git.iko.soy/skrepka
on 7e7eb77 help sign in
7e7eb77Implement 14 server improvements: verify timeout, runtime rate limits, snapshot checksums, reconcile endpoint, per-bucket optimizations, version tracking, and documentationiko e5cfebcRemove message TTL feature and simplify message expiration to always use 7-day defaultiko 66a992cRemove secret rotation and pre-shared federation key supportiko 8728a13Add federation message cancellation endpoint and clarify pre-shared key implementationiko 7c7d816Implement 14 server.knot improvements: per-key forward limiting, correlation ID sanitization, session management optimization, startup probe latency isolation, snapshot schema versioning, stats updates, and maintenance secret validationiko 987cacdImplement 16 server.knot improvements: security (double encoding check, stricter relay origin, DNS blocking), correctness (presence version bump, forward TTL fix), performance (union optimization, count-only stats, atomic gossip merge), operational (secret rotation, error codes, pagination)iko db3bd9cImplement 12 server.knot improvements: forward TTL fix, sender-specified message expiration, federation allowlist, optimized federation dedup, batch presence lookup, and configurable portiko 0297421Implement 18 server.knot improvements: sender-specified message TTL with per-message expiration, cancel/top-recipients endpoints, readiness probe, error codes in auth responses, prune-cycle snapshot staleness, .localhost SSRF prevention, token masking, union optimization, and single-pass statsiko 6e3e297Implement 15 server.knot improvements: staged drain phases, graceful shutdown, separate client write rate limiting, verify token pre-filtering, stricter federation ack validation, forward bucket optimization, session prune efficiency, atomic lock contention reduction, batch pre-sorting, snapshot fingerprint dedup, federation latency reset, IP length optimization, SSRF protection, and cached peer serversiko 1d441cfImplement 8 critical server.knot security, correctness, and performance fixesiko 6d3d2ceImplement 10 server.knot improvements: federation acks on delete, drain state checks, stats optimization, ack handler security, startup validation, presence hijack prevention, helper extraction, forward metrics, nonce constant, and SSRF preventioniko 29c98d0Implement 5 server improvements: health drain status for load balancers, skip empty bucket prune forks, per-server forward queue depth in stats, poll cursor reset flag, and federation acks on admin message purgeiko 460356eImplement 12 server.knot improvements: forward retry jitter, batch messageId return, drain optimization, startup probe security, stats enhancement, admin message purge, cleanup guards, presence refresh optimization, and 16-way sharding of forward nonces, forwards, and acked/delivered collections for O(n/16) hot-path performanceiko a77ed7cImplement 11 server.knot improvements: O(n) nonce eviction, health endpoint caching, forward queue status tracking, gossip bucket sharding, clock jump detection, snapshot auto-export, efficient reconciliation, federation correlation IDs, and runtime rate limit overridesiko a6dc1b0Implement 11 server.knot improvements: forward nonce for local messages, separate revoke rate limiter, drain timeout, reconcile message counters every cycle, uppercase hex support, forward partitioning optimization, health rate limiting, and other security/reliability hardeningiko f6bc769Implement 13 server.knot improvements: message deletion, federation batch optimization, client IP/correlation logging, and bug fixesiko eb04b6dAdd per-IP key-rotation abuse detection, shard recipient message counts for performance, add startup federation connectivity checks, enable concurrent message bucket pruning, improve access logging, and enhance code documentationiko 00797dcConsolidate server.knot: refactor send logic, add federation/watchdog monitoring, improve code qualityiko b840bc1Add peer blocklist, admin endpoints, federation ping, rate limiter helpers, and reliability improvements to server.knotiko 6b0839eEnhance server.knot with forward nonce persistence, gossip validation, per-origin nonce partitioning, /messages/list endpoint, retryAfterMs feedback, health masking, and performance optimizationsiko 0902341Harden server.knot: session lifetime caps, pair rate limiting, deferred ack cleanup, per-bucket reconciliation, and extended monitoringiko 53a4c04Add batch send endpoint, snapshot versioning, structured logging, clock jump detection, and optimize server.knot security, performance, and reliabilityiko ca4b8d3Improve server.knot security, reliability, and protocoliko a70c802Improve server.knot security, reliability, and