v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

Gate messages now propagate via the Infonet hashchain as encrypted blobs — every node syncs them
through normal chain sync while only Gate members with MLS keys can decrypt. Added mesh reputation
system, peer push workers, voluntary Wormhole opt-in for node participation, fork recovery,
killwormhole scripts, obfuscated terminology, and hardened the self-updater to protect encryption
keys and chain state during updates.

New features: Shodan search, train tracking, Sentinel Hub imagery, 8 new intelligence layers,
CCTV expansion to 11,000+ cameras across 6 countries, Mesh Terminal CLI, prediction markets,
desktop-shell scaffold, and comprehensive mesh test suite (215 frontend + backend tests passing).

Community contributors: @wa1id, @AlborzNazari, @adust09, @Xpirix, @imqdcr, @csysp, @suranyami,
@chr0n1x, @johan-martensson, @singularfailure, @smithbh, @OrfeoTerkuci, @deuza, @tm-const,
@Elhard1, @ttulttul

frontend/src/__tests__/desktop/desktopControlContractHelpers.test.ts

@@ -0,0 +1,94 @@
+import { describe, expect, it } from 'vitest';
+
+import {
+  describeNativeControlError,
+  extractGateTargetRef,
+} from '../../lib/desktopControlContract';
+
+describe('extractGateTargetRef', () => {
+  it('extracts gate_id from gate key rotation payload', () => {
+    expect(
+      extractGateTargetRef('wormhole.gate.key.rotate', { gate_id: 'infonet', reason: 'test' }),
+    ).toBe('infonet');
+  });
+
+  it('extracts gate_id from gate message compose payload', () => {
+    expect(
+      extractGateTargetRef('wormhole.gate.message.compose', { gate_id: 'ops', plaintext: 'hi' }),
+    ).toBe('ops');
+  });
+
+  it('extracts gate_id from gate proof payload', () => {
+    expect(extractGateTargetRef('wormhole.gate.proof', { gate_id: 'alpha' })).toBe('alpha');
+  });
+
+  it('extracts gate_id from gate message post payload', () => {
+    expect(
+      extractGateTargetRef('wormhole.gate.message.post', { gate_id: 'ops', plaintext: 'hi' }),
+    ).toBe('ops');
+  });
+
+  it('extracts gate_id from gate persona list payload', () => {
+    expect(
+      extractGateTargetRef('wormhole.gate.personas.get', { gate_id: 'alpha' }),
+    ).toBe('alpha');
+  });
+
+  it('returns undefined for non-gate commands', () => {
+    expect(extractGateTargetRef('wormhole.status', undefined)).toBeUndefined();
+    expect(extractGateTargetRef('settings.news.get', undefined)).toBeUndefined();
+  });
+
+  it('returns undefined when payload has no gate_id', () => {
+    expect(extractGateTargetRef('wormhole.gate.key.rotate', { reason: 'test' })).toBeUndefined();
+    expect(extractGateTargetRef('wormhole.gate.key.rotate', null)).toBeUndefined();
+    expect(extractGateTargetRef('wormhole.gate.key.rotate', 'not-an-object')).toBeUndefined();
+  });
+
+  it('returns undefined when gate_id is empty string', () => {
+    expect(extractGateTargetRef('wormhole.gate.key.get', { gate_id: '' })).toBeUndefined();
+  });
+});
+
+describe('describeNativeControlError', () => {
+  it('describes profile mismatch errors', () => {
+    const err = new Error('native_control_profile_mismatch:settings_only:wormhole_gate_key');
+    const msg = describeNativeControlError(err);
+    expect(msg).toContain('Denied');
+    expect(msg).toContain('session profile');
+  });
+
+  it('describes capability denied errors', () => {
+    const err = new Error('native_control_capability_denied:wormhole_gate_key');
+    const msg = describeNativeControlError(err);
+    expect(msg).toContain('Denied');
+    expect(msg).toContain('capability');
+  });
+
+  it('describes capability mismatch errors', () => {
+    const err = new Error('native_control_capability_mismatch:wormhole_gate_content:wormhole_gate_key');
+    const msg = describeNativeControlError(err);
+    expect(msg).toContain('Denied');
+    expect(msg).toContain('capability');
+  });
+
+  it('describes shim enforcement inactivity errors', () => {
+    const err = new Error('desktop_runtime_shim_enforcement_inactive');
+    const msg = describeNativeControlError(err);
+    expect(msg).toContain('Denied');
+    expect(msg).toContain('native runtime');
+  });
+
+  it('returns null for unrelated errors', () => {
+    expect(describeNativeControlError(new Error('network_error'))).toBeNull();
+    expect(describeNativeControlError('some string')).toBeNull();
+    expect(describeNativeControlError(null)).toBeNull();
+    expect(describeNativeControlError(undefined)).toBeNull();
+  });
+
+  it('handles plain string errors', () => {
+    expect(
+      describeNativeControlError('native_control_profile_mismatch:foo'),
+    ).toContain('Denied');
+  });
+});