feat: Phase 7 — Node v2 (multi-group, Sender Keys, 0-RTT, chat, denylist)

Implements all 8 milestones (7.0-7.7):

- 7.0: JWT carries `groups` claim; node verifies group membership at
  MNP handshake (QUIC + TCP+TLS). Resolves security review C2.
- 7.1: QUIC 0-RTT session resumption via stored session tickets
  (17-21ms reconnect vs 47ms cold).
- 7.2: Hub→node WebSocket signaling for NAT punch coordination
  (`client_incoming`/`punch_ready`) + jti denylist push. Denylist
  class blocks revoked users/jtis at handshake.
- 7.3: Multi-group daemon — one QUIC port serves N groups with
  per-group GEK, shared_root, and index routing.
- 7.4: HLS streaming via QUIC (STREAM_SEGMENT message type, ffmpeg
  segment extraction).
- 7.5: Sender Keys protocol for group chat (Signal Groups approach).
  Each member has own sending chain key, HKDF chain ratchet, AES-256-GCM
  encryption, Ed25519 signing. Resolves security review C1.
- 7.6: Chat store (SQLite via aiosqlite), CHAT_MESSAGE MNP wire type
  with peer broadcast, web UI with WebSocket push.
- 7.7: Argon2id calibration CLI.

First security review included (first-review.md). 109 tests, demo-v3
validated against meshbay.org production hub.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 91 insertions, 0 deletions

diff --git a/packages/meshbay-node/tests/test_chat_store.py b/packages/meshbay-node/tests/test_chat_store.py
new file mode 100644
index 0000000..d74310d
--- /dev/null
+++ b/packages/meshbay-node/tests/test_chat_store.py
@@ -0,0 +1,91 @@
+"""
+Tests for the SQLite-backed chat message store.
+"""
+
+import pytest
+import pytest_asyncio
+from pathlib import Path
+
+from meshbay_node.chat.store import ChatStore
+
+
+@pytest_asyncio.fixture
+async def store(tmp_path):
+    s = ChatStore(db_path=tmp_path / "test_chat.db")
+    await s.open()
+    yield s
+    await s.close()
+
+
+@pytest.mark.asyncio
+async def test_save_and_retrieve(store):
+    row_id = await store.save_message(
+        sender_id="alice", iteration=0, payload=b"hello",
+    )
+    assert row_id == 1
+
+    msgs = await store.get_messages()
+    assert len(msgs) == 1
+    assert msgs[0].sender_id == "alice"
+    assert msgs[0].iteration == 0
+    assert msgs[0].payload == b"hello"
+    assert msgs[0].thread_id is None
+
+
+@pytest.mark.asyncio
+async def test_message_count(store):
+    assert await store.message_count() == 0
+    await store.save_message("alice", 0, b"msg1")
+    await store.save_message("bob", 1, b"msg2")
+    assert await store.message_count() == 2
+
+
+@pytest.mark.asyncio
+async def test_get_messages_since(store):
+    await store.save_message("alice", 0, b"old")
+    all_msgs = await store.get_messages()
+    cutoff = all_msgs[0].timestamp
+    await store.save_message("bob", 1, b"new")
+
+    msgs = await store.get_messages(since=cutoff)
+    assert len(msgs) == 1
+    assert msgs[0].sender_id == "bob"
+
+
+@pytest.mark.asyncio
+async def test_thread_messages(store):
+    await store.save_message("alice", 0, b"root", thread_id="t1")
+    await store.save_message("bob", 1, b"reply", thread_id="t1")
+    await store.save_message("carol", 2, b"other")
+
+    thread = await store.get_thread("t1")
+    assert len(thread) == 2
+    assert thread[0].sender_id == "alice"
+    assert thread[1].sender_id == "bob"
+
+
+@pytest.mark.asyncio
+async def test_message_ordering(store):
+    for i in range(5):
+        await store.save_message(f"user-{i}", i, f"msg-{i}".encode())
+
+    msgs = await store.get_messages()
+    assert len(msgs) == 5
+    for i, m in enumerate(msgs):
+        assert m.sender_id == f"user-{i}"
+
+
+@pytest.mark.asyncio
+async def test_limit(store):
+    for i in range(10):
+        await store.save_message("alice", i, f"msg-{i}".encode())
+
+    msgs = await store.get_messages(limit=3)
+    assert len(msgs) == 3
+
+
+@pytest.mark.asyncio
+async def test_context_manager(tmp_path):
+    async with ChatStore(db_path=tmp_path / "ctx_test.db") as store:
+        await store.save_message("alice", 0, b"test")
+        assert await store.message_count() == 1