Repository navigation
Add live web editor, guided setup and pairing for 3.3.7 - #74
Merged
Merged
Conversation
The auth request now carries the platform the backend detected (Paper, Folia, Bukkit, Forge, Fabric), and the proxy keeps it on the client session. Older backends send none and show as unknown.
/cb editor opens a session through a relay on cb.objz.dev; every message is signed with a secret that only lives in the editor link. Changes are staged and written after /cb editor confirm <code>, unsaved work is kept as a draft, and the session closes once the editor tab is gone. Adds /cb editor list and /cb editor close.
…irm; proxy checks names and addresses
…ts for /cbc pair confirm, console only
…itor confirm in step with its messages, size caps
…ng to a negative tick count
…ocks every later one
…written, saves are atomic
…script, queue capacity, player lookups, auth retry, optional numbers, dump redaction)
…, relay Java plugin: - Retain learned TOFU trust across reconnects so attacker cert substitution fails. - Bind backend API identity to configured client ID, not the learned proxy ID. - Atomic queued-task claim before dispatch; one task runs exactly once. - Persist authorized script revision with queued work; resume rejects changed scripts. - Reconstruct typed complex arguments across wire JSON and task storage. - Carry authenticated remote-proxy player context without console fallback. - Built-in CommandPayload API execution handlers on both API implementations. - Authentication-generation guards reject stale callbacks on close/reconnect. - Send-factory replacement propagates to already registered InNode handlers. - RedisClient.close shuts down its API. - Keep failed reload from publishing defaults/invalid candidates. - Reject reserved server name try in setup plans and TOML writer. - Editor opening generations invalidated on replacement, explicit close, restart. - Setup open completions synchronize; obsolete sessions close offers. - Reload sends empty script sets to every authenticated client. - WebSocket message bounds via Undertow buffer limits (4 MiB per frame). - Redis login no longer suffices to forge proxy/server commands: per-channel HMAC, 2-minute timestamp window, replay rejection, bounded nonces and message size. - Undersized editor payloads and setup code validation. Browser/wiki: - Editor: inferred deletions cannot target unreadable scripts; external edits preserve the dirty baseline until revert; YAML sources stay paired with _src indexes through saves, undo and redo; YAML input cancels confirmation; undo/redo schedules draft persistence. - Worker/relay: message size caps on editor and pairing channels; binary frames closed before forwarding; closing/replaced sockets cannot send or receive. Tests: added regression suites for all fixes. docs/3.3.6 left byte-identical; updated guidance copied to docs/3.3.7. Relays moved to wiki/worker/. Signed-off-by: CommandBridge <me@objz.dev>
Empty the forced-hosts table so the generated primary config matches only the local Paper server; Velocity rejects unknown forced-host entries and would not start.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
/cb editorfor live script editing,/cb setupfor guided proxy setup, and console-confirmed/cbc pairfor backend pairing.worker/.Validation
Completed local five-minute workloads:
Both command runs recorded zero missing or duplicate executions, dispatch failures, wrong-target deliveries or server errors. Their functional preflights passed player command routes, permission denial, public API dispatch, built-in commands, reload and reconnect checks.
The six harness self-tests also passed. A separate local Wrangler relay test in the wiki repo delivered 30,000/30,000 encrypted round trips across 10 sessions with 1 KiB payloads over five minutes, with no loss, duplicates or reported errors (p95 8.40 ms; p99 21.75 ms).
These are bounded loopback tests, not production-capacity or long-term memory-leak guarantees. The TLS and Redis sustained runs overlapped on the same host. Command latency includes destination logging and Paper tick scheduling.
Known caveats / release checks
git diff --check origin/v3...HEADreports one trailing-whitespace line invelocity/src/test/resources/setup/velocity.toml:45.Local evidence
build/live-validation/20261026-234022-tls-36a1b3/result.jsonbuild/live-validation/20261026-234035-redis-c2a4f0/result.json.browser-check/relay-sustained-result.jsonThese generated evidence files are ignored and are not included in the PR.