First Version

2026-07-10 15:02:09 +01:00
commit 38494a85a9
562 changed files with 196313 additions and 0 deletions
@@ -0,0 +1,39 @@
+//! skald-relay-client — standalone agent-role relay client.
+//!
+//! Payload-agnostic: it speaks the v2 WebSocket protocol (challenge/auth,
+//! `Authorize`, store-and-forward `Message`), performs E2E seal/open with
+//! per-client AES-256-GCM keys, manages anti-replay counters, pairing windows,
+//! and device authorization. It never interprets the decrypted bytes: it emits
+//! them via [`events::RelayEvent`] and lets the application layer (the
+//! `plugin-mobile-connector` crate) apply JSON semantics. See the
+//! "Crate split" section of `docs/plugins/mobile-connector.md` and
+//! `docs/relay/`.
+//!
+//! Module map:
+//! - `config`   — `RelayClientConfig` + `SeedSource`
+//! - `events`   — `RelayEvent` (broadcast)
+//! - `identity` — seed + derived keys + namespace_id
+//! - `db`       — `relay_clients` table (devices + anti-replay counters)
+//! - `pairing`  — in-memory pairing sessions + QR payload
+//! - `state`    — `RelayState` (networking-only: seal/open, counters, send/recv)
+//! - `ws`       — the permanent reconnecting agent WebSocket (v2 binary)
+//! - `pipe`     — pipe data plane: `PipeConnection` + `IncomingPipe` (pipe.md)
+//! - `client`   — `RelayClient`, the public façade
+
+pub mod client;
+pub mod config;
+pub mod db;
+pub mod events;
+pub mod identity;
+pub mod pairing;
+pub mod pipe;
+mod state;
+mod ws;
+
+pub use client::RelayClient;
+pub use config::{RelayClientConfig, SeedSource};
+pub use db::{ClientRow, ClientState};
+pub use events::RelayEvent;
+pub use identity::Identity;
+pub use pairing::{QrCodeData, SessionState, StartedPairing};
+pub use pipe::{IncomingPipe, PipeConnection, PipeReceiver, PipeRole, PipeSender};