marcandClaude Opus 5
92d525b3ab
The app is meant to run in daily private use now, so this pass was mostly
about the ways it could quietly lose data.
Reliability and security:
- the server no longer invents a JWT_SECRET or ENCRYPTION_KEY when one is
missing; it refuses to start. The old fallback silently made every stored
note unreadable after a restart.
- notes are encrypted with AES-256-GCM (v2:); existing CBC bodies still read.
- login is rate limited and compares against a dummy hash when the user does
not exist, so timing does not reveal who is registered.
- a server response issued before a local save is never adopted. This had
already eaten drawing strokes and note links; sync.hasPendingWrites() now
guards every path that takes a body from the server.
Editor and features:
- TipTap replaces the contenteditable editor: tables, task lists, and links
to other notes and notebooks, with a backlinks bar on the target.
- content format v2 ({v:2,doc}); v1 {html,tasks} bodies migrate on open.
- version history: the state before each write is snapshotted, coalesced
into 5-minute windows, 50 versions or 90 days per note.
- full-text search runs in the client, because the server cannot read
encrypted bodies and a server index would defeat the encryption.
- image attachments are stored by SHA-256 and deduplicated; the client
fetches them authenticated and caches the blob, so they work offline.
- drawings are vector strokes in a fixed 1200x1600 page space and now look
the same on every screen (0.0-0.2% deviation across four widths).
- login is by username; existing email accounts migrate automatically.
Operations:
- data lives on host bind mounts, not Docker volumes, so Proxmox Backup
covers it. Back up .env with it — without ENCRYPTION_KEY the dump is
unreadable.
Structure:
- NoteApp.jsx is gone. App.jsx now holds only where the user is; note data,
search, layout, history and drag each live behind a hook, and the four
panes are stateless.
- the whole data layer is TypeScript, with 81 unit tests concentrated on
the places that have actually broken.
- fixed along the way: the browser back button had a dead press, because
restoring a history entry pushed a duplicate one.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
63 lines
1.7 KiB
JavaScript
63 lines
1.7 KiB
JavaScript
const CACHE_NAME = 'inknote-v7';
|
|
|
|
// Install — don't precache, just activate immediately
|
|
self.addEventListener('install', () => {
|
|
self.skipWaiting();
|
|
});
|
|
|
|
// Activate — clean old caches, take control
|
|
self.addEventListener('activate', (e) => {
|
|
e.waitUntil(
|
|
caches.keys().then(keys =>
|
|
Promise.all(keys.filter(k => k !== CACHE_NAME).map(k => caches.delete(k)))
|
|
).then(() => self.clients.claim())
|
|
);
|
|
});
|
|
|
|
// Fetch — runtime caching strategy
|
|
self.addEventListener('fetch', (e) => {
|
|
const url = new URL(e.request.url);
|
|
|
|
// Never intercept API or WebSocket
|
|
if (url.pathname.startsWith('/api/') || url.pathname.startsWith('/ws')) return;
|
|
|
|
// Only handle GET requests
|
|
if (e.request.method !== 'GET') return;
|
|
|
|
// Navigation (HTML) — network-first with cache fallback
|
|
if (e.request.mode === 'navigate') {
|
|
e.respondWith(
|
|
fetch(e.request).then(r => {
|
|
const clone = r.clone();
|
|
caches.open(CACHE_NAME).then(c => c.put(e.request, clone));
|
|
return r;
|
|
}).catch(() => caches.match(e.request).then(r => r || caches.match('/')))
|
|
);
|
|
return;
|
|
}
|
|
|
|
// Static assets — stale-while-revalidate
|
|
e.respondWith(
|
|
caches.open(CACHE_NAME).then(cache =>
|
|
cache.match(e.request).then(cached => {
|
|
const fetchP = fetch(e.request).then(r => {
|
|
if (r.ok) cache.put(e.request, r.clone());
|
|
return r;
|
|
}).catch(() => cached);
|
|
return cached || fetchP;
|
|
})
|
|
)
|
|
);
|
|
});
|
|
|
|
// Background sync trigger
|
|
self.addEventListener('sync', (e) => {
|
|
if (e.tag === 'sync-changes') {
|
|
e.waitUntil(
|
|
self.clients.matchAll().then(clients =>
|
|
clients.forEach(c => c.postMessage({ type: 'FLUSH_QUEUE' }))
|
|
)
|
|
);
|
|
}
|
|
});
|