Merge branch 'main' into feature/mobile-detection-message

feat: add mobile viewport detection with friendly unavailable message
Detect mobile viewport (window.innerWidth < 768) at startup and show a centered 'Not yet available on mobile' message instead of the full monitoring UI. All polling, gateway detection, and network requests are skipped entirely on mobile viewports. Desktop behavior is completely unchanged — the mobile check is the very first thing in init() and returns early before any other setup runs.
2026-07-25 17:49:06 +07:00 · 2026-03-16 21:18:55 -07:00
12 changed files with 109 additions and 223 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -1,27 +1,4 @@
-# OS
-.DS_Store
-Thumbs.db
-
-# Editors
-*.swp
-*.swo
-*~
-*.bak
-.idea/
-.vscode/
-*.sublime-*
-
-# Node
 node_modules/
-
-# Environment / secrets
-.env
-.env.*
-*.pem
-*.key
-
-# Build output
 dist/
-
-# Logs
+.DS_Store
 *.log
--- a/7
+++ b/7
@@ -3,12 +3,9 @@ FROM node@sha256:e4bf2a82ad0a4037d28035ae71529873c069b13eb0455466ae0bc13363826e3
 WORKDIR /app
 COPY package.json yarn.lock ./
 RUN yarn install --frozen-lockfile
-RUN apk add --no-cache git make
+RUN apk add --no-cache git
 COPY . .
-# make check runs script/check (test + lint + fmt-check); its test step
-# is the production yarn build, so this both produces dist/ and gates the
-# image on lint/fmt-check/test regressions, not merely a broken build.
-RUN make check
+RUN yarn build

 # nginx:stable-alpine as of 2026-02-22
 FROM nginx@sha256:15e96e59aa3b0aada3a121296e3bce117721f42d88f5f64217ef4b18f458c6ab
--- a/Dockerfile.backend
+++ b/Dockerfile.backend
@@ -1,50 +1,25 @@
-# Lint stage — fast feedback on formatting and lint issues. The
-# golangci/golangci-lint image ships Go, gofmt, make and the linter, so
-# nothing is installed here.
-# golangci/golangci-lint:v2.12.2 (2026-08-10)
-FROM golangci/golangci-lint@sha256:5cceeef04e53efe1470638d4b4b4f5ceefd574955ab3941b2d9a68a8c9ad5240 AS lint
-
-WORKDIR /src
-COPY backend/go.mod backend/go.sum ./
-RUN go mod download
-COPY backend/ .
-RUN make fmt-check
-RUN make lint
-
-# Build stage
 # golang:1.25-alpine (2026-02-27)
 FROM golang:1.25-alpine@sha256:f6751d823c26342f9506c03797d2527668d095b0a15f1862cddb4d927a7a4ced AS builder

-RUN apk add --no-cache make
+RUN apk add --no-cache git make gcc musl-dev

-WORKDIR /src
-
-# Force BuildKit to run the lint stage before proceeding. BuildKit runs
-# stages in parallel by default; without this no-op copy a lint failure
-# would not gate compilation.
-COPY --from=lint /src/go.sum /dev/null
+# golangci-lint v2.7.2 (2026-02-27)
+RUN CGO_ENABLED=0 go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@9f61b0f53f80672872fced07b6874397c3ed197b

+WORKDIR /repo/backend
 COPY backend/go.mod backend/go.sum ./
 RUN go mod download
+COPY .git /repo/.git
 COPY backend/ .

-RUN make test
+RUN make check
+RUN make build

-# The build is driven through the Makefile so there is exactly one
-# definition of the build command; it expands to
-# CGO_ENABLED=0 go build -trimpath -ldflags "-s -w -X main.Version=... -X main.Buildarch=..."
-# VERSION is handed over in the environment rather than as a make
-# variable so it still reaches the build if the target is ever turned
-# into a shim around a script.
-ARG VERSION=dev
-RUN VERSION="${VERSION}" make build
-
-# Runtime stage
 # alpine:3.23 (2026-02-27)
 FROM alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659

