2 commits

Author	SHA1	Message	Date
Anthony Ettinger	169a73d180	Fix flaky TestTamperedTokenFails in qryptinvite ... flipLastChar toggled only the last base64 char of the signature segment. For a 64-byte Ed25519 signature that char carries unused trailing bits, so the toggle could decode back to the same bytes and still verify — making the "corrupted signature must fail" assertion flaky (it reddened main CI). Corrupt a decoded signature byte (sig[0] ^= 0xFF) and re-encode instead, so the signature always differs. Verified deterministic over 50 runs. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-14 17:05:30 +00:00
Anthony Ettinger	97da723c5c	feat(qrypt): qrypt.chat anonymous-invite issuer ... AgentBBS becomes a trusted Ed25519 issuer for qrypt.chat anonymous accounts. Members mint a signed, single-use qci1 token (per the shared invite contract) that qrypt.chat verifies and redeems. - internal/qryptinvite: Mint / GenerateIssuerKey / ParsePrivateKey + Config (AGENTBBS_QRYPT_* env) with unit tests (independent verify, payload assertions, jti uniqueness, tamper rejection, seed/full key). - store: qrypt_invites table + QryptInviteCount / RecordQryptInvite (per-member quota, enforced in a tx; ErrQuotaExceeded) + test. - plugins/qryptinvite: hub plugin (members only) — checks quota, mints, records, prints token + redeem URL. - cmd/agentbbs: `qrypt-invite <user>` and `qrypt-issuer-keygen` subcommands wired into dispatch. - setup.sh env template + docs/qrypt-invites.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-14 11:35:05 +00:00