-
server: document synckit_auth token-claim and extractor fields
-
server: adopt lint block, fix clippy, fmt
-
server: bump jsonwebtoken to 10.4, on the rust_crypto provider
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate oauth to slices
-
server: escalate/log the silent error-swallow sites
-
security: seal token-liveness, per-key identity, private-repo issue authz (ultra-fuzz Run 4, A+)
-
synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)
-
OAuth maturation + HMAC method+path+nonce (close MT S13)
-
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
Run 27 MINOR batch: 15 nit-tier items + U3 carry-over
-
test: SyncKit adversarial test suite
-
v0.8.0: SyncKit true per-key storage
-
fix: collapse let-chains and silence too_many_arguments for new Rust 1.95 clippy lints
-
Convert .map_err Internal(anyhow!) to ResultExt::context, fix variant misuse