 RUN apk add --no-cache ca-certificates
-COPY --from=builder /src/netwatch-server /usr/local/bin/netwatch-server
+COPY --from=builder /repo/backend/netwatch-server /usr/local/bin/netwatch-server

 EXPOSE 8080
 ENTRYPOINT ["netwatch-server"]
--- a/README.md
+++ b/README.md
@@ -125,6 +125,9 @@ dist/
  false outage)
 - Clickable service URLs
 - Canvas-based sparkline rendering with devicePixelRatio scaling
+- Mobile detection: viewports narrower than 768px show a friendly "not yet
+  available on mobile" message instead of the monitoring UI (no polling or
+  network requests on mobile)
 - Zero runtime dependencies: all resources bundled into build artifacts

 ## Deployment
@@ -148,6 +151,8 @@ properties.

 ## Limitations

+- **Mobile**: Viewports below 768px wide show a static "not yet available"
+  message. The full monitoring UI requires a desktop-width browser.
 - **CORS**: Some hosts may block cross-origin HEAD requests. The app uses
  `no-cors` mode which allows the request but provides opaque responses. Latency
  is still measurable based on request timing.
--- a/TODO.md
+++ b/TODO.md
@@ -10,49 +10,23 @@

 # Status

-pre-1.0. No git tags. `feat/reportbuf-storage` is merged; the backend, the CI
-workflow, and the backend repo standard files are all on `main`. Frontend and
-backend are both functional. Working toward the 1.0.0 milestone by closing the
-remaining repo-compliance issues on the tracker.
+pre-1.0. No git tags. Backend work in flight on feat/reportbuf-storage (dirty:
+src/main.js). Frontend is functional; backend is new and unmerged.

 # Next Step

-Confirm the `.gitea/workflows/check.yml` run is green (main always green
-policy). The workflow file is already on `main`; what is unverified is that its
-latest run passes.
+Land feat/reportbuf-storage: finish the in-progress src/main.js change, get make
+check green, and merge the branch to main. The branch adds the backend (buffered
+zstd-compressed report storage), the CI workflow, and backend repo standard
+files, so merging it also closes most compliance gaps.

 # Completed Steps

- 2026-08-10: adopted the org-standard `backend/.golangci.yml` verbatim and
-  moved the pinned golangci-lint from v2.7.2 to v2.12.2 (the `lint` stage of
-  `Dockerfile.backend` now pins the `golangci/golangci-lint:v2.12.2` image by
-  digest); the previous config declared `version: "2"` but used v1 schema keys,
-  so every threshold in it was inert and its green result was meaningless.
-  `backend/Makefile`'s `lint` target now asserts the config's sha256 against the
-  canonical file first, so drift from the org standard fails the build instead
-  of silently degrading to defaults
- 2026-08-10: every interactive control now meets the 44x44 CSS px minimum tap
-  target (`.pin-btn`, `#interval-select`, the debug-log label and, on narrow
-  viewports, `#pause-btn`). The pin button's hit area grows via matching
-  negative margins, so its layout footprint and row density are unchanged
- 2026-08-10: per-host status line wraps below the 768px breakpoint instead of
-  forcing horizontal page scroll at 320px
- 2026-08-09: `Dockerfile.backend` reworked to the mandated Go multistage
-  lint-stage pattern: separate `lint` stage on the hash-pinned
-  `golangci/golangci-lint` image, `COPY --from=lint` stage dependency,
-  `CGO_ENABLED=0` static build driven by `ARG VERSION`, and no more `COPY .git`
- 2026-08-09: dotfile compliance — lifted `backend/.editorconfig` to the repo
-  root so `root = true` covers the frontend too, and replaced `.gitignore` with
-  the org model (OS, editor, node, and environment/secrets sections) plus this
-  repo's `dist/` and `*.log`. `.env`, `.env.*`, `*.pem`, and `*.key` are now
-  ignored repo-wide, not just under `backend/`. Excluding `.git` from
-  `.dockerignore` stays deferred: both images read git metadata at build time
-  (`COPY .git` in `Dockerfile.backend`, `git rev-parse` in `vite.config.js`)
 - 2026-07-07 Adopted scripts-to-rule-them-all: `script/` entrypoints, Makefile
  shims, README Entrypoints section
 - 2026-02-27: backend with buffered zstd-compressed report storage; CI workflow
  and backend repo standard files; backend Dockerfile fixed (Go 1.25,
-  golangci-lint) and moved to repo root (feat/reportbuf-storage)
+  golangci-lint) and moved to repo root (feat/reportbuf-storage, unmerged)
 - 2026-02-26: host row layout redesigned with CSS grid; overflow and spacing
  fixes; nginx config extracted; port hardcoded to 8080
 - 2026-02-26: debug log panel, median stats, recovery probe, Docker build fix,
@@ -65,11 +39,9 @@ latest run passes.

