samiandClaude Opus 5.5
b5ced32be3
New crate crates/kv-wasm runs the same crypto, item model and sync engine in the browser: - WebStore: in-memory replica of kv-store's Store, each changed entry written to IndexedDB (ciphertext only) before the JS call resolves. - Device key: non-extractable WebCrypto ECDSA P-256 key in IndexedDB (raw r||s signatures). - WebCore mirrors kv-ffi's VaultCore; wasm-bindgen surface in camelCase with TypeScript types, plus a Web Worker wrapper (connectVault) so Argon2id never blocks the page. - Tests: Chrome (IndexedDB, WebCrypto, RFC 9421 verify), shared envelope fixtures both ways with kv-ffi, native sync with kv-ffi via the test server, Node smoke of the built package. Small changes to shared crates so they build for wasm32: - kv-store: SqliteStore moved to a native-only module. - kv-sync: rustls/pinning/tokio native only (fetch on wasm); DeviceSigner::sign_async (default wraps sign) used by ApiClient; unix_now() instead of SystemTime/now_utc. - kv-model: Public Suffix List behind a default `psl` feature (kv-ffi keeps it; the web build drops ~0.9 MB of code and matches same-host only). - wasm-release profile (opt-level z, Argon2 at 3) and a wasm CI job. Co-Authored-By: Claude Opus 5.5 <[email protected]>
22 lines
964 B
Rust
22 lines
964 B
Rust
//! The Kestrove core for the web vault, compiled to WebAssembly (`wasm-pack build crates/kv-wasm`).
|
|
//!
|
|
//! The browser runs the same crypto, item model and sync engine as the apps; the server stays
|
|
//! zero-knowledge. Platform pieces replaced for the browser:
|
|
//! * storage: [`store::WebStore`], an in-memory replica persisted entry by entry to IndexedDB;
|
|
//! * network: reqwest over `fetch` (the browser's TLS, same origin as the web vault; no SPKI pins);
|
|
//! * device key: a non-extractable WebCrypto ECDSA P-256 key kept in IndexedDB;
|
|
//! * randomness and time: `crypto.getRandomValues` and `Date.now()`.
|
|
//!
|
|
//! [`core::WebCore`] holds the logic and is plain Rust (tested natively too); the `wasm` module is
|
|
//! the `wasm-bindgen` surface. See `README.md` for the JS API and how the UI should call it.
|
|
|
|
pub mod core;
|
|
pub mod dto;
|
|
pub mod error;
|
|
pub mod store;
|
|
#[cfg(target_arch = "wasm32")]
|
|
mod wasm;
|
|
|
|
pub use crate::core::WebCore;
|
|
pub use error::CoreError;
|