Skip to content

RC13: credential-safe inventory and explicit interruption on RC12 SDK lineage - #4

Draft
danoev wants to merge 4 commits into
codex/rc12-connection-safetyfrom
codex/access-inventory-rc12
Draft

danoev wants to merge 4 commits into
codex/rc12-connection-safetyfrom
codex/access-inventory-rc12

Conversation

@danoev

@danoev danoev commented Oct 22, 2026 •

Copy link
Copy Markdown
Owner

Read-only inventory could return partial metadata after an exchange failure without telling callers that transport had been interrupted. Inventory admin/challenge errors could also expose raw exception text, including a malformed stored key. This draft adds an explicit transport_interrupted flag while preserving credential-free partial evidence, and suppresses raw transport, decrypt and admin-builder exception chains. Cancellation still propagates.

This PR stays on the preserved SDK 0.1.11/RC12 lineage (codex/rc12-connection-safety at 65a196a4415516039fd98fe40ccdccc7dccfec23), not current SDK main. Integration RC13 draft danoev/ha-ttlock-ble#5 explicitly pins final SDK head 60604872e004d9dc7fd74aaf3ad260da9143b4c1; published RC12 retains its original SDK pin.

The original inventory scope remains: admin-gated summaries for PINs, fingerprints and upstream PR roquerodrigo#96's hardware-tested four-byte IC cards. Values, UIDs, fingerprint IDs and slots are discarded. PIN coverage remains incomplete; eight-byte cards remain unverified. The original MIT project authorship and upstream provenance are preserved.

Validation: complete local SDK suite 308 passed, 97.21% coverage; Ruff, formatting and mypy pass. New regressions cover transport interruption, redacted rendered tracebacks at admin/random/page stages, and malformed admin-challenge key handling. Existing control, cleanup, compatibility and retry tests remain in the full suite. Hosted CI 39764637576 and CodeQL 39764637993 pass at that exact head; hosted pytest also reports 308 passed, 97.21% coverage. The branch-update job skipped and the head remained unchanged.

Hardware inventory validation remains pending. This is a draft for fork review and validation; no merge or SDK-main change is requested.

@danoev danoev changed the title RC12: credential-safe read-only access inventory RC13: credential-safe inventory and explicit interruption on RC12 SDK lineage Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant