familysync

1,003 Commits 2 Branches 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
Lucas Berger	96f0991605	feat(19-01): add local_credentials schema, 0003 migration, generate-secrets LOCAL_SESSION_SECRET, .dockerignore D-15 - schema.ts: export localCredentials = mysqlTable('local_credentials', {...}) - user_id FK->users(cascade), username, password_hash, createdAt, updatedAt - UNIQUE(user_id), UNIQUE(username), INDEX(user_id) - 0003_warm_deathstrike.sql: purely additive CREATE TABLE (no ALTER/DROP/TRUNCATE on existing tables) - Applied to dev DB: pnpm --filter @familysync/api db:migrate exits 0 - test/setup.ts: add localCredentials to afterEach delete cleanup (FK-safe ordering) - generate-secrets.mjs: emit LOCAL_SESSION_SECRET (base64 32-byte, >=32 chars, D-05) - .dockerignore: add apps/api/scripts/ exclusion (D-15/IMG-02) — entire break-glass dir excluded	2026-06-17 16:17:04 -04:00
Lucas BergerandClaude Sonnet 4.6	b0b5bceaed	fix(12): IN-03 replace private web-push source import with Node.js built-in crypto generate-secrets.mjs was importing from ../apps/api/node_modules/web-push/src/index.js (a private source path) which breaks if web-push restructures internally or workspace hoisting moves the package. Replace with Node.js built-in createECDH ('prime256v1') which produces identical base64url-encoded keys, including the same defensive padding logic as web-push for short key buffers. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-15 16:22:07 -04:00
Lucas Berger	2d6dc14a4c	feat(12-01): generate-secrets helper — SETUP-03 / D-05 - Add scripts/generate-secrets.mjs: plain ESM script that prints SESSION_SECRET + APP_PASSWORD_ENCRYPTION_KEY (32 random bytes each, hex-encoded) and VAPID_PUBLIC_KEY + VAPID_PRIVATE_KEY from web-push generateVAPIDKeys() — all to stdout only (SC-3: nothing written to disk) - Resolve web-push as CommonJS default import from apps/api/node_modules (avoids a root-level dependency; named-export ESM form not supported) - Wire root package.json "generate-secrets" script: node scripts/generate-secrets.mjs	2026-06-15 13:39:32 -04:00

Author

SHA1

Message

Date

Lucas Berger

96f0991605

feat(19-01): add local_credentials schema, 0003 migration, generate-secrets LOCAL_SESSION_SECRET, .dockerignore D-15

- schema.ts: export localCredentials = mysqlTable('local_credentials', {...})
  - user_id FK->users(cascade), username, password_hash, createdAt, updatedAt
  - UNIQUE(user_id), UNIQUE(username), INDEX(user_id)
- 0003_warm_deathstrike.sql: purely additive CREATE TABLE (no ALTER/DROP/TRUNCATE on existing tables)
  - Applied to dev DB: pnpm --filter @familysync/api db:migrate exits 0
- test/setup.ts: add localCredentials to afterEach delete cleanup (FK-safe ordering)
- generate-secrets.mjs: emit LOCAL_SESSION_SECRET (base64 32-byte, >=32 chars, D-05)
- .dockerignore: add apps/api/scripts/ exclusion (D-15/IMG-02) — entire break-glass dir excluded

2026-06-17 16:17:04 -04:00

Lucas BergerandClaude Sonnet 4.6

b0b5bceaed

fix(12): IN-03 replace private web-push source import with Node.js built-in crypto

generate-secrets.mjs was importing from ../apps/api/node_modules/web-push/src/index.js
(a private source path) which breaks if web-push restructures internally or
workspace hoisting moves the package. Replace with Node.js built-in createECDH
('prime256v1') which produces identical base64url-encoded keys, including the
same defensive padding logic as web-push for short key buffers.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-15 16:22:07 -04:00

Lucas Berger

2d6dc14a4c

feat(12-01): generate-secrets helper — SETUP-03 / D-05

- Add scripts/generate-secrets.mjs: plain ESM script that prints
  SESSION_SECRET + APP_PASSWORD_ENCRYPTION_KEY (32 random bytes each,
  hex-encoded) and VAPID_PUBLIC_KEY + VAPID_PRIVATE_KEY from web-push
  generateVAPIDKeys() — all to stdout only (SC-3: nothing written to disk)
- Resolve web-push as CommonJS default import from apps/api/node_modules
  (avoids a root-level dependency; named-export ESM form not supported)
- Wire root package.json "generate-secrets" script: node scripts/generate-secrets.mjs

2026-06-15 13:39:32 -04:00