Alan-Jowett / sonde / 26252275071

82%

Build Type

push

github

Committed by web-flow

Commit Message

feat: implement gateway ACTUAL_STATE/DESIRED_STATE and PSK escrow (#1053)

* feat: implement gateway ACTUAL_STATE/DESIRED_STATE and PSK escrow (AZH-0600–AZH-0605, WEB-1001–WEB-1008)

Azure handler:
- Store gateway ACTUAL_STATE as singleton row (\g:\ partition prefix)
- Store node PSK escrow fields (\ncrypted_psk\, \key_hint\, \master_key_id\)
- Missing \key_hint\ recovery: match by \key_hint\ + \master_key_id\,
  emit \ecovered_psks\ in gateway DESIRED_STATE
- Rotation payload relay from SPA-written desired-state row, cleared
  after \master_key_epoch\ increment
- Salt management: include in DESIRED_STATE only when gateway reports
  \salt = null\
- Phone ACTUAL_STATE silently ignored (no escrow rows)
- 8 new tests (T-AZH-0600 through T-AZH-0605), 90 total

Web UI:
- Gateway status card on dashboard with locally-computed BIP-39
  fingerprint (SHA-256 of \x25519_public_key\ → 66 bits → 6 words)
- Rotation modal: Argon2id WASM (CDN), X25519, HKDF-SHA-256 +
  AES-256-GCM via Web Crypto, \RotationPayloadV1\ construction
- Dashboard/Desired State/Sensor Data tabs filter gateway rows from
  node table and dropdowns
- Key hygiene: no secrets in browser storage, best-effort variable
  zeroing

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* fix: address review comments on web UI key rotation

- Add noble-curves CDN (esm.sh) for X25519 support (missing dependency)
- Fix BIP-39 fingerprint 11-bit extraction to read 24 bits (3-byte span)
- Pin BIP-39 wordlist fetch to specific commit hash
- Validate hex input in \hexToBytes()\ with regex
- Fix \master_key_id\ display when base64 decode fails (show dash)
- Remove unused \kdfParamsRaw\ variable
- Extend \hasRotationCrypto()\ to check argon2 and noble-curves
- Use unsigned right shifts (\>>>\) in CBOR uint encoder

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: allow clippy::too_many_arguments on test helpe... (continued)

Coverage Stats

620 of 894 new or added lines in 1 file covered. (69.35%)

2 existing lines in 1 file now uncovered.

37878 of 45963 relevant lines covered (82.41%)

247.05 hits per line