Full libsession Client support - #150

Draft

jagerman wants to merge 444 commits into

devfrom

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 1, 2026

Add missing backend modules
jagerman
committed
d38e148
Merge pull request #108 from jagerman/drop-redeemed-at-pfs
jagerman
authored
8a064a1
Rename payment provider rangeproof -> stf

jagerman
and
claude
committed
dfc7295
Merge pull request #111 from jagerman/rename-rp-to-stf-pfs
jagerman
authored
6490571
Validate blinded IDs before matching

Ap4sh
authored and
jagerman
committed
1bab2fe
Merge remote-tracking branch 'origin/dev' into pfs
jagerman
committed
6dc1f5e

Commits on Aug 3, 2026

Drop error_report from get_pro_status

jagerman
and
claude
committed
77d93ac
decrypt_group_message: parse via bt_dict_consumer require/maybe helpers
jagerman
committed
2002fa2
ci: backend: kwarg rename fix
jagerman
committed
971ab77
Merge pull request #113 from jagerman/drop-error-report-pfs
jagerman
authored
4954f41
Merge remote-tracking branch 'origin/dev' into pfs
jagerman
committed
e4e0a69

Commits on Aug 5, 2026

pro_backend: throw on parse errors instead of an error vector

jagerman
and
claude
committed
3e9d7da
user_profile: fetch a proof when entitled but holding none

jagerman
and
claude
committed
8eca20d
Merge pull request #115 from jagerman/this-is-not-c-pfs
jagerman
authored
2445b43

Commits on Aug 6, 2026

Merge pull request #119 from jagerman/renewal-target-no-proof-fetch-pfs
jagerman
authored
975b564
pro_backend: fix macOS build of the C response holders

Bilb
authored and
jagerman
committed
e682e6b
xed25519: throw from the string overloads on bad input sizes
jagerman
committed
b03709d
Merge remote-tracking branch 'origin/dev' into pfs
jagerman
committed
f11143b
user_profile: add pro auto-renewing status (config key `A`)

jagerman
and
claude
committed
65c0377

Commits on Aug 12, 2026

Merge remote-tracking branch 'jagerman/pro-auto-renewing-config-pfs' into pfs
jagerman
committed
17a85f1
multi_encrypt: match padding entries to ciphertext size

Ap4sh
authored and
jagerman
committed
0763aff
Bump version to 2.0.0
jagerman
committed
db19773
tests: clang-format fixup for 0763aff6
jagerman
committed
0dda3b6
Re-resolve the right swarm after a 421

Jason Rhinelander
authored and
jagerman
committed
3699813
SnodePool: don't let an undersized refresh wipe a good cache

mpretty-cyro
authored and
jagerman
committed
ec91a11
Formatting & stale comment fix

Jason Rhinelander
authored and
jagerman
committed
f8ffbd3
user_profile: add the pro grace period, and distinguish an unset auto-renewing flag

