8 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	b2ecda9896	fix(security): safe links and security headers (FLAW-28, FLAW-29) ... safeHref lets only http, https and mailto become links (Markdown viewer, outliner, legal links); javascript: and friends show as text. A middleware sets a Content-Security-Policy (scripts only from MindSift, no framing, connections only to this server), X-Frame-Options, nosniff, Referrer-Policy and a Permissions-Policy. The two inline scripts of index.html moved to files so script-src stays 'self'. The second inline script also deleted every cache on each page load, which undermined the offline start; it is gone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 19:02:13 +01:00
sandrodachandClaude Opus 5.5	7bba174454	feat(pwa): start and keep working offline ... The service worker now caches the app shell: page loads are network first with the last index.html as fallback, hashed bundles come from the cache, icons and manifest are refreshed in the background; API calls are never intercepted. GET answers are kept per user in IndexedDB and served when the server cannot be reached, so the app starts logged in with the last known thoughts, tasks and lists. Captured thoughts and checked tasks or list items go to an outbox that is sent in order when the connection returns (also at start and every 30 s). A banner shows offline state and waiting changes. Logging out clears cache and outbox. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 08:11:47 +01:00
sandrodachandClaude Opus 5.5	9bc8716f41	feat(pwa): blue splash screen with the logo, status bar follows the theme ... Manifest: short name, blue background/theme colour for the Android splash. index.html shows a plain blue screen with the logo until React mounts. theme-color starts blue and then follows the active theme background. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 07:13:29 +01:00
sandrodach	3540b4b2ae	New icons for all shit	2026-10-28 19:01:08 +01:00
sandrodach	d39d1d1122	feat: complete workspace, triage, outliner and sharing overhaul (tasks 1-26)	2026-10-27 19:46:46 +01:00
sandrodach	b3e3fa27c4	feat(pwa): offer immediate mobile Web-App installation sheet and header install button	2026-10-25 14:15:55 +01:00
sandrodach	5c4e130862	fix(sqlite,browser): resolve SQLite connection pool deadlock, disable stale SW cache, and update BRAIN.md	2026-10-24 21:27:51 +02:00
sandrodach	84bc6884b0	First draft	2026-10-24 16:56:44 +02:00