mirror of
https://github.com/narrrl/narl-workspace.git
synced 2026-11-04 00:47:01 +01:00
nvrl
a641d9b6ba
Argon2id turns the vault password into a key that seals a random master key; only the sealed copy is kept. Each file gets its own key, sealed under the master key in its header with its media id, and its bytes are AES-256-GCM STREAM records, so a swapped, cut or altered file refuses to open. Uploads with ?encrypt=true are sealed as they stream in. :vault, :unlock, :lock, :passwd, :encrypt, :decrypt and :upload! drive it. The vault locks after WORKSPACE_VAULT_IDLE_MIN idle minutes, on logout and on restart; while locked, sealed files answer 423, share links never serve them, and :export! refuses rather than leave them out. Sealing an existing file rewrites it under a new id and retires the old one: the mirror deletes the plaintext from Proton Drive outright, trash included, whatever WORKSPACE_BACKUP_PRUNE says, and drops it from the readable files/ view. The mirror now compares on-disk sizes, so sealed files are not re-hashed every run.
80 lines
2.7 KiB
Svelte
80 lines
2.7 KiB
Svelte
<script lang="ts">
|
|
import Rail from './Rail.svelte'
|
|
import { workspace } from './store.svelte'
|
|
import { isTouchDevice } from './util'
|
|
|
|
const mode = $derived(
|
|
workspace.editing ? (workspace.vimEnabled ? workspace.vimMode.toUpperCase() : 'EDIT') : 'BROWSE',
|
|
)
|
|
|
|
// The path is the file name here: work/einarbeiten/01-was-ist-eebus.
|
|
const file = $derived(
|
|
workspace.open ? `${workspace.here}/${workspace.open.slug}` : `${workspace.here || '~'}/`,
|
|
)
|
|
|
|
const lines = $derived(workspace.editing ? workspace.draft.body.split('\n').length : null)
|
|
</script>
|
|
|
|
<footer class="status">
|
|
<span
|
|
class="mode"
|
|
class:editing={workspace.editing}
|
|
class:insert={mode === 'INSERT' || mode === 'EDIT'}
|
|
class:visual={mode.startsWith('VISUAL')}
|
|
>
|
|
{mode}
|
|
</span>
|
|
<span class="file">{file}{#if workspace.dirty}<span class="dirty"> [+]</span>{/if}</span>
|
|
|
|
<span class="msg" class:alarm={workspace.flash?.kind === 'error'}>{workspace.flash?.text ?? ''}</span>
|
|
|
|
{#if workspace.fullscreen}<span class="flag">full</span>{/if}
|
|
{#if workspace.vault?.unlocked}<span class="flag vault" title="the vault is open — :lock closes it">vault open</span>{/if}
|
|
{#if lines !== null}<span class="readout">{lines}<span class="unit">L</span></span>{/if}
|
|
<span class="hint">
|
|
{isTouchDevice ? 'tap : for commands' : '? help · : command · / search'}
|
|
</span>
|
|
|
|
<div class="tools"><Rail dock /></div>
|
|
</footer>
|
|
|
|
<style>
|
|
.mode.insert { background: var(--light); color: var(--ink); }
|
|
.mode.visual { background: var(--light-dim); color: var(--ink); }
|
|
|
|
.file { flex: none; color: var(--subtle); }
|
|
.dirty { color: var(--light); }
|
|
.msg { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; color: var(--fg); }
|
|
.msg.alarm { color: var(--alarm); }
|
|
.flag { color: var(--light); letter-spacing: 0.18em; text-transform: uppercase; }
|
|
|
|
.tools { display: none; }
|
|
|
|
/*
|
|
* On a phone the band is the dock. The mode only shows while writing, and
|
|
* messages float just above the band as a toast, so they never squeeze the
|
|
* doors.
|
|
*/
|
|
@media (max-width: 767px) {
|
|
.status { padding: 0 6px; gap: 6px; overflow: visible; }
|
|
.hint, .file, .readout, .flag { display: none; }
|
|
.mode:not(.editing) { display: none; }
|
|
.tools { display: flex; flex: 1; height: 100%; }
|
|
|
|
.msg {
|
|
position: absolute;
|
|
left: 50%;
|
|
bottom: calc(100% + 8px);
|
|
max-width: calc(100% - 24px);
|
|
padding: 6px 12px;
|
|
border: 1px solid var(--overlay);
|
|
border-radius: var(--radius-s);
|
|
background: var(--surface);
|
|
box-shadow: 0 6px 24px rgb(0 0 0 / 0.45);
|
|
transform: translateX(-50%);
|
|
z-index: 20;
|
|
}
|
|
.msg:empty { display: none; }
|
|
}
|
|
</style>
|