 # Future Steps

+- Compliance top-up as one small commit: add .editorconfig and add the hooks
+  target to the Makefile
+- After merge, confirm .gitea/workflows/check.yml is on main and CI is green
+  (main always green policy)
 - Decide what to do with untracked resume.sh: commit it, gitignore it, or delete
  it
- Upstream fix needed in `sneak/prompts`: the org-standard `.golangci.yml`
-  enables `gomodguard`, which golangci-lint v2.12.2 reports as deprecated since
-  v2.12.0 and replaced by `gomodguard_v2`, so every backend lint run prints a
-  deprecation warning. The file is standardized and must never be edited in this
-  repo, so nothing can be done here beyond tracking it — tracked at
-  <https://git.eeqj.de/sneak/netwatch/issues/41>
--- a/backend/.editorconfig
+++ b/backend/.editorconfig
--- a/backend/.golangci.yml
+++ b/backend/.golangci.yml
@@ -1,9 +1,5 @@
 version: "2"

-# Config schema uses the golangci-lint v2 layout (settings live under
-# linters.settings, not top-level linters-settings) so that the
-# thresholds below are actually applied by golangci-lint >= v2.
-
 run:
  timeout: 5m
  modules-download-mode: readonly
@@ -18,7 +14,8 @@ linters:
    - wsl              # Deprecated, replaced by wsl_v5
    - wrapcheck        # Too verbose for internal packages
    - varnamelen       # Short names like db, id are idiomatic Go
-  settings:
+
+linters-settings:
  lll:
    line-length: 88
  funlen:
@@ -30,5 +27,6 @@ linters:
    threshold: 100

 issues:
+  exclude-use-default: false
  max-issues-per-linter: 0
  max-same-issues: 0
--- a/backend/Makefile
+++ b/backend/Makefile
@@ -1,46 +1,30 @@
-# VERSION is overridable (the Dockerfile passes its ARG VERSION in) and
-# degrades to "dev" when git is unavailable or there is no .git — the
-# build must not depend on the repository history being in the build
-# context.
-VERSION ?= $(shell { git describe --always --dirty; } 2>/dev/null || echo dev)
+UNAME_S := $(shell uname -s)
+VERSION := $(shell git describe --always --dirty)
 BUILDARCH := $(shell uname -m)
 BINARY := netwatch-server

-GOLDFLAGS += -s -w
 GOLDFLAGS += -X main.Version=$(VERSION)
 GOLDFLAGS += -X main.Buildarch=$(BUILDARCH)

-# macOS ships shasum rather than sha256sum.
-SHA256SUM := $(shell command -v sha256sum >/dev/null 2>&1 && echo sha256sum || echo shasum -a 256)
-
-# .golangci.yml is standardized org-wide and must never be edited here
-# (REPO_POLICIES.md). Its last silent drift replaced the v2 schema with
-# v1 keys, which left every threshold in the file inert while the build
-# stayed green. The lint target therefore asserts the file still matches
-# the canonical copy byte for byte. The check is a local hash comparison:
-# no network, no remote schema, nothing unpinned in the build path.
-GOLANGCI_CONFIG_SHA256 := 021cc83f4e6fc7c31b95b34b846723dfcf20b66b7baeea1dc40406e643346bcb
+ifeq ($(UNAME_S),Darwin)
+	GOFLAGS := -ldflags "$(GOLDFLAGS)"
+else
+	GOFLAGS = -ldflags "-linkmode external -extldflags -static $(GOLDFLAGS)"
+endif

