feat(community): 通过 Host 审阅确认桌面来源信任

frontend/src/services/extensionTrustService.ts

@@ -0,0 +1,30 @@
+import { invoke } from '@tauri-apps/api/core'
+import type { CommunityKey } from '@/contracts/community'
+
+export interface TrustSetting {
+  source: string; source_id: string; namespace: string; key_id: string
+  public_key: number[]; enabled: boolean
+}
+export interface TrustReview {
+  review_id: string; fingerprint: string; previous: TrustSetting | null; proposed: TrustSetting
+}
+export async function reviewTrust(url: string, sourceId: string, keys: CommunityKey[], enabled: boolean): Promise<TrustReview[]> {
+  const source = new URL(url)
+  if (source.protocol !== 'https:' || source.username || source.password || source.search || source.hash) throw new Error('桌面信任来源必须使用 HTTPS')
+  source.pathname = `${source.pathname.replace(/\/+$/, '')}/`
+  if (!keys.length || keys.length > 64) throw new Error('来源公钥数量必须为 1–64')
+  const settings = keys.map(key => {
+    const publicKey = Array.from(atob(key.public_key), c => c.charCodeAt(0))
+    if (publicKey.length !== 32 || (enabled && key.revoked)) throw new Error('公钥无效或已撤销')
+    return { source: source.toString(), source_id: sourceId, namespace: key.namespace, key_id: key.key_id, public_key: publicKey, enabled }
+  })
+  const reviews: TrustReview[] = []
+  for (const setting of settings) reviews.push(await invoke<TrustReview>('extension_trust_review', { setting }))
+  return reviews
+}
+export async function confirmTrust(reviews: TrustReview[]): Promise<void> {
+  if (!reviews.length || reviews.length > 64) throw new Error('请重新检查来源后确认')
+  for (const review of reviews) {
+    await invoke('extension_trust_confirm', { request: { review_id: review.review_id, fingerprint: review.fingerprint } })
+  }
+}