ciris-server 0.5.76__tar.gz → 0.5.77__tar.gz

{ciris_server-0.5.76 → ciris_server-0.5.77}/Cargo.lock

@@ -821,8 +821,8 @@ dependencies = [
 
 [[package]]
 name = "ciris-edge"
-version = "8.4.1"
-source = "git+https://github.com/CIRISAI/CIRISEdge?tag=v8.4.1#a95680eb01ca27c034a75a6e44b0674f2e9681ca"
+version = "8.4.2"
+source = "git+https://github.com/CIRISAI/CIRISEdge?tag=v8.4.2#fa66d9319f9293b718d07ae22fde7342e93a0b7e"
 dependencies = [
  "async-trait",
  "axum",
@@ -943,8 +943,8 @@ dependencies = [
 
 [[package]]
 name = "ciris-persist"
-version = "12.0.1"
-source = "git+https://github.com/CIRISAI/CIRISPersist?tag=v12.0.1#6cf472a2be325210c9d5da122fac61fb092aad40"
+version = "12.0.2"
+source = "git+https://github.com/CIRISAI/CIRISPersist?tag=v12.0.2#883349f4e68b58de0a1905c37ad98ab55a80e918"
 dependencies = [
  "async-trait",
  "base64 0.22.1",
@@ -983,7 +983,7 @@ dependencies = [
 
 [[package]]
 name = "ciris-server"
-version = "0.5.76"
+version = "0.5.77"
 dependencies = [
  "anyhow",
  "async-trait",

{ciris_server-0.5.76 → ciris_server-0.5.77}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "ciris-server"
-version = "0.5.76" # 0.5.76 = v12.0 GENESIS-MESH adoption + the accord ADMIT-NODE card. Substrate co-bump: verify v8.3.0->v8.5.0 (CIRISVerify#162 produce_scrubbed_key_record) / persist v11.9.1->v12.0.1 (root_binding anchors to the HUMANITY_ACCORD holder keyset, #344/#345) / edge v8.3.0->v8.4.1 (lockstep). NEW: POST /v1/accord/admit-node (src/accord_provision.rs) — an accord holder scrub-signs a node registration on their portable YubiKey+USB holder signer (reuses the ceremony cosign path) via produce_scrubbed_key_record + produce_self_key_record("steward,accord_holder"), saving the genesis SEED object to ceg_outbox()/accord_admit_node/{target}.json (predictable, persist-ingestable) for CIRISPersist v12.0.2 to bake. QA gate tests/accord_admit_node.rs (emulates the accord-genesis QA): the scrubbed record survives persist STRICT register_federation_key + ROOTS at the accord anchor (root_binding_anchored=Confirmed), wrong-anchor rejected. Matching CLIENT card: AdmitNodeResponse DTO + CIRISApiClient.admitNode() + AccordViewModel.admitNode() + AccordScreen "Admit node to trust root" section (testable tags). App holds no keys; the YubiKey touch is consent. NEXT (0.5.77): roster labels, rotation/lost-key wizard (server family/change+supersede exist), partial-consensus announce. 0.5.75 = RNS rooting + hybrid keys.
+version = "0.5.77" # 0.5.77 = persist v12.0.2 (the accord-holder anchor SEED — CIRISPersist#347, seeds A1/B1/C1 at first boot) + edge v8.4.2 adoption, + accord-card UX polish: (1) lists the holder roster, (2) SELECT the holder from the roster (dropdown) instead of typing, (3) SELECT the target from owned-nodes → auto-fills both hybrid pubkeys from the local directory (added pubkey_ml_dsa_65 to LocalPeerState / GET /v1/federation/peers), (4) BROWSE for the USB PQC folder (DirectoryPicker). Verify unchanged v8.5.0. 0.5.76 = the admit-node card + v12.0 adoption.
 edition = "2021"
 # MSRV floor is set by the substrate: ciris-verify v5.2.0 requires 1.86
 # (persist v6.0.1 is 1.83). Build with the higher of the two.
@@ -123,8 +123,8 @@ ciris-lens-core     = { path = "crates/ciris-lens-core" } # ABSORBED in-tree (wo
 # `cirislens_wa_cert` + `cirislens_service_token_revocation` expose the auth
 # substrate the fabric absorbs (CIRISServer#9, src/auth): the agent's `wa_cert`
 # table (users/WA/OAuth/api-keys) + the `revoked_service_tokens` table.
-ciris-persist     = { git = "https://github.com/CIRISAI/CIRISPersist", tag = "v12.0.1", features = ["sqlite", "cirisgraph", "cirislens_wa_cert", "cirislens_service_token_revocation", "cirisaudit", "cirislens_tasks", "cirislens_thoughts", "cirislens_tickets", "cirislens_correlations", "cirislens_deferral_reports", "cirislens_maintenance_locks", "cirislens_creation_ceremonies", "cirislens_legacy_migration", "cirisincident", "telemetry", "secrets"] }
-ciris-edge        = { git = "https://github.com/CIRISAI/CIRISEdge", tag = "v8.4.1", features = ["transport-reticulum", "transport-http", "transport-packet-radio"] }
+ciris-persist     = { git = "https://github.com/CIRISAI/CIRISPersist", tag = "v12.0.2", features = ["sqlite", "cirisgraph", "cirislens_wa_cert", "cirislens_service_token_revocation", "cirisaudit", "cirislens_tasks", "cirislens_thoughts", "cirislens_tickets", "cirislens_correlations", "cirislens_deferral_reports", "cirislens_maintenance_locks", "cirislens_creation_ceremonies", "cirislens_legacy_migration", "cirisincident", "telemetry", "secrets"] }
+ciris-edge        = { git = "https://github.com/CIRISAI/CIRISEdge", tag = "v8.4.2", features = ["transport-reticulum", "transport-http", "transport-packet-radio"] }
 # Founder-quorum verification + key-id fingerprint at the composition root
 # (threshold:: module path — NOT re-exported at the crate root).
 # LOCKSTEP: persist v9.4.0 transitively pins verify-core v6.6.x — the whole
@@ -206,7 +206,7 @@ tracing-appender = "0.2"
 # - keyring `tpm` (tss-esapi / TPM 2.0) — the real hardware backend; needs
 #   libtss2 (Linux build dep). Other targets keep the software keystore.
 [target.'cfg(target_os = "linux")'.dependencies]
-ciris-persist = { git = "https://github.com/CIRISAI/CIRISPersist", tag = "v12.0.1", features = ["postgres", "cirisgraph", "cirislens_wa_cert", "cirislens_service_token_revocation", "cirisaudit", "cirislens_tasks", "cirislens_thoughts", "cirislens_tickets", "cirislens_correlations", "cirislens_deferral_reports", "cirislens_maintenance_locks", "cirislens_creation_ceremonies", "cirislens_legacy_migration", "cirisincident", "telemetry", "secrets"] }
+ciris-persist = { git = "https://github.com/CIRISAI/CIRISPersist", tag = "v12.0.2", features = ["postgres", "cirisgraph", "cirislens_wa_cert", "cirislens_service_token_revocation", "cirisaudit", "cirislens_tasks", "cirislens_thoughts", "cirislens_tickets", "cirislens_correlations", "cirislens_deferral_reports", "cirislens_maintenance_locks", "cirislens_creation_ceremonies", "cirislens_legacy_migration", "cirisincident", "telemetry", "secrets"] }
 # keyring `tpm` (TPM-at-rest, Linux-only via tss-esapi). `pkcs11` is no longer
 # per-target — it rides the global `pkcs11` feature now that cryptoki builds on all
 # targets (CIRISVerify v6.12.0).
@@ -259,7 +259,7 @@ ciris-crypto  = { git = "https://github.com/CIRISAI/CIRISVerify", tag = "v8.5.0"
 # and never encodes/decodes). This lets tests/chaos_mesh.rs exercise the SUBSTRATE
 # codec (`fountain_encode`/`fountain_decode`) directly — a real MEASURED proof,
 # not a reference stand-in.
-ciris-edge    = { git = "https://github.com/CIRISAI/CIRISEdge", tag = "v8.4.1", features = ["codec-fountain"] }
+ciris-edge    = { git = "https://github.com/CIRISAI/CIRISEdge", tag = "v8.4.2", features = ["codec-fountain"] }
 
