feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage

- Implement TOFU certificate pinning in Rust WS proxy with accept_cert_fingerprint command
- Refactor settings cache from package-level globals to Hub methods (eliminates global state)
- Add runtime ban check on WS message handling (kicks banned users mid-session)
- Sanitize reaction error messages to prevent IDOR information leaks
- Add slog error logging to REST handlers (channel, invite, search)
- Handle channel_delete for active channel in client dispatcher
- Add certMismatchBlock to prevent auto-reconnect on TOFU mismatch
- Consolidate root-level spec docs into docs/brain/06-Specs/ vault
- Add 80%+ test coverage for ws (80.9%) and admin (81.7%) packages
- Delete completed TODOS.md (all items resolved)
This commit is contained in:
jevb
2026-03-17 11:05:52 +01:00
parent ce4326766a
commit 4d1a1676c7
40 changed files with 5392 additions and 1915 deletions
+1 -1
View File
@@ -18,7 +18,7 @@ MIGRATION-PLAN.md
TESTING-STRATEGY.md
CLIENT-ARCHITECTURE.md
docs/superpowers/
docs/brain/
# Server runtime artifacts
Server/chatserver.exe
Server/config.yaml