main.js

const { app, BrowserWindow, shell, Menu, session } = require("electron");
const path = require("path");

// Sandbox is enabled by default for security

// Disable menu bar for minimal look
Menu.setApplicationMenu(null);

let mainWindow;

function createWindow() {
  const iconPath = path.join(__dirname, "assets/whatsapp.svg");
  mainWindow = new BrowserWindow({
    width: 1200,
    height: 800,
    minWidth: 400,
    minHeight: 300,
    title: "Linked - WhatsApp",
    icon: iconPath,
    webPreferences: {
      nodeIntegration: false,
      contextIsolation: true,
      webviewTag: false,
      spellcheck: true,
      partition: "persist:whatsapp",
      sandbox: true,
      preload: undefined,
    },
    // Clean minimal look - no frame decorations like VS Code
    frame: false,
    autoHideMenuBar: true,
    backgroundColor: "#000000",
    show: false,
    titleBarStyle: "hidden",
    titleBarOverlay: false,
  });

  // Use Electron's Chrome version for user agent to ensure compatibility
  const electronVersion = process.versions.chrome;
  const userAgent = `Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${electronVersion} Safari/537.36`;
  mainWindow.webContents.setUserAgent(userAgent);

  // Load WhatsApp Web directly
  mainWindow.loadURL("https://web.whatsapp.com");

  // Security: Prevent data exfiltration via webRequest
  mainWindow.webContents.session.webRequest.onBeforeSendHeaders(
    (details, callback) => {
      const url = new URL(details.url);
      // Only allow requests to WhatsApp domains
      const allowedDomains = [
        "web.whatsapp.com",
        "whatsapp.com",
        "whatsapp.net",
      ];
      const isAllowed = allowedDomains.some((domain) =>
        url.hostname.endsWith(domain),
      );
      if (!isAllowed) {
        console.warn(`Blocked external request to: ${details.url}`);
      }
      callback({ requestHeaders: details.requestHeaders });
    },
  );

  // Show window when ready to prevent visual flash
  mainWindow.once("ready-to-show", () => {
    mainWindow.show();
  });

  // Handle external links - open in default browser
  mainWindow.webContents.setWindowOpenHandler(({ url }) => {
    shell.openExternal(url);
    return { action: "deny" };
  });

  // Handle navigation to external URLs
  mainWindow.webContents.on("will-navigate", (event, url) => {
    try {
      const parsedUrl = new URL(url);
      const isWhatsApp =
        parsedUrl.hostname === "web.whatsapp.com" &&
        parsedUrl.protocol === "https:";
      if (!isWhatsApp) {
        event.preventDefault();
        shell.openExternal(url);
      }
    } catch (e) {
      // Invalid URL, prevent navigation
      event.preventDefault();
    }
  });

  mainWindow.on("closed", () => {
    mainWindow = null;
  });
}

app.whenReady().then(() => {
  // Set permissions for notifications and media
  session.defaultSession.setPermissionRequestHandler(
    (webContents, permission, callback) => {
      const allowedPermissions = [
        "notifications",
        "media",
        "mediaKeySystem",
        "geolocation",
      ];
      callback(allowedPermissions.includes(permission));
    },
  );

  createWindow();

  app.on("activate", () => {
    if (BrowserWindow.getAllWindows().length === 0) {
      createWindow();
    }
  });
});

app.on("window-all-closed", () => {
  if (process.platform !== "darwin") {
    app.quit();
  }
});

// Prevent multiple instances
const gotTheLock = app.requestSingleInstanceLock();

if (!gotTheLock) {
  app.quit();
} else {
  app.on("second-instance", () => {
    if (mainWindow) {
      if (mainWindow.isMinimized()) mainWindow.restore();
      mainWindow.focus();
    }
  });
}