mirror of
https://relay.ngit.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit-grasp.git
synced 2026-10-05 23:18:24 +00:00
DanConwayDev
c169658096
The GRASP-08 boundary previously had end-to-end coverage only for the HTTP repository-root credential. Exercise the remaining externally observable contracts through the subprocess fixture: - NIP-42 WebSocket lifecycle: challenge on connect, auth-required rejections for REQ/EVENT/garbage before authentication, member admission that bridges through to a served subscription, immediate restricted-close for valid non-member credentials, and the bounded three-attempt budget for invalid ones. - NIP-98 credential scope: expiry outside the 60-second window and subpath-scoped credentials both fail with the indistinguishable empty 401, while one repository-root credential is reusable across Smart HTTP endpoints. - Discovery: the NIP-11 document stays unauthenticated and advertises NIP-42/98 so clients can learn the requirement without credentials. Deliberately excluded: dynamic accepted-relay-owner admission still has only unit coverage; an end-to-end scenario needs a second announced relay fixture and is left as follow-up scope. Validation: cargo test --test private_mode (51 passed) and cargo clippy --all-targets -- -D warnings on the rebased branch.