feat!: holy fuck i'm so close to making permission based plugins

notwindstone · notwindstone · commit 09b17a5da0d6 · 2025-10-29T02:53:32.000+03:00
diff --git a/bun.lockb b/bun.lockb
diff --git a/index.html b/index.html
@@ -4,10 +4,12 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" href="/src-tauri/icons/128x128.png" />
+    <link rel="stylesheet" href="./assets/index-CsDBtkr9.css" />
     <title>Kaede</title>
   </head>
   <body>
     <div id="app"></div>
+    <div id="blue_archive" style="position:absolute;left:0;top:0;right:0;bottom:0"></div>
     <script type="module" src="/src/main.ts"></script>
   </body>
 </html>
diff --git a/package.json b/package.json
@@ -27,7 +27,12 @@
     "@tauri-apps/plugin-shell": "~2",
     "@tauri-apps/plugin-upload": "~2",
     "@vueuse/core": "^14.0.0",
+    "buffer": "^6.0.3",
+    "core-js": "^3.46.0",
+    "core-js-pure": "^3.46.0",
     "m3ripple-vue": "^0.1.0",
+    "ses": "^1.14.0",
+    "shadowrealm-api": "^0.8.3",
     "tauri-plugin-drpc": "^1.0.3",
     "typebox": "^1.0.8",
     "vue": "^3.5.17",
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
@@ -23,7 +23,7 @@
         "visible": false,
         "center": true,
         "minWidth": 512,
-        "minHeight": 384
+        "minHeight": 288
       }
     ],
     "security": {
diff --git a/src/App.vue b/src/App.vue
@@ -23,17 +23,114 @@ import { RouteItems } from "@/constants/routes.ts";
 import { capitalize } from "@/lib/helpers/capitalize.ts";
 import { log } from "@/lib/handlers/log.ts";
 import { Command } from "@tauri-apps/plugin-shell";
+import "ses";
+// eslint-disable-next-line unicorn/prefer-node-protocol
+import { Buffer } from "buffer";
+// import ShadowRealm from "shadowrealm-api";
 
 const LogViewer = defineAsyncComponent(
   () => import("@/components/logging/LogViewer.vue"),
 );
 
 (async () => {
+  const url = "./assets/index-CQUR_vLf.js";
+  const response = await fetch(url);
+  const _code = await response.text();
+  const _cleaned = _code
+    .replace("<!--", "<")
+    .replace("-->", ">")
+    .replace("-->", ">");
   const result = await Command.create("java", [
     "--version",
   ]).execute();
 
-  console.log(result);
+  console.log(result, () => _cleaned);
+
+  // const realm = new ShadowRealm;
+
+  // await realm.importValue("document", "document");
+
+  // realm.evaluate(_cleaned);
+
+  console.log("Hardened Javascript test using SES");
+  console.log(window["__core-js_shared__"]);
+
+  const t1 = performance.now();
+
+  try {
+    console.log("Action: Trying to lockdown every JS globals");
+    // lockdown({
+    //   "evalTaming": "unsafeEval",
+    // });
+  } catch {
+    console.log("Already locked down");
+  }
+
+  window.Buffer = Buffer;
+
+  console.log("Action: Creating a safe compartment");
+  const c = new Compartment({
+    "globals": {
+      "console" : console,
+      "log"     : log,
+      "document": document,
+      "window"  : window,
+      "location": location,
+      "fetch"   : (...args: unknown[]) => fetch(args),
+      Symbol,
+      Uint8Array,
+      Buffer,
+      MathMLElement,
+      HTMLElement,
+      HTMLDivElement,
+      global: window,
+      globalThis: window,
+      Date,
+      requestAnimationFrame: window.requestAnimationFrame.bind(window),
+      cancelAnimationFrame: window.cancelAnimationFrame.bind(window),
+      "performance": window.performance,
+      ElementPrototype: Element.prototype,
+      HTMLElementPrototype: HTMLElement.prototype,
+      NodePrototype: Node.prototype,
+      EventTargetPrototype: EventTarget.prototype,
+      SVGElement,
+      Element,
+      WebGLRenderingContext,
+      WebGL2RenderingContext,
+      navigator,
+      screen,
+      "dispatchEvent"      : EventTarget.prototype.dispatchEvent,
+      "addEventListener"   : EventTarget.prototype.addEventListener,
+      "removeEventListener": EventTarget.prototype.removeEventListener,
+      HTMLCanvasElement,
+      HTMLInputElement,
+      CanvasRenderingContext2D,
+      CanvasGradient,
+      CanvasPattern,
+      ImageBitmap,
+      ImageData,
+      TextMetrics,
+      OffscreenCanvas,
+      Path2D,
+      ImageBitmapRenderingContext,
+      "yi": {
+        "__core-js_shared__": window["__core-js_shared__"],
+      },
+      "__core-js_shared__": window["__core-js_shared__"],
+    },
+    "__options__": true,
+  });
+  const t2 = performance.now();
+
+  console.log("Action: Running the contained code");
+  try {
+    await c.evaluate(_cleaned);
+  } catch (error) {
+    console.error("Error in the container:", error);
+  }
+
+  const t3 = performance.now();
+  console.log("Locking down & hardening done in", t2 - t1, "ms\n", "Evaluation done in", t3 - t2, "ms");
 })();
 