 .PHONY: all build test lint fmt fmt-check check docker hooks run clean

 all: build

-build:
-	CGO_ENABLED=0 go build -trimpath -ldflags "$(GOLDFLAGS)" \
-		-o ./$(BINARY) ./cmd/netwatch-server/
+build: ./$(BINARY)
+
+./$(BINARY): $(shell find . -name '*.go' -type f) go.mod go.sum
+	go build -o $@ $(GOFLAGS) ./cmd/netwatch-server/

 test:
 	timeout 30 go test ./...

 lint:
-	@actual=$$($(SHA256SUM) .golangci.yml | cut -d' ' -f1); \
-	if [ "$$actual" != "$(GOLANGCI_CONFIG_SHA256)" ]; then \
-		echo ".golangci.yml has drifted from the org standard."; \
-		echo "  expected $(GOLANGCI_CONFIG_SHA256)"; \
-		echo "  actual   $$actual"; \
-		echo "Restore it verbatim from sneak/prompts; do not edit it."; \
-		exit 1; \
-	fi
 	golangci-lint run ./...

 fmt:
--- a/backend/internal/reportbuf/reportbuf.go
+++ b/backend/internal/reportbuf/reportbuf.go
@@ -163,9 +163,7 @@ func (b *Buffer) writeFile(data []byte) {
 	name := fmt.Sprintf("reports-%s.jsonl.zst", ts)
 	path := filepath.Join(b.dataDir, name)

-	// path is built from the operator-supplied dataDir plus a
-	// generated timestamp, so it carries no external input.
-	f, err := os.OpenFile( //nolint:gosec // see comment above
+	f, err := os.OpenFile( //nolint:gosec // path built from controlled dataDir + timestamp
 		path,
 		os.O_WRONLY|os.O_CREATE|os.O_EXCL,
 		filePerms,
--- a/backend/internal/server/server.go
+++ b/backend/internal/server/server.go
@@ -62,10 +62,7 @@ func New(
 		OnStart: func(_ context.Context) error {
 			s.startupTime = time.Now().UTC()

-			// The fx OnStart context is scoped to startup and is
-			// cancelled once the hook returns; run() derives its
-			// own context instead of inheriting this one.
-			go func() { //nolint:contextcheck // see comment above
+			go func() { //nolint:contextcheck // fx OnStart ctx is startup-only; run() creates its own
 				s.run()
 			}()

@@ -97,7 +94,7 @@ func (s *Server) run() {
 }

 func (s *Server) serve() int {
-	var ctx context.Context
+	var ctx context.Context //nolint:wsl // ctx must be declared before multi-assign

 	ctx, s.cancelFunc = context.WithCancel(
 		context.Background(),
--- a/src/main.js
+++ b/src/main.js
@@ -537,12 +537,6 @@ class SparklineRenderer {

 // --- UI Renderer -------------------------------------------------------------

-// The per-host status line must stay wrappable: its populated content is
-// wider than the host column at a 320px viewport, and `whitespace-nowrap`
-// here overflows the element and forces the whole document to scroll
-// horizontally.
-const STATUS_TEXT_CLASS = "status-text text-xs text-right col-span-2 mt-5";
-
 function hostRowHTML(host, index, showPin = true) {
    const pinColor = host.pinned
        ? "text-blue-500"
@@ -568,7 +562,7 @@ function hostRowHTML(host, index, showPin = true) {
            <span class="text-gray-500">---</span>
          </div>
          <a href="${host.url}" target="_blank" rel="noopener" class="text-xs text-gray-500 truncate block col-span-2 -mt-2">${host.url}</a>
-          <div class="${STATUS_TEXT_CLASS} text-gray-500" data-host="${index}">waiting...</div>
+          <div class="status-text text-xs text-gray-500 whitespace-nowrap text-right col-span-2 mt-5" data-host="${index}">waiting...</div>
        </div>
        <div class="flex-grow sparkline-container rounded overflow-hidden border border-gray-700/30">
          <canvas class="sparkline-canvas w-full" data-host="${index}" height="${CONFIG.canvasHeight}"></canvas>
@@ -677,7 +671,7 @@ function buildUI(state) {
        </p>
        <p class="mt-2"><a href="https://git.eeqj.de/sneak/netwatch/commit/${__COMMIT_FULL__}" target="_blank" rel="noopener" class="text-gray-600 hover:text-gray-400">${__COMMIT_HASH__}</a></p>
        <p class="mt-2">
-          <label class="debug-toggle-label cursor-pointer">
+          <label class="cursor-pointer">
            <input type="checkbox" id="debug-toggle" class="mr-1">
            <span>Debug log</span>
          </label>
@@ -694,26 +688,6 @@ function buildUI(state) {

