Skip to content

Group E2EE before discovery: safe one-shot lifecycle orchestration #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
chgaowei wants to merge 15 commits into from
Closed

Group E2EE before discovery: safe one-shot lifecycle orchestration #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
e4715e6
Make direct E2EE CLI recovery survive real listener flows
chgaowei Apr 24, 2026
28f5515
Prepare CLI group E2EE flows without a daemon dependency
chgaowei May 2, 2026
abaf665
Enable CLI orchestration for real group E2EE
chgaowei May 2, 2026
f4a82fd
Keep provider-only fields out of group KeyPackage publish
chgaowei May 2, 2026
7c58410
Harden group E2EE helper readiness
chgaowei May 2, 2026
b0856f4
Make group E2EE CLI restore named-device MLS state
chgaowei May 2, 2026
638b47a
Keep CLI Group E2EE orchestration protocol-correct while hidden
chgaowei May 3, 2026
2495e03
feat: bind published Group E2EE KeyPackages to the active DID
chgaowei May 3, 2026
611de3b
Keep E2EE exits cryptographically safe in one-shot CLI flows
chgaowei May 3, 2026
b71f55e
Route E2EE self-leave through safe leave requests
chgaowei May 3, 2026
ba7f77f
Recover stale Group E2EE epochs before sending
chgaowei May 4, 2026
debbe39
Repair group E2EE epochs across durable notices and device state
chgaowei May 4, 2026
048b76f
Enable PR-B3 CLI recovery without P4 membership mutation
chgaowei May 4, 2026
4e60ca0
Preserve recovery KeyPackage bindings at the CLI boundary
chgaowei May 4, 2026
0ca3b48
Resolve review-blocking base drift for group E2EE
chgaowei May 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
159 changes: 84 additions & 75 deletions CLAUDE.md
View file
Open in desktop

Large diffs are not rendered by default.

9 changes: 5 additions & 4 deletions docs/architecture/awiki-command-v2.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -117,15 +117,16 @@ awiki-cli msg mark-read MSG_ID...

`msg attachment download` 会按 `message_id` 分页扫描 direct history 或 group messages，直到命中目标附件消息，而不是只检查最新一页结果。

awiki-cli group create --name "Agent War Room" [--description "..."] [--discoverability private|listed|public] [--admission-mode admin-add|open-join] [--slug agent-war-room] [--goal "..."] [--rules "..."] [--message-prompt "..."] [--doc-url "https://..."] [--attachments-allowed] [--max-members 500] [--member-max-messages 10] [--member-max-total-chars 2000] [--identity alice]
awiki-cli group create --name "Agent War Room" [--description "..."] [--discoverability private|listed|public] [--admission-mode admin-add|open-join] [--message-security-profile transport-protected|group-e2ee] [--e2ee] [--slug agent-war-room] [--goal "..."] [--rules "..."] [--message-prompt "..."] [--doc-url "https://..."] [--attachments-allowed] [--max-members 500] [--member-max-messages 10] [--member-max-total-chars 2000] [--identity alice]
awiki-cli group get --group GROUP_DID [--identity alice]
awiki-cli group join --group GROUP_DID [--reason "..."] [--identity alice]
awiki-cli group add --group GROUP_DID --member did:wba:... [--role member|admin] [--reason "..."] [--identity alice]
awiki-cli group remove --group GROUP_DID --member did:wba:... [--reason "..."] [--identity alice]
awiki-cli group add --group GROUP_DID --member did:wba:... [--role member|admin] [--reason "..."] [--e2ee] [--identity alice]
awiki-cli group remove --group GROUP_DID --member did:wba:... [--reason "..."] [--e2ee] [--identity alice]
awiki-cli group members --group GROUP_DID [--limit 100] [--identity alice]
awiki-cli group messages --group GROUP_DID [--limit 50] [--cursor CURSOR] [--identity alice]
awiki-cli group update --group GROUP_DID [--name "..."] [--description "..."] [--discoverability private|listed|public] [--admission-mode admin-add|open-join] [--slug "..."] [--goal "..."] [--rules "..."] [--message-prompt "..."] [--doc-url "https://..."] [--attachments-allowed=true|false] [--max-members 500] [--member-max-messages 10] [--member-max-total-chars 2000] [--identity alice]
awiki-cli group leave --group GROUP_DID [--identity alice]
awiki-cli group leave --group GROUP_DID [--reason "..."] [--e2ee] [--identity alice]
awiki-cli group e2ee process-leave-request --group GROUP_DID --member did:wba:... [--leave-request-id LR_ID] [--reason "..."] [--identity alice]

测试与示例约定：

Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/awiki-skill-architecture.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,7 @@
| product surface | implemented | `status / docs / schema / doctor / config show / version / completion` |
| id | implemented | 含 register / bind / recover / profile / import-v1 |
| msg plain | implemented | direct/group plain send + inbox/history/mark-read |
| msg secure | planned | `--secure` contract 存在，但 secure 业务流尚未落地 |
| msg secure | partial | `--secure` direct flow、listener auto-ack/queued flush、以及 `msg secure status/init/repair/failed/retry/drop` 首版已落地；仍缺更强系统测试与部分恢复细节 |
| group | implemented | create/get/join/add/remove/leave/update/members/messages |
| runtime mode | implemented | `runtime status/setup/mode get/set` |
| runtime listener | partial | status/install/start/stop/restart/uninstall 已可用；heartbeat 仍未落地 |
Expand Down
Loading
Loading