e1d0500771
Harvest-and-rebuild from xr/src/net after the adversarial audit (verdict: transport promote-with-fixes, authority model rewrite). - Authority: explicit Host/Client roles. Client->host Join/Input/Intent/ Leave/Ping; host->client Welcome/StateBatch/Event/Bye/Pong. No per-object authority field and no takeover messages — authority theft (audit H-11) is unrepresentable, not merely blocked - Auth: self-contained SHA-256/HMAC; every datagram and frame is magic|version|sender|payload|mac, verified BEFORE any peer state is read or written. Closes seq-window poisoning, spoofed kick, address hijack - Endpoints are pumped, not threaded: nothing blocks, so the connect-flood stall (H-5) cannot occur and a full session runs deterministically in one test process. The host only ever accepts, never initiates - Harvested: LZ4 frame codec (check-before-allocate), partial-tail drain, budgeted read/write loops, MTU batching, peer/config shapes. Frame cap 4MiB -> 256KiB now that XR alignment payloads are gone - Per-entity sequencing (a stale datagram drops only its stale members), rejoin seq reset, player cap, peer timeout, snapshot-based mid-join - Measured 6 clients x 60Hz x 200 entities: 2880 pps, 3.13 MB/s (~25 Mbit up) — Quest WiFi viable without delta encoding yet - Hostile suite: one test per audit attack + 3000-mutation fuzz that must never panic or wedge the host. 24/24 green - micro_serde: String::de_bin no longer panics on invalid UTF-8, checked offset arithmetic, Vec::de_bin rejects counts the buffer cannot back and never sizes allocation from the wire (11/11) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
10 lines
308 B
TOML
10 lines
308 B
TOML
[package]
|
|
name = "makepad-game-net"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "Host-authoritative LAN transport for Makepad Arcade (see game.md)"
|
|
license = "MIT OR Apache-2.0"
|
|
|
|
[dependencies]
|
|
makepad-micro-serde = { path = "../../micro_serde", version = "1.0.0" }
|
|
makepad-lz4 = { path = "../../lz4" }
|