sirius/onionwire
1
0
Fork 0
Code Issues Pull requests Projects Releases 3 Packages Wiki Activity Actions 3
onionwire/Cargo.toml

33 lines
1.1 KiB
TOML
Raw Normal View History

Initial Cargo bin scaffold Empty onionwire crate so cargo build succeeds. Identity is pubkey; onion is locator. No XMPP. M0 Arti spike is not in this commit.
2026-09-10 01:02:33 -04:00
[package]
name = "onionwire"
feat: incoming rate limit, identity backup, v0.2.0 App-level token bucket on rend accepts (30/60s, burst 10), panic-safe TUI restore, sqlite WAL + integrity_check fail-closed. Encrypted owbak1 identity backup/restore. README and threat model cover profile, XMR sidecar, backup, mixed-version frames.
2026-09-10 14:50:01 -04:00
version = "0.2.0"
Initial Cargo bin scaffold Empty onionwire crate so cargo build succeeds. Identity is pubkey; onion is locator. No XMPP. M0 Arti spike is not in this commit.
2026-09-10 01:02:33 -04:00
edition = "2024"
ci: build on rust 1.91 — the locked Arti 0.46 crates require rustc >= 1.91 The rust:1.87-bookworm job image failed every builder step with 'tor-*@0.46.0 requires rustc 1.91 ... either upgrade rustc or select compatible dependency versions'. Cargo.toml declared rust-version 1.87, which was simply wrong: cargo 1.87 could not even resolve the lockfile. - rust-version 1.87 -> 1.91 (README requirement text too) - RUST_IMAGE rust:1.87-bookworm -> rust:1.91-bookworm in ci and release
2026-09-10 13:14:55 -04:00
rust-version = "1.91"
Initial Cargo bin scaffold Empty onionwire crate so cargo build succeeds. Identity is pubkey; onion is locator. No XMPP. M0 Arti spike is not in this commit.
2026-09-10 01:02:33 -04:00
description = "Lean Tor messenger: Arti in-process, identity=pubkey, onion=locator. No XMPP."
license = "MIT"
publish = false
docs: install guide and GitHub Actions release binaries Add a README install path for CI-built Linux binaries (curl, checksum, PATH) plus source builds. CI runs tests/clippy on main; tags v*.*.* publish stripped x86_64 and aarch64 artifacts. --version/--help so a download can be checked without booting Tor.
2026-09-10 03:04:56 -04:00
repository = "https://github.com/sirius0xdev/onionwire"
Initial Cargo bin scaffold Empty onionwire crate so cargo build succeeds. Identity is pubkey; onion is locator. No XMPP. M0 Arti spike is not in this commit.
2026-09-10 01:02:33 -04:00
[dependencies]
Add M0 Arti two-node onion byte-pipe test. Two in-process TorClients host v3 onions, echo ping over Tor, keep the same locator across restart, and still accept after DormantMode::Soft.
2026-09-10 01:18:28 -04:00
arti-client = { version = "0.46", features = ["tokio", "onion-service-client", "onion-service-service"] }
futures = "0.3"
safelog = "0.9"
[verified] Add sqlite store and first-run identity. Friends are UNIQUE(pubkey); onion is a locator. Honor ONIONWIRE_HOME.
2026-09-10 01:43:02 -04:00
ed25519-dalek = { version = "2", features = ["rand_core"] }
rand = "0.8"
rusqlite = { version = "0.36", features = ["bundled"] }
feat: Monero invoice/receipt frames, wallet RPC, /pay /tip Signed inv/rcp codecs keyed by identity, payments table with unverified incoming receipts, optional JSON-RPC sidecar (loopback/.onion HTTP only), and TUI /pay /tip. OnionWire still holds no spend keys.
2026-09-10 14:37:43 -04:00
tokio = { version = "1", features = ["rt-multi-thread", "macros", "io-util", "time", "net"] }
Add M0 Arti two-node onion byte-pipe test. Two in-process TorClients host v3 onions, echo ping over Tor, keep the same locator across restart, and still accept after DormantMode::Soft.
2026-09-10 01:18:28 -04:00
tor-cell = "0.46"
tor-hsservice = "0.46"
tor-rtcompat = { version = "0.46", features = ["tokio"] }
[verified] Add QR codec and ratatui roster. M2: onionwire:v1 signed payload, Unicode QR, same-k locator update, unknown-k approval in TUI. F4 is a no-op stub. No Tor in the bin.
2026-09-10 01:54:19 -04:00
qrcode = { version = "0.14.1", default-features = false }
ratatui = { version = "0.30.2", default-features = false, features = ["crossterm"] }
Add Noise IK encrypted stream over Arti. M3: framed Noise_IK_25519_ChaChaPoly_BLAKE2s on the onion pipe, QR-pinned identity proofs, plaintext only in sqlite. Live two_node send of hello wire.
2026-09-10 02:07:40 -04:00
x25519-dalek = { version = "2", features = ["static_secrets"] }
snow = "0.10"
feat: Monero invoice/receipt frames, wallet RPC, /pay /tip Signed inv/rcp codecs keyed by identity, payments table with unverified incoming receipts, optional JSON-RPC sidecar (loopback/.onion HTTP only), and TUI /pay /tip. OnionWire still holds no spend keys.
2026-09-10 14:37:43 -04:00
serde_json = "1"
feat: incoming rate limit, identity backup, v0.2.0 App-level token bucket on rend accepts (30/60s, burst 10), panic-safe TUI restore, sqlite WAL + integrity_check fail-closed. Encrypted owbak1 identity backup/restore. README and threat model cover profile, XMR sidecar, backup, mixed-version frames.
2026-09-10 14:50:01 -04:00
argon2 = "0.5"
chacha20poly1305 = "0.10"
Add M0 Arti two-node onion byte-pipe test. Two in-process TorClients host v3 onions, echo ping over Tor, keep the same locator across restart, and still accept after DormantMode::Soft.
2026-09-10 01:18:28 -04:00
[dev-dependencies]
tempfile = "3"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
Reference in a new issue Copy permalink