: (q) => "https://search.brave.com/search?q=" + encodeURIComponent(q) }, - bing: { kind: "search", name: "Bing", sym: "🔎", fav: "www.bing.com", url: (q) => "https://www.bing.com/search?q=" + encodeURIComponent(q) }, - startpage: { kind: "search", name: "Startpage", sym: "🛡️", fav: "www.startpage.com", url: (q) => "https://www.startpage.com/sp/search?query=" + encodeURIComponent(q) }, - yandex: { kind: "search", name: "Yandex", sym: "🔴", fav: "yandex.com", url: (q) => "https://yandex.com/search/?text=" + encodeURIComponent(q) }, - ecosia: { kind: "search", name: "Ecosia", sym: "🌱", fav: "www.ecosia.org", url: (q) => "https://www.ecosia.org/search?q=" + encodeURIComponent(q) }, - mojeek: { kind: "search", name: "Mojeek", sym: "🧭", fav: "www.mojeek.com", url: (q) => "https://www.mojeek.com/search?q=" + encodeURIComponent(q) }, + duckduckgo: { kind: "search", tier: "catalog", name: "DuckDuckGo", sym: "🦆", fav: "duckduckgo.com", url: (q) => "https://duckduckgo.com/?q=" + encodeURIComponent(q) }, + google: { kind: "search", tier: "catalog", name: "Google", sym: "🔵", fav: "www.google.com", url: (q) => "https://www.google.com/search?q=" + encodeURIComponent(q) }, + brave: { kind: "search", tier: "catalog", name: "Brave", sym: "🦁", fav: "search.brave.com", url: (q) => "https://search.brave.com/search?q=" + encodeURIComponent(q) }, + bing: { kind: "search", tier: "catalog", name: "Bing", sym: "🔎", fav: "www.bing.com", url: (q) => "https://www.bing.com/search?q=" + encodeURIComponent(q) }, + startpage: { kind: "search", tier: "catalog", name: "Startpage", sym: "🛡️", fav: "www.startpage.com", url: (q) => "https://www.startpage.com/sp/search?query=" + encodeURIComponent(q) }, + yandex: { kind: "search", tier: "catalog", name: "Yandex", sym: "🔴", fav: "yandex.com", url: (q) => "https://yandex.com/search/?text=" + encodeURIComponent(q) }, + ecosia: { kind: "search", tier: "catalog", name: "Ecosia", sym: "🌱", fav: "www.ecosia.org", url: (q) => "https://www.ecosia.org/search?q=" + encodeURIComponent(q) }, + mojeek: { kind: "search", tier: "catalog", name: "Mojeek", sym: "🧭", fav: "www.mojeek.com", url: (q) => "https://www.mojeek.com/search?q=" + encodeURIComponent(q) }, // SearXNG is federated (dozens of public instances at searx.space); any single // default becomes stale as instances rate-limit / die (searx.be is anti-bot-locked). // Users who want SearXNG add their preferred instance via the custom URL form. - wikipedia: { kind: "search", name: "Wikipedia", sym: "📖", fav: "en.wikipedia.org", url: (q) => "https://en.wikipedia.org/wiki/Special:Search?search=" + encodeURIComponent(q) }, + wikipedia: { kind: "search", tier: "catalog", name: "Wikipedia", sym: "📖", fav: "en.wikipedia.org", url: (q) => "https://en.wikipedia.org/wiki/Special:Search?search=" + encodeURIComponent(q) }, // AI / LLM answer engines that ANSWER the URL query without requiring a login. // ChatGPT / Claude / You.com's youchat all bounce to sign-in before running // ?q=, so they'd fail silently as a "search engine" — omitted deliberately. - perplexity: { kind: "llm", name: "Perplexity", sym: "🧠", fav: "www.perplexity.ai", url: (q) => "https://www.perplexity.ai/search?q=" + encodeURIComponent(q) }, - phind: { kind: "llm", name: "Phind", sym: "🧑‍💻", fav: "www.phind.com", url: (q) => "https://www.phind.com/search?q=" + encodeURIComponent(q) }, + perplexity: { kind: "llm", tier: "catalog", name: "Perplexity", sym: "🧠", fav: "www.perplexity.ai", url: (q) => "https://www.perplexity.ai/search?q=" + encodeURIComponent(q) }, + phind: { kind: "llm", tier: "catalog", name: "Phind", sym: "🧑‍💻", fav: "www.phind.com", url: (q) => "https://www.phind.com/search?q=" + encodeURIComponent(q) }, + // ---- Extras: wider bank, discoverable via the Search filter box in Settings. + // These are known-working engines that don't require sign-in on ?q= but aren't + // first-class enough to sit in the primary catalog. Keep the list vetted — if + // an entry starts bouncing to a login gate, drop it (same rule as the LLMs). + marginalia: { kind: "search", tier: "extra", name: "Marginalia", sym: "🕸", fav: "search.marginalia.nu", url: (q) => "https://search.marginalia.nu/search?query=" + encodeURIComponent(q) }, + stract: { kind: "search", tier: "extra", name: "Stract", sym: "🧵", fav: "stract.com", url: (q) => "https://stract.com/search?q=" + encodeURIComponent(q) }, + yep: { kind: "search", tier: "extra", name: "Yep", sym: "✳️", fav: "yep.com", url: (q) => "https://yep.com/web?q=" + encodeURIComponent(q) }, + presearch: { kind: "search", tier: "extra", name: "Presearch", sym: "🔷", fav: "presearch.com", url: (q) => "https://presearch.com/search?q=" + encodeURIComponent(q) }, + metager: { kind: "search", tier: "extra", name: "MetaGer", sym: "🇩🇪", fav: "metager.org", url: (q) => "https://metager.org/meta/meta.ger3?eingabe=" + encodeURIComponent(q) }, + qwant: { kind: "search", tier: "extra", name: "Qwant", sym: "🇫🇷", fav: "www.qwant.com", url: (q) => "https://www.qwant.com/?q=" + encodeURIComponent(q) }, + swisscows: { kind: "search", tier: "extra", name: "Swisscows", sym: "🐄", fav: "swisscows.com", url: (q) => "https://swisscows.com/en/web?query=" + encodeURIComponent(q) }, + naver: { kind: "search", tier: "extra", name: "Naver", sym: "🇰🇷", fav: "www.naver.com", url: (q) => "https://search.naver.com/search.naver?query=" + encodeURIComponent(q) }, + baidu: { kind: "search", tier: "extra", name: "Baidu", sym: "🇨🇳", fav: "www.baidu.com", url: (q) => "https://www.baidu.com/s?wd=" + encodeURIComponent(q) }, }; // Engines enabled by default (shown in the toolbar dropdown). The rest are in the // catalog and can be turned on from Settings. Custom + detected engines are always on. @@ -59,9 +74,9 @@ function isEnabled(id) { return (settings.enabledEngines || DEFAULT_ENABLED).inc // enabledEngines; custom engines are always enabled. function allEngines() { const list = Object.entries(SEARCH_ENGINES).map(([id, e]) => - ({ id, name: e.name, sym: e.sym, favicon: faviconUrl(e.fav), kind: e.kind || "search", builtin: true, enabled: isEnabled(id) })); + ({ id, name: e.name, sym: e.sym, favicon: faviconUrl(e.fav), kind: e.kind || "search", tier: e.tier || "catalog", builtin: true, enabled: isEnabled(id) })); for (const c of settings.customEngines || []) - list.push({ id: c.id, name: c.name, sym: c.sym || "🔍", favicon: customFavicon(c.url), kind: c.kind || "search", builtin: false, enabled: true }); + list.push({ id: c.id, name: c.name, sym: c.sym || "🔍", favicon: customFavicon(c.url), kind: c.kind || "search", tier: "custom", builtin: false, enabled: true }); // Apply the user's custom order; ids not in engineOrder keep their natural order (stable sort). const order = settings.engineOrder || []; return list.slice().sort((a, b) => { diff --git a/settings.html b/settings.html index 395beb6..0509884 100644 --- a/settings.html +++ b/settings.html @@ -179,15 +179,23 @@
- +