mpretty-cyro
authored and
jagerman
committed
85483fe
json helpers: session::json, without the json_ prefix
jagerman
committed
4003a13
json: require_binary, accepting hex or base64
jagerman
committed
3706900
Merge remote-tracking branch 'origin/dev' into pfs
jagerman
committed
f3a71d5
Fix SQLite linking, unused header, uncommitted sql tx
jagerman
committed
8fe8739
core: add a send_dm() overload taking a Content protobuf
jagerman
committed
d63591f
core: add Globals::erase()
jagerman
committed
b98189e
core: stop hijacking the pfs_keys_fetched callback to flush queued sends
jagerman
committed
c58f06b
core: advance the swarm sync cursor only after handling a batch
jagerman
committed
8751621
core: log callback exceptions as errors, and contain them around the pfs flush
jagerman
committed
6bfa70c
core: let a layer above Core register its own migrations
jagerman
committed
475cf39
Make the migration registry generator reusable across directories
jagerman
committed
2fe9c35
Add missing v2 message design docs
jagerman
committed
7293ea0
util: add trim_trailing() and use it for padding removal
jagerman
committed
f3c9d13
core: match the spec's device key indicator personalization
jagerman
committed
5320c1d
core: fix the device group payload nonce derivation
jagerman
committed
effd839
core: pad device group payloads to hide the device count
jagerman
committed
b6a67ca
core: expose the database and option helpers to layers above Core
jagerman
committed
fc3a21e
client: add a conversation-level data model over Core
jagerman
committed
19f391f
util: split count_trailing() out of trim_trailing()
jagerman
committed
c4850f8
client: rework the schema onto surrogate keys and content hashes
jagerman
committed
3a07bd2
client: decompose the conversation key and cache message counts
jagerman
committed
641650d
schema: order migrations by name rather than filename
jagerman
committed
701f5cf
schema: build fresh databases from full_schema.sql
jagerman
committed
37496b7
schema: make full_schema.sql the only creation path
jagerman
committed
f0ecaee
schema: check that every published schema still upgrades
jagerman
committed
14db345
client: note where message requests will intervene
jagerman
committed
0b44b85
core: let the application choose the account identity
jagerman
committed
16f76d5
mnemonics: fix the seed phrase checksum
jagerman
committed
46f4282
mnemonics: canonicalise input before matching words
jagerman
committed
9b4b7ca
core: expose the event loop, and say what the database may be used for
jagerman
committed
e0946a1
client: run all database work on the event loop
jagerman
committed
61f5a50
session-deps: add utf8proc, qrcodegencpp
jagerman
committed
86887fd
session-sqlite: fix potential object copy deadlock
jagerman
committed
f4d16e3
Fix storage server signature for the default namespace
jagerman
committed
6a9f50c
Reflow the poll logging clang-format would have
jagerman
committed
ee0132c
File our own sent messages under the recipient, not ourselves
jagerman
committed
aa50ea9
Report note-to-self rather than making callers derive it
jagerman
committed
0ac496c
Do not require an identity to read conversations
jagerman
committed
93ff71f
Store to the destination's swarm under the destination's pubkey
jagerman
committed
417a8ab
formatting
jagerman
committed
6033d77
Trace a DM from the UI to the wire
jagerman
committed
b2892d5
Tell the application what changed instead of making it ask
jagerman
committed
2ab021c
One set of callbacks, given at construction
jagerman
committed
15696d7
Send outgoing messages to our own swarm as well as the recipient's
jagerman
committed
0b92a55
Stop describing Core as the whole data model
jagerman
committed
31c4867
Cover opening a conversation before sending into it
jagerman
committed
299126a
Log the message row id as it is assigned
jagerman
committed
08c371f
Give up on snodes session-router cannot reach, and close the tunnels we open
jagerman
committed
dfd95d8
Hold session-router tunnels as claims, and act on why one failed
jagerman
committed
7ed1992
Run the live tests through session-router by default
jagerman
committed
c87565f

Commits on Aug 13, 2026

Drop partial_min_interval; on_data coalescing is not this layer's job
jagerman
committed
70b4b99

Commits on Aug 14, 2026

Let a download url name the file server's session router endpoint
jagerman
committed
8080d1f
Share the send dispatch between message sends
jagerman
committed
5ac3e7e
Attachment surface for outgoing messages, and headers named for what they hold
jagerman
committed
761ba39
Send messages with attachments
jagerman
committed
b698070
Distinguish a send that cannot work from one that did not
jagerman
committed
dcfcf8f
Retry a failed send, resuming rather than restarting
jagerman
committed
5c7f8ba
Cover the attachment send success path against testnet
jagerman
committed
55b743f
Note the blob view's lifetime where it is copied out
jagerman
committed
4551b00
Name the attachment pointer for what it is
jagerman
committed
381571c
Require the whole file id to be the number
jagerman
committed
d4c5ec3
Do not promise attachments upload one at a time
jagerman
committed
612ec44
Report an attachment as started, and let a send with attachments be async
jagerman
committed
61b284e
Move the blocking calls to a SyncClient, leaving Client asynchronous
jagerman
committed
e9965ea
Deliver every handler through an application-supplied dispatcher
jagerman
committed
d7a00f8
Tell a caller when an asynchronous call fails, instead of logging and vanishing
jagerman
committed
6af8c1a
Rate limit handlers that report continuously
jagerman
committed
7cfb0ba
Stub the network, not Core's own send path, in the client tests
jagerman
committed
2e97656
Record the swarm hash of a message we sent
jagerman
committed
03e7a17
Share the store-request test helpers
jagerman
committed
bed7c8b
Stub the network in the DM send tests, not Core's own send path
jagerman
committed
e61a9f7
Delete send_to_swarm; Core's callbacks are Client's alone
jagerman
committed
5426bc5
Drop the last references to send_to_swarm
jagerman
committed
03b3c3c
Complete quic::Loop where client.hpp uses it
jagerman
committed
9e55f01

