xah30
40b38beb11
New crate (kept out of the cargo workspace so the protocol-side check/test cycle stays fast): a Tauri 2 + React 19 + TypeScript desktop app that runs in the system tray and manages `aura client` for the user. The clash-verge replacement we settled on instead of trying to shoehorn AuraVPN's L3 IP-tunnel into a clash-verge L4 outbound. ## What's wired - **Profile manager** — `aura-gui/src-tauri/src/profiles.rs`. App-data layout (`~/Library/Application Support/ru.undergr0und.aura/profiles/<id>/` on macOS, the equivalent on Linux + Windows). `import_profile_from_tgz` accepts the same bundle shape `aura provision-client` emits, detects flat vs single-dir layouts, and refuses overwrites unless the operator deletes first. `delete_profile` refuses symlinks. - **Connection control** — `cli_proc.rs`. Spawns `aura client --config <profile>/client.toml --admin-socket /tmp/aura-admin-<uid>-<profile>.sock`, captures stderr into a bounded in-memory ring (200 lines) for the UI to tail, kills via `Child::kill` on disconnect. Per-profile / per-uid socket paths so two GUIs (or two profiles) don't collide. - **Live status** — `admin.rs`. Tiny JSON-line client for the v3.3 admin socket. Polled by the React app every 1.5 s: peer id, rx/tx packets, default action, rule count. Falls back gracefully (admin_error in the response) when the handshake hasn't completed yet. - **System tray** — `lib.rs` `setup` callback. Three-item menu (Open AuraVPN / Disconnect / Quit). The window's close button hides to the tray instead of exiting — the app keeps running so the VPN stays connected; the user explicitly chooses Quit. - **Frontend** — `src/App.tsx`. Single-page layout: profile list (with badge for missing files), connect/disconnect button per profile, status table, collapsible logs panel, binary-path picker at the bottom. Dark-mode CSS by default; the same look as a typical WireGuard / Tailscale-style tray app. ## What's deferred for v0.2 - Auto-start at login (launchd plist / systemd user unit / Windows Run key) - Code signing + notarization - Persisting the aura binary path between sessions - Per-profile route overrides editor - Live log streaming (today the frontend polls the ring buffer) - Admin status query on Windows (today's `admin.rs` Unix-only; Windows path returns a clear "not supported yet" error) - Polkit / authorization-services prompt for the TUN-needs-root step (today the operator has to launch the GUI from a privileged context, e.g. `sudo open -a aura-gui` on macOS) ## Workspace hygiene Cargo workspace at the repo root now has `exclude = ["aura-gui"]` so the protocol crates' `cargo check --workspace` / `cargo test --workspace` don't pull in the tauri + wry + webview dep graph. The GUI builds standalone from `aura-gui/` via `npm run tauri build`. ## Validation - `cd aura-gui/src-tauri && cargo check` — green - `cd aura-gui/src-tauri && cargo clippy -- -D warnings` — clean - `cd aura-gui/src-tauri && cargo fmt --check` — clean - `cd aura-gui && npm run build` — frontend tsc + vite build succeeds - Full `npm run tauri dev` not exercised in this session (would open a real window) — should work; if it breaks the surface area is small enough that next session fixes it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
94 lines
2.6 KiB
TOML
94 lines
2.6 KiB
TOML
[workspace]
|
|
members = [
|
|
"crates/aura-crypto",
|
|
"crates/aura-pki",
|
|
"crates/aura-proto",
|
|
"crates/aura-transport",
|
|
"crates/aura-tunnel",
|
|
"crates/aura-cli",
|
|
"tools/export-kat",
|
|
]
|
|
# aura-gui is a Tauri 2 desktop app with its own ecosystem (Node, Vite, Tauri's bundler) and a
|
|
# separate Cargo manifest under aura-gui/src-tauri/. Keeping it out of the main workspace avoids
|
|
# pulling tauri / wry / webview deps into every `cargo check` of the protocol crates.
|
|
exclude = ["aura-gui"]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
license = "MIT"
|
|
authors = ["Aura"]
|
|
description = "Aura — hybrid post-quantum VPN protocol over QUIC"
|
|
|
|
[workspace.dependencies]
|
|
# Internal crates
|
|
aura-crypto = { path = "crates/aura-crypto" }
|
|
aura-pki = { path = "crates/aura-pki" }
|
|
aura-proto = { path = "crates/aura-proto" }
|
|
aura-transport = { path = "crates/aura-transport" }
|
|
aura-tunnel = { path = "crates/aura-tunnel" }
|
|
|
|
# PQ + classic crypto (ml-kem = FIPS 203 ML-KEM-768, replaces spec's pqcrypto-kyber)
|
|
ml-kem = { version = "0.3", features = ["zeroize"] }
|
|
x25519-dalek = { version = "2", features = ["static_secrets"] }
|
|
|
|
# KDF / AEAD / hashing
|
|
hkdf = "0.12"
|
|
hmac = "0.12"
|
|
sha2 = "0.10"
|
|
chacha20poly1305 = { version = "0.10", features = ["stream"] }
|
|
rand = "0.8"
|
|
rand_core = "0.6"
|
|
zeroize = { version = "1.7", features = ["derive"] }
|
|
subtle = "2"
|
|
|
|
# PKI / X.509
|
|
rcgen = "0.14"
|
|
rustls = { version = "0.23", features = ["ring"] }
|
|
rustls-pki-types = "1"
|
|
x509-parser = "0.16"
|
|
uuid = { version = "1", features = ["v4"] }
|
|
|
|
# Transport
|
|
quinn = "0.11"
|
|
tokio = { version = "1", features = ["full"] }
|
|
bytes = "1"
|
|
|
|
# TUN (Unix: Linux + macOS)
|
|
tun = { version = "0.8", features = ["async"] }
|
|
|
|
# Windows-specific (version declared here untargeted; referenced under crate [target.'cfg(windows)'] tables)
|
|
wintun = "0.5"
|
|
windows = { version = "0.57", features = [
|
|
"Win32_Foundation",
|
|
"Win32_NetworkManagement_IpHelper",
|
|
"Win32_NetworkManagement_Ndis",
|
|
"Win32_Networking_WinSock",
|
|
] }
|
|
|
|
# Serialization
|
|
serde = { version = "1", features = ["derive"] }
|
|
bincode = "1"
|
|
toml = "0.8"
|
|
|
|
# DNS / net
|
|
hickory-resolver = "0.24"
|
|
ipnetwork = "0.20"
|
|
|
|
# CLI / observability / errors
|
|
clap = { version = "4", features = ["derive"] }
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
|
|
anyhow = "1"
|
|
thiserror = "1"
|
|
async-trait = "0.1"
|
|
|
|
# Dev / bench
|
|
criterion = "0.5"
|
|
hex = "0.4"
|
|
|
|
[profile.release]
|
|
opt-level = 3
|
|
lto = "thin"
|