feat(nip-fi): admin disconnect/deny API with in-memory deny-until-TTL map (S4) - #7265

Open

wpfleger96 wants to merge 31 commits into

mainfrom

duncan/nip-fi-deny-api

Commits on Sep 2, 2026

feat(nip-fi): add deny map and command JWT verifier (S4)

Duncan
and
wpfleger96
committed
e01ba19
feat(nip-fi): add disconnect endpoint and route wiring (S4)

Duncan
and
wpfleger96
committed
2a42ddf
fix(nip-fi): address Thufir pass-1 findings (S4 R1)

Duncan
and
wpfleger96
committed
6b84474

Commits on Sep 3, 2026

fix(nip-fi): address Thufir pass-2 findings (S4 R2)

Duncan
and
wpfleger96
committed
e7e4f6d
fix(nip-fi): close huddle audio sockets on targeted NIP-FI disconnect (F9)

Duncan
and
wpfleger96
committed
a2f4112
fix(nip-fi): address Thufir pass-3 findings (S4 R3)

Duncan
and
wpfleger96
committed
f03efb3
fix(nip-fi): close all 4 Thufir pass-4 blockers (S4 R4)

Duncan
and
wpfleger96
committed
45a0769
fix(nip-fi): move pre-lock hook inside shard arm, add PreLockHook type alias, fix fractional clock assertion, tighten JTI concurrent counts

Duncan
and
wpfleger96
committed
b6f5ba3
fix(nip-fi): implement Thufir reconciliation — remove blocked-bit, add dual-transport witness, fix privacy leak, hermetic config, fractional verify_at, claim cleanups (S4 R5)

Duncan
and
wpfleger96
committed
c779331
Merge remote-tracking branch 'origin/main' into duncan/nip-fi-deny-api
Duncan
committed
9508598
fix(nip-fi): make hermetic_for_test() fully env-free

Duncan
and
wpfleger96
committed
bf02d40
fix(nip-fi): use fixed HMAC literal in hermetic_for_test and add determinism regression

Duncan
and
wpfleger96
committed
481c5ba
feat(nip-fi): wire deny-map check into WS connection admission (#7291)

authored
b4cc53a
fix(nip-fi): share JWKS source Arc between assertion verifier and command installer

Duncan
and
wpfleger96
committed
36bdc9e
Merge remote-tracking branch 'origin/main' into duncan/nip-fi-deny-api
Duncan
committed
a780d83
Merge remote-tracking branch 'origin/main' into duncan/nip-fi-deny-api
Duncan
committed
7b50c0a

Commits on Sep 4, 2026

refactor(nip-fi): remove verifier shims; add propagation-failure counter

Duncan
and
wpfleger96
committed
a6c2052
feat(nip-fi): send explicit 1008 POLICY close frame on NIP-FI denial paths

Duncan
and
wpfleger96
committed
ba7a676
fix(nip-fi): audio pre-send-loop drain now emits policy close; first-writer-wins reason publication

Duncan
and
wpfleger96
committed
430a66e
fix(nip-fi): route deny-set post-registration writer through first-writer-wins

Duncan
and
wpfleger96
committed
670d449
test(nip-fi): replace W_FIX1 with production-bound check_cancel witness

Duncan
and
wpfleger96
committed
688c763
docs(audio): fix stale hook name in W_FIX1 comment

Duncan
and
wpfleger96
committed
0a80219
fix(audio): deliver restricted JSON payload on admin-disconnect

Duncan
and
wpfleger96
committed
67c5421
fix(nip-fi): close pre-registration gap and couple deny payload to first-writer-wins

Duncan
and
wpfleger96
committed
db23c34
fix(nip-fi): serialize disconnect_community through terminal lock — cancel ordering

Duncan
and
wpfleger96
committed
c1eef94
fix(nip-fi): serialize all terminal writers through shared transition lock

Duncan
and
wpfleger96
committed
26099bc

Commits on Sep 8, 2026

fix(nip-fi): serialize root key-pairing through terminal lock — cancel ordering

Duncan
and
wpfleger96
committed
82c4b66
Merge remote-tracking branch 'origin/main' into duncan/nip-fi-deny-api
Duncan
committed
7a47714
fix(nip-fi): serialize auth-handler and manager disconnect_nip_fi through terminal lock

Duncan
and
wpfleger96
committed
9c63de0
fix(buzz-relay): route all lifecycle cancels through transition lock

Duncan
and
wpfleger96
committed
c98f897
fix(buzz-relay): thread lifecycle_cancel through all audio teardown paths

Duncan
and
wpfleger96
committed
5e41fff