Add the dist/migrate.js entrypoint the Helm job already invoked and point
Compose at the same runner, so one implementation applies
packages/server/migrations in both paths. Rewrite the console README to
the standalone Docker build it actually uses and fix the chart
description.
Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq
Split the 657-line operation service into eor, submit, and verify
modules, add the AGENT_REVOKED and KEY_RETIRED codes the Backend already
emits, and condense every multi-line comment. Mirror Node, Python, and
Go at 2.1.0 with the deep-health 503, non-idempotent retry, rotation
grace, and path-encoding fixes. Document which routes and response
fields the self-hosted server does not provide.
Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq
Replace the 182-line inline schema in docker-compose.yml with a runner
over packages/server/migrations, add 004 restoring the constraints and
64-bit counters the inline SQL carried, skip migrations already recorded
in schema_versions, relabel the mount for SELinux, and drop the obsolete
compose version key. Retarget the catalog contract test at the migration
files.
Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq
Mirror the Console registration feature: native hook catalog with
activation plans, one-command install that embeds both credentials in
exclusively created owner-only files (mktemp on POSIX, icacls on
Windows), sh/PowerShell tabs, never-expiring default token, focus-visible
styles, merged i18n keys, and the matching e2e specs.
The server previously answered /v1/auth/token with the 7-day Better Auth
session token and ignored ttl_seconds. It now issues opaque 32-byte API
tokens stored as SHA-256 hashes (migration 003), honours ttl_seconds with
null meaning no expiry, and resolves bearer values as API tokens before
session validation. Issuance requires a session credential.
Claude-Session: https://claude.ai/code/session_01QoUjdc7HGKTsgj5GhG8HvF
The operation and receipt now commit before the queue send. A Postgres
23505 on operations_agent_id_seq_no_key is answered with 400
PREV_HASH_MISMATCH carrying the stored chain hash so hook retries can
resync. A failed enqueue after the commit is logged as
operation.enqueue_failed and the receipt is still returned.
Every producer now names its message: MessageQueue.send takes the
durable message id, and the BullMQ adapter passes it as the job id, so
the receipt's queue_message_id is the real queue identifier.
Claude-Session: https://claude.ai/code/session_01QoUjdc7HGKTsgj5GhG8HvF
Console:
- Rewrite auth from JWT decoding to Better Auth useSession()
- Add auth-client.ts with createAuthClient
- Remove elydora_token localStorage, dead auth API functions
- Fix login/register pages to use signIn.email/signUp.email
Server:
- Upgrade better-auth ^1.2.0 → ^1.5.5
- CORS: enforce allowlist on all environments
- Sync auth service and middleware with backend
SDKs:
- Deprecate login/register in Node, Python, Go SDKs
- Update READMEs to show direct token initialization
Config:
- Sanitize .env with dev-only placeholder values
- Update helm chart and install scripts
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Remove STARTER_MAX_AGENTS and DEFAULT_RETENTION_DAYS from limits, exports
- Service is completely free with no plan limits
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Create scripts/install.sh that auto-generates Ed25519 signing key,
JWT secret, Postgres and MinIO passwords from .env.example placeholders
- Add startup validation in server to reject placeholder secrets
- Add 401 interceptor in console API client to clear stale JWT tokens
- Update README Quick Start to use ./scripts/install.sh
- Update .env.example with GENERATE_ME placeholders for all secrets
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Ensures self-hosted deployments pass the correct API server URL
(from NEXT_PUBLIC_API_BASE_URL) to CLI install commands, SDK client
constructors, and verification endpoints instead of hardcoded defaults.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The console imports types from @elydora/shared which maps to
../server/src/shared via tsconfig paths. Changed Docker build
context to repo root so server shared types are accessible
during the Next.js build.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Full self-hosted port of the Elydora tamper-evident audit protocol:
- Hono API server with PostgreSQL, Redis, MinIO adapters
- Ed25519 signed operations, chain hashing, Merkle epoch rollups
- PBKDF2 password hashing, HMAC-SHA256 JWT, 5-role RBAC
- Next.js management console
- Node.js, Python, and Go SDKs
- Docker Compose for local deployment
- Helm chart for Kubernetes
- Comprehensive security hardening and audit fixes applied
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
雷电芽衣
ZacharyZhang-NY