Timmy
b8532f587d
All checks were successful
Quality gates / quality (pull_request) Successful in 1m42s
Implements #35. - importLedger migrates prior schema versions (v0 bare-array legacy exports and the v1 envelope) and fails safely on future versions, malformed JSON, wrong-product envelopes, and oversized files with a new 2 MiB MAX_IMPORT_BYTES guard applied before parsing. - exportLedger normalizes entries through sanitizeEntry so confirmed values and bounded provenance round-trip while smuggled secrets and unknown fields never enter the portable file. - Entries may carry a whitelisted provenance origin ('user' or 'ai-suggestion'); mergeVisualSuggestion records 'ai-suggestion' only when a suggestion is actually applied, keeping nonvisual fields user-owned. - App import now merges into the existing ledger instead of replacing it, so a failed or partial import can never silently drop user-owned records. - Service-worker shell cache bumped to v6 (per base-path namespace) so installed PWAs receive the migration code; old v5 caches are purged on activation. - New tests/ledger-portability.acceptance.mjs browser gate covers export round trip, merge import, safe-failure surfacing, root vs /timmy-staging storage isolation, and Delete Everything for both namespaces; wired into package.json test:portability and CI quality.yml. Deterministic medical safety unchanged: urgent-flag detection, red-flag copy, and chat escalation paths are untouched; all fixtures synthetic.
51 lines
1.6 KiB
JavaScript
51 lines
1.6 KiB
JavaScript
const ROOT = new URL(self.registration.scope).pathname;
|
|
const appPath = path => `${ROOT}${String(path).replace(/^\/+/, '')}`;
|
|
const CACHE_NAMESPACE = `timmy-shell:${ROOT}:`;
|
|
const CACHE = `${CACHE_NAMESPACE}v6`;
|
|
const ASSETS = [
|
|
'',
|
|
'index.html',
|
|
'styles.css',
|
|
'app.js',
|
|
'src/domain.js',
|
|
'src/analysis.js',
|
|
'manifest.webmanifest',
|
|
'assets/timmy.svg',
|
|
'assets/icon-192.svg',
|
|
'assets/icon-512.svg',
|
|
].map(appPath);
|
|
|
|
self.addEventListener('install', event => event.waitUntil(
|
|
caches.open(CACHE).then(cache => cache.addAll(ASSETS)).then(() => self.skipWaiting()),
|
|
));
|
|
self.addEventListener('activate', event => event.waitUntil(
|
|
caches.keys()
|
|
.then(keys => Promise.all(keys.filter(key =>
|
|
(key.startsWith(CACHE_NAMESPACE) && key !== CACHE)
|
|
|| (ROOT === '/' && key === 'timmy-shell-v4')
|
|
).map(key => caches.delete(key))))
|
|
.then(() => self.clients.claim()),
|
|
));
|
|
self.addEventListener('fetch', event => {
|
|
if (event.request.method !== 'GET') return;
|
|
const pathname = new URL(event.request.url).pathname;
|
|
if (!pathname.startsWith(ROOT)) return;
|
|
if (pathname.startsWith(appPath('api/'))) {
|
|
event.respondWith(fetch(event.request));
|
|
return;
|
|
}
|
|
event.respondWith(
|
|
fetch(event.request)
|
|
.then(response => {
|
|
if (!/\bno-store\b/i.test(response.headers.get('cache-control') || '')) {
|
|
const copy = response.clone();
|
|
caches.open(CACHE).then(cache => cache.put(event.request, copy));
|
|
}
|
|
return response;
|
|
})
|
|
.catch(() => caches.open(CACHE).then(async cache =>
|
|
(await cache.match(event.request)) || cache.match(appPath('index.html'))
|
|
)),
|
|
);
|
|
});
|