Commits on Aug 15, 2026

Report a message's attachments, and send their real size
jagerman
committed
ddce7eb
Infer an attachment's content type when the sender names none
jagerman
committed
0d4724f
Say how an attachment is encrypted in the url that points at it
jagerman
committed
32fa3c4
Decrypt legacy attachments
jagerman
committed
9694394
Receive attachments, and fetch them on request
jagerman
committed
fcd3f6e
Give messages an identifier, and drop the content hash
jagerman
committed
15df4cc
Reference messages by id, not by timestamp alone
jagerman
committed
6542785
Carry msgIds on receipts, spell out attIndex, drop KeyPair
jagerman
committed
fa73d64
Tell a sender we saved their attachment, unless asked not to
jagerman
committed
8d72db4
Test the attachment save path against a stubbed network
jagerman
committed
9817cf0

Commits on Aug 17, 2026

Round-trip an attachment, and save a legacy one, without a network
jagerman
committed
72cd694
session_protocol: make the proof version a wire selector, not a stored field

jagerman
and
claude
committed
45319ac
session_protocol: degrade unknown-version proofs instead of dropping the message

jagerman
and
claude
committed
34aad73
json: recognize scoped enums in require/maybe

jagerman
and
claude
committed
f447513
Pin the tunneled QUIC connection's MTU to 1200
jagerman
committed
94cb991
Record when an attachment was saved, at either end
jagerman
committed
39b2345
Move a swarm request to the next member when a node is unreachable
jagerman
committed
c266aa1
Test the swarm walk against a scripted router
jagerman
committed
33812a8

Commits on Aug 19, 2026

Give the client schema somewhere to put the synced configs
jagerman
committed
96c35d8
Fetch, merge and keep the account's configs
jagerman
committed
e762889
Push the configs that have changed
jagerman
committed
f26abd0
Tell the application which configs a merge changed
jagerman
committed
6f578a3
Give a streaming upload more buffer to coast on
jagerman
committed
75f2d48
Cover the merge cases a seqno comparison could have missed
jagerman
committed
564da90
Check what merging a config identical to our own costs
jagerman
committed
ea09ae2
Cover what a skipped seqno costs the device that catches up
jagerman
committed
d4f62e0
session_protocol: the pro proof has no version field at all

jagerman
and
claude
committed
efd399d
Reconcile UserProfile into the conversation model
jagerman
committed
f5c228d

Commits on Aug 20, 2026

Reconcile every config at startup, not only on change
jagerman
committed
5c26b3f
Allow config pushing to be switched off
jagerman
committed
0871765
Give one-to-one conversations a delete-before
jagerman
committed
c40448b
Say that an attachment path is informational, not owned
jagerman
committed
a2bf2fd
Project the Contacts config into the conversation model
jagerman
committed
c039735
Delete a contact removed on another device
jagerman
committed
ca265c4
Block, clear, delete: the four destructive operations
jagerman
committed
fced660
Message requests: a conversation nobody answered yet
jagerman
committed
b5d0543
Look contacts up rather than scanning for them
jagerman
committed
b54ead2
Say when we are the ones waiting to be accepted
jagerman
committed
6bad326
Sync read state through ConvoInfoVolatile
jagerman
committed
915a34a

