MessageWeave

Commit Graph

Author	SHA1	Message	Date
anonsaber	c5bc7b8d82	fix(notify): /ready JMAP 探针对齐真实客户端（Basic 认证 + 路径归一）架构师复核指出两点会致全站不可用的缺陷（notify.rs）： - 探针未带认证：真实 jmap_client 以 .credentials() 取 session，Stalwart session 端点需认证；无认证必 401 → /ready 永久 503 → ingress 停止路由。改为从 business_runtime 快照取 jmap_username/jmap_password， basic_auth 随请求发送（零新增依赖，凭据仅入请求头，绝不日志）。 - session URL 未归一：配置若是裸 origin，GET 根路径必 404 → 误报。改为复用 normalize_session_url（client.rs 改为 pub(crate)）并请求标准 /.well-known/jmap，与 JmapClientBackend::connect_with_runtime 同路径。顺带：两探针 tokio::join! 并行，/ready 最坏耗时 3s→3s（原 6s）。门禁 4/4 绿（45 passed, 0 failed, 1 ignored）。	2026-09-28 10:37:22 +08:00
anonsaber	309a38c503	fix(worker,state,jmap,config): close independent-review findings - worker/state: paginate Email/changes by widening maxChanges on the same sinceState (jmap-client 0.4.2 has no upToId) to avoid skipping a batch when advancing per page; make dedup+enqueue atomic via claim_dedup_and_enqueue (Lua SET NX EX then XADD); scale the XAUTOCLAIM idle threshold by batch size; XACK payload-less malformed stream entries out of the PEL via ack_malformed; fail closed on unknown streams (Err); tighten SET NX EX TTL to .max(1); derive the CSPRNG fallback owner-token from time+PID+counter instead of a constant; clear the push verification digest on push:disable - worker: /help menu now lists only the consent triggers the parser accepts - jmap/config: complete client and configuration validation	2026-09-27 12:53:05 +08:00
anonsaber	dceecaf2f4	feat: initial MessageWeave release	2026-09-25 09:14:04 +08:00

Author

SHA1

Message

Date

anonsaber

c5bc7b8d82

fix(notify): /ready JMAP 探针对齐真实客户端（Basic 认证 + 路径归一）

架构师复核指出两点会致全站不可用的缺陷（notify.rs）：

- 探针未带认证：真实 jmap_client 以 .credentials() 取 session，Stalwart
  session 端点需认证；无认证必 401 → /ready 永久 503 → ingress 停止路由。
  改为从 business_runtime 快照取 jmap_username/jmap_password，
  basic_auth 随请求发送（零新增依赖，凭据仅入请求头，绝不日志）。
- session URL 未归一：配置若是裸 origin，GET 根路径必 404 → 误报。
  改为复用 normalize_session_url（client.rs 改为 pub(crate)）并请求
  标准 /.well-known/jmap，与 JmapClientBackend::connect_with_runtime 同路径。

顺带：两探针 tokio::join! 并行，/ready 最坏耗时 3s→3s（原 6s）。

门禁 4/4 绿（45 passed, 0 failed, 1 ignored）。

2026-09-28 10:37:22 +08:00

anonsaber

309a38c503

fix(worker,state,jmap,config): close independent-review findings

- worker/state: paginate Email/changes by widening maxChanges on the same
  sinceState (jmap-client 0.4.2 has no upToId) to avoid skipping a batch when
  advancing per page; make dedup+enqueue atomic via claim_dedup_and_enqueue
  (Lua SET NX EX then XADD); scale the XAUTOCLAIM idle threshold by batch size;
  XACK payload-less malformed stream entries out of the PEL via ack_malformed;
  fail closed on unknown streams (Err); tighten SET NX EX TTL to .max(1);
  derive the CSPRNG fallback owner-token from time+PID+counter instead of a
  constant; clear the push verification digest on push:disable
- worker: /help menu now lists only the consent triggers the parser accepts
- jmap/config: complete client and configuration validation

2026-09-27 12:53:05 +08:00

anonsaber

dceecaf2f4

feat: initial MessageWeave release

2026-09-25 09:14:04 +08:00

3 Commits