Release v1.1.0

Breaking Changes & Architecture

• Refactored architecture into distinct E2EE and HTTP builds
• Split source code into common, e2ee, and http modules
• Centralized common argument parsing and cleanup logic for daemons

Security Hardening

• Enforced strict permissions (root:600/400) for SSH configurations
• Secured temporary file handling by isolating mode 0700 directories
• Mitigated symlink vulnerabilities by moving temporary files into protected BOT_RUN_DIR
• Sanitized external IP and WiFi SSID outputs to prevent XSS and HTML injection
• Implemented strict config validation using dedicated validators

Performance Optimizations

• Replaced multiple iterative uci calls with single-pass memory caching
• Optimized HTML escaping and event processing to significantly reduce process forks
• Batched jq extraction and cached dependency availability detection
• Handled zombie processes and reduced overall PID count

Resilience & New Features

• Added wget fallback for HTTP transport and connection retry logic
• Implemented HTTP 429 rate limit backoff and sleep jitter to prevent server DoS
• Added configuration toggle to mask WiFi keys in chat
• Added support for executing Wake-on-LAN across multiple broadcast interfaces
• Integrated comprehensive BATS unit testing suite for validation and handlers