ScreenTinker 8809007d9e fix(#148) Item 1: exempt paired+authenticated devices from the flap-limiter quarantine ... The flap-limiter could 30-min quarantine a PAIRED, legitimate device on reconnect churn. Behind Bold's single SNAT IP a repeated edge flush -> every device reconnects -> trips flap -> quarantined -> a recoverable blip becomes a SUSTAINED FLEET-WIDE LOCKOUT we caused. check(key, now, {paired}) now skips (and clears) the quarantine escalation for a paired device — it still gets the brief soft cooldown if it truly hammers, but never the long lockout. The register gate computes paired = device_id && validateDeviceToken(...) (a matching STORED token, false for missing/mismatch) so a spoofed device_id can't claim the exemption; unpaired/anon flapping (attacker / unprovisioned hammering) still quarantines. Tests: unpaired flapper still quarantined; paired never quarantined (soft cooldown only); paired creds RELEASE an in-flight quarantine; N paired devices from one SNAT IP all admitted on reconnect and never quarantined across repeated flush cycles.		2026-07-02 14:59:25 -05:00
..
dashboardSocket.js	fix(#146): crash-hardening — one device's handler throw can't take down the fleet	2026-06-29 23:38:11 -05:00
deviceSocket.js	fix(#148) Item 1: exempt paired+authenticated devices from the flap-limiter quarantine	2026-07-02 14:59:25 -05:00
index.js	Initial open source release	2026-04-08 12:14:53 -05:00