feat(theseus.x): /extensions landing page for the signed OTA endpoint
Adds site-theseus-x/extensions/index.html: a public-facing description of the signed add-on update endpoint (screenshot 0.2.3 currently, more add-ons as they gain an updateURL). Same visual language as the theseus.x home page — sticky topnav with the mark, hero, per-extension cards with the SHA-256 verify block, an operator-key panel, and a Firefox-XPI-style flow description. Roadmap section flags on-BCNR pubkey publication and multi-sig as the next security steps. Content is served from s3://bns/theseus/extensions/index.html; the Sia autosync mirrors it, so the theseus.x resolver reaches it at https://navigate.st/bns/theseus.x/extensions/. Landing at https://theseus.x/extensions on installs whose OS resolver knows the .x TLD (Ariadne's Thread users, or Theseus's own resolver on internal navigations). The specific screenshot 0.2.3 entry it advertises is already live at https://navigate.st/bns/theseus.x/extensions/screenshot/updates.json; this page just documents it.
This commit is contained in:
Local Dev
parent
906fdb1a6e
commit
e3c01b7ffe
1 changed files with 158 additions and 0 deletions
158
extensions/index.html
Normal file
158
extensions/index.html
Normal file
|
|
@ -0,0 +1,158 @@
|
||||||
|
<!doctype html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>theseus.x — Extensions</title>
|
||||||
|
<meta name="description" content="Signed over-the-air update endpoint for Theseus's bundled add-ons. Each entry is Ed25519-signed by the Silent Mode operator; verified on every install without waiting for a Theseus release.">
|
||||||
|
<link rel="icon" href="/assets/favicon.svg" type="image/svg+xml">
|
||||||
|
<link rel="mask-icon" href="/assets/favicon.svg" color="#d6ff3d">
|
||||||
|
<meta property="og:type" content="website">
|
||||||
|
<meta property="og:site_name" content="theseus.x">
|
||||||
|
<meta property="og:title" content="theseus.x — Extensions">
|
||||||
|
<meta property="og:description" content="Signed OTA update endpoint for Theseus's bundled add-ons. Ed25519, no cert authority, no app-store gatekeeper.">
|
||||||
|
<meta property="og:url" content="https://theseus.x/extensions/">
|
||||||
|
<style>
|
||||||
|
:root{
|
||||||
|
--bg:#0b0e14; --panel:#141a24; --panel2:#18202c; --line:rgba(255,255,255,.09);
|
||||||
|
--ink:#e7eaf1; --mut:#8b98a9; --dim:#5e6678; --acid:#d6ff3d;
|
||||||
|
--ok:#4fd1a5;
|
||||||
|
}
|
||||||
|
*{box-sizing:border-box}
|
||||||
|
body{margin:0;background:radial-gradient(1100px 560px at 50% -12%,#16202e,var(--bg));
|
||||||
|
color:var(--ink);font:16px/1.65 system-ui,-apple-system,Segoe UI,Roboto,sans-serif;min-height:100vh}
|
||||||
|
a{color:var(--acid)}
|
||||||
|
.wrap{max-width:900px;margin:0 auto;padding:0 1.2rem}
|
||||||
|
.topnav{position:sticky;top:0;z-index:20;display:flex;gap:2px;align-items:center;flex-wrap:wrap;
|
||||||
|
padding:10px 1.2rem;background:rgba(11,14,20,.82);backdrop-filter:blur(10px);
|
||||||
|
border-bottom:1px solid var(--line)}
|
||||||
|
.topnav .brand{font-weight:600;color:var(--ink);text-decoration:none;margin-right:14px;font-size:15px;letter-spacing:.2px;display:flex;align-items:center;gap:8px}
|
||||||
|
.topnav .brand .g{color:var(--acid)}
|
||||||
|
.topnav .brand svg{width:20px;height:20px}
|
||||||
|
.topnav a{color:var(--mut);text-decoration:none;padding:6px 12px;border-radius:8px;font-size:14px}
|
||||||
|
.topnav a:hover{color:var(--ink);background:var(--panel)}
|
||||||
|
.topnav a.here{color:var(--acid);background:rgba(214,255,61,.08)}
|
||||||
|
header.hero{text-align:center;padding:3.5rem 1.2rem 1rem}
|
||||||
|
h1{font-size:clamp(1.8rem,4.5vw,2.4rem);margin:.6rem 0 .3rem;letter-spacing:-.3px}
