feat: add bounded live room verification read

jlxq0 commented

2026-10-28 22:44:16 +00:00

Owner

Recipient checks currently available through room_members/get_room_state can return SDK-cached state. Add read_room_verification_state: exact small-room ID, current same-principal homeserver joined-members/encryption/joined-members reads, stable membership, bounded metadata only. The caller must check exact recipients and encryption; this is an observation, not a lock against later room changes.

The new read uses existing authentication, read rate limit, audit and auth-expiry handling. It disables redirects, limits streamed bodies before buffering, enforces request/operation deadlines and refuses incomplete/changed/oversized membership. No OAuth scope or write capability is added, and the channel tool surface stays unchanged.

Validation: locked Rust1.96 full suite383unit+6integration tests; Rust1.98 strict Clippy/fmt; seven new transport tests include a never-terminated oversized chunked response and redirect/token refusal. Independent exact-head review and CI required before merge. Source prerequisite only: no release/tag/deploy or proposal delivery. Depends on reviewed dependency PR155, now merged.

Recipient checks currently available through room_members/get_room_state can return SDK-cached state. Add read_room_verification_state: exact small-room ID, current same-principal homeserver joined-members/encryption/joined-members reads, stable membership, bounded metadata only. The caller must check exact recipients and encryption; this is an observation, not a lock against later room changes. The new read uses existing authentication, read rate limit, audit and auth-expiry handling. It disables redirects, limits streamed bodies before buffering, enforces request/operation deadlines and refuses incomplete/changed/oversized membership. No OAuth scope or write capability is added, and the channel tool surface stays unchanged. Validation: locked Rust1.96 full suite383unit+6integration tests; Rust1.98 strict Clippy/fmt; seven new transport tests include a never-terminated oversized chunked response and redirect/token refusal. Independent exact-head review and CI required before merge. Source prerequisite only: no release/tag/deploy or proposal delivery. Depends on reviewed dependency PR155, now merged.

jlxq0 added 1 commit

2026-10-28 22:44:16 +00:00

feat: read bounded current room verification state

CI / cargo (pull_request) Failing after 2m55s

Details

CI / docker (pull_request) Has been skipped

Details

d0b287ff23

jlxq0 added 1 commit

2026-10-28 22:53:03 +00:00

fix: bound verification before SDK acquisition with request identity

CI / cargo (pull_request) Successful in 2m45s