alee/relicario
1
0
Fork 0
Code Issues Pull Requests 6 Actions Packages Projects Releases Wiki Activity

feat(core,wasm): filter_by_collections single-source + org_manifest_decrypt_filtered

Browse Source 
Add OrgManifest::filter_by_collections(&[String]) as the single source of
grant-filter logic. Refactor filter_for_member to delegate to it (no
duplicated loop). Add org_manifest_decrypt_filtered WASM binding that
decrypts + filters in core so ungranted entries never cross to JS (phase-1
SOFT/UX filter; per-collection crypto isolation is phase-2). Declare the
binding in extension/src/wasm.d.ts. Vec<String> compiled cleanly for
wasm32-unknown-unknown.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014s527M917W47LDrfQ4t47g
This commit is contained in:
adlee-was-taken
2026-06-26 22:19:55 -04:00
parent 0d56b3333b
commit 288956c089
3 changed files with 80 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
extension/src/wasm.d.ts vendored
View File

@@ -91,6 +91,14 @@ declare module 'relicario-wasm' {
export function org_unwrap_key(keys_blob: Uint8Array): SessionHandle;
export function org_manifest_decrypt(handle: SessionHandle, encrypted: Uint8Array): unknown;
export function org_manifest_encrypt(handle: SessionHandle, manifest_json: string): Uint8Array;
/**
* Decrypt an org manifest AND filter it to the granted collection slugs.
* Filtering happens in core (SOFT/UX filter — phase-1 only; the member holds
* the org key and can decrypt everything; per-collection crypto isolation is
* phase-2). Use for READ paths only; writes must use org_manifest_decrypt to
* avoid wiping ungranted collections on re-encrypt.
*/
export function org_manifest_decrypt_filtered(handle: SessionHandle, encrypted: Uint8Array, granted: string[]): unknown;
/**
* Encrypt the registered device key under the vault master key.
* Returns CIPHERTEXT — the device private key never crosses to JS.