core: remove unused supported_protocols config field

Author: tsuckow

crates/bonded-core/src/config.rs

@@ -75,7 +75,6 @@ pub struct ServerSection {
     pub health_bind: String,
     pub upstream_tcp_target: String,
     pub log_level: String,
-    pub supported_protocols: Vec<String>,
     pub authorized_keys_file: String,
     pub invite_tokens_file: String,
 }
@@ -92,7 +91,6 @@ impl Default for ServerSection {
             health_bind: "0.0.0.0:8081".to_owned(),
             upstream_tcp_target: String::new(),
             log_level: "info".to_owned(),
-            supported_protocols: vec!["naive_tcp".to_owned()],
             authorized_keys_file: DEFAULT_AUTHORIZED_KEYS_PATH.to_owned(),
             invite_tokens_file: DEFAULT_INVITE_TOKENS_PATH.to_owned(),
         }
@@ -165,7 +163,6 @@ mod tests {
     #[test]
     fn default_server_config_has_naive_tcp_protocol() {
         let cfg = ServerConfig::default();
-        assert_eq!(cfg.server.supported_protocols, vec!["naive_tcp"]);
         assert!(cfg.server.upstream_tcp_target.is_empty());
         assert_eq!(cfg.server.websocket_bind, "0.0.0.0:8443");
         assert_eq!(cfg.server.status_bind, "0.0.0.0:8082");
@@ -188,7 +185,6 @@ bind = "127.0.0.1:9000"
         assert_eq!(cfg.server.status_bind, "0.0.0.0:8082");
         assert_eq!(cfg.server.health_bind, "0.0.0.0:8081");
         assert_eq!(cfg.server.log_level, "info");
-        assert_eq!(cfg.server.supported_protocols, vec!["naive_tcp"]);
     }
 
     #[test]

crates/bonded-server/src/main.rs

@@ -673,17 +673,6 @@ where
     if let Some(invite_tokens_file) = read_env("BONDED_INVITE_TOKENS_FILE") {
         cfg.server.invite_tokens_file = invite_tokens_file;
     }
-    if let Some(protocols) = read_env("BONDED_SUPPORTED_PROTOCOLS") {
-        let parsed: Vec<String> = protocols
-            .split(',')
-            .map(str::trim)
-            .filter(|item| !item.is_empty())
-            .map(ToOwned::to_owned)
-            .collect();
-        if !parsed.is_empty() {
-            cfg.server.supported_protocols = parsed;
-        }
-    }
 }
 
 fn init_tracing_from_level(level: &str) {
@@ -729,7 +718,6 @@ mod tests {
             ("BONDED_LOG_LEVEL", "debug"),
             ("BONDED_AUTHORIZED_KEYS_FILE", "/tmp/auth.toml"),
             ("BONDED_INVITE_TOKENS_FILE", "/tmp/tokens.toml"),
-            ("BONDED_SUPPORTED_PROTOCOLS", "naive_tcp,wss,quic"),
         ];
 
         apply_env_overrides(&mut cfg, |key| {
@@ -749,10 +737,6 @@ mod tests {
         assert_eq!(cfg.server.log_level, "debug");
         assert_eq!(cfg.server.authorized_keys_file, "/tmp/auth.toml");
         assert_eq!(cfg.server.invite_tokens_file, "/tmp/tokens.toml");
-        assert_eq!(
-            cfg.server.supported_protocols,
-            vec!["naive_tcp", "wss", "quic"]
-        );
     }
 
     #[test]

docs/design/implementation-plan.md

@@ -1,7 +1,7 @@
 # Implementation Plan — Server, Linux Client, Android Client
 
 **Status:** In Progress
-**Last Updated:** 2026-04-06 (session 22)
+**Last Updated:** 2026-04-06 (session 23)
 
 This is a living document. Update the status column and notes as work progresses.
 
@@ -62,7 +62,6 @@ status_bind = "0.0.0.0:8082"
 public_address = "bonded.example.com:8080"
 health_bind = "0.0.0.0:8081"
 log_level = "info"
-supported_protocols = ["naive_tcp"]
 authorized_keys_file = "/var/lib/bonded/authorized_keys.toml"
 invite_tokens_file = "/var/lib/bonded/invite_tokens.toml"
 ```
@@ -252,7 +251,7 @@ Build the server binary on top of `bonded-core`.
 
 | # | Task | Status | Notes |
 |---|------|--------|-------|
-| 2.1 | Server config loading (env vars + config file) | completed | Server loads TOML via `BONDED_CONFIG`/`--config`, falls back to defaults on read failure, applies env overrides for bind/public/health/log/protocol/key paths, and now deserializes partial `server.toml` files by filling missing options from defaults |
+| 2.1 | Server config loading (env vars + config file) | completed | Server loads TOML via `BONDED_CONFIG`/`--config`, falls back to defaults on read failure, applies env overrides for bind/public/health/log/key paths, and now deserializes partial `server.toml` files by filling missing options from defaults |
 | 2.2 | Authorized keys file — load, watch for changes, reload | completed | Added server authorized key store loading from TOML plus `notify` watcher callbacks; hardened watcher to ignore non-mutating access events and debounce rapid bursts to avoid self-triggered tight reload loops; server startup pre-creates missing state files/directories so operators only need to provide `server.toml` |
 | 2.3 | Accept NaiveTCP connections, perform auth handshake | completed | Added NaiveTCP listener accept loop and line-delimited JSON challenge-signature handshake with authorized-key enforcement |
 | 2.4 | Server-side session management (multiple concurrent clients) | completed | Added concurrent session registry keyed by authenticated client key with unique server session IDs and per-connection frame receive loop lifecycle |

server/README.md

@@ -64,7 +64,6 @@ bind = "0.0.0.0:8080"
 public_address = "bonded.example.com:8080"
 health_bind = "0.0.0.0:8081"
 log_level = "info"
-supported_protocols = ["naive_tcp"]
 authorized_keys_file = "/var/lib/bonded/authorized_keys.toml"
 invite_tokens_file = "/var/lib/bonded/invite_tokens.toml"
 
@@ -85,7 +84,6 @@ upstream_tcp_target = ""
 | `public_address` | *(empty)* | Public address shown in the QR code for clients — **must be set** |
 | `health_bind` | `0.0.0.0:8081` | Health-check HTTP listener |
 | `log_level` | `info` | Tracing level (`trace`, `debug`, `info`, `warn`, `error`) |
-| `supported_protocols` | `["naive_tcp"]` | Protocols advertised to clients |
 | `authorized_keys_file` | `/var/lib/bonded/authorized_keys.toml` | Authorized device keys file |
 | `invite_tokens_file` | `/var/lib/bonded/invite_tokens.toml` | Invite tokens file |
 | `websocket_bind` | `0.0.0.0:8443` | WebSocket listener address |
@@ -103,7 +101,6 @@ Every field can be overridden via `BONDED_` prefixed environment variables:
 | `BONDED_PUBLIC_ADDRESS` | `public_address` |
 | `BONDED_HEALTH_BIND` | `health_bind` |
 | `BONDED_LOG_LEVEL` | `log_level` |
-| `BONDED_SUPPORTED_PROTOCOLS` | `supported_protocols` (comma-separated) |
 | `BONDED_AUTHORIZED_KEYS_FILE` | `authorized_keys_file` |
 | `BONDED_INVITE_TOKENS_FILE` | `invite_tokens_file` |
 | `BONDED_WEBSOCKET_BIND` | `websocket_bind` |