meshcore-client

Commit Graph

Author	SHA1	Message	Date
Strycher	223a0f0d12	fix(#72 ): harden codec -- bound BrokerListDecoder + validate slot range (C1) Greens A1's adversarial tests, fixing the Gemini findings: - BLOCKER (DoS): BrokerListDecoder drops out-of-range slots and caps total retained fields (brokerSlotCount*32), so a hostile BROKER_KV flood cannot grow memory without bound. - MINOR: parse() rejects broker slots >= brokerSlotCount (was: stored slot 200). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 month ago
Strycher	1983ed94ab	feat(#64 ): observer config wire codec + models + service (logic layer) Client side of the Offband config command (CMD_OFFBAND_CONFIG 0xC0, firmware Epic F #160-#163), mirroring OffbandConfigProtocol.h + MyMesh::handleOffbandConfigCmd byte-for-byte: - models/observer_config.dart: ObserverConfig/BrokerConfig/WifiConfig/ MqttGlobalConfig/DisplayConfig, the tcp\|tls\|wss + none\|basic\|jwt enums, three-state SecretField, BrokerConfig.fromWireFields. - connector/observer_config_client.dart: pure codec -- frame builders (SET/GET/VIEW/BROKERS), parse() -> typed ConfigResponse, BrokerListDecoder (START->KV->END), supportsConfig (ver gate + 0x01 cap bit). - services/observer_config_service.dart: ChangeNotifier driving the codec over MeshCoreConnector -- send/await/parse round-trips, getBrokers stream, full-config refresh, capability gate, error/stale surfacing (SAFELANE 6). Known firmware gap flagged to RedCreek: broker enable/disable/clear have no wire path yet (configSet lacks `enabled`, VIEW allowlist blocks mutations); field SET + read work, activation/clear await a firmware F-task. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	1 month ago

Author

SHA1

Message

Date

Strycher

223a0f0d12

fix(#72 ): harden codec -- bound BrokerListDecoder + validate slot range (C1)

Greens A1's adversarial tests, fixing the Gemini findings:
- BLOCKER (DoS): BrokerListDecoder drops out-of-range slots and caps total
  retained fields (brokerSlotCount*32), so a hostile BROKER_KV flood cannot
  grow memory without bound.
- MINOR: parse() rejects broker slots >= brokerSlotCount (was: stored slot 200).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Strycher

1983ed94ab

feat(#64 ): observer config wire codec + models + service (logic layer)

Client side of the Offband config command (CMD_OFFBAND_CONFIG 0xC0, firmware
Epic F #160-#163), mirroring OffbandConfigProtocol.h + MyMesh::handleOffbandConfigCmd
byte-for-byte:

- models/observer_config.dart: ObserverConfig/BrokerConfig/WifiConfig/
  MqttGlobalConfig/DisplayConfig, the tcp|tls|wss + none|basic|jwt enums,
  three-state SecretField, BrokerConfig.fromWireFields.
- connector/observer_config_client.dart: pure codec -- frame builders
  (SET/GET/VIEW/BROKERS), parse() -> typed ConfigResponse, BrokerListDecoder
  (START->KV->END), supportsConfig (ver gate + 0x01 cap bit).
- services/observer_config_service.dart: ChangeNotifier driving the codec over
  MeshCoreConnector -- send/await/parse round-trips, getBrokers stream,
  full-config refresh, capability gate, error/stale surfacing (SAFELANE 6).

Known firmware gap flagged to RedCreek: broker enable/disable/clear have no
wire path yet (configSet lacks `enabled`, VIEW allowlist blocks mutations);
field SET + read work, activation/clear await a firmware F-task.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2 Commits (2ab31bec711104f1979e4328b7aab8ad6ae7d4e6)