Commits on Aug 21, 2026

Drop an access specifier that introduced nothing
jagerman
committed
14c6006
Give a conversation a kind
jagerman
committed
3e9fa17
Name a blocking call where it is made
jagerman
committed
d3a9ff0
Put a conversation's operations on the conversation
jagerman
committed
2765251
Move the tests onto the conversation API
jagerman
committed
634873a
Delete SyncClient
jagerman
committed
3951474
Do not reach back into the conversation from a handler
jagerman
committed
b1bebe0
Do not claim they saved a file when we saved our own copy
jagerman
committed
e5a3d04
Ask "is this me?" once
jagerman
committed
9491326
Stop a save from destroying two files it was not asked to touch
jagerman
committed
1a1151a
Claim the scratch name by opening it, where the standard allows
jagerman
committed
98190f7
Let an account say not to report its saves
jagerman
committed
9cdc9c6
Report the contact settings the config already carried
jagerman
committed
a050738
Split test_client.cpp into tests/test_client/
jagerman
committed
d7588af
Reconcile on the loop, not on the thread that built the Client
jagerman
committed
fb80d26

Commits on Aug 22, 2026

Delete a message without letting it come back
jagerman
committed
d9110b6
Show a message as it was on the wire
jagerman
committed
394f884
Derive the poll cursor from a history of hashes
jagerman
committed
d300585
Delete a message everywhere, and honour being asked to
jagerman
committed
9c8c352
Expose our own name and the save-notification preference
jagerman
committed
2ff20e2
Let an attachment be encrypted under a key we choose
jagerman
committed
ae2a5e1
A disk cache for what we download
jagerman
committed
aa20899
Extract downloading-and-decrypting from saving
jagerman
committed
3638f93
Fetch a conversation's picture, through the cache
jagerman
committed
089df3d
Leave the progress callback empty when nobody is watching
jagerman
committed
025907a
Share the progress dispatch hop rather than writing it twice
jagerman
committed
da591bf
Decrypt a display picture from before the stream scheme
jagerman
committed
fe10134
Choose the decryption in one place, and prove all three work
jagerman
committed
d9ff462
Record a sender's picture, and stop corrupting the key we publish
jagerman
committed
9f4e5e2

Commits on Aug 24, 2026

Merge pull request #131 from jagerman/proproofversion-scoped-enum-pfs
jagerman
authored
c1a594f
Say what an attachment size actually is
jagerman
committed
bcb6936
Fix spurious seqno increment when a merge adopts an incoming config

Jason Rhinelander
authored and
jagerman
committed
e211602
tests: cover attachment file-encryption input validation

Ap4sh
authored and
jagerman
committed
ed14944
Merge remote-tracking branch 'origin/dev' into pfs
jagerman
committed
6190cca
Stop verifying the legacy attachment digest
jagerman
committed
e66af40
Hold a sender to the attachment size they declared
jagerman
committed
9e05166
Add the per-conversation auto-download column
jagerman
committed
ebe89db
Do not require legacy padding to be zeroes
jagerman
committed
7c11020
Notice a too-long stream attachment as it happens
jagerman
committed
0831223
Report a transfer to whoever did not ask for it
jagerman
committed
0d23731
Index the attachment cache
jagerman
committed
0e1ebca
Let a conversation say what it fetches unasked
jagerman
committed
f66eb5f
Gallery messages, whole-attachment reads, and one transfer per file
jagerman
committed
937dcfa
Cover a save joining a fetch already under way
jagerman
committed
e09e0b8
Fetch on arrival what the conversation asked for
jagerman
committed
6fdfe20
Keep the cache under the limit it was given
jagerman
committed
accc98a
Drop a profile picture the moment nobody points at it
jagerman
committed
115487a
Sweep the cache once against what the database says is in it
jagerman
committed
8149d9d
Fetch a picture through the same registry an attachment uses
jagerman
committed
6ee227f
Fetch a display picture when we learn its url
jagerman
committed
805a010
Say what sync() does not settle
jagerman
committed
e111241