protocol: fix IP binding bypass, add federation verify retry, pre-filter gossip capacity, tighten hung slot cleanup, add poll heartbeat field, update protocol docsiko ad205d9Improve server.knot: add origin verification, gossip hop limiting, verify rate limiting, snapshot staleness warnings, forward preservation, prune recovery, and queue metricsiko 0d78e7cHarden server.knot: add forward replay nonce tracking, federation verify rate limiting, require token scope, periodic counter reconciliation, and startup config warningsiko 7076ef9Improve server.knot security and performance: add federation pair rate limiting, peer server cache to reduce O(n*k) scans, writeAllPresence single-pass optimization, constant-time IP check, verify endpoint rate limiting, and enhanced stats observabilityiko 0703ad8Improve server.knot security and reliability: bind federation tokens to request scope, add per-sender-per-recipient rate limiting, and add federation ack retry limitsiko 55f5e8dReplace federation shared secret with domain callback verificationiko 7668ae6Harden server.knot: logout auth rate limiting, relay origin validation, constant-time IP binding, prune counts race fix, and config validationiko 4b913e0Improve server.knot: federation replay dedup, per-entry forward retry limits, and auto-snapshot intervaliko 40aa04dImprove server.knot: federation timestamp binding, in-flight leak protection, circuit breaker, optimized logout scan, signal-based drain wait, snapshot/restore endpoints, ack message cleanup, and expanded config validationiko 9e7d395Improve server.knot: auth-tier rate limiting, session counter, concurrent prune guard, drain flush, voluntary logout, message status endpoint, federation ack hardening, verify() atomicity, stats rate-limiting, forwardQueuedMessages optimization, pruneExpired lock splitting, and isBadServerName optimizationiko 974e6a4Harden server.knot: replay protection, challenge binding, constant-time auth, HTTP error handling, stuck-prune detection, and stats lock splittingiko 03aa1abImprove server.knot: challenge security, session efficiency, federation sharding, presence polling, relay forwardingiko 5ef07c2Improve server.knot: message sharding, federation security, observability, and resource managementiko 104bf5eHarden server.knot: IP binding, challenge consume-all, federation warnings, latency tracking, undrain, revoke sessions, cursor generationiko 22d84d0Add federation in-flight tracking, session IP binding, session sharding, and per-recipient message countsiko 9f7635aImprove server security, performance, and observability: per-peer federation auth, constant-time improvements, session filtering, combined dedup+count fold, non-blocking drain, stats expansion, and faster recoveryiko 9fd0cefImprove server security, performance, and observability: drain TOCTOU fixes, eviction efficiency, federation retry optimization, offline gossip capping, peer secret validation, and recv rate loggingiko 6969a09Improve server.knot correctness, reliability, and performance: drain signals, auth block during drain, health rate limit exemption, federation ack grace period, forward cleanup, message count tracking, prune generation safety, gossip optimization, and self-send rejectioniko d8426fcImprove server reliability and federation resilience: federation health tracking, sliding window sessions, separated background I/O, heartbeat recovery, and hot-path optimizationiko 839f0fbEnhance server security, reliability, performance: challenge IP binding, timing leak fix, atomic block split, federation error logging, optimized message countingiko bfa417fImprove reliability and observability: global message cap, per-peer federation secrets, per-key stats, config validation, pruneRunning recoveryiko 55d061dStrengthen federation resilience: recv rate limits, drain blocks, server masking, concurrency cap, capacity signals, gossip dedupiko a78a2ffImprove server security, reliability, and observability: challenge IP binding, recv rate limit, metadata SSRF block, graceful drain, background loop checks, peer health statsiko 6718962Improve relay resilience: drain poll wake, rate-limit field, stats timing, forward backoff, server cooldowniko 0f0fc65Improve server security and observability: federation global rate limit, challenge brute-force protection, graceful drain endpoint, duplicate status, stats enrichmentiko c3f1a42Improve relay security: generic rate limiter, global limits on all endpoints, atomic forward creation, ack exponential backoff, expanded statsiko 9aca0ccImprove relay security and reliability: federation/global rate limits, forward dedup, atomic poll check, exponential backoff, handler extractioniko