|
||||||
|
h1 .g{color:var(--acid)}
|
||||||
|
.tag{color:var(--mut);font-size:1.02rem;max-width:640px;margin:0 auto}
|
||||||
|
section{padding:2rem 0;border-top:1px solid var(--line);margin-top:1.6rem}
|
||||||
|
section:first-of-type{border-top:none;margin-top:1rem}
|
||||||
|
h2{font-size:1.35rem;margin:0 0 .5rem}
|
||||||
|
.lede{color:var(--mut);margin:0 0 1.2rem;max-width:720px}
|
||||||
|
code,.mono{background:#0e131b;border:1px solid var(--line);border-radius:6px;padding:1px 6px;font-family:ui-monospace,monospace;font-size:13px}
|
||||||
|
pre{background:#0e131b;border:1px solid var(--line);border-radius:10px;padding:12px 14px;overflow-x:auto;
|
||||||
|
font-family:ui-monospace,monospace;font-size:12.5px;color:var(--ink);margin:.8rem 0}
|
||||||
|
.ext{background:var(--panel);border:1px solid var(--line);border-radius:14px;padding:20px 22px;margin:1rem 0}
|
||||||
|
.ext h3{margin:0 0 .3rem;font-size:1.15rem;display:flex;align-items:center;gap:10px}
|
||||||
|
.ext h3 .icon{font-size:1.4rem}
|
||||||
|
.ext .cur{color:var(--acid);font-size:12px;font-weight:600;letter-spacing:.14em;text-transform:uppercase}
|
||||||
|
.ext .desc{color:var(--mut);font-size:14px;margin:.3rem 0 .8rem}
|
||||||
|
.ext .verifybox{margin-top:.9rem;padding-top:.8rem;border-top:1px solid var(--line);font-size:11.5px;color:var(--dim)}
|
||||||
|
.ext .verifybox .lbl{color:var(--mut);font-size:12px;margin-bottom:6px}
|
||||||
|
.ext .h{display:flex;gap:8px;flex-wrap:wrap;align-items:baseline;margin-top:4px}
|
||||||
|
.ext .h b{color:var(--mut);font-weight:600;min-width:70px}
|
||||||
|
.ext .h code{font-family:ui-monospace,monospace;font-size:10.5px;color:#c9d4e3;word-break:break-all;background:transparent;border:none;padding:0}
|
||||||
|
.ext .meta{color:var(--dim);font-size:12.5px;margin-top:.4rem}
|
||||||
|
.note{background:var(--panel);border:1px solid var(--line);border-left:3px solid var(--acid);
|
||||||
|
border-radius:10px;padding:14px 18px;color:var(--mut);font-size:14px;margin:1.4rem 0}
|
||||||
|
.note b{color:var(--ink)}
|
||||||
|
.pubkey{background:#0e131b;border:1px solid var(--line);border-radius:8px;padding:10px 12px;
|
||||||
|
font-family:ui-monospace,monospace;font-size:11px;color:#c9d4e3;word-break:break-all;margin:.6rem 0}
|
||||||
|
.flow{background:var(--panel);border:1px solid var(--line);border-radius:12px;padding:16px 20px;margin-top:1rem;color:var(--mut);font-size:14px}
|
||||||
|
.flow ol{margin:0;padding-left:20px}
|
||||||
|
.flow li{margin:.4rem 0}
|
||||||
|
.flow b{color:var(--ink)}
|
||||||
|
footer{color:var(--dim);font-size:12.5px;margin:3rem 0 2rem;text-align:center}
|
||||||
|
footer a{color:var(--mut)}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<nav class="topnav">
|
||||||
|
<a class="brand" href="/">
|
||||||
|
<svg viewBox="0 0 64 64" aria-hidden="true">
|
||||||
|
<rect width="64" height="64" rx="12" fill="#0b0e14"/>
|
||||||
|
<path d="M32 6 L38 32 L26 32 Z" fill="#e04e4e"/>
|
||||||
|
<path d="M38 32 L32 58 L26 32 Z" fill="#d6ff3d"/>
|
||||||
|
<path d="M6 32 L32 27 L58 32 L32 37 Z" fill="#d6ff3d" opacity=".55"/>
|
||||||
|
<circle cx="32" cy="32" r="3" fill="#0b0e14"/>
|
||||||
|
</svg>
|
||||||
|
<span>theseus<span class="g">.x</span></span>
|
||||||
|
</a>
|
||||||
|
<a href="/">Home</a>
|
||||||
|
<a href="/#download">Download</a>
|
||||||
|
<a class="here" href="./">Extensions</a>
|
||||||
|
<a href="https://sirius.x/">sirius.x</a>
|
||||||
|
</nav>
|
||||||
|
|
||||||
|
<header class="hero">
|
||||||
|
<h1>Theseus <span class="g">Extensions</span></h1>
|
||||||
|
<p class="tag">Signed over-the-air update endpoint for Theseus's bundled add-ons.
