aboutsummaryrefslogtreecommitdiffstats
path: root/src/document
Commit message (Collapse)AuthorAgeFilesLines
...
* signatures: kept in the document filetv7 days2-35/+203
| | | | | | | A node's signatures are saved with its document (--document-file) and loaded with it. Auth plan M5.
* signatures: --sign-everytv7 days1-2/+140
| | | | | | | | Changes left unsigned are vouched for by the node's next signature: --sign-every 1s (default) signs the latest within a second, all signs every change, none only those that must be. Auth plan M5.
* signatures: changes signed by their nodetv7 days3-0/+188
| | | | | | | | | | Every node signs the changes it commits with its node key, an Ed25519 signature over the change's hash, kept beside the document. One signature on an actor's latest change vouches for its earlier ones. Protocol data and paths listed in _continuum/access/signed are signed, and writes with ?signed=true. Auth plan M5.
* bench: change signaturestv7 days1-0/+229
| | | | | | | Signing and checking change signatures, per change and per actor's latest change, measured before M5 is built (development.md). Auth plan M5 (measure first).
* store: keys_at tells no map from an empty onetv7 days1-9/+8
| | | | | | | | registry::exists counted any value at _continuum/users as a registry; keys_at answers None where there is no map, and its users (records, members, forget records, remakes) say what they make of it. Auth plan M1 (fix).
* access: authorization at the APItv7 days1-2/+12
| | | | | | | | | Every request is judged by the registry the node holds: store reads pruned to what the user may read, writes refused where it may not, admin endpoints by protocol capabilities. Without a registry, as before (--protocol-writers for protocol data). Auth plan M1.
* access: the user registrytv7 days2-0/+8
| | | | | | | | | _continuum/users/<name>: one entry per user, with capabilities by path (read, write) granted by whom and when, and a disabled flag. Read leniently: a damaged entry gives less, never more. Protocol data stays apart: a capability outside _continuum never covers it. Auth plan M1.
* refuse misplaced authorstv8 days3-8/+253
|
* HyParView (slim)tv8 days1-0/+5
|
* heads heard in announcementstv9 days1-6/+6
|
* heads heard in repliestv9 days1-3/+3
|
* heads heard forget senttv9 days1-0/+90
|
* sent hashes elsewhere measuredtv9 days1-0/+10
|
* known elsewhere prunedtv9 days1-0/+5
|
* sent hashes trimmedtv9 days1-5/+78
|
* sent hashes measuredtv9 days1-0/+8
|
* swarm neighbourstv9 days1-0/+3
|
* answering behind countedtv9 days1-0/+17
|
* late messages keep newer headstv9 days1-0/+73
|
* session model testtv9 days2-0/+331
|
* automerge pinnedtv9 days1-0/+103
|
* one walk sincetv9 days2-26/+52
|
* no bloom bytestv9 days1-14/+9
|
* handed over stays senttv9 days1-2/+35
|
* waiting not twicetv9 days1-0/+7
|
* offer answerstv9 days1-0/+10
|
* add pushes match automerge testtv10 days1-0/+48
|
* broken pushes refusedtv10 days1-11/+31
|
* pushed have is the senders headstv10 days1-10/+39
|
* pushed heads as tipstv10 days1-6/+60
|
* push changes experimenttv10 days1-0/+123
|
* announce only to those behindtv10 days2-0/+48
|
* asked known elsewheretv10 days1-7/+36
|
* predecessors go alongtv10 days1-3/+60
|
* covered neighbours have ittv10 days2-9/+52
|
* new changes per messagetv10 days1-3/+5
|
* delta from held headstv10 days2-25/+79
|
* offer again ungeneratedtv10 days1-0/+86
|
* stale delta offerstv10 days1-0/+60
|
* delta known to sendertv10 days1-5/+7
|
* offered deltas lapsetv10 days1-3/+38
|
* fix: level means the peer has our headstv10 days1-6/+13
|
* tests count the changes senttv10 days1-5/+7
|
* no reset for heads still on their waytv10 days1-1/+44
|
* benchmark what sync bytes aretv10 days1-0/+12
|
* changes from a peer never go backtv10 days1-0/+48
|
* older delivered messages leave us leveltv10 days1-35/+73
|
* resend only what is neededtv10 days1-26/+61
|
* delivered means has all up to our headstv10 days1-13/+59
|
* any message taken as deliveredtv10 days1-26/+82
|