 // --- UI Updaters -------------------------------------------------------------

-// Renders `min 1ms / med 2ms / avg 3ms / max 4ms`. Each label, value and
-// trailing separator is one unbreakable unit, so wrapping only ever happens
-// between stats and a wrapped line never starts with a separator.
-function statusStatsHTML(stats) {
-    return stats
-        .map(([label, value], i) => {
-            const sep =
-                i < stats.length - 1
-                    ? ` <span class="text-gray-500">/</span>`
-                    : "";
-            return (
-                `<span class="whitespace-nowrap">` +
-                `<span class="text-gray-400">${label} </span>` +
-                `<span class="${latencyClass(value, "online")}">${value}ms</span>` +
-                `${sep}</span>`
-            );
-        })
-        .join(" ");
-}
-
 function updateHostRow(host, index) {
    const latencyEl = document.querySelector(
        `.latency-value[data-host="${index}"]`,
@@ -738,22 +712,28 @@ function updateHostRow(host, index) {
    const min = host.minLatency();
    const max = host.maxLatency();
    if (host.status === "online" && avg !== null) {
-        statusEl.innerHTML = statusStatsHTML([
-            ["min", min],
-            ["med", med],
-            ["avg", avg],
-            ["max", max],
-        ]);
-        statusEl.className = STATUS_TEXT_CLASS;
+        statusEl.innerHTML =
+            `<span class="text-gray-400">min </span><span class="${latencyClass(min, "online")}">${min}ms</span>` +
+            ` <span class="text-gray-500">/</span> ` +
+            `<span class="text-gray-400">med </span><span class="${latencyClass(med, "online")}">${med}ms</span>` +
+            ` <span class="text-gray-500">/</span> ` +
+            `<span class="text-gray-400">avg </span><span class="${latencyClass(avg, "online")}">${avg}ms</span>` +
+            ` <span class="text-gray-500">/</span> ` +
+            `<span class="text-gray-400">max </span><span class="${latencyClass(max, "online")}">${max}ms</span>`;
+        statusEl.className =
+            "status-text text-xs whitespace-nowrap text-right col-span-2 mt-5";
    } else if (host.status === "offline") {
        statusEl.textContent = "unreachable";
-        statusEl.className = `${STATUS_TEXT_CLASS} text-red-400`;
+        statusEl.className =
+            "status-text text-xs text-red-400 whitespace-nowrap text-right col-span-2 mt-5";
    } else if (host.status === "error") {
        statusEl.textContent = "timeout";
-        statusEl.className = `${STATUS_TEXT_CLASS} text-orange-400`;
+        statusEl.className =
+            "status-text text-xs text-orange-400 whitespace-nowrap text-right col-span-2 mt-5";
    } else {
        statusEl.textContent = "connecting...";
-        statusEl.className = `${STATUS_TEXT_CLASS} text-gray-500`;
+        statusEl.className =
+            "status-text text-xs text-gray-500 whitespace-nowrap text-right col-span-2 mt-5";
    }

