5912226Rewrite CLAUDE.md to reflect actual Rust/Crux + Swift + Knot codebaseiko3 months ago 91b7b58Add iOS client: Rust/Crux core + SwiftUI shell with crypto, messaging, auth, profiles, QR scanning2026.06.25.0917iko4 months ago 3934b22Remove client/ directoryiko4 months ago ec51d84Fix auth session relay attack by binding challenge signature to target server hostname2026.06.23.0618iko4 months ago 65c98c8Update PROTOCOL.md to reflect actual implementation: fix @p format, clarify message IDs, correct error codes, expand SSRF deny-listiko4 months ago dbba2b3Fix 2 bugs: octal/leading-zero IPv4 SSRF, unvalidated gossip pubkeyiko4 months ago e1c294aFix 4 bugs: seqCounter empty-database panic, /messages input validation, forward batch determinism, resend skip delivered peersiko4 months ago 0621b04Fix 3 bugs: send-path dedup, cursor clamp re-delivery, SSRF range gapsiko4 months ago c731185Fix 5 bugs: GossipEvent record JSON/forward-compat, HTTP body cap, SSRF dword-IP bypass, session IP bindingiko4 months ago e3237ebUpdate deliveredTo references after wrapping scalar in record typeiko4 months ago 1a32dc0Fix bug #18: enforce maxForwardsPerServer on the send pathiko4 months ago 916b7a3Fix bug #17: enforce isBadServerName at federation egressiko4 months ago fbf23aaFix bug #16: block localhost-with-port in isBadServerNameiko4 months ago ae2c0acFix bug #15: block RFC1918 172.16.0.0/12 in isBadServerNameiko4 months ago 3539159Fix bug #14: order recordFailure/clearFailure by attempt start timeiko4 months ago b16dd69Fix bug #13: key /poll and /messages rate limits on client IP, not beareriko4 months ago 23efe28Fix bug #12: key IP rate-limit buckets on X-Forwarded-For behind a proxyiko4 months ago dbd7f47Fix bug #19: text length checks used count (chars s), which dedupesiko4 months ago a426743Fix bug #11: refuse inbound federation requests when federationEnabled is offiko4 months ago 8ab1465Fix bug #10: dedupe inbound federated forwards in handleForwardMessageiko4 months ago 02894c9Fix build with current knot compiler: annotate dimensionless operand in shouldRetryServeriko4 months ago de66ca8Fix bug #9: tighten Timestamp annotations on handleChallenge, handleVerifyAuth, doPoll2026.05.29.1911iko5 months ago 1f0ce2eFix bug #8: order forward backlog by receivedAt before clipping to budget2026.05.29.1908iko5 months ago 9649de9Fix bug #7: serialize forward retries in their own background loop2026.05.29.1906iko5 months ago 22d6eafFix bug #6: block bare IPv6 server names (SSRF gap)2026.05.29.1901iko5 months ago 51a8e35Fix bug #5: keep messages after federated forward; track per-peer delivery2026.05.29.1855iko5 months ago 3265616Fix bug #4: scope forkForwardsTo cleanup to (toKey, encryptedBlob), not blob alone2026.05.29.1842iko5 months ago e6e5aa8Fix bug #3: enforce per-peer forward cap on total outstanding forwardsiko5 months ago 78d5d84Fix bug #2: reject /messages batches exceeding maxBatchSize with 413 instead of silent truncationiko5 months ago 3e555b1Add per-endpoint rate limiting to all HTTP routesiko5 months ago 89ec9e5Simplify server.knot: single-pass gossip fold, remove forward guard, precompute live local pubkeysiko5 months ago 59acc0eDownload knot compiler from releases instead of building from source2026.05.11.1608iko5 months ago 02c8151Add .DS_Store and .claude/ to .gitignore, clean up local macOS junk files2026.05.11.1601iko5 months ago d18ddb1Simplify server.knot: remove redundant backoff max, shrink pruneExpired return, split event foldiko5 months ago 4651be0Simplify recordFailure and forkForwardsTo: extract prevCount, apply De Morgan's lawiko5 months ago 1ef8c13Update docs: PROTOCOL.md rewrite for wire format accuracy, CLAUDE.md persistence notes, README client runbookiko5 months ago 7a97d10Fix race effect-row unification in doPoll by padding arms with shared effectsiko5 months ago 5cc044cUse row-level STM retry with per-request timeout race for long-polliko5 months ago 16c749eRemove unused rate-limiting definitions and simplifyiko5 months ago 45fc9a8Remove dead field ForwardFailure.firstFailedAtiko5 months ago 52ab141Simplify server.knot: collapse GossipOnline literal, remove redundant pollResult destructureiko5 months ago 010f8d1Simplify server.knot: collapse authedPubkey case+yield, bind expiresAt once in handleChallengeiko5 months ago 3595cd9Simplify server.knot: inline verifySignature and broadcastOfflineGossip, extract forwardMatches, self-guard sendBatchedGossipiko5 months ago cb5c001Simplify server.knot: rename hasSuffix, inline retryBackoff, collapse refreshLocalPresence bindingsiko5 months ago 2fe6126Simplify server.knot: flatten authedPubkey CPS, hoist loop reads, inline clampiko5 months ago 15ace4dSimplify server.knot: inline storeFederated, collectPollEvents, and genTokenNiko5 months ago 09f28dcSimplify server.knot: consolidate folds, inline single-use helpers, flatten expressionsiko5 months ago 63f9756Simplify server.knot: extract forwardFailureMaxAge constant, inline three single-use helpersiko5 months ago 25a32d9Simplify server.knot: extract verifySignature, flatten refreshPeers, drop redundant ::iko5 months ago d9f295aSimplify server.knot: refactor GossipEventType parsing, compute touched pubkeys once, inline recordFailure predicateiko5 months ago