Jinwoo-HandOrca fc75b28f7d Add end-to-end encryption for mobile WebSocket transport ...

Replace the disabled TLS cert pinning approach with application-layer
E2EE using tweetnacl (Curve25519 ECDH + XSalsa20-Poly1305). The
WebSocket stays plain ws:// but all RPC traffic is encrypted after
a one-round-trip handshake.

Desktop: generate persistent Curve25519 keypair, E2EE channel module
handles handshake state machine and transparent encrypt/decrypt.
Mobile: ephemeral keypair per connection for forward secrecy, expo-crypto
PRNG polyfill for Hermes compatibility.

Pairing schema updated from v1 (certFingerprint) to v2 (publicKeyB64).
Mock server updated with E2EE support. 24 tests covering crypto,
channel handshake, and integration.

Co-authored-by: Orca <help@stably.ai>

2026-04-30 18:03:24 -04:00

..

mock-server.ts

Add end-to-end encryption for mobile WebSocket transport

2026-04-30 18:03:24 -04:00

test-subscribe.ts

fix mobile terminal geometry sync

2026-04-30 18:03:23 -04:00