|
||||||
|
Every entry is Ed25519-signed by the Silent Mode operator, verified on the
|
||||||
|
device before install. No cert authority, no app-store gatekeeper.</p>
|
||||||
|
</header>
|
||||||
|
|
||||||
|
<div class="wrap">
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<h2>Available extensions</h2>
|
||||||
|
<p class="lede">Currently one bundled add-on ships with a signed update channel. More on the way.</p>
|
||||||
|
|
||||||
|
<div class="ext" id="screenshot">
|
||||||
|
<h3><span class="icon">📸</span> Screenshot <span class="cur" style="margin-left:auto">current 0.2.3</span></h3>
|
||||||
|
<div class="desc">Capture the current tab — visible viewport, entire scrollable page, or a rectangle
|
||||||
|
you draw. Pick a mode from the toolbar dropdown; the capture opens in a full-tab editor
|
||||||
|
(crop, annotate, redact, save).</div>
|
||||||
|
<div class="meta">Ships bundled with Theseus 0.3.21+. Later versions auto-update through
|
||||||
|
this endpoint on the next boot's 30-second poll.</div>
|
||||||
|
<div class="verifybox">
|
||||||
|
<div class="lbl">Signed update manifest — SHA-256 verified before install</div>
|
||||||
|
<div class="h"><b>updates.json</b><code><a href="https://navigate.st/bns/theseus.x/extensions/screenshot/updates.json">navigate.st/bns/theseus.x/extensions/screenshot/updates.json</a></code></div>
|
||||||
|
<div class="h"><b>Tarball</b><code><a href="https://navigate.st/bns/theseus.x/extensions/screenshot/screenshot-0.2.3.tar.gz">screenshot-0.2.3.tar.gz</a></code></div>
|
||||||
|
<div class="h"><b>sha256</b><code>c051e639a19c60d26160933e29e13ca6e4ad006e47ff4d839b9e472b0eff0a18</code></div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<h2>How updates work</h2>
|
||||||
|
<p class="lede">Same mechanism a Firefox XPI update uses, cut down to what a name-native browser needs.</p>
|
||||||
|
<div class="flow">
|
||||||
|
<ol>
|
||||||
|
<li>Every 30 seconds after boot Theseus fetches <code>updates.json</code> for each installed add-on that declares an <code>updateURL</code> in its manifest.</li>
|
||||||
|
<li>Each entry carries an Ed25519 signature over <code>silentmode.addon-update-v1|<id>|<version>|<sha256></code>. Theseus verifies against a small set of operator public keys baked into the build. Unsigned or badly-signed entries are dropped silently.</li>
|
||||||
|
<li>If a signed version beats what's installed, Theseus downloads the tarball, re-checks its sha256, and stages the new copy under <code><userData>/addons-updates-staged/<id>-<version>/</code>.</li>
|
||||||
|
<li>On the next Theseus launch, <code>promoteStagedUpdates</code> moves the staged copy into <code>addons/<id>/</code>. Any prior copy is renamed to <code>addons-backups/<id>-<oldver>-<timestamp>/</code> so hand-edits survive.</li>
|
||||||
|
<li>The Settings > Extensions surface (Theseus 0.3.26+) has a <b>Check for updates</b> button and a <b>Pending updates</b> box for on-demand control.</li>
|
||||||
|
</ol>
|
||||||
|
</div>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<h2>Operator key</h2>
|
||||||
|
<p class="lede">The Ed25519 public key baked into Theseus 0.3.19+.
|
||||||
|
Rotation is by adding a new pubkey and shipping a Theseus release that carries both, then a follow-up release removing the old — during the overlap, entries can be signed by either.</p>
|
||||||
|
<div class="pubkey">732b1263a236b0030383a2376597cfa43c3624b3ca2912a46134f8f2a06e6012</div>
|
||||||
|
<p style="color:var(--dim);font-size:12.5px;margin-top:.6rem">Generated 2026-09-07. Held offline by the Silent Mode operator.</p>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<h2>Roadmap</h2>
|
||||||
|
<p class="lede">The endpoint is generic — any bundled add-on can advertise an <code>updateURL</code>.
|
||||||
|
Concrete next-steps:</p>
|
||||||
|
<ul style="color:var(--mut);font-size:14px;line-height:1.7">
|
||||||
|
<li>On-BCNR pubkey publication so rotation is auditable end-to-end.</li>
|
||||||
|
<li>Multi-sig (N-of-M operator keys) so a single compromised private key can't push code.</li>
|
||||||
|
<li>Extend to other bundled add-ons: <b>Notepad</b>, and the wallet add-ons as they stabilize.</li>
|
||||||
|
</ul>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<footer>
|
||||||
|
Silent Mode · <a href="https://code.silentmode.st/silentmode/theseus/src/branch/master/TheseusNavigator/docs/ADDON-UPDATES.md">source & operator brief</a>
|
||||||
|
</footer>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Loading…
Add table
Reference in a new issue