 # PQC realtime-A/V streaming E2E benchmark (CIRISEdge#62 realtime_av profile).
 [[bench]]

{ciris_server-0.5.76 → ciris_server-0.5.77}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ciris-server
-Version: 0.5.76
+Version: 0.5.77
 License-File: LICENSE
 Summary: The fabric node — the federation's headless cohabitation runtime (registry + lens [+ node] over one shared substrate), as the abi3 wheel CIRISAgent consumes. agent = fabric node + brain.
 Author-email: Eric Moore <eric@ciris.ai>

{ciris_server-0.5.76 → ciris_server-0.5.77}/crates/ciris-lens-core/Cargo.toml

@@ -26,8 +26,8 @@ crate-type = ["cdylib", "rlib"]
 #
 # OQ-01 closure 2026-05-03: rlib primary, PyO3 cdylib via `python`
 # feature for the deployed-lens cutover.
-ciris-persist = { git = "https://github.com/CIRISAI/CIRISPersist", tag = "v12.0.1", version = "12", features = ["extract", "sqlite"] }
-ciris-edge    = { git = "https://github.com/CIRISAI/CIRISEdge",    tag = "v8.4.1", version = "8", features = ["transport-http", "transport-reticulum"] }
+ciris-persist = { git = "https://github.com/CIRISAI/CIRISPersist", tag = "v12.0.2", version = "12", features = ["extract", "sqlite"] }
+ciris-edge    = { git = "https://github.com/CIRISAI/CIRISEdge",    tag = "v8.4.2", version = "8", features = ["transport-http", "transport-reticulum"] }
 
