# kestrove-desktop

**Windows and Linux** app built on Tauri 2. The Rust side links `kestrove-core`'s `kv-ffi`
directly. The web UI only renders and never touches keys. macOS uses the native `kestrove-apple` app.

Also ships `kestrove-nmh`, the **native-messaging host** that bridges `kestrove-browser` to the app.

```bash
# prerequisites: rustup, Node 20+, and Tauri's OS deps (https://tauri.app/start/prerequisites/)
npm install
npm run tauri icon path/to/logo.png   # generates src-tauri/icons (required before building)
npm run tauri dev
npm run tauri build                   # MSI/NSIS on Windows, AppImage/deb on Linux
```

## Roadmap (M3, kestrove-spec/docs/07)
- [ ] Persistent vault + sync (kv-store / kv-sync)
- [ ] Unlock with Windows Hello (KeyCredentialManager, TPM) and libsecret on Linux
- [ ] Auto-lock on idle, screen lock and suspend
- [ ] Local IPC between `kestrove-nmh` and the app, plus the pairing AEAD channel
- [ ] **Quick Access** global hotkey (Ctrl+Shift+Space): search, then copy or auto-type (Windows `SendInput`, X11 XTest; Wayland gets copy only)
- [ ] Installer registers native-messaging manifests (`native-messaging/`)
- [ ] Windows 11 passkey plugin provider