    SparklineRenderer.draw(canvas, host.history);
@@ -1064,7 +1044,8 @@ function greyOutUI(state) {
        }
        if (statusEl) {
            statusEl.textContent = "paused";
-            statusEl.className = `${STATUS_TEXT_CLASS} text-gray-500`;
+            statusEl.className =
+                "status-text text-xs text-gray-500 whitespace-nowrap text-right col-span-2 mt-5";
        }
        // Grey out the status dot
        const row = document.querySelector(`.host-row[data-index="${i}"]`);
@@ -1145,11 +1126,46 @@ function handleResize(state) {
    });
 }

+// --- Mobile Detection --------------------------------------------------------
+
+const MOBILE_BREAKPOINT = 768;
+
+function isMobileViewport() {
+    return window.innerWidth < MOBILE_BREAKPOINT;
+}
+
+function buildMobileUI() {
+    const app = document.getElementById("app");
+    app.innerHTML = `
+    <div class="mx-auto px-[5%] py-8">
+      <header class="mb-8">
+        <h1 class="text-3xl font-bold text-white"><a href="https://git.eeqj.de/sneak/netwatch" target="_blank" rel="noopener" class="underline decoration-dashed decoration-gray-500 underline-offset-4">NetWatch</a> by <a href="https://sneak.berlin" target="_blank" rel="noopener" class="text-blue-400 underline hover:text-blue-300">@sneak</a></h1>
+        <p class="text-gray-400 text-sm mt-2">Real-time network latency monitor</p>
+      </header>
+      <div class="flex items-center justify-center min-h-[60vh]">
+        <div class="bg-gray-800/70 border border-gray-700/50 rounded-lg p-8 max-w-md text-center">
+          <p class="text-4xl mb-4">📡</p>
+          <p class="text-xl font-semibold text-white mb-2">Not yet available on mobile</p>
+          <p class="text-gray-400 text-sm">NetWatch requires a wider viewport to display latency charts and monitoring data. Please visit on a desktop browser.</p>
+        </div>
+      </div>
+      <footer class="mt-8 text-center text-gray-600 text-xs">
+        <p><a href="https://git.eeqj.de/sneak/netwatch/commit/${__COMMIT_FULL__}" target="_blank" rel="noopener" class="text-gray-600 hover:text-gray-400">${__COMMIT_HASH__}</a></p>
+      </footer>
+    </div>`;
+}
+
 // --- Bootstrap ---------------------------------------------------------------

 async function init() {
    log.info("NetWatch starting");

+    if (isMobileViewport()) {
+        log.info("Mobile viewport detected — skipping monitoring");
+        buildMobileUI();
+        return;
+    }
+
    // Probe common gateway IPs to find the local router
    const gateway = await detectGateway();
    const localHosts = [LOCAL_CPE];
--- a/src/styles.css
+++ b/src/styles.css
@@ -14,38 +14,6 @@ body {
        ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, monospace;
 }

-/* ---- Minimum tap targets ----------------------------------------------
-   Every interactive control is at least 44x44 CSS px (Apple HIG, WCAG 2.2
-   SC 2.5.5). Not scoped to a breakpoint or to `pointer: coarse`: a large
-   phone in landscape is above the 768px breakpoint and still a touch
-   device. */
-
-/* The button grows to 44x44 while the negative margins keep its layout
-   footprint at the 16x16 of the icon inside it, so row height and the
-   icon's position are unchanged. */
-.pin-btn {
-    display: flex;
-    align-items: center;
-    justify-content: center;
-    width: 2.75rem;
-    height: 2.75rem;
-    margin: -0.875rem;
-}
-
-/* A select paints its own background and border, so it has to actually be
-   44 tall rather than borrow the trick above. */
-#interval-select {
-    min-height: 2.75rem;
-}
-
-/* The tappable target for #debug-toggle is the label wrapping it. */
-.debug-toggle-label {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-height: 2.75rem;
-}
-
 .sparkline-container {
    background: linear-gradient(
        to bottom,
@@ -70,10 +38,9 @@ body {
        gap: 0.75rem;
    }

-    /* Pause button: smaller on mobile, but not below the tap-target floor */
+    /* Pause button: smaller on mobile */
    #pause-btn {
        padding: 0.5rem 1rem;
-        min-height: 2.75rem;
    }

    #pause-btn svg {