Commits on Aug 31, 2026

Give a new account a device group to be the only member of
jagerman
committed
d59a2e3
Record what a message replies to, as the sender addressed it
jagerman
committed
b49a31d
Resolve a reply's target on every read
jagerman
committed
07ecebb
Store the reference a quote carries
jagerman
committed
8feea72
Tell a display when a reply's target changes under it
jagerman
committed
77b0205
Carry the message a reply answers, one level down
jagerman
committed
6600a70
Build an outgoing message's content in one place
jagerman
committed
131317c
Send a reply, and say so on the wire
jagerman
committed
df73df8
Bump session-router to one that has what we link against
jagerman
committed
d394a54
Own the loop jobs rather than borrowing the loop's
jagerman
committed
86fc1e7
fix: point the Pro access-not-found url at getsession.org/pro-recover

Bilb
authored and
jagerman
committed
2fae54b
file server: carry the port in download urls, and treat its pubkey as Ed25519

mpretty-cyro
authored and
jagerman
committed
1dcea7a
tests: pin that a valueless `d=` is not the stream-encryption fragment

mpretty-cyro
authored and
jagerman
committed
f7ef6e5
Merge remote-tracking branch 'origin/dev' into pfs
jagerman
committed
8f569af

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 8, 2026

Give a change handler its payload by value
Bilb
committed
933c33d

Commits on Sep 9, 2026

Hand a change handler its payload by rvalue reference
jagerman
committed
24156d5
Hand over the conversation id too, where it is handed over
jagerman
committed
ac90169
Update the live attachment test to the send_message struct
jagerman
committed
5e72bb5
Run clang-format over the branch

Bilb
authored and
jagerman
committed
66a6aea
More formatting
jagerman
committed
5639878
Fix system lib libutf8proc usage
jagerman
committed
6bc8814
Read a device's state before moving its info
jagerman
committed
0407ee1
Set the poll interval on the loop that owns the ticker
jagerman
committed
ef68eae
Say what a Client's callbacks and off-thread reads actually do
jagerman
committed
b84556c
Describe a conversation's last message, not just its body
jagerman
committed
3df4ae5
Rank device states so a merge can decide a transition
jagerman
committed
8432768
Bind a variable-length IN list through the normal path
jagerman
committed
fc73e5a
Name a preview's attachments rather than counting them
jagerman
committed
5c4af83

Commits on Sep 10, 2026

Bump session-deps and session-router for the cross-build fixes
Bilb
committed
eeba023
Merge pull request #146 from Bilb/chore/bump-deps-router
jagerman
authored
7e5874d
Add an optional IP-to-country lookup behind a cmake option
jagerman
committed
488fb3d
Rename the blocking-call tag from `wait` to `block`

jagerman
and
claude
committed
061d1b7
Merge pull request #148 from jagerman/rename-wait-to-block
jagerman
authored
c4d4fe3
Merge pull request #147 from jagerman/ip-country
jagerman
authored
6597823
Merge pfs into client
jagerman
committed
61f9529
fix: android refund redirect is /refund-android

Bilb
authored and
jagerman
committed
6aa2608
chore: run static ios first

Bilb
authored and
jagerman
committed
a8805d8
Merge remote-tracking branch 'origin/dev' into client
jagerman
committed
83acc2f
Rename the blocking-call tag to `await`
jagerman
committed
3187875
Merge pull request #151 from jagerman/rename-block-to-await
jagerman
authored
b0a523f

Commits on Sep 11, 2026

Let a logger be taken back off
Bilb
committed
bca23e3
Bump session-router to bump libquic to bump logging
jagerman
committed
f07374b

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Fix the testnet file server pubkey holding the X25519 form
jagerman
committed
521be4a
Validate the `p=` pubkey in a download url
jagerman
committed
1373aec
Check the pubkey in a session-router address is a pubkey
jagerman
committed
7100e86

Commits on Sep 16, 2026

Merge pull request #167 from jagerman/fix/testnet-file-server-pubkey
jagerman
authored
916e6c5