kestrove/kestrove-core
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
43 Commits 2 Branches 1 Tag
203bd9044d4f3545cc26033d8e61232514e477a5
Commit Graph
5 Commits
Author SHA1 Message Date
samiandClaude Opus 5.5 d45033f424 Bump uniffi 0.28 -> 0.32.2; drop the bincode and paste deny ignores
ci / test (push) Canceled after 0s
Details
ci / wasm (push) Canceled after 0s
Details
ci / deny (push) Canceled after 0s
Details
ci / fuzz (push) Canceled after 0s
Details 
uniffi 0.32 no longer depends on bincode (RUSTSEC-2025-0141) or paste
(RUSTSEC-2024-0436), so their ignores go. basic-toml (RUSTSEC-2026-0374)
stays: askama_derive 0.16 in uniffi_bindgen 0.32 still pulls it in.
kv-ffi compiles unchanged; regenerated Swift/Kotlin bindings need no
caller changes in kestrove-apple or kestrove-android.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-20 23:25:22 +09:00
samiandClaude Opus 5.5 2d32b20e81 deny: ignore RUSTSEC-2026-0374 (basic-toml unmaintained, build-time via uniffi_bindgen)
ci / test (push) Canceled after 0s
Details
ci / wasm (push) Canceled after 0s
Details
ci / deny (push) Canceled after 0s
Details
ci / fuzz (push) Canceled after 0s
Details 
No known vulnerability and no safe upgrade; only askama_derive 0.12 in uniffi_bindgen 0.28's code generator uses it. Goes away with a uniffi upgrade.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-20 22:42:24 +09:00
samiandClaude Opus 5.5 60c5cd9c0b CI: pinned actions, cargo deny, fuzz smoke; build-android.sh works on Linux 
- deny.toml: allow-wildcard-paths for the workspace's own path crates; ignore two
  unmaintained notices for uniffi 0.28's build-time deps (bincode, paste).
- build-android.sh ran uniffi-bindgen on libkv_ffi.dylib, which doesn't exist on the
  Linux CI runner; pick .so there.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-17 01:01:44 +09:00
samiandClaude Opus 5.5 2be9a3baad M1: persistent vault, local unlock key, sync client, test vectors 
kv-store: SQLite (bundled) and in-memory Store holding only ciphertext
envelopes, with base copies for three-way merges and a 10-version history.

kv-ffi: VaultCore::open(path); persisted account record; local unlock key
(enable/unlock_with_local_key/disable); async sync API (configure_server,
set_device_signer, register_account, login, sync_now, logout, devices);
DeviceSigner foreign trait; IntegrityAlarm/PinMismatch/... error variants.

kv-sync: reqwest + rustls (TLS 1.3 only, ring) with SPKI pinning; OPAQUE
client on kv-proto's OpaqueSuite; RFC 9421 signing per kv_proto::httpsig;
pull/push with If-Match, field-level three-way merge, edit-beats-delete;
signed manifest (canonical CBOR, Merkle root, prev chain, Ed25519) with
rollback/fork/Merkle checks as hard integrity alarms. Tested against a
wiremock fake server, plus an #[ignore] test against kestrove-server.

kv-crypto: gen-vectors example and tests reproducing kestrove-spec/vectors.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 21:52:14 +09:00
samiandClaude Opus 5.5 462fbbc523 Initial scaffold for kestrove-core 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 18:30:14 +09:00