mirror of
https://github.com/koala73/worldmonitor.git
synced 2026-04-25 17:14:57 +02:00
0500733541
DNS (Cloudflare) and the Vercel domain are already provisioned by the operator; this lands the matching code-side wiring so the variant actually resolves and renders correctly. Changes: middleware.ts - Add `'energy.worldmonitor.app': 'energy'` to VARIANT_HOST_MAP. This also auto-includes the host in ALLOWED_HOSTS via the spread on line 87. - Add `energy` entry to VARIANT_OG with the Energy-Atlas-specific title + description from `src/config/variant-meta.ts:130-152`. OG image points at `https://energy.worldmonitor.app/favico/energy/og-image.png`, matching the per-variant convention used by tech / finance / commodity / happy. vercel.json - Add `https://energy.worldmonitor.app` to BOTH `frame-src` and `frame-ancestors` in the global Content-Security-Policy header. Without this, the variant subdomain would render but be blocked from being framed back into worldmonitor.app for any embedded flow (Slack/LinkedIn previews, future iframe widgets, etc.). This supersedes the CSP-only portion of PR #3359 (which mixed CSP with unrelated relay/military changes). convex/payments/checkout.ts:108-117 - Add `https://energy.worldmonitor.app` to the checkout returnUrl allowlist. Without this, a PRO upgrade flow initiated from the energy subdomain would fail with "Invalid returnUrl" on Convex. src-tauri/tauri.conf.json:32 - Add `https://energy.worldmonitor.app` to the Tauri desktop CSP frame-src so the desktop app can embed the variant the same way it embeds the other 4. public/favico/energy/* (NEW, 7 files) - Stub the per-variant favicon directory by copying the root-level WorldMonitor brand assets (android-chrome 192/512, apple-touch, favicon 16/32/ico, og-image). This keeps the launch unblocked on design assets — every referenced URL resolves with valid bytes from day one. Replace with energy-themed designs in a follow-up PR; the file paths are stable. Other variant subdomains already on main (tech / finance / commodity / happy) are unchanged. APP_HOSTS in src/services/runtime.ts already admits any `*.worldmonitor.app` via `host.endsWith('.worldmonitor.app')` on line 226, so no edit needed there. Closes gaps §L #9, #10, #11 in docs/internal/energy-atlas-registry-expansion.md.
79 lines
2.6 KiB
JSON
79 lines
2.6 KiB
JSON
{
|
|
"$schema": "https://schema.tauri.app/config/2",
|
|
"productName": "World Monitor",
|
|
"mainBinaryName": "world-monitor",
|
|
"version": "2.6.7",
|
|
"identifier": "app.worldmonitor.desktop",
|
|
"build": {
|
|
"beforeDevCommand": "npm run build:sidecar-sebuf && node scripts/build-sidecar-handlers.mjs && npm run dev",
|
|
"beforeBuildCommand": "npm run build:desktop",
|
|
"frontendDist": "../dist",
|
|
"devUrl": "http://localhost:3000"
|
|
},
|
|
"app": {
|
|
"windows": [
|
|
{
|
|
"title": "World Monitor",
|
|
"width": 1440,
|
|
"height": 900,
|
|
"minWidth": 1200,
|
|
"minHeight": 720,
|
|
"resizable": true,
|
|
"fullscreen": false,
|
|
"backgroundColor": [
|
|
26,
|
|
28,
|
|
30,
|
|
255
|
|
]
|
|
}
|
|
],
|
|
"security": {
|
|
"csp": "default-src 'self'; connect-src 'self' https: http://localhost:5173 http://127.0.0.1:* ws: wss: blob: data: https://abacus.worldmonitor.app; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'wasm-unsafe-eval' https://www.youtube.com https://abacus.worldmonitor.app https://*.clerk.accounts.dev; worker-src 'self' blob:; font-src 'self' data: https:; media-src 'self' data: blob: https: http://127.0.0.1:* http://localhost:*; frame-src 'self' http://127.0.0.1:* http://localhost:* https://worldmonitor.app https://tech.worldmonitor.app https://finance.worldmonitor.app https://commodity.worldmonitor.app https://happy.worldmonitor.app https://energy.worldmonitor.app https://www.youtube.com https://www.youtube-nocookie.com https://webcams.windy.com https://*.clerk.accounts.dev;"
|
|
}
|
|
},
|
|
"bundle": {
|
|
"active": true,
|
|
"targets": [
|
|
"app",
|
|
"dmg",
|
|
"nsis",
|
|
"msi",
|
|
"appimage"
|
|
],
|
|
"category": "Productivity",
|
|
"shortDescription": "World Monitor desktop app (supports World and Tech variants)",
|
|
"longDescription": "World Monitor desktop app for real-time global intelligence. Build with VITE_VARIANT=tech to package Tech Monitor branding and dataset defaults.",
|
|
"icon": [
|
|
"icons/32x32.png",
|
|
"icons/128x128.png",
|
|
"icons/128x128@2x.png",
|
|
"icons/icon.icns",
|
|
"icons/icon.ico"
|
|
],
|
|
"resources": [
|
|
"../api",
|
|
"sidecar/local-api-server.mjs",
|
|
"sidecar/package.json",
|
|
"sidecar/node",
|
|
"../data",
|
|
"../src/config"
|
|
],
|
|
"windows": {
|
|
"digestAlgorithm": "sha256",
|
|
"timestampUrl": "https://timestamp.digicert.com",
|
|
"nsis": {
|
|
"installerHooks": "nsis/installer-hooks.nsh"
|
|
}
|
|
},
|
|
"macOS": {
|
|
"hardenedRuntime": true
|
|
},
|
|
"linux": {
|
|
"appimage": {
|
|
"bundleMediaFramework": true
|
|
}
|
|
}
|
|
}
|
|
}
|