Use the browser bridge from kestrove-core; webpki security update

The broker, pairing channel, IPC and kestrove-nmh moved to kestrove-core so the macOS app serves the extension too (a Mac no longer needs this app). Old module paths are re-exports. rustls-webpki 0.103.16 and webpki-roots 1.0.10 (RUSTSEC-2026-0381/0382). Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-21 10:02:49 +09:00
parent cf61f385d3
commit 5e59f50abc
12 changed files with 46 additions and 1643 deletions
@@ -15,26 +15,24 @@ path = "src/lib.rs"
 name = "kestrove-desktop"
 path = "src/main.rs"

-# Native messaging host: started by the browser, relays to the running app (docs/05).
+# Native messaging host: started by the browser, relays to the running app (docs/05). Shared with the macOS
+# app, so the source lives in kestrove-core (crates/kv-nmh).
 [[bin]]
 name = "kestrove-nmh"
-path = "src/bin/kestrove-nmh.rs"
+path = "../../kestrove-core/crates/kv-nmh/src/main.rs"

 [build-dependencies]
 tauri-build = { version = "2", features = [] }

 [dependencies]
 # Repos are checked out side by side (see ../../README.md).
-kv-ffi = { path = "../../kestrove-core/crates/kv-ffi" }
+kv-ffi = { path = "../../kestrove-core/crates/kv-ffi", features = ["browser-bridge"] }
+kv-ipc = { path = "../../kestrove-core/crates/kv-ipc" }
 tauri = { version = "2", features = ["tray-icon"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 arboard = "3"
-# Browser pairing channel (docs/05): X25519 + HKDF-SHA256 + AES-256-GCM (what WebCrypto offers on the extension side).
-x25519-dalek = { version = "2", features = ["static_secrets", "zeroize"] }
-hkdf = "0.12"
 sha2 = "0.10"
-aes-gcm = "0.10"
 getrandom = "0.2"
 base64 = "0.22"
 uuid = { version = "1", features = ["v4"] }