Alan-Jowett / sonde / 26545897875

82%

Build Type

push

github

Committed by web-flow

Commit Message

feat(admin): add key rotate, key fingerprint, key status subcommands (ADMIN-0900–0902) (#1073)

* test(gateway): add escrow/rotation test suite T-2000, T-2001, T-2002, T-2006c

Add integration tests for PSK escrow, master key identification, and
ACTUAL_STATE publication (issue #1058, gateway-validation.md §18):

- T-2000: Master key identification — first startup
  Verifies \init_master_key_id()\ generates random 16-byte ID, sets
  epoch=1, backfills existing node and phone PSK records, and is
  idempotent across restarts.

- T-2001: Gateway ACTUAL_STATE publication
  Verifies gateway ACTUAL_STATE is emitted with all required fields
  (entity_kind, channel, \master_key_id\, epoch, \x25519_public_key\,
  \ingerprint_words\, \otation_in_progress\). Also verifies node
  ACTUAL_STATE includes escrow fields (keys 12–14).

- T-2002: Gateway DESIRED_STATE channel change
  Verifies DESIRED_STATE with channel field is parsed and forwarded
  to the \gateway_desired_state_tx\ channel. Channel switch handler
  is not yet implemented (rotation_engine.rs TODO).

- T-2006c: Phone PSKs not escrowed
  Verifies node ACTUAL_STATE includes escrow fields but no phone
  ACTUAL_STATE is emitted. After rotation, node ACTUAL_STATE is
  re-emitted with updated escrow, phone PSK is re-encrypted
  (plaintext preserved), and still no phone ACTUAL_STATE appears.

Remaining tests T-2006, T-2006a, T-2006b are blocked by #1056
(companion-side escrow receipt tests).

Closes #1058 (partial — 4 of 7 missing tests implemented)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* feat(admin): add key rotate, key fingerprint, key status subcommands (ADMIN-0900–0902)

Implement the three key management CLI subcommands per admin-design.md §11:

- \key fingerprint\: display BIP-39 fingerprint words (text + JSON)
- \key status\: display epoch, \master_key_id\, rotation state, salt, KDF params
- \key rotate\: interacti... (continued)

Coverage Stats

189 of 381 new or added lines in 2 files covered. (49.61%)

7 existing lines in 1 file now uncovered.

39394 of 47723 relevant lines covered (82.55%)

239.06 hits per line