8ff8bc51ff
Anyone who owns a BCDN name can now publish a Theseus extension, and every Theseus can install it with the publisher's signature verified locally. Gateway (Argus/src/gateway/public-gateway.mjs): PUT /api/ext/<name>/<id>/<version> takes the gzipped tar, checks two BCH message signatures against the name's current NFT owner (one authorises the upload, one is stored in the channel), inspects the package (addon.json at the root, id/version/main match, 8 MB cap), enforces first-publisher ownership of an id and monotonic versions, and writes the tarball, the extension's updates.json and community/catalog.json to Sia. GET /api/ext/catalog reads the catalog back with CORS. Theseus: lib/publisher-sig.mjs recovers the signer of a channel entry; main.js compares it with the publisher name's owner from Theseus's own chain index before installing or updating, so neither the relay nor a tampered catalog can pass off code under a trusted name. addon-updater.js gains installCommunity() and accepts publisher-signed entries in the regular update check (operator Ed25519 entries unchanged). Settings › Extensions shows the community catalog with Install / Update; Settings › Plug-ins links to theseus.x/plug-ins. theseus.x: /plug-ins/ is a separate page for the first-party plug-ins (Aegis, Ariadne's Thread) with live versions and hashes; /extensions/ lists the bundled extensions, the community catalog, and how to build and publish; /extensions/publish/ signs and uploads a package in the browser with the wallet that holds the publisher's name (session helper + wallet bundle copied alongside).
56 lines
3.7 KiB
JavaScript
56 lines
3.7 KiB
JavaScript
const { contextBridge, ipcRenderer } = require("electron");
|
|
contextBridge.exposeInMainWorld("cfg", {
|
|
get: () => ipcRenderer.invoke("settings-get"),
|
|
set: (key, value) => ipcRenderer.invoke("settings-set", key, value),
|
|
engines: () => ipcRenderer.invoke("search-engines"),
|
|
addEngine: (eng) => ipcRenderer.invoke("add-engine", eng),
|
|
removeEngine: (id) => ipcRenderer.invoke("remove-engine", id),
|
|
setEngineEnabled: (id, on) => ipcRenderer.invoke("set-engine-enabled", id, on),
|
|
setEngineOrder: (ids) => ipcRenderer.invoke("set-engine-order", ids),
|
|
removeFromList: (id) => ipcRenderer.invoke("remove-from-list", id),
|
|
// Storage: wipe browsing data on demand. Pass any subset of
|
|
// { cookies, cache, storage, history }.
|
|
clearBrowsingData: (opts) => ipcRenderer.invoke("clear-browsing-data", opts),
|
|
// Password vault. All calls return { ok, ... } | { ok: false, err }.
|
|
// Renderers never see the seed / vault key / master password past setup/
|
|
// unlock; get() returns plaintext only in explicit response to a user click.
|
|
pwStatus: () => ipcRenderer.invoke("password-status"),
|
|
pwSetup: (masterPassword, seedSource) => ipcRenderer.invoke("password-setup", { masterPassword, seedSource }),
|
|
pwUnlock: (masterPassword) => ipcRenderer.invoke("password-unlock", masterPassword),
|
|
pwLock: () => ipcRenderer.invoke("password-lock"),
|
|
pwList: () => ipcRenderer.invoke("password-list"),
|
|
pwGet: (id) => ipcRenderer.invoke("password-get", id),
|
|
pwAdd: (entry) => ipcRenderer.invoke("password-add", entry),
|
|
pwUpdate: (id, patch) => ipcRenderer.invoke("password-update", id, patch),
|
|
pwRemove: (id) => ipcRenderer.invoke("password-remove", id),
|
|
pwGenerate: (spec) => ipcRenderer.invoke("password-generate", spec),
|
|
// Main asks settings to jump to a specific sidebar section (e.g. from the
|
|
// engine picker's "Search settings…" click). Emits the section id string.
|
|
onFocusSection: (cb) => ipcRenderer.on("focus-section", (_e, section) => cb(section)),
|
|
// Collision-mode: BCNR/ICANN policy + per-name/per-TLD overrides
|
|
collisionState: () => ipcRenderer.invoke("collision-state"),
|
|
setCollisionPolicy: (p) => ipcRenderer.invoke("collision-set-policy", p),
|
|
resetCollisions: () => ipcRenderer.invoke("collision-reset"),
|
|
ariadneState: () => ipcRenderer.invoke("ariadne-state"),
|
|
ariadneToggle: (on) => ipcRenderer.invoke("ariadne-toggle", !!on),
|
|
ariadneInstall: () => ipcRenderer.invoke("ariadne-install"),
|
|
ariadneUpdate: () => ipcRenderer.invoke("ariadne-update"),
|
|
ariadneUninstall: () => ipcRenderer.invoke("ariadne-uninstall"),
|
|
// Manual "Check for updates" — un-dismisses any existing chip and re-
|
|
// fetches the release manifest. Returns { updateAvailable, currentVersion }.
|
|
recheckUpdate: () => ipcRenderer.invoke("recheck-update"),
|
|
appVersion: () => ipcRenderer.invoke("app-version"),
|
|
restartApp: () => ipcRenderer.invoke("app-restart"),
|
|
// Add-ons management (Settings > Add-ons tab).
|
|
listAddons: () => ipcRenderer.invoke("addons-list"),
|
|
setAddonEnabled: (id, enabled) => ipcRenderer.invoke("addons-set-enabled", id, !!enabled),
|
|
revealAddon: (folder) => ipcRenderer.invoke("addons-reveal", folder),
|
|
openAddonsDir: () => ipcRenderer.invoke("addons-open-dir"),
|
|
reloadAddons: () => ipcRenderer.invoke("addons-reload"),
|
|
// Community extensions from theseus.x/extensions: the catalog (with what
|
|
// is installed already) and a verified install/update of one entry.
|
|
communityCatalog: () => ipcRenderer.invoke("addons-community-catalog"),
|
|
installCommunity: (id) => ipcRenderer.invoke("addons-install-community", id),
|
|
checkAddonUpdates: () => ipcRenderer.invoke("addons-check-updates"),
|
|
listStagedAddonUpdates: () => ipcRenderer.invoke("addons-list-staged"),
|
|
});
|