ident

3.7 KB

1. # Mission 005 (old 009) — ident: UUID keys and storage/mpackdb/ (ticket ident.worldapi.org #10, formerly #39)
3. One-shot worker. The architect (Claude Code on Byrodin) verifies your report, then the creator tests.
5. ## Read first
6. 1. Ticket: `GET http://100.77.141.84:8350/api/tickets/39` (old number; read only).
7. 2. `loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md`, `README.md`, `STATUS.md`.
8. 3. `/CONTAINERS/projects/antcolony/README.md` — "Conventions for all apps", "Lessons learned".
9. 4. The same migration done for tickets: `loreana:/media/STORAGE/projects/tickets.worldapi.org/missions/004-tickets-numbers-uuid.md`
10. and `loreana:/media/STORAGE/projects/tickets.worldapi.org` (`tools/migrate-008.hl`, README "migration",
11. `.scratch/deploy-008.sh`) — reuse its approach.
13. ## Hybriel (standard block)
14. Read `/CONTAINERS/projects/antcolony/docs/hybriel-for-app-workers.md` first — which docs to trust,
15. known pitfalls with workarounds (**#40: opening an mpackdb table rewrites its files — only ever open
16. COPIES**), the conventions, and the open hybriel tickets. Report new Hybriel findings under
17. "Hybriel issues"; do not edit that guide.
19. ## Scope
20. 1. Every ident table (accounts, identities, otp, sends, apps, connections, requests, grants, and any
21. other) gets `primaryKey = '@id'`; files move to `storage/mpackdb/`. Nothing may rely on key order
22. (e.g. "default identity = oldest" must use a stored `created` time).
23. 2. **What apps already hold must not change**: API keys, app secrets (hashes), and the per-app identity
24. ids handed out by the exchange (`connections.appIdentity`) stay byte-identical. The creator's
25. registered apps and the test app (key/secret in `testapp/storage/`, its users keyed by those ids)
26. must keep working without re-registering.
27. 3. **Sessions**: `.sessions/*` hold `user: {id: <old numeric account id>}`. Migrate them to the new
28. account ids so the creator stays signed in (rehearse on a copy). If that is not safely possible,
29. invalidate them and say so — the creator then logs in again (real mail).
30. 4. Selector pick ids may change (they are derived per request); say whether they do.
31. 5. One-off, idempotent migration tool, rehearsed twice on a copy; old tables kept as backup
32. (not deleted). Before/after comparison of all accounts, identities, apps, connections.
34. ## Mail — IMPORTANT (unchanged)
35. The dev server on :8351 sends **real mail**. Never trigger an OTP on :8351. Gates use their own
36. servers with `IDENT_MAIL_SINK`. **Do not read, print, copy or edit any `.env`.**
38. ## Deploy
39. Develop in `.scratch/dev`. Back up `storage/`, `.sessions/`, `testapp/storage/`. Stop only the PIDs in
40. `server.pid` and `testapp/testapp.pid`; migrate from COPIES; restart both; check 200 on :8351 `/`,
41. `/apps`, `/selector.js` and :8354 `/` without logging in. Verify the migrated store on a COPY.
43. ## Rules
44. - No git. Don't touch other project folders (read tickets only). Only kill your own PIDs or the named
45. pid files. Clean up headless Chromes (`--disable-gpu`). Scratch in `.scratch/` of ident (not the
46. architect's scratchpad on Byrodin).
47. - Do NOT POST to the live tickets server (:8350).
48. - If any action is refused by the permission system, don't retry or work around it; report it.
49. - A test is the whole process: all three gates (`tests/browser.mjs`, `tests/apps.mjs`,
50. `tests/selector.mjs`) green on the new store, plus a migration fixture (old-format store → migrate →
51. an app's stored id still exchanges to the same identity; a migrated session is still signed in).
52. - Update `README.md` and `STATUS.md`. Do NOT edit `CONCEPT.md`.
54. ## Report (final answer, this structure)
55. ```
56. ## Done
57. ## Verified (each: command run + observed output)
58. ## Not verified / open
59. ## Hybriel issues (repro, observed, expected)
60. ## Questions for the creator
61. ## Running (URL, PID, log path)
62. ```