(PFS) Pro: atomic credential storage; key rotation & renewal logic; add_pro_payment renewal - #106

Merged

jagerman merged 34 commits into

session-foundation:pfsfrom

jagerman:refund-requested-config-pfs

Jul 31, 2026

Commits on Jul 31, 2026

config: add synced refund-requested flag to UserProfile

jagerman
and
claude
committed
pro_backend: remove set_payment_refund_requested endpoint

jagerman
and
claude
committed
config: drop redundant condition in if-init statements

jagerman
and
claude
committed
config: ignore refund-requested values older than a week

jagerman
and
claude
committed
pro_backend: remove /add_pro_payment; redemption is now implicit

jagerman
and
claude
committed
config: migrate legacy millisecond pro_access_expiry on read

jagerman
and
claude
committed
pro_backend: collapse redundant ProProofResponse base

jagerman
and
claude
committed
config: stop persisting the proof version (dicts aren't atomic)

jagerman
and
claude
committed
config: store the pro credential as one atomic bt-encoded value

jagerman
and
claude
committed
pro: add ProProof::rotating_seed deterministic generator

jagerman
and
claude
committed
config: add maybe_span dict helper

jagerman
and
claude
committed
config: add pro_prepaid (purchase-in-flight) flag + auto-clears

jagerman
and
claude
committed
config: add UserProfile::pro_renewal_target (when to re-request a proof)

jagerman
and
claude
committed
tests: use chrono duration literals for pro/refund timestamps

jagerman
and
claude
committed
pro_message: assert the previously-ignored to_chars ec

jagerman
and
claude
committed
session_protocol: drop the ProSignedMessage struct

jagerman
and
claude
committed
pro_backend: fold the *_sig(s) helpers into their *_request builders

jagerman
and
claude
committed
session_protocol: make ProProof::status const

jagerman
and
claude
committed
session_protocol: fix stale doc comments

jagerman
and
claude
committed
session_protocol: drop the unused sent_timestamp from encode_for_community_inbox

jagerman
and
claude
committed
session_protocol: use a cheap validly-encoded decoy signature

jagerman
and
claude
committed
Fix unused parameters
jagerman
committed
config: use maybe_span instead of maybe_vector for pro/group key loads
jagerman
committed
session_protocol: rename ProProof::rotating_seed's timestamp param to now

jagerman
and
claude
committed
config: defer pro_renewal_target briefly at a rotation boundary

jagerman
and
claude
committed
attachments: mark process_chunk's is_final [[maybe_unused]]

jagerman
and
claude
committed
session_protocol/config: apply review to the rotating-seed rename + renewal deferral

jagerman
and
claude
committed
util: view-based utf16_truncate/utf16_count; drop asserts on user input

jagerman
and
claude
committed
session_protocol: pro_features_for_utf8/16 -> pro_features_for_message

jagerman
and
claude
committed
session_protocol/user_profile: fix "weekly rotation" wording; add jitter TODO

jagerman
and
claude
committed
user_profile: only schedule a proof fetch when there's an entitlement signal

jagerman
and
claude
committed
pro_backend: surface advisory account_expiry_ts from the proof response

jagerman
and
claude
committed
session_protocol: document PRO_RENEWAL_LEAD as a locked backend contract

jagerman
and
claude
committed
formatting
jagerman
committed