fix(desktop): grant the localhost webview IPC access so the updater works (#57)

The window loads the whole app over HTTP (http://localhost:34115), which Tauri
treats as remote content — and remote content gets no command access by default.
So the updater's invoke() calls were silently denied and the toast never showed
(the rest of the app talks to the server over HTTP, so the updater was the first
thing to need IPC). Add a remote.urls grant for the local server to the capability.

Also log the updater check in every build and stop swallowing the JS error, so an
IPC/updater failure is diagnosable from a terminal instead of silent.

Author: ApocDev

app/src-tauri/capabilities/default.json

@@ -1,8 +1,11 @@
 {
   "$schema": "../gen/schemas/desktop-schema.json",
   "identifier": "default",
-  "description": "enables the default permissions",
+  "description": "Default permissions, plus IPC access for the local server the window loads (http://localhost:34115). The shell serves the whole app over HTTP, so to Tauri its content is 'remote' and needs an explicit grant to call commands (e.g. the updater).",
   "windows": ["main"],
+  "remote": {
+    "urls": ["http://localhost:34115", "http://localhost:34115/*"]
+  },
   "permissions": [
     "core:default",
     {

app/src-tauri/src/lib.rs

@@ -124,12 +124,19 @@ async fn updater_check(
     app: tauri::AppHandle,
     pending: tauri::State<'_, PendingUpdate>,
 ) -> Result<Option<UpdateInfo>, String> {
-    let update = app
-        .updater()
-        .map_err(|e| e.to_string())?
-        .check()
-        .await
-        .map_err(|e| e.to_string())?;
+    log::info!("updater_check: querying for updates");
+    let updater = app.updater().map_err(|e| {
+        log::error!("updater_check: updater unavailable: {e}");
+        e.to_string()
+    })?;
+    let update = updater.check().await.map_err(|e| {
+        log::error!("updater_check: check failed: {e}");
+        e.to_string()
+    })?;
+    match &update {
+        Some(u) => log::info!("updater_check: update available: {}", u.version),
+        None => log::info!("updater_check: up to date"),
+    }
     let info = update.as_ref().map(|u| UpdateInfo {
         version: u.version.clone(),
         current_version: u.current_version.clone(),
@@ -205,13 +212,14 @@ pub fn run() {
         .manage(PendingUpdate(Mutex::new(None)))
         .invoke_handler(tauri::generate_handler![updater_check, updater_install])
         .setup(|app| {
-            if cfg!(debug_assertions) {
-                app.handle().plugin(
-                    tauri_plugin_log::Builder::default()
-                        .level(log::LevelFilter::Info)
-                        .build(),
-                )?;
-            }
+            // Log in every build (stdout + the OS log dir), so the updater path — the
+            // one place that uses Tauri IPC — can be diagnosed from a terminal even on
+            // a release, where the webview console isn't available.
+            app.handle().plugin(
+                tauri_plugin_log::Builder::default()
+                    .level(log::LevelFilter::Info)
+                    .build(),
+            )?;
 
             // Bundled build: start the server via the vendored node sidecar. The data
             // dir is the per-OS app-data dir; migrations + mod source are bundled

app/src/components/update-prompt.tsx

@@ -44,7 +44,7 @@ export function UpdatePrompt() {
     checked.current = true;
     checkForUpdate()
       .then((u) => u && setUpdate(u))
-      .catch(() => {});
+      .catch((err) => console.error("[updater] check failed", err));
   }, []);
 
   if (!update) return null;