Files

Alejandro Gutiérrez 033a2d37e1 feat(broker): canonical session-hello + parent-attestation helpers

Adds the crypto primitives the 1.30.0 per-session broker presence flow
needs: canonicalSessionAttestation/canonicalSessionHello bytes, and
verifySessionAttestation/verifySessionHelloSignature with TTL bounds
(≤24h) plus standard ed25519 + skew checks.

10 unit tests cover the hostile cases — expired attestation, over-TTL,
wrong-key signing, tampered fields, and the "attacker captured the
attestation but doesn't hold the session secret key" scenario.

No wire changes yet — types and dispatch land in the next two commits.
Spec: .artifacts/specs/2026-05-04-per-session-presence.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-04 12:57:28 +01:00

scripts

fix(api): mint owner peer-identity row at mesh creation

2026-05-02 17:02:40 +01:00

src

feat(broker): canonical session-hello + parent-attestation helpers

2026-05-04 12:57:28 +01:00

tests

feat(broker): canonical session-hello + parent-attestation helpers

2026-05-04 12:57:28 +01:00

DEPLOY_SPEC.md

docs(broker): production deployment spec

2026-04-04 22:15:24 +01:00

Dockerfile

feat(ga): close remaining GA blockers (backcompat, HA prep, tests, docs)

2026-04-15 23:51:28 +01:00

eslint.config.js

feat(broker): scaffold apps/broker workspace (bun WS runtime, no port yet)

2026-04-04 21:24:17 +01:00

package.json

refactor: rename cli-v2 → cli, archive legacy cli, plus broker-side grants + auto-migrate

2026-04-15 08:44:52 +01:00

README.md

fix(broker): default port 7899 → 7900 to avoid collision with claude-intercom dev

2026-04-04 21:48:57 +01:00

tsconfig.json

feat(broker): branded react-email template for mesh invite

2026-04-15 02:04:28 +01:00

vitest.config.ts

feat(crypto): client-side direct-message encryption with crypto_box

2026-04-04 22:48:33 +01:00

README.md

@claudemesh/broker

WebSocket broker for claudemesh — routes E2E-encrypted messages between Claude Code peer sessions, tracks presence, and stores metadata-only audit logs in Postgres.

What it is

A standalone Bun-runtime WebSocket server that sits between Claude Code sessions. Peers connect with their identity pubkey, join meshes they've been invited to, and exchange encrypted envelopes. The broker never sees plaintext — it only routes ciphertext and records routing events.

Running locally

# from the repo root
pnpm --filter=@claudemesh/broker dev     # watch mode
pnpm --filter=@claudemesh/broker start   # production

Required env vars

Var	Default	Purpose
`BROKER_PORT`	`7900`	Single port for HTTP routes + WebSocket upgrade
`DATABASE_URL`	—	Postgres connection