755e97b5bb
Merges a parallel session's work with the multi-source BNS story from 0.0.7.
The dApp side (parallel session)
--------------------------------
* bcnr-preload.js — installs `window.bcnr` on every page via contextBridge.
Read-only surface: resolveName(name), isRegistered(name), getBcnrTlds(),
getRecordVersion(name), plus getPermissionOrigin() for diagnostics. All
Promises; a missing name returns null (not throw). No signing, no wallet
unlock — that surface is designed but deliberately out of scope for 0.0.8
(see TheseusNavigator/DESIGN-integrated-wallet.md).
* bcnr-origin.js — pure function that computes the eTLD+1 permission origin
for a URL. ICANN suffixes via `psl` (same PSL Chromium uses, handles
.co.uk / .github.io / etc); BNS names key off the on-chain TLD list so
foo.wallet becomes a public suffix as soon as `wallet` appears there.
Match browser cookie / MetaMask semantics: a grant on pay.merchant.com
covers account.merchant.com but not evil.com.
* dev/bcnr-selftest.js, dev/origin-selftest.mjs — self-tests, no I/O.
* main.js wires bcnr-preload.js into session.defaultSession.setPreloads() so
it runs BEFORE per-WebContentsView preloads; adds bcnr:* IPC handlers.
* preload.js + chrome.html — small hooks so the shell picks up window.bcnr
the same way regular content does.
* package.json — psl dep, bcnr-preload.js/bcnr-origin.js in `files`.
Also included
-------------
* AriadneResolver/mobile/.../UpdateCheck.java — in-app update-check for the
Android app; already active in the shipped 0.11 APK (build.ps1 -Recurse
picked it up), formalising the source now.
* TheseusNavigator/snapshots/bns-name-snapshot.json — refreshed bundled
starter (73 beacon txs, root c37b8596…c54e414ba).
* Site pages + manifest updated to point at 0.0.8.
TheseusNavigator-Setup-0.0.8.exe 95.4 MB
21939743eafdfe8742a6b7c4b987bd2782384d7bc41289cb80a7e08019dc9f02
TheseusNavigator-0.0.8-portable.exe 92.7 MB
2aa429fe39dc0fa4ac040fc6d6eb31b0f890c8a83175c49fcb50f052c480d39d
27 lines
1.7 KiB
JavaScript
27 lines
1.7 KiB
JavaScript
// bcnr-preload.js — session-wide preload that installs `window.bcnr` on every
|
|
// page (regular tabs, popups, chrome/settings/etc). Reads only — no signing,
|
|
// no wallet unlock, no permission prompts. These four methods query the same
|
|
// resolver Theseus already runs for its address bar; nothing about the local
|
|
// user leaks, so no origin gate is needed for this surface.
|
|
//
|
|
// Sequencing: registered via `session.defaultSession.setPreloads([...])` in
|
|
// main.js at whenReady, which runs BEFORE per-WebContentsView preloads (home,
|
|
// settings, popover, etc.), so those preloads still install their own bridges
|
|
// on top of `window.bcnr`. See DESIGN-integrated-wallet.md §3 for the full
|
|
// API surface.
|
|
const { contextBridge, ipcRenderer } = require("electron");
|
|
|
|
// Every method returns a Promise; a name that fails to resolve or isn't
|
|
// registered comes back as `null` (not an error) so page code can treat
|
|
// "no such name" as data, not an exception. `getBcnrTlds` always returns
|
|
// an array — even the seed ["bch"] before the on-chain list has landed.
|
|
contextBridge.exposeInMainWorld("bcnr", {
|
|
resolveName: (name) => ipcRenderer.invoke("bcnr:resolveName", name),
|
|
isRegistered: (name) => ipcRenderer.invoke("bcnr:isRegistered", name),
|
|
getBcnrTlds: () => ipcRenderer.invoke("bcnr:getBcnrTlds"),
|
|
getRecordVersion: (name) => ipcRenderer.invoke("bcnr:getRecordVersion", name),
|
|
// Diagnostic — the eTLD+1 permission origin Theseus computes for THIS page.
|
|
// dApp devs use this to see how their subdomains bucket under one grant.
|
|
// Returns null for opaque origins (data:, blob:) which never hold grants.
|
|
getOrigin: () => ipcRenderer.invoke("bcnr:getOrigin"),
|
|
});
|