 # Keyring — relay mode (CIRISLensCore#10) loads its Edge transport-
 # signing identity via `ciris_keyring::load_local_seed`. Edge's

{ciris_server-0.5.76 → ciris_server-0.5.77}/src/federation_peers.rs

@@ -80,6 +80,11 @@ fn err(code: StatusCode, error: &str) -> Response {
 struct LocalPeerState {
     key_id: String,
     pubkey_ed25519_base64: String,
+    /// The ML-DSA-65 half (present on a hybrid-complete row; `None` on a legacy
+    /// bookmark). Projected so the accord admit-node card can auto-fill BOTH of a
+    /// selected owned node's pubkeys from the local directory — no manual paste.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pubkey_ml_dsa_65_base64: Option<String>,
     canonical: bool,
     /// One of "trusted"|"untrusted"|"blocked"|"unknown". A directory row is an
     /// admitted key ⇒ "trusted".
@@ -104,6 +109,7 @@ fn to_peer(rec: KeyRecord) -> LocalPeerState {
     LocalPeerState {
         key_id: rec.key_id,
         pubkey_ed25519_base64: rec.pubkey_ed25519_base64,
+        pubkey_ml_dsa_65_base64: rec.pubkey_ml_dsa_65_base64,
         canonical,
         trust: "trusted",
         first_seen: rec.valid_from.to_rfc3339(),

{ciris_server-0.5.76 → ciris_server-0.5.77}/tests/accord.rs

@@ -859,7 +859,11 @@ async fn genesis_refuses_a_member_that_is_not_a_custody_verified_accord_holder()
         "rejection must name the non-holder member; got {body}"
     );
 
-    // No family was entrenched.
+    // The rejected genesis must not entrench THIS test's family. (Every node now
+    // seeds + bakes the canonical HUMANITY_ACCORD genesis A1/B1/C1 — persist
+    // v12.0.2 / verify v8.5.0 — so `family_established` is baseline-true and the
+    // seats are the baked A1/B1/C1; that is orthogonal to this test. What must
+    // hold is that NONE of the proposed test members became a seat.)
     let roster: serde_json::Value = client
         .get(format!("{base}/v1/accord-holders"))
         .send()
@@ -868,10 +872,13 @@ async fn genesis_refuses_a_member_that_is_not_a_custody_verified_accord_holder()
         .json()
         .await
         .unwrap();
-    assert_eq!(
-        roster["family_established"], false,
-        "a rejected genesis must not entrench a family"
-    );
+    let seats = roster["holders"].as_array().expect("holders array");
+    for member in ["seat-a", "seat-b", "outsider-not-a-holder"] {
+        assert!(
+            !seats.iter().any(|h| h["key_id"] == member),
+            "a rejected genesis must not entrench member {member}; got {roster}"
+        );
+    }
 }
 
 // ─── Operational halt (CC 4.2.1 / 4.2.3 / §9.2.1) — the enforceable kill-switch ─
@@ -1116,10 +1123,21 @@ async fn registered_spare_is_not_a_seat_and_cannot_help_reach_quorum() {
         .await
         .unwrap();
     assert_eq!(roster["seat_count"], 3, "exactly 3 seats; got {roster}");
-    assert_eq!(
-        roster["registered_total"], 4,
-        "3 seats + 1 spare registered"
-    );
+    // This test's 3 seats + 1 spare are ALL registered accord_holders. (Every node
+    // also seeds the baked A1/B1/C1 canonical genesis — persist v12.0.2 — so assert
+    // membership rather than an exact `registered_total`, which now baselines +3.)
+    let registered = roster["registered"].as_array().expect("registered array");
+    for kid in [
+        "accord-holder-a",
+        "accord-holder-b",
+        "accord-holder-c",
+        "accord-holder-a-spare",
+    ] {
+        assert!(
+            registered.iter().any(|h| h["key_id"] == kid),
+            "the 3 seats + spare must all be registered; missing {kid}; got {roster}"
+        );
+    }
     assert!(
         !roster["holders"]
             .as_array()

{ciris_server-0.5.76 → ciris_server-0.5.77}/tests/release_gates/support.rs

@@ -32,8 +32,8 @@ use std::path::PathBuf;
 // verify v8.3.0→v8.5.0 (CIRISVerify#162 produce_scrubbed_key_record, the accord
 // admit-node op), edge v8.3.0→v8.4.1 (anchor gate for free + verify/persist lockstep).
 pub const TARGET_VERIFY: &str = "v8.5.0";
-pub const TARGET_PERSIST: &str = "v12.0.1";
-pub const TARGET_EDGE: &str = "v8.4.1";
+pub const TARGET_PERSIST: &str = "v12.0.2";
+pub const TARGET_EDGE: &str = "v8.4.2";
 /// Stage 6/7: the persist MAJOR family that bakes the canonical genesis seed.
 /// (Name is historical — the seed-bake family moved v10 → **v12** with the v12.0
 /// genesis-mesh rooting anchor: persist v12.0.1 enforces it, v12.0.2 bakes the