 const globalStates = shallowReactive<GlobalStatesType>({
diff --git a/src/components/layout/Layout.vue b/src/components/layout/Layout.vue
@@ -60,7 +60,7 @@ useEventListener(window, "mousedown", (event: MouseEvent) => {
   <div
     @contextmenu.prevent
     @contextmenu="showContextMenu"
-    class="flex flex-nowrap gap-0 relative w-full h-vh overflow-hidden bg-neutral-950 text-white"
+    class="flex flex-nowrap gap-0 relative w-full h-vh overflow-hidden text-white"
   >
     <div id="__kaede-extensions" class="block" />
     <ContextMenu
diff --git a/src/components/logging/LogViewer.vue b/src/components/logging/LogViewer.vue
@@ -13,7 +13,7 @@ import MaterialRipple from "@/components/misc/MaterialRipple.vue";
 const virtualList = useTemplateRef("virtualList");
 
 const logs = shallowRef<Array<string>>(["__kaede-trigger-loading"]);
-const horizontalScroll = ref<boolean>(true);
+const horizontalScroll = ref<boolean>(false);
 const fileData = ref<{
   "size": string | undefined;
   "time": string | undefined;
@@ -93,7 +93,7 @@ onMounted(async () => {
     return;
   }
 
-  const filesize = (existingLogs.length / (1024 * 1024)).toFixed(2);
+  const filesize = (existingLogs.length / (1024 * 1024)).toFixed(3);
 
   log.info("Log file is not empty");
   log.debug("Adding existing logs to the 'logs' state");
diff --git a/src/main.ts b/src/main.ts
@@ -12,6 +12,7 @@ import "@unocss/reset/tailwind.css";
 import "@/globals.css";
 // Import styles that are necessary for Material You ripple effect
 import "m3ripple-vue/style.css";
+import "core-js/actual";
 
 await prepareLogFile().catch((error: unknown) => {
   log.error("Failed to prepare a log file:", JSON.stringify(error));

Original file line number	Diff line number	Diff line change
`@@ -23,7 +23,7 @@`
`23`	`23`	`"visible": false,`
`24`	`24`	`"center": true,`
`25`	`25`	`"minWidth": 512,`
`26`		`- "minHeight": 384`
	`26`	`+ "minHeight": 288`
`27`	`27`	`}`
`28`	`28`	`],`
`29`	`29`	`"security": {`
Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,7 @@ useEventListener(window, "mousedown", (event: MouseEvent) => {`
`60`	`60`	`<div`
`61`	`61`	`@contextmenu.prevent`
`62`	`62`	`@contextmenu="showContextMenu"`
`63`		`- class="flex flex-nowrap gap-0 relative w-full h-vh overflow-hidden bg-neutral-950 text-white"`
	`63`	`+ class="flex flex-nowrap gap-0 relative w-full h-vh overflow-hidden text-white"`
`64`	`64`	`>`
`65`	`65`	`<div id="__kaede-extensions" class="block" />`
`66`	`66`	`<ContextMenu`