feat: Implement medium-priority issues #47-#52

[olafkfreund]

Summary

• Feature request: copy url #49 — Split editor into collapsible Basic/Advanced sections. Basic shows category, persistent profile, window size, decorations. Advanced (toggled) shows private mode, mobile sim, user agent, permissions, custom CSS/JS, URL schemes.
• Creates desktop entry with empty Exec= line #51 — Add keyboard shortcuts: Ctrl+F (search), Ctrl+E (export), Ctrl+I (import), Ctrl+L (launch), Ctrl+D (duplicate).
• Icon not loading #52 — Quick-actions toolbar above the editor for installed apps with Run, Duplicate, Open in Browser, and Delete buttons.
• Following system color scheme #50 — Running app status indicators via /proc scanning every 5 seconds, displayed as a filled circle (●) prefix in the nav bar.
• I can not edit a web app #47 — Grid/card view toggle in the header bar with 64px icon cards. View mode persisted in config (bumped to v2). Clicking a card switches to the editor.
• Webapps use the same entry/icon as Firefox in the dock #48 — App preview thumbnails fetched via thum.io, cached for 24 hours. Auto-fetched on nav select, with a manual "Load Preview" button for installed apps.

Test plan

• Launch with just run and verify Basic/Advanced editor sections toggle correctly
• Test all keyboard shortcuts (Ctrl+F/E/I/L/D) work as expected
• Verify quick-actions toolbar appears for installed apps and buttons function
• Launch a webview app and confirm the running indicator (●) appears in nav after ~5s
• Toggle between grid and list view; verify grid cards display and clicking opens the editor
• Verify thumbnail preview loads for installed apps with valid URLs
• Delete existing config and verify defaults work; keep old v1 config and verify backward compat

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Implements a batch of medium-priority UX/features for Quick Web Apps, including editor UX improvements, app management actions, view mode persistence, thumbnails, keyboard shortcuts, and status indicators; also adds import/export and various hardening changes.

Changes:

• Add Basic/Advanced editor sections, quick-actions toolbar, duplication, and app data clearing.
• Add keyboard shortcuts, search, grid/list view toggle (persisted via config v2), and running-app indicators via /proc polling.
• Add thumbnail previews (thum.io) + favicon/title fetching, plus import/export of app configs and Nix flake packaging/docs updates.

Reviewed changes

Copilot reviewed 23 out of 31 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/localize.rs	Switch localization loader to std::sync::LazyLock.
src/lib.rs	Config v2 bump; add favicon/title/thumbnail download + caching helpers; add /proc running scan; improve error handling and blocking I/O usage.
src/launcher.rs	Harden DB reads; sanitize desktop entry fields; add desktop actions; add import/export implementation.
src/browser.rs	Add app-id sanitization + new per-app settings (UA, permissions, CSS/JS, schemes); change config load path.
src/bin/webview.rs	Add URL-scheme safety checks, permission/UA handling, notification forwarding, and custom CSS/JS injection.
src/bin/dev-heppen-webapps/pages/mod.rs	Add shortcuts, search, grid/list view, running indicators polling, quick-actions toolbar, import/export UI, toasts.
src/bin/dev-heppen-webapps/pages/iconpicker.rs	Improve file chooser error handling + empty search results UX.
src/bin/dev-heppen-webapps/pages/editor.rs	Basic/Advanced sections; favicon + title fetch; duplication; thumbnail loading; validation hints.
src/bin/dev-heppen-webapps/main.rs	Avoid panic on tracing subscriber init failure.
src/bin/dev-heppen-webapps/config.rs	Add persisted ViewMode and bump config version to 2.
resources/scripts/icon-installer.sh	Safer temp file handling + cleanup via trap; quote paths.
i18n/*/webapps.ftl	Add new strings for import/export, toasts, advanced settings, thumbnails, etc.
flake.nix / flake.lock	Add Nix flake build/devshell/checks; wrap PATH with wget.
README.md	Expand feature/docs; add Nix instructions and architecture section.
Cargo.toml / Cargo.lock	Add deps (notify-rust), remove once_cell/svg, pin libcosmic rev.
CLAUDE.md	Repository guide / architecture notes for Claude Code.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

sanitize_app_id truncates with sanitized[..MAX_APP_ID_LEN], which slices by byte index and can panic if the sanitized ID contains non-ASCII alphanumeric characters (UTF-8 multibyte). Consider either restricting to ASCII (is_ascii_alphanumeric) or truncating by chars().take(MAX_APP_ID_LEN) to guarantee valid boundaries.

Suggested change

	if sanitized.len() > MAX_APP_ID_LEN {
	sanitized[..MAX_APP_ID_LEN].to_string()
	if sanitized.chars().count() > MAX_APP_ID_LEN {
	sanitized.chars().take(MAX_APP_ID_LEN).collect()

[Copilot]

Browser::from_appid reads the entire RON file into memory before enforcing the 64KB limit. A large file in the database directory could still cause excessive memory usage/slowdown. Prefer checking metadata.len() (or reading only up to the limit) before read_to_string.

Suggested change

	let content = std::fs::read_to_string(&db_path).ok()?;
	// Same 64KB safety limit used in launcher::installed_webapps()
	const MAX_RON_SIZE: usize = 64 * 1024;
	if content.len() > MAX_RON_SIZE {
	tracing::warn!("RON file too large: {}", db_path.display());
	return None;
	}
	// Same 64KB safety limit used in launcher::installed_webapps()
	const MAX_RON_SIZE: usize = 64 * 1024;
	// Check file size via metadata before reading to avoid loading overly large files.
	let metadata = std::fs::metadata(&db_path).ok()?;
	if metadata.len() > MAX_RON_SIZE as u64 {
	tracing::warn!("RON file too large: {}", db_path.display());
	return None;
	}
	let content = std::fs::read_to_string(&db_path).ok()?;

[Copilot]

The package installs the main binary as dev.heppen.webapps (see justfile and apps.default.program), but meta.mainProgram is set to dev-heppen-webapps. This mismatch can affect tooling that relies on mainProgram. Consider setting mainProgram to dev.heppen.webapps.

Suggested change

	mainProgram = "dev-heppen-webapps";
	mainProgram = "dev.heppen.webapps";

[Copilot]

The Nix instructions reference github:olafkfreund/cosmic-ext-web-apps, which doesn’t match this repository (cosmic-utils/web-apps). This will mislead users trying to use the flake from this repo. Consider updating the URLs and directory names to point at the current repository / flake output names.