on f6bc769 help sign in
f6bc769Implement 13 server.knot improvements: message deletion, federation batch optimization, client IP/correlation logging, and bug fixesiko eb04b6dAdd per-IP key-rotation abuse detection, shard recipient message counts for performance, add startup federation connectivity checks, enable concurrent message bucket pruning, improve access logging, and enhance code documentationiko 00797dcConsolidate server.knot: refactor send logic, add federation/watchdog monitoring, improve code qualityiko b840bc1Add peer blocklist, admin endpoints, federation ping, rate limiter helpers, and reliability improvements to server.knotiko 6b0839eEnhance server.knot with forward nonce persistence, gossip validation, per-origin nonce partitioning, /messages/list endpoint, retryAfterMs feedback, health masking, and performance optimizationsiko 0902341Harden server.knot: session lifetime caps, pair rate limiting, deferred ack cleanup, per-bucket reconciliation, and extended monitoringiko 53a4c04Add batch send endpoint, snapshot versioning, structured logging, clock jump detection, and optimize server.knot security, performance, and reliabilityiko ca4b8d3Improve server.knot security, reliability, and protocoliko a70c802Improve server.knot security, reliability, and protocol: fix IP binding bypass, add federation verify retry, pre-filter gossip capacity, tighten hung slot cleanup, add poll heartbeat field, update protocol docsiko ad205d9Improve server.knot: add origin verification, gossip hop limiting, verify rate limiting, snapshot staleness warnings, forward preservation, prune recovery, and queue metricsiko 0d78e7cHarden server.knot: add forward replay nonce tracking, federation verify rate limiting, require token scope, periodic counter reconciliation, and startup config warningsiko 7076ef9Improve server.knot security and performance: add federation pair rate limiting, peer server cache to reduce O(n*k) scans, writeAllPresence single-pass optimization, constant-time IP check, verify endpoint rate limiting, and enhanced stats observabilityiko 0703ad8Improve server.knot security and reliability: bind federation tokens to request scope, add per-sender-per-recipient rate limiting, and add federation ack retry limitsiko 55f5e8dReplace federation shared secret with domain callback verificationiko 7668ae6Harden server.knot: logout auth rate limiting, relay origin validation, constant-time IP binding, prune counts race fix, and config validationiko 4b913e0Improve server.knot: federation replay dedup, per-entry forward retry limits, and auto-snapshot intervaliko 40aa04dImprove server.knot: federation timestamp binding, in-flight leak protection, circuit breaker, optimized logout scan, signal-based drain wait, snapshot/restore endpoints, ack message cleanup, and expanded config validationiko 9e7d395Improve server.knot: auth-tier rate limiting, session counter, concurrent prune guard, drain flush, voluntary logout, message status endpoint, federation ack hardening, verify() atomicity, stats rate-limiting, forwardQueuedMessages optimization, pruneExpired lock splitting, and isBadServerName optimizationiko 974e6a4Harden server.knot: replay protection, challenge binding, constant-time auth, HTTP error handling, stuck-prune detection, and stats lock splittingiko 03aa1abImprove server.knot: challenge security, session efficiency, federation sharding, presence polling, relay forwardingiko 5ef07c2Improve server.knot: message sharding, federation security, observability, and resource managementiko 104bf5eHarden server.knot: IP binding, challenge consume-all, federation warnings, latency tracking, undrain, revoke sessions, cursor generationiko 22d84d0Add federation in-flight tracking, session IP binding, session sharding, and per-recipient message countsiko 9f7635aImprove server security, performance, and observability: per-peer federation auth, constant-time improvements, session filtering, combined dedup+count fold, non-blocking drain, stats expansion, and faster recoveryiko 9fd0cefImprove server security, performance, and observability: drain TOCTOU fixes, eviction efficiency, federation retry optimization, offline gossip capping, peer secret validation, and recv rate loggingiko 6969a09Improve server.knot correctness, reliability, and performance: drain signals, auth block during drain, health rate limit exemption, federation ack grace period, forward cleanup, message count tracking, prune generation safety, gossip optimization, and self-send rejectioniko d8426fcImprove server reliability and federation resilience: federation health tracking, sliding window sessions, separated background I/O, heartbeat recovery, and hot-path optimizationiko 839f0fbEnhance server security, reliability, performance: challenge IP binding, timing leak fix, atomic block split, federation error logging, optimized message countingiko bfa417fImprove reliability and observability: global message cap, per-peer federation secrets, per-key stats, config validation, pruneRunning recoveryiko 55d061dStrengthen federation resilience: recv rate limits, drain blocks, server masking, concurrency cap, capacity signals, gossip dedupiko a78a2ffImprove server security, reliability, and observability: challenge IP binding, recv rate limit, metadata SSRF block, graceful drain, background loop checks, peer health statsiko 6718962Improve relay resilience: drain poll wake, rate-limit field, stats timing, forward backoff, server cooldowniko 0f0fc65Improve server security and observability: federation global rate limit, challenge brute-force protection, graceful drain endpoint, duplicate status, stats enrichmentiko c3f1a42Improve relay security: generic rate limiter, global limits on all endpoints, atomic forward creation, ack exponential backoff, expanded statsiko 9aca0ccImprove relay security and reliability: federation/global rate limits, forward dedup, atomic poll check, exponential backoff, handler extractioniko c44731eAdd comprehensive documentation comments to server.knotiko edd1396Improve relay security and reliability: cascade forwarding prevention, challenge eviction, delivered message cleanup, DNS rebinding hardening, ack overflow dedupiko 6c298d9Improve relay security and reliability: origin validation, per-key rate limits, poll concurrency cap, ack overflow bufferiko 9de1b40Improve relay reliability and security: cursor-acked messages, re-auth after poll, forward-on-failure, rate limit hardeningiko 00772ceImprove server: backoff, rate limits, presence refresh, and optimizationsiko c8bf966Plumb safe area insets to model and extend bottom bar into inset paddingiko 25c6d89Remove unannotatable StrokeDashArray animation for delivered messagesiko 26f4907Fix server build: inline activeByExpiry and pendingRemoteAcks2026.04.22.2058iko fc75d89Remove payload versioning and schema migrationsiko 56d04b5Delete-on-poll: eliminate /messages/ack endpoint, delete messages atomically at poll timeiko 1200f6aBackend improvements: three-phase poll optimization, challenge expiry, forward ack cleanup, stats endpointiko 9f571e9Backend improvements: defer token generation, bucketed message signals, health endpoint, forward logging, jitteriko c6a4db8Instant message delivery via separate messageSignal; constant-time session token comparisoniko d11341fHide sender public key in encrypted payload; bind signature to recipientiko db2d141Implement backend improvements: idempotent sends, challenge capacity limits, faster session auth, poll race fix, and federation error loggingiko