halkyon/packages/halkyon_base_server/migrations/migration_registry.txt
Tizian 「ティツィアーン」 b72cea1fe0
feat(base,app,keys): keys of shared spaces, sealed to each member
Step 3 of ADR 0044 (D3, D18, D19). A shared space's data keys are
sealed on a device to each member's public keys; the instance keeps
what devices sealed and never opens it.

- halkyon_keys: the safety code of two accounts' public keys
  (`safetyCode`), 60 digits, the same on both sides.
- halkyon_base: the register hands out accounts' public keys
  (`public-keys-of`, local and remote); the table `shared_space_key`
  and the endpoint `sharedSpaceKeys` (memberKeys, keysNeeded, seal,
  mine). Only the Owner and Editors seal, the first key sealed to a
  member stays, and a member's keys go with their membership. Every
  host's migration creates the table.
- halkyon_app: `ContentCipher` seals a key to another account and
  opens one sealed by another; `SharedKeys` shares a space's key with
  its members, seals keys to newcomers and opens the person's own,
  holding each member to the public keys `KeyPins` pinned on first
  sight (`key_pins.json` in the person's folder), a change refused
  until trusted anew.

Learn takes them into its `Privacy` in step 4.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
2026-11-11 11:35:42 +01:00

26 lines
944 B
Text

### AUTOMATICALLY GENERATED DO NOT MODIFY
###
### This file is generated by Serverpod when creating a migration, do not modify it
### manually. If a collision is detected in this file when doing a code merge, resolve
### the conflict by removing and recreating the conflicting migration.
20261019115750898
20261019200558685
20261019202835333-deletion-notices
20261020111123780-passwords
20261020124836165-sessions-ended
20261020185619505-recovery-proof-key
20261020194005842-second-factor-waits
20261020204618337-session-code-tries
20261020211224310-email-code-purpose
20261021100319502-session-ended-warning
20261021110159448-second-factor-paths
20261021134802955-reset-hold-outs
20261023181809816-oidc-module
20261023192912859-simplelogin-keys
20261025135744270-waiting-accounts
20261025165102522-assistants
20261026140329453-assistant-budgets
20261110225132890-file-store
20261111091525523-shared-spaces
20261111100053843-shared-space-keys