5 Commits

Include renames

Author	SHA1	Message	Date
mrhid6andClaude Opus 5	946a748038	chore: declare go 1.26 rather than 1.26.4 across the workspace ... The 1.26.4 floor meant a base toolchain of 1.26.2 could not load the workspace at all: the terminal worked only because GOTOOLCHAIN=auto silently swapped in a downloaded 1.26.4, and gopls -- which does not get that switch -- failed every packages.Load with go: go.work requires go >= 1.26.4 (running go 1.26.2) Nothing needed the patch-level floor. agent/go.mod already declared plain go 1.26, so this makes the workspace uniform rather than introducing a new convention, and CI is unaffected because golang:1.26 is already newer. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:33:58 +01:00
mrhid6andClaude Opus 5	480a578deb	feat(admin): sessions, staff auth and adminctl ... One Redis session store and one cookie for all three identities. Staff login returns the same error for every failure mode and spends a bcrypt comparison against a dummy hash when no user exists, so neither the message nor the timing confirms which addresses have accounts. Staff users are created only by adminctl. There is no signup endpoint: a licensing authority that can be joined over the internet is not one. Pins gin and go-redis to the versions server/ already uses rather than the latest tidy would pick. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:05:28 +01:00
mrhid6andClaude Opus 5	427191b14c	feat(admin): licence issuance with plan snapshots and supersession ... Issue is the only place that signs. It records the licence, supersedes its predecessor and updates the instance -- but deliberately does not deliver. The ordering matters: a licence recorded but not delivered is recoverable, because the customer can download it. A licence delivered but not recorded is a support mystery with no paper trail. Free stays cloud-only through one comparison of plan against instance deployment, not a flag. Renewals reset relink_count because the cap is per term. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:01:47 +01:00
mrhid6andClaude Opus 5	b8fcf89ee7	feat(admin): documents, indexes and the plan seed ... Adds admin's own documents, its unique indexes and the plan seed from shared/license. Licences are append-only -- a renewal writes a new row and supersedes the old one -- because the history is the support tool. Plans are seeded with $setOnInsert only, so a redeploy never stamps over staff edits to limits, features or Paddle IDs. admin_instances.instance_id unique is a correctness property, not an optimisation: without it two customers could both claim one self-hosted UUID and both be issued licences for it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:00:37 +01:00
mrhid6andClaude Opus 5	64eac6dbc7	feat(admin): module skeleton, config and two database connections ... Adds the admin module: env config with fail-fast validation, two MongoDB connections (its own vantage_admin database plus a narrow path into the control plane), the boot sequence and the image. Config refuses to start without a signing key, and both Mongo URIs must name their database inline -- admin talks to two databases, so a bare MONGO_DB would be ambiguous about which. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 18:58:44 +01:00