Merge pull request #106 from TONresistor/dev

Release 2.3.0

Author: TONresistor

.github/workflows/build.yml

@@ -140,6 +140,10 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Verify macOS code signature
+        if: matrix.platform == 'mac'
+        run: node scripts/verify-macos-signature.mjs
+
       - name: Verify package artifacts
         run: node scripts/verify-release-artifacts.mjs ${{ matrix.platform }} ${{ matrix.goarch }}
 

.github/workflows/ci.yml

@@ -2,7 +2,8 @@ name: CI
 
 on:
   push:
-    branches: [main, dev]
+    branches:
+      - '**'
   pull_request:
     branches: [main, dev]
 
@@ -94,7 +95,7 @@ jobs:
         run: npm audit --audit-level=high
 
   # ─────────────────────────────────────────────
-  # Notify: Telegram (push to main only)
+  # Notify: Telegram (one summary per push, any branch)
   # ─────────────────────────────────────────────
   notify:
     needs: validate
@@ -123,24 +124,8 @@ jobs:
           NULL_SHA="0000000000000000000000000000000000000000"
           REPO_URL="${{ github.server_url }}/${{ github.repository }}"
 
-          send() {
-            local sha=$1 title body short url TEXT
-            title=$(git log -1 --pretty=format:'%s' "$sha")
-            body=$(git log -1 --pretty=format:'%b' "$sha" | head -20)
-            short=$(git rev-parse --short "$sha")
-            url="$REPO_URL/commit/$sha"
-            TEXT="<b>[Desktop] $title</b>"
-            [ -n "$body" ] && printf -v TEXT '%s\n\n%s' "$TEXT" "$body"
-            printf -v TEXT '%s\n\n<a href="%s">View commit %s</a>' "$TEXT" "$url" "$short"
-            curl -s -X POST "https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage" \
-              -d chat_id="${TELEGRAM_CHAT_ID}" \
-              -d parse_mode="HTML" \
-              -d disable_web_page_preview="true" \
-              --data-urlencode text="$TEXT"
-          }
-
-          # dev: one summary notification per push (avoid per-commit spam)
-          if [ "$BRANCH" = "dev" ]; then
+          # One summary notification per push for every branch (avoid per-commit spam)
+          if [ -n "$BRANCH" ]; then
             if [ "$BEFORE_SHA" = "$NULL_SHA" ] || ! git merge-base --is-ancestor "$BEFORE_SHA" "$AFTER_SHA" 2>/dev/null; then
               COUNT=$(git rev-list --count "$AFTER_SHA")
               RANGE="$AFTER_SHA"
@@ -152,14 +137,15 @@ jobs:
             fi
             NOUN=commits; [ "$COUNT" = "1" ] && NOUN=commit
             REPO_NAME=${REPO_URL##*/}
-            TEXT="<b>[DEV] $REPO_NAME</b>"
+            LABEL=$(printf '%s' "$BRANCH" | tr '[:lower:]' '[:upper:]')
+            TEXT="<b>[$LABEL] $REPO_NAME</b>"
             if [ "$VALIDATE_RESULT" = "success" ]; then
-              printf -v TEXT '%s\n%s %s pushed to dev' "$TEXT" "$COUNT" "$NOUN"
+              printf -v TEXT '%s\n%s %s pushed to %s' "$TEXT" "$COUNT" "$NOUN" "$BRANCH"
             else
-              printf -v TEXT '%s\nCI failed on dev (%s %s)' "$TEXT" "$COUNT" "$NOUN"
+              printf -v TEXT '%s\nCI failed on %s (%s %s)' "$TEXT" "$BRANCH" "$COUNT" "$NOUN"
             fi
             # Commit titles (HTML-escaped), oldest first, capped to avoid huge messages.
-            MAX=20
+            MAX=50
             TITLES=$(git log --reverse --max-count="$MAX" --pretty=format:'%s' "$RANGE" \
               | sed -e 's/&/\&amp;/g' -e 's/</\&lt;/g' -e 's/>/\&gt;/g')
             if [ "$COUNT" -gt "$MAX" ]; then
@@ -180,24 +166,6 @@ jobs:
             exit 0
           fi
 
