Tizian 「ティツィアーン」
b72cea1fe0
feat(base,app,keys): keys of shared spaces, sealed to each member ...
Step 3 of ADR 0044 (D3, D18, D19). A shared space's data keys are
sealed on a device to each member's public keys; the instance keeps
what devices sealed and never opens it.
- halkyon_keys: the safety code of two accounts' public keys
(`safetyCode`), 60 digits, the same on both sides.
- halkyon_base: the register hands out accounts' public keys
(`public-keys-of`, local and remote); the table `shared_space_key`
and the endpoint `sharedSpaceKeys` (memberKeys, keysNeeded, seal,
mine). Only the Owner and Editors seal, the first key sealed to a
member stays, and a member's keys go with their membership. Every
host's migration creates the table.
- halkyon_app: `ContentCipher` seals a key to another account and
opens one sealed by another; `SharedKeys` shares a space's key with
its members, seals keys to newcomers and opens the person's own,
holding each member to the public keys `KeyPins` pinned on first
sight (`key_pins.json` in the person's folder), a change refused
until trusted anew.
Learn takes them into its `Privacy` in step 4.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
2026-11-11 11:35:42 +01:00
feat(todo): the server on halkyon_base
2026-10-22 18:11:06 +02:00
refactor(profile): handles and profiles move into halkyon_base
2026-10-22 18:11:07 +02:00
feat(accounts): one account across an instance's services (ADR 0016)
2026-10-22 18:11:07 +02:00
feat(auth): Learn's and Todo's servers take password sign-in
2026-10-22 18:11:11 +02:00
feat(auth): change the password and the recovery phrase while signed in
2026-10-23 14:12:40 +02:00
fix(auth)!: the recovery phrase is proved by a key of its own
2026-10-23 14:12:43 +02:00
fix(auth): codes wait after ten wrong in a row, and the owner is told
2026-10-23 14:12:44 +02:00
fix(auth): a session's wrong codes end the session, not the account's codes
2026-10-23 14:12:47 +02:00
fix(auth): a code by mail serves only what it was asked for
2026-10-23 14:12:48 +02:00
feat(auth): a session ended for its wrong proofs warns its owner
2026-10-23 14:12:51 +02:00
fix(auth): codes after the recovery phrase count apart from the password's
2026-10-23 14:12:52 +02:00
fix(auth): a hold-out moves a reset on only by its own time, and a reset lives 30 days at most
2026-10-23 14:12:59 +02:00
refactor(base): SimpleLogin's forwarding page on the OpenID Connect module (ADR 0023)
2026-10-24 09:17:47 +02:00
feat(base): SimpleLogin accounts' keys without SRP, signing up in one call (ADR 0020, step 3)
2026-10-24 09:17:48 +02:00
feat(base)!: sign-ups as the operator says, waiting accounts, operators (ADR 0021, step 1)
2026-10-26 07:17:05 +01:00
feat(base,learn,todo): the operator's assistants, and the instance's privacy page (ADR 0021, step 2)
2026-10-26 07:17:06 +01:00
feat(base)!: one budget per person for all their assistants, the effort each takes, the operator's lists by page
2026-10-26 16:21:53 +01:00
feat(todo): the sync engine and Todo's first models (ADR 0033, D5, D6)
2026-11-01 01:00:53 +01:00
feat(todo): sections, tasks and labels on the server (ADR 0033, D6)
2026-11-01 01:06:24 +01:00
feat(todo): a project's Calendar, Upcoming's Display and its 3-day grid (ADR 0033, D17)
2026-11-01 20:01:00 +01:00
feat(todo): filters in Todoist's language, and a view of each label (ADR 0033, D35)
2026-11-07 21:49:42 +01:00
feat(todo): comments on a task (ADR 0033, D36)
2026-11-07 21:49:44 +01:00
refactor(base,learn): people's files kept by halkyon_base
2026-11-11 01:19:28 +01:00
feat(todo,app): files attached to tasks and comments
2026-11-11 01:19:41 +01:00
feat(base,learn): spaces people share, kept by halkyon_base
2026-11-11 10:54:19 +01:00
feat(base,app,keys): keys of shared spaces, sealed to each member
2026-11-11 11:35:42 +01:00
feat(base,app,keys): keys of shared spaces, sealed to each member
2026-11-11 11:35:42 +01:00
Tizian 「ティツィアーン」
b72cea1fe0