7 Commits

Include renames

Author	SHA1	Message	Date
ergosteurandClaude Opus 5	f300b8d9f5	fix: allow WebAssembly in the CSP so xz sidecars can be decoded ... The xz decompressor for Instaloader's .json.xz sidecars is WebAssembly, embedded as a data: URL that it fetches at startup. The CSP added in 1.3.0 blocked both halves of that: fetch('data:application/wasm;...') -> TypeError: Failed to fetch WebAssembly.instantiate(...) -> CompileError: violates script-src 'self' The first surfaces through new Response(stream).json() as a bare "Failed to fetch" with no stack, which reads like a network fault and is why this was mis-diagnosed twice. Vite's dev server never sends the CSP, so it reproduced only in production — every Instaloader archive silently lost its captions, story flags and profile metadata from 1.3.0 onward. script-src now allows 'wasm-unsafe-eval', which permits WebAssembly compilation without permitting eval() of JavaScript, and connect-src allows data: for the embedded module. Verified against the production bundle: rivvsofficial goes from 188 posts / 0 followers / no stories to 68 posts, 120 stories, 10,337 followers and its real name, bio and link — with zero decode errors. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011uBWhwV3wFQ5MBCcMHHem7	2026-08-14 12:51:42 -04:00
ergosteurandClaude Opus 5	e6663657b0	fix: don't crash at boot when running under a UID with no passwd entry ... os.userInfo() throws ERR_SYSTEM_ERROR (uv_os_get_passwd) for a UID that has no /etc/passwd entry, which is exactly what `docker run --user 1234:1234` produces — the very workaround the README recommends. Combined with the switch to a non-root image user, this crashed the server on startup for any deployment that needed a custom UID to read its archives. Also document the non-root default and the /cache index volume. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011uBWhwV3wFQ5MBCcMHHem7	2026-08-14 02:08:35 -04:00
ergosteurandClaude Opus 5	1d86fa3583	fix: security, performance and correctness pass; add sidecar archive support ... Security - Fix path traversal in GET /api/archives/:name/files. Express decodes route params after segment matching, so `..%2f..%2fetc` escaped ARCHIVES_DIR and returned a recursive listing of arbitrary directories. - Add CSP and baseline security headers; disable x-powered-by. - Stop baking GEMINI_API_KEY into the client bundle (the SDK was unused). - Run the container as `node` instead of root. Performance - Add a directory-mtime-keyed archive index, warmed in the background and persisted. Listing 110k files went from ~52s to ~0.1s; the largest archive (24k files) serves in ~0.3s. Per-file stat over CIFS costs ~1.4ms and does not parallelise, so it is now done once rather than per request. - Build media URLs from the File directly instead of `new Blob([await file.arrayBuffer()])`, which read every media file fully into memory (a 20GB archive tried to become 20GB of resident blobs). - Track and revoke object URLs; previously none were ever revoked. - Give `requestThumbnail` a stable identity so a completed thumbnail stops re-running the effect in every mounted thumbnail. - Namespace IndexedDB keys so listing archives no longer deserializes every cached thumbnail blob, and thumbnails no longer collide across archives. - Serve real file sizes: RemoteArchiveFile was constructed with size 0, which silently disabled high-res thumbnailing for every server archive. Correctness - Local archives cached media as blob: URLs, which die with the document, so a cached local archive restored as an archive of broken images. Media now carries a stable path and is rehydrated from a persisted directory handle (File System Access API), falling back to re-prompting for the folder. - Fix permalinks: the URL-writing effect erased ?a= on mount before the archive list arrived to consume it, so deep links never resolved. - Make cache invalidation detect nested changes via a directory signature. - Add an error boundary and tolerate unparseable dates, which previously threw a RangeError and blanked the app. - Default video to muted so autoplay is not blocked by Safari/Firefox. Features - Fold sidecar directories into their base profile: `<user> - reels`, `story - <user>` and `story highlights - <user> - <title>` now appear as reels, the story ring and Instagram-style highlight circles rather than as separate archives. Housekeeping - Add @types/react; React was previously type-checked against its JavaScript source, so `npm run lint` gave almost no type safety on components. - Vendor fonts and PWA icons locally; the app made third-party CDN requests despite advertising offline support and local-only processing. - Drop unused better-sqlite3 (a native module that broke `npm install`). - Add vitest with 36 tests over the filename and directory-naming rules. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011uBWhwV3wFQ5MBCcMHHem7	2026-08-14 01:59:19 -04:00
ergosteur	bdcedab2da	fix: exhaustive generic parser and implement local archive history	2026-03-07 05:05:08 -05:00
ergosteur	c196f40cfd	fix: address Docker EACCES errors with better logging and SELinux hints	2026-03-07 03:02:02 -05:00
ergosteur	2d0501f124	fix: improve Docker archive discovery and switch to compiled server	2026-03-07 02:57:19 -05:00
ergosteur	afacc61888	feat: implement self-hostable mode with server-side directory scanning	2026-03-07 00:59:31 -05:00