meshbay.git/packages/meshbay-hub/tests/test_challenge_signature_client.py, branch mainMeshBay — read-only public mirrorhttps://git.meshbay.org/meshbay.git/atom?h=main2026-09-25T10:07:49Ztest(hub): read the transport wherever it is split2026-09-25T10:07:49ZChristophe Bessoncbesson@gmail.com2026-09-25T09:09:12Zurn:sha1:6348698322e5bfcb80d0ef0dcd833ba4e6179640
spa_source.transport_files() takes the classic transport*.js scripts
from the hub's shell, in load order. Every test that read transport.js
reads them all, the Node harnesses run them joined as one scope, the
chat probe loads each, and the desktop shell must load them in order.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
feat: the node signs its handshake challenge (MNP 3.4)2026-09-23T15:14:26ZChristophe Bessoncbesson@gmail.com2026-09-23T15:14:26Zurn:sha1:339cb427f886a0177014126bb684335837eff067
node_pk in handshake_challenge is now signed over the channel binding
and both nonces, so a client can check the node key before a join
rather than only at the ack. Both transports; the browser and the QUIC
client refuse a wrong signature and treat an absent one as an older node.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>