Alan-Jowett / sonde / 26067316527

82%

Build Type

push

github

Committed by web-flow

Commit Message

Implement Azure handler escrow backend (AZH-0600 through AZH-0605) (#956)

* Implement Azure handler escrow backend (AZH-0600 through AZH-0605)

- AZH-0602: Implement store_gateway_escrow_pubkey on AzureTablesStore
  with dedicated escrow table and monotonic epoch guard
- AZH-0601: Implement load_escrow_blobs_by_key_hint on AzureTablesStore
  with partition dedup and overflow logging
- AZH-0600: Phone escrow partition key separation via entity_kind field
  and encode_phone_partition_key ("p:" prefix)
- AZH-0605: Gateway escrow state persistence — decode status_details
  (CBOR key 10) and store escrow_state/salt/KDF params
- Add store_gateway_escrow_state trait method with default error
- Add GatewayEscrowPubkeyEntity and GatewayEscrowStateEntity with
  checked u64-to-i64 conversions
- Add tests for gateway state persistence, phone/node partition keys
- Update MemoryStore mock with stored_escrow_state field

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Implement KDF salt first-writer-wins storage (AZH-0603)

- Add store_escrow_salt_if_absent to HandlerStore trait with
  first-writer-wins semantics: returns Ok(true) on first store,
  Ok(false) if salt already exists
- Implement on AzureTablesStore using insert (not upsert) so that
  409 Conflict from Azure Tables signals an existing salt row
- Add GatewayEscrowSaltEntity with base64 salt, KDF params JSON,
  and checked u64-to-i64 created_at conversion
- Add is_legacy_conflict helper for 409 detection
- Wire salt storage into gateway ACTUAL_STATE handler: stores salt
  from status_details when present, logs debug on duplicate
- Update MemoryStore mock with stored_salt field
- Add gateway_actual_state_stores_salt_first_writer_wins test
  verifying first write persists and second write is ignored

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review feedback: tighten validation and add safety guards

- Reject non-map CBOR type for status_details ... (continued)

Coverage Stats

232 of 348 new or added lines in 1 file covered. (66.67%)

7 existing lines in 1 file now uncovered.

37696 of 45433 relevant lines covered (82.97%)

249.14 hits per line