-          # main (and any other branch): per-commit notifications (unchanged)
-          if [ "$VALIDATE_RESULT" != "success" ]; then
-            send "$AFTER_SHA"
-            exit 0
-          fi
-
-          if [ "$BEFORE_SHA" = "$NULL_SHA" ] || ! git merge-base --is-ancestor "$BEFORE_SHA" "$AFTER_SHA" 2>/dev/null; then
-            COMMITS=$(git log --reverse --pretty=format:'%H' --max-count=20 "$AFTER_SHA")
-          else
-            COMMITS=$(git log --reverse --pretty=format:'%H' "$BEFORE_SHA..$AFTER_SHA")
-          fi
-
-          while IFS= read -r sha; do
-            [ -z "$sha" ] && continue
-            send "$sha"
-            sleep 1
-          done <<< "$COMMITS"
-
   # ─────────────────────────────────────────────
   # Dependency review (PRs only)
   # ─────────────────────────────────────────────

README.md

@@ -33,21 +33,21 @@
 
 Tonnet Browser is a native desktop browser for the TON Network. It resolves `.ton`, `.t.me`, `.adnl`, `.eth` (ENS), and `.sol` (SNS) through decentralized DNS and delivers content over RLDP directly from the network.
 
-All traffic goes through ADNL, either peer-to-peer or via multi-hop tunnels. A WebSocket bridge connects directly to the TON blockchain, removing any dependency on centralized APIs like TonCenter or TonAPI. Anti-fingerprinting, per-domain isolation, and built-in TON Storage are included out of the box. No telemetry, no tracking, fully open source.
+All traffic goes through ADNL, either peer-to-peer or via multi-hop tunnels. A WebSocket bridge connects directly to the TON blockchain, removing any dependency on centralized APIs like TonCenter or TonAPI. Anti-fingerprinting, per-domain isolation, built-in TON Storage, and optional experimental Messenger are included. No telemetry, no tracking, fully open source.
 
 ## Features
 
 <table>
   <tr>
     <td align="center" width="200"><br><b>Browsing</b><br><br><sub>.ton .t.me .adnl<br>TON Storage Bags<br>+ more TLDs</sub><br><br></td>
-    <td align="center" width="200"><br><b>Wallet</b><br><br><sub>W5 v5r1, send/receive<br>HTTP 402 micropayments</sub><br><br></td>
+    <td align="center" width="200"><br><b>Wallet</b><br><br><sub>W5 v5r1, send/receive<br>Experimental HTTP 402</sub><br><br></td>
     <td align="center" width="200"><br><b>Privacy</b><br><br><sub>Garlic routing<br>Anti-fingerprinting<br>Per-domain isolation<br>No telemetry</sub><br><br></td>
     <td align="center" width="200"><br><b>Storage</b><br><br><sub>TON Storage P2P<br>File browser<br>Download & seed</sub><br><br></td>
   </tr>
   <tr>
     <td align="center" width="200"><br><b>Bridge</b><br><br><sub>WebSocket JSON-RPC<br>Direct to TON<br>No centralized API dependency</sub><br><br></td>
     <td align="center" width="200"><br><b>Security</b><br><br><sub>Process sandboxing<br>SSRF protection<br>IPC hardening<br>Encrypted history</sub><br><br></td>
-    <td align="center" width="200"><br><b>Routing</b><br><br><sub>DHT relay discovery<br>Direct or multi-hop<br>Censorship-resistant</sub><br><br></td>
+    <td align="center" width="200"><br><b>Messenger</b><br><br><sub>Experimental groupchat<br>DHT room discovery<br>Opt-in network</sub><br><br></td>
     <td align="center" width="200"><br><b>Fingerprint</b><br><br><sub>Canvas, WebGL, Audio<br>WebRTC leak blocking<br>Generic User-Agent</sub><br><br></td>
   </tr>
 </table>
@@ -56,58 +56,69 @@ All traffic goes through ADNL, either peer-to-peer or via multi-hop tunnels. A W
 
 | ![Windows](https://img.shields.io/badge/Windows-0078D6?style=for-the-badge&logo=windows&logoColor=white) | ![macOS](https://img.shields.io/badge/macOS-000000?style=for-the-badge&logo=apple&logoColor=white) | ![Linux](https://img.shields.io/badge/Linux-FCC624?style=for-the-badge&logo=linux&logoColor=white) |
 |:---:|:---:|:---:|
-| [Installer](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-Setup-2.2.0.exe) | [DMG (Universal)](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.2.0-universal.dmg) | [AppImage](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.2.0.AppImage) · [.deb](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.2.0.deb) |
+| [Installer](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-Setup-2.3.0.exe) | [DMG (Universal)](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.3.0-universal.dmg) | [AppImage x64](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.3.0-x86_64.AppImage) · [.deb x64](https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.3.0-amd64.deb) |
 
 ### Windows
 
 Your browser may warn that the file is from an unknown source. Click **"Keep"** to download.
 
-1. Download and run **TON-Browser-Setup-2.2.0.exe**
+1. Download and run **TON-Browser-Setup-2.3.0.exe**
 2. Follow the installation prompts
 3. Launch **TON Browser** from the Start menu
 
 **One-line install:** Open PowerShell and run:
 
 ```powershell
-irm https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-Setup-2.2.0.exe -OutFile TonBrowser.exe; Unblock-File TonBrowser.exe; .\TonBrowser.exe
+irm https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-Setup-2.3.0.exe -OutFile TonBrowser.exe; Unblock-File TonBrowser.exe; .\TonBrowser.exe
 ```
 
 ### macOS
 
 Open the `.dmg` and drag TON Browser to Applications.
 
+The app is ad-hoc signed (no paid Apple Developer ID), so Gatekeeper does not
+trust it yet. Clear the quarantine flag once:
+
 ```bash
-# If blocked by Gatekeeper
 xattr -cr /Applications/TON\ Browser.app
 ```
 
 **One-line install:** Open Terminal and run:
 
 ```bash
-curl -LO https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.2.0-universal.dmg && hdiutil attach TON-Browser-2.2.0-universal.dmg && cp -R "/Volumes/TON Browser/TON Browser.app" /Applications/ && hdiutil detach "/Volumes/TON Browser" && xattr -cr /Applications/TON\ Browser.app && open /Applications/TON\ Browser.app
+curl -LO https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.3.0-universal.dmg && hdiutil attach TON-Browser-2.3.0-universal.dmg && cp -R "/Volumes/TON Browser/TON Browser.app" /Applications/ && hdiutil detach "/Volumes/TON Browser" && xattr -cr /Applications/TON\ Browser.app && open /Applications/TON\ Browser.app
 ```
 
+> **Still crashes on launch (Apple Silicon)?** Older builds (≤ 2.2.0) shipped
+> unsigned and crash immediately on M1/M2/M3. Re-sign once, then reopen:
+>
+> ```bash
+> codesign --force --deep --sign - /Applications/TON\ Browser.app
+> ```
+
 ### Linux
 
 ```bash
 # AppImage
-chmod +x TON-Browser-2.2.0.AppImage
-./TON-Browser-2.2.0.AppImage
+chmod +x TON-Browser-2.3.0-x86_64.AppImage
+./TON-Browser-2.3.0-x86_64.AppImage
 
 # Debian/Ubuntu
-sudo dpkg -i TON-Browser-2.2.0.deb
+sudo dpkg -i TON-Browser-2.3.0-amd64.deb
 ```
 
 **One-line install:** Open Terminal and run:
 
 ```bash
 # AppImage
-curl -LO https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.2.0.AppImage && chmod +x TON-Browser-2.2.0.AppImage && ./TON-Browser-2.2.0.AppImage
+curl -LO https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.3.0-x86_64.AppImage && chmod +x TON-Browser-2.3.0-x86_64.AppImage && ./TON-Browser-2.3.0-x86_64.AppImage
 
 # Debian/Ubuntu
-curl -LO https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.2.0.deb && sudo dpkg -i TON-Browser-2.2.0.deb
+curl -LO https://github.com/TONresistor/Tonnet-Browser/releases/latest/download/TON-Browser-2.3.0-amd64.deb && sudo dpkg -i TON-Browser-2.3.0-amd64.deb
 ```
 
+ARM64 Linux builds are also published as `TON-Browser-2.3.0-arm64.AppImage` and `TON-Browser-2.3.0-arm64.deb`.
+
 ## Building
 
