01e607dced
- proptest-fuzz the untrusted frame parsers (sbx/ai/perm/users/decode_msg) so a hostile relay/peer can never panic a client; fixes a decode_msg timestamp byte-slice that panicked on a non-ASCII stamp (now char-boundary safe) - extract a pure classify_vtx_holders() out of vtx_holders() and unit-test the KVM/QEMU/multipass detection and stoppability rules - headless cross-stack smoke test (smoke-e2e.sh): real relay + two TUI clients in tmux, asserting SRP join, Fernet chat round-trip, and command dispatch - CI: macOS matrix for the Rust client, cargo-audit + pip-audit, gitleaks secret scan, llvm-cov/pytest-cov coverage, and a smoke-test job Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
55 lines
1.3 KiB
TOML
55 lines
1.3 KiB
TOML
[package]
|
|
name = "hack-house"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "hack-house — encrypted collaborative sessions with a summoned sandbox."
|
|
license = "MIT"
|
|
|
|
[[bin]]
|
|
name = "hack-house"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
# crypto
|
|
num-bigint = "0.4"
|
|
num-traits = "0.2"
|
|
sha2 = "0.10"
|
|
hkdf = "0.12"
|
|
fernet = "0.2"
|
|
base64 = "0.22"
|
|
rand = "0.8"
|
|
hex = "0.4"
|
|
|
|
# net
|
|
reqwest = { version = "0.12", default-features = false, features = ["blocking", "json", "rustls-tls"] }
|
|
tungstenite = { version = "0.24", features = ["rustls-tls-webpki-roots"] }
|
|
rustls = "0.23"
|
|
url = "2"
|
|
|
|
# sandbox (P3): PTY + terminal emulation
|
|
portable-pty = "0.8"
|
|
vt100 = "0.15"
|
|
|
|
# file/dir transfer (P5)
|
|
tar = "0.4"
|
|
|
|
# async + tui
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "net", "io-util", "sync", "time", "signal"] }
|
|
tokio-tungstenite = { version = "0.24", features = ["rustls-tls-webpki-roots"] }
|
|
futures-util = "0.3"
|
|
ratatui = { version = "0.29", features = ["serde", "unstable-rendered-line-info"] }
|
|
crossterm = { version = "0.28", features = ["event-stream"] }
|
|
toml = "0.8"
|
|
|
|
# data
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
|
|
# cli / errors
|
|
clap = { version = "4", features = ["derive"] }
|
|
anyhow = "1"
|
|
|
|
[dev-dependencies]
|
|
# property-based fuzzing of the frame parsers (attacker-controlled JSON)
|
|
proptest = "1"
|