kestrove/kestrove-desktop
2
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases 1 Wiki Activity
7 Commits 2 Branches 2 Tags
7701b65087052823954f9351a874435b50a2f33c
Commit Graph
6 Commits
Author SHA1 Message Date
samiandClaude Opus 5.5 7701b65087 Update Cargo.lock for core passkey and import dependencies
ci / build (ubuntu-22.04) (push) Canceled after 0s
Details
ci / build (windows-2025) (push) Canceled after 0s
Details
ci / deny (push) Canceled after 0s
Details 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-17 08:23:40 +09:00
samiandClaude Opus 5.5 62f2dc3dca CI: valid YAML, pinned actions, fmt, cargo deny and npm audit 
The old workflow was invalid YAML (unquoted ${{ }} in a flow mapping) and never ran.
deny.toml: allows BSL-1.0 (arboard's Windows deps) and CDLA-Permissive-2.0
(webpki-roots); ignores three unmaintained-crate notices for build-time proc-macros
(uniffi 0.28, glib-macros 0.18) that need upstream upgrades.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-17 00:53:36 +09:00
samiandClaude Opus 5.5 21ff829405 Fuzz the native-messaging framing and the broker's pairing protocol 
src-tauri/fuzz: nmh_session drives a whole kestrove-nmh connection through
Broker::serve (framing, outer JSON, pair_init/pair_confirm/open/msg); frame_read
checks read_frame. 8 min each (2.5 M / 2.7 M execs): no findings.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-17 00:53:36 +09:00
samiandClaude Opus 5.5 578ae57a0a Add rustfmt.toml (same as core and server) and apply cargo fmt 
Formatting only. CI now runs cargo fmt --check here as in the other Rust repos.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-17 00:49:00 +09:00
samiandClaude Opus 5.5 923c466dea M3: working desktop app + browser pairing channel 
- Builds and runs (tauri build --debug); placeholder icons; persistent VaultCore::open in the
  OS app-data dir; Secret Key remembered on the device; tray keeps the app serving the extension.
- Auto-lock: idle (system idle on Windows/macOS, in-app activity on Linux), screen lock, sleep.
- Local IPC for kestrove-nmh: 0700 dir + 0600 Unix socket with peer-uid checks; Windows named
  pipe (first instance, local only, user DACL, client SID check) behind cfg.
- Pairing channel: X25519 → HKDF → 6-word fingerprint confirmed in both UIs, per-connection
  session keys, AES-256-GCM with strict counters. Test vectors shared with kestrove-browser.
- Broker: query/fill/totp/save with origin re-checks; pairing and save prompts in the UI.
- kestrove-nmh relays ciphertext only; native-host installers for Linux/macOS/Windows.
- Tests: unit tests, tests/nmh_stdio.rs (real kestrove-nmh over stdio), examples/test-host.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-16 20:13:54 +09:00
samiandClaude Opus 5.5 d2cbd56ff7 Initial scaffold for kestrove-desktop 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 18:30:14 +09:00