aboutsummaryrefslogtreecommitdiffstats
path: root/src/transport/wire.rs
Commit message (Collapse)AuthorAgeFilesLines
* roots: an epoch's root pinned, and named in every handshaketv3 days1-3/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Review 2, N7, the care it raised: a joining node's empty document took as the first epoch's root whatever dependency-less change came first, from whichever peer it joined through; the first epoch's ID is all zeros, so nothing pinned it. A remake's epoch has its ID, the snapshot change's hash, which the rules hold its root to. * Every node names its epoch's root in HELLO and HELLO_REPLY (the epoch's ID for a remake's, its genesis change for the first; wire version 45). A node whose document starts from another root of the same epoch refuses the handshake, logging it: another history under the swarm's ID, a forged root or a genesis started again. * A joining node with an empty document takes as its root only the one it was given (--genesis-root, new), else the one its peers name, and none while they name different ones (access::screen::RootPin, kept in Screening across documents): one peer hands it another root only if it is all the joiner hears, or never, with --genesis-root. A root refused is listed with the refused, what builds on it with it. * The genesis node logs the root (`The swarm's root`); GET /admin/epochs shows it (`root`). A genesis started again under a remembered swarm ID used to merge with the nodes of it still running; they now refuse it (another root), and the docs say to join them with seeds instead. The epoch's identity stays as it is (generation 0 all zeros): records and epoch metadata name it so, and every comparison of epochs with them.
* envelope: a signed value names its swarmtv3 days1-1/+1
| | | | | | | | | | | | Review 3.1, part of finding 12: a signed value's payload bound path, user, time and prev, but not the swarm. A user with the same name and key in two swarms could have an envelope replayed from one into the other, wherever the path holds no envelope yet (prev ""). The payload now names the swarm (`swarm`), and a node takes an envelope only for its own. /auth/whoami says the swarm, and continuum-signed and the example in api.md sign it. Wire version 44: nodes before this refuse such envelopes, and those after refuse the old ones.
* rules: a carried remake record taken from the coordinator its snapshot namestv3 days1-1/+1
| | | | | | | | | | | | | | | | | Review finding 7, second part: a record carried into a new epoch whole (proposal and decision in one change) was taken from any member, for any remake ID. A member could write a forged record, decision included, for a fresh ID in a single change. The snapshot's epoch metadata now names the remake's coordinator, as the quorum built it. The carried-record exception holds only in a later epoch, only for the remake that made it, and only from the coordinator its snapshot names, where there is no record yet. Wire version 43: the snapshot, and so the epoch ID, changes. The review suggested carrying the record inside the snapshot instead. The snapshot can't hold the decision, which names the snapshot's own hash. So the snapshot vouches for who may carry the record instead.
* swarm: changes taken unjudged, dropped (REFUSALS)tv4 days1-2/+11
| | | | | | | | | A node refusing changes a peer brought tells it which broke a rule; the peer judges them itself, and if its rules refuse them too, drops them with all built on them (its document forked without them, a fresh actor), quarantining its own writes among them. Wire version 42. Auth plan M6 (rejoin on taint).
* signatures: on their own (SIGNATURES)tv4 days1-2/+11
| | | | | | | Signatures no sync message took go on their own within a second, to each peer not sent them yet (wire version bumped). Auth plan M5.
* signatures: with sync messagestv4 days1-1/+2
| | | | | | | Sync messages carry, for each actor's writes, the latest signature the sender checked; the receiver checks it once it holds the change. Auth plan M5.
* dashboard: without LINKS; LINKS removedtv4 days1-47/+2
| | | | | | | | | The dashboard reads every member's links from the members themselves; LINKS and LINKS_REPLY, swarm::links and their wire tags go (wire version bumped). Nodes the browser can't reach are drawn from what the reachable ones measure. Auth plan M3.
* HyParView (slim)tv5 days1-2/+30
|
* plumtreetv5 days1-2/+21
|
* indirect probestv5 days1-2/+23
|
* other wire versions warnedtv5 days1-0/+46
|
* round trips in treestv6 days1-2/+6
|
* pushed heads as tipstv6 days1-1/+1
|
* push changes experimenttv6 days1-1/+1
|
* deflate blob chunkstv6 days1-1/+1
|
* deflate blob chunkstv6 days1-1/+1
|
* epoch tag in synctv7 days1-2/+15
|
* no swarm ID in synctv7 days1-2/+1
|
* dashboard: swarm-wide epoch shinetv7 days1-1/+2
|
* time blob messagestv7 days1-1/+3
|
* hop delaystv7 days1-1/+2
|
* any message taken as deliveredtv7 days1-1/+2
|
* tree messages need no answertv7 days1-1/+1
|
* replace eager links by treestv8 days1-8/+2
|
* add writer treestv8 days1-1/+2
|
* measure 2-hop neighbourhoodtv8 days1-2/+6
|
* dashboard: show eager links on the maptv9 days1-1/+3
|
* introduce eager linkstv9 days1-2/+6
|
* announcements answered only if heads differtv9 days1-2/+6
|
* swarm: relay links messagestv9 days1-1/+9
|
* fixup: golden byte follows wire versiontv10 days1-6/+17
|
* links report downtv11 days1-1/+2
|
* rename AutoMerge to Documenttv11 days1-5/+5
|
* links replies carry clock offsetstv11 days1-7/+11
|
* pong carries timetv11 days1-17/+22
|
* unify hex builderstv11 days1-1/+1
|
* unify wire encodertv11 days1-1/+16
|
* allow links subscriptionstv12 days1-7/+8
|
* farewell means dormanttv12 days1-7/+11
|
* links answers connection typetv12 days1-7/+8
|
* dashboard: show all links between peerstv12 days1-7/+11
|
* add links messagestv12 days1-8/+33
| | | | | | | | | Introduce two new wire messages, LINKS and LINKS_REPLY (swarm::links). A member answers with its links: for each peer, the transport, whether it’s relayed, the RTT, and whether it’s dormant. It answers members only, at most every 5 s. This bumps wire::VERSION to 7. Every build answers, with or without the feature, so every node needs this patch before the map shows anything beyond its own node.
* decouple simulation test from myceliumtv12 days1-0/+87
|
* measure pathstv2026-10-281-5/+24
|
* rename PING/PONG to STATUS/STATUS_REPLYtv2026-10-281-18/+19
|
* add identity layertv2026-10-271-6/+48
|
* introduce addressestv2026-10-271-8/+20
|
* add delta blobstv2026-10-261-4/+26
|
* turn all pub into pub(crate)tv2026-10-261-1/+1
|
* decode sync messages lazilytv2026-10-261-7/+12
| | | | | | | Sync messages are now being decoded only where they are applied: after membership has been checked, in the sync lane's blocking task. Debug now shows only the size instead of the whole message.