feat(manacore/web): add places module with GPS location tracking

New local-first places module for the workbench: browser Geolocation API
tracking, place management (CRUD, favorites, tags, categories), OSM map
preview in detail view, and proximity-based visit detection.

Also allows geolocation in Permissions-Policy header (self only).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Till JS 2026-04-03 14:33:56 +02:00
parent e17d6228e4
commit 8f5727fd51
15 changed files with 1656 additions and 2 deletions

View file

@ -49,7 +49,7 @@ export function setSecurityHeaders(response: Response, options: SecurityHeadersO
response.headers.set('X-Frame-Options', 'DENY');
response.headers.set('X-Content-Type-Options', 'nosniff');
response.headers.set('Referrer-Policy', 'strict-origin-when-cross-origin');
response.headers.set('Permissions-Policy', 'camera=(), microphone=(), geolocation=()');
response.headers.set('Permissions-Policy', 'camera=(), microphone=(), geolocation=(self)');
// Content Security Policy
const cspDirectives = [