mirror of
https://github.com/profullstack/logicsrc.git
synced 2026-08-13 14:37:26 +00:00
Anthony Ettinger
9ba044577f
Adds apps/pwa: an Express + libSQL/Turso app that is now the home of team credential sharing, with the moshcode-style auth stack ported and reskinned to match logicsrc.com (light theme, Inter, green accent). apps/pwa - auth: email/password (scrypt), passkeys (WebAuthn), CoinPay OAuth, cookie sessions, and lsk_ API keys for the CLI via a loopback OAuth-PKCE flow (/cli/authorize + /cli/token). Ported from the moshcode PWA. - credshare API (/api/credshare/*): teams, members, invites, vaults, sealed grants, ciphertext secrets, audit — authed by session OR Bearer lsk_ key. Zero-knowledge: only ciphertext + sealed vault keys + public keys stored. - teams dashboard, accept-invite, and settings (API keys) pages, server-rendered in the LogicSRC brand (lib/html.mjs). - migrations (libSQL) 001_auth + 002_credshare, migrate-on-boot; Turso via TURSO_DATABASE_URL / TURSO_AUTH_TOKEN, or a local file db for dev. - trimmed moshcode-specific approvals/credits/push/deliver. CLI - `logicsrc login` now does browser loopback OAuth-PKCE against the app and stores an lsk_ token (email-OTP removed); --token for CI. Client repointed. Distribution - install.sh (served at logicsrc.com/install.sh) installs the CLI from the GitHub repo: tarball -> npm install -> `npm run build:cli` -> logicsrc wrapper. - root build:cli builds only the CLI's workspace chain (skips web/api/next). Cleanup - removed the commandboard-api credshare backend (superseded by the PWA) and its Supabase/Turso stores + libsql dep; commandboard-api tests green (40). - removed the Next.js /teams page (the PWA is the web UI now). Verified end-to-end: two accounts register on the PWA, mint lsk_ keys, CLI login uploads identity keys, owner pushes an encrypted .env, teammate invited -> accepted -> granted -> pulls the exact file. Server stores ciphertext only. Full workspace build + tests green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
22 lines
880 B
Text
22 lines
880 B
Text
# LogicSRC credentials app — copy to .env and fill in.
|
|
NODE_ENV=development
|
|
PORT=8080
|
|
PUBLIC_ORIGIN=http://localhost:8080
|
|
|
|
# datastore: Turso (libSQL) in prod, or file:./data/local.db for local dev
|
|
TURSO_DATABASE_URL=file:./data/local.db
|
|
TURSO_AUTH_TOKEN=
|
|
|
|
# auth — generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
|
|
SESSION_SECRET=change-me-32-bytes-hex
|
|
|
|
# email invites via Resend (optional — without it, invite tokens are returned in the API response)
|
|
RESEND_API_KEY=
|
|
CREDSHARE_EMAIL_FROM=LogicSRC <noreply@logicsrc.com>
|
|
|
|
# "Sign in with CoinPay" (optional)
|
|
COINPAY_API_BASE=https://coinpayportal.com
|
|
COINPAY_OAUTH_AUTHORIZE_URL=https://coinpayportal.com/oauth/authorize
|
|
COINPAY_OAUTH_TOKEN_URL=https://coinpayportal.com/api/oauth/token
|
|
COINPAY_OAUTH_USERINFO_URL=https://coinpayportal.com/api/oauth/userinfo
|
|
COINPAY_OAUTH_CLIENT_ID=
|