Mirrors `AsbContracts.cs:109-114` — same payload shape as
AuthenticateMe (Data + InitializationVector under
ConsumerAuthenticationData) but under the `<DisconnectRequest>`
wrapper. Sent one-way + signed (regular HMAC, no force) per
`AsbContracts.cs:22` (`IsOneWay = true`).
API additions:
* `build_disconnect_request_body(data, iv)` — NBFX token stream for
the DisconnectRequest body.
* `AsbClient::disconnect()` — builds a fresh encrypted
authentication-data blob via F23's `create_authentication_data()`
(encrypts `local_pub || remote_pub` under the derived AES key
with a fresh IV), wraps it in a DisconnectRequest, sends one-way
signed.
2 new tests:
* `disconnect_request_carries_data_and_iv_under_correct_wrapper` —
outer element name + Data/IV byte-payload order.
* `disconnect_writes_signed_one_way_envelope` — end-to-end via
`tokio::io::duplex` peer; verifies the SizedEnvelope payload
contains the `:disconnectIn` action string.
With Disconnect landed, AsbClient now covers the full session
lifecycle:
send_preamble → connect → register_items / read / keep_alive
/ unregister_items → disconnect → send_end → stream shutdown
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Joseph Doherty
1b1ee1e0b7