From 0378e8e0912a1a7e6cea4424e69d524e7afecbf8 Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Wed, 30 Sep 2026 21:04:39 +0200 Subject: fix: an identity signs a named kind, and a device approval answers a request The desktop main process builds every transcript itself from fields (transcripts.js) and signs no raw bytes; the page's identity has the same contract (crypto.js transcriptFor). The keyring seals no bundle while browser access is off. On the node, device_add must redeem a pending request filed by the same keys, and device_revoke is signed under its own prefix (meshbay:device_revoke:v1), so a retirement signature admits nothing. Co-Authored-By: Claude Opus 5.5 --- packages/meshbay-client/src/main.js | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'packages/meshbay-client/src/main.js') diff --git a/packages/meshbay-client/src/main.js b/packages/meshbay-client/src/main.js index 9a08e96..309d5f6 100644 --- a/packages/meshbay-client/src/main.js +++ b/packages/meshbay-client/src/main.js @@ -1037,7 +1037,9 @@ function registerBridge() { keyring.sealRecovery(uid(u), npk(n), String(mnemonic || ''), String(username || ''))); handle('keys:mark-sealed', (_e, u, n, fp) => keyring.markSealed(uid(u), npk(n), String(fp || ''))); handle('keys:fingerprint', (_e, u) => keyring.currentFingerprint(uid(u))); - handle('keys:sign', (_e, u, n, bytes) => keyring.sign(uid(u), npk(n), String(bytes || ''))); + // By kind and fields: the page never names the bytes (transcripts.js). + handle('keys:sign', (_e, u, n, kind, fields) => keyring.signAs( + uid(u), npk(n), String(kind || ''), fields && typeof fields === 'object' ? fields : {})); handle('keys:shared', (_e, u, n, peer) => keyring.shared(uid(u), npk(n), String(peer || ''))); handle('keys:playlist-key', (_e, u) => keyring.playlistKey(uid(u))); handle('keys:browser-access', (_e, u) => keyring.browserAccess(uid(u))); -- cgit v1.2.3