 ### Prerequisites

build/entitlements.mac.plist

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>com.apple.security.cs.allow-jit</key>
+  <true/>
+  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+  <true/>
+  <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+  <true/>
+  <key>com.apple.security.cs.disable-library-validation</key>
+  <true/>
+</dict>
+</plist>

electron-builder.yml

@@ -71,6 +71,9 @@ mac:
   hardenedRuntime: true
   gatekeeperAssess: false
   x64ArchFiles: "Contents/Resources/bin/*"
+  identity: "-"
+  entitlements: build/entitlements.mac.plist
+  entitlementsInherit: build/entitlements.mac.plist
 
 # Electron fuses are configured per-platform in scripts/afterPack.cjs
 # (cookieEncryption requires code signing on macOS; enabled on Linux/Windows only)

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "ton-browser",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "Browse tonsites on The Open Network, Privately.",
   "homepage": "https://tonnet.resistance.dog",
   "bugs": {
@@ -84,7 +84,6 @@
     }
   },
   "devDependencies": {
-    "@electron-toolkit/preload": "^3.0.2",
     "@electron-toolkit/utils": "^4.0.0",
     "@electron/fuses": "^1.8.0",
     "@eslint/js": "^9.39.4",

package.json

@@ -595,6 +595,31 @@ var TONCONNECT_FEATURES = [
 var TONNET_WALLET_IMAGE =
   'data:image/svg+xml;base64,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'
 
+// Bound what an untrusted page can push across the IPC boundary (mirrors the
+// tonBridge.send / payForXhr caps). Legit dApp payloads are far smaller.
+var MAX_TONCONNECT_PAYLOAD = 65536
+var MAX_MANIFEST_URL = 8192
+// Soft cap on distinct event listeners a page may register.
+var MAX_TONCONNECT_LISTENERS = 64
+
+// A single ipcRenderer listener fans out to all page callbacks, so repeated
+// listen() calls can never accumulate ipcRenderer listeners (leak / MaxListeners).
+var tonconnectCallbacks = []
+var tonconnectListenerRegistered = false
+function ensureTonconnectListener() {
+  if (tonconnectListenerRegistered) return
+  tonconnectListenerRegistered = true
+  ipcRenderer.on('tonconnect:event', function (_event, data) {
+    for (var i = 0; i < tonconnectCallbacks.length; i++) {
+      try {
+        tonconnectCallbacks[i](data)
+      } catch (e) {
+        /* a page callback throwing must not break the fan-out */
+      }
+    }
+  })
+}
+
 contextBridge.exposeInMainWorld('tonnet', {
   tonconnect: {
     deviceInfo: {
@@ -615,6 +640,9 @@ contextBridge.exposeInMainWorld('tonnet', {
     protocolVersion: 2,
     isWalletBrowser: true,
     connect: function (protocolVersion, request) {
+      if (request && typeof request.manifestUrl === 'string' && request.manifestUrl.length > MAX_MANIFEST_URL) {
+        return Promise.reject(new Error('tonconnect: manifestUrl too large'))
+      }
       return ipcRenderer.invoke('tonconnect:request', {
         method: 'connect',
         protocolVersion: protocolVersion,
@@ -625,18 +653,28 @@ contextBridge.exposeInMainWorld('tonnet', {
       return ipcRenderer.invoke('tonconnect:request', { method: 'restore' })
     },
     send: function (message) {
+      if (
+        message &&
+        message.params &&
+        typeof message.params[0] === 'string' &&
+        message.params[0].length > MAX_TONCONNECT_PAYLOAD
+      ) {
+        return Promise.reject(new Error('tonconnect: payload too large'))
+      }
       return ipcRenderer.invoke('tonconnect:request', { method: 'send', message: message })
     },
     disconnect: function () {
       return ipcRenderer.invoke('tonconnect:request', { method: 'disconnect' })
     },
     listen: function (callback) {
-      var listener = function (_event, data) {
-        callback(data)
+      if (typeof callback !== 'function' || tonconnectCallbacks.length >= MAX_TONCONNECT_LISTENERS) {
+        return function () {}
       }
-      ipcRenderer.on('tonconnect:event', listener)
+      ensureTonconnectListener()
+      tonconnectCallbacks.push(callback)
       return function () {
-        ipcRenderer.removeListener('tonconnect:event', listener)
+        var idx = tonconnectCallbacks.indexOf(callback)
+        if (idx !== -1) tonconnectCallbacks.splice(idx, 1)
       }
     },
   },