feat(desktop): add protected owner attestation signer

crates/buzz-sdk/src/nip_oa.rs

@@ -33,7 +33,7 @@ use crate::SdkError;
 /// Empty string is valid. Non-empty must be `clause` or `clause&clause&...`
 /// where each clause is `kind=<0-65535>`, `created_at<<0-4294967295>`, or
 /// `created_at><0-4294967295>`. Canonical decimals only (no leading zeros).
-fn validate_conditions(conditions: &str) -> Result<(), SdkError> {
+pub fn validate_conditions(conditions: &str) -> Result<(), SdkError> {
     if conditions.is_empty() {
         return Ok(());
     }

desktop/src-tauri/Cargo.toml

@@ -37,6 +37,7 @@ tauri-build = { version = "2", features = [] }
 [target.'cfg(unix)'.dependencies]
 libc = "0.2"
 ctrlc = { version = "3", features = ["termination"] }
+rustix = { version = "=1.1.4", features = ["fs"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
 keyring = { version = "3.6.3", default-features = false, features = ["sync-secret-service", "vendored"], optional = true }

desktop/src-tauri/src/app_state.rs

@@ -11,6 +11,7 @@ use nostr::{Keys, ToBech32};
 use tauri::{AppHandle, Manager};
 use tokio::sync::Mutex as AsyncMutex;
 
+use crate::commands::OwnerAttestationPreviewStore;
 use crate::huddle::HuddleState;
 pub(crate) use crate::identity_storage::{IdentityStorage, RecoveryState, ResolvedIdentity};
 use crate::managed_agents::config_bridge::SessionConfigCache;
@@ -90,6 +91,9 @@ pub struct AppState {
     /// `keys` so readers (signing, get_identity, etc.) are not blocked during
     /// keyring I/O.
     pub identity_mutation: Mutex<()>,
+    /// One-use, backend-owned owner-attestation preview. Renderer-supplied
+    /// paths and hashes are never treated as signing authorization.
+    pub(crate) owner_attestation_previews: Mutex<OwnerAttestationPreviewStore>,
     /// Set when the boot-time Phase 2 reset attempted a wipe but verification
     /// failed. The sentinel is preserved so the next relaunch retries. All
     /// identity-dependent setup is skipped; the frontend shows a reset-failed
@@ -211,6 +215,7 @@ pub fn build_app_state() -> AppState {
         shutdown_started: AtomicBool::new(false),
         managed_agent_runtime_transition: Mutex::new(()),
         identity_mutation: Mutex::new(()),
+        owner_attestation_previews: Mutex::new(OwnerAttestationPreviewStore::default()),
         managed_agents_store_lock: Mutex::new(()),
         channel_templates_store_lock: Mutex::new(()),
         managed_agent_processes: Mutex::new(HashMap::new()),

desktop/src-tauri/src/commands/mod.rs

@@ -43,6 +43,7 @@ mod messages;
 mod notifications;
 mod observer_archive;
 mod os_idle;
+mod owner_attestation;
 pub mod pairing;
 mod personas;
 mod prevent_sleep;
@@ -104,6 +105,7 @@ pub use messages::*;
 pub use notifications::*;
 pub use observer_archive::*;
 pub use os_idle::*;
+pub use owner_attestation::*;
 pub use pairing::*;
 pub use personas::*;
 pub use prevent_sleep::*;