82a04f3e12
Begin the coven evolution of cmd-chat (see docs/spec-collaborative-sandbox.md): a Rust/ratatui client for the unchanged Python Sanic server, plus the multi-user + zero-knowledge groundwork. P0 — crypto parity (the spec's #1 risk), proven three ways: - Hand-rolled SRP-6a (NG_2048, SHA-256, rfc5054 padding) matching pysrp byte-for-byte, incl. the fixed b"chat" SRP identity and minimal-vs-256B width quirks. Golden-vector unit test + offline selftest. - Live handshake against the running server (H_AMK verified). - Cross-language E2E: Python client decrypts a Rust-encrypted Fernet message. P2 — multi-user coven (server): - CMD_CHAT_MAX_USERS capacity cap (default 4, infra-for-more). - Authoritative roster + user_joined broadcasts. - Free the slot/username on ws disconnect (was held until 1h stale sweep). Also: fix requirements.txt (was UTF-16, unparseable by pip). coven/ : Rust crate (crypto.rs proven; main.rs spike CLI: selftest/handshake/srpm) docs/ : full feature spec for the 6 requested features. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
56 lines
1.7 KiB
Python
56 lines
1.7 KiB
Python
import asyncio
|
|
import secrets
|
|
from contextlib import suppress
|
|
from sanic import Sanic
|
|
from sanic_ext import Extend
|
|
import os
|
|
from .managers import ConnectionManager
|
|
from .stores import MessageStore, UserSessionStore
|
|
from .srp_auth import SRPAuthManager
|
|
from .helpers import RateLimiter
|
|
|
|
from .routes import register_routes
|
|
|
|
|
|
def create_app(password: str = "", name: str = "cmd-chat-server") -> Sanic:
|
|
app = Sanic(name)
|
|
Extend(app)
|
|
|
|
app.ctx.message_store = MessageStore()
|
|
app.ctx.session_store = UserSessionStore()
|
|
app.ctx.connection_manager = ConnectionManager()
|
|
app.ctx.srp_manager = SRPAuthManager(password)
|
|
app.ctx.room_salt = os.urandom(16)
|
|
app.ctx.ws_secret = os.urandom(32)
|
|
app.ctx.admin_token = secrets.token_hex(16)
|
|
app.ctx.rate_limiter = RateLimiter(max_requests=10, window_seconds=60)
|
|
# Coven capacity. 4 by default; raise via CMD_CHAT_MAX_USERS — infra-for-more,
|
|
# the cap is data not architecture (broadcast fan-out is O(N)).
|
|
app.ctx.max_users = int(os.environ.get("CMD_CHAT_MAX_USERS", "4"))
|
|
app.ctx.cleanup_task = None
|
|
|
|
register_lifecycle(app)
|
|
register_routes(app)
|
|
|
|
return app
|
|
|
|
|
|
def register_lifecycle(app: Sanic) -> None:
|
|
@app.before_server_start
|
|
async def setup(app: Sanic):
|
|
app.ctx.cleanup_task = asyncio.create_task(cleanup_stale_sessions(app))
|
|
|
|
@app.after_server_stop
|
|
async def teardown(app: Sanic):
|
|
if app.ctx.cleanup_task:
|
|
app.ctx.cleanup_task.cancel()
|
|
with suppress(asyncio.CancelledError):
|
|
await app.ctx.cleanup_task
|
|
|
|
|
|
async def cleanup_stale_sessions(app: Sanic) -> None:
|
|
while True:
|
|
with suppress(asyncio.CancelledError):
|
|
await asyncio.sleep(300)
|
|
app.ctx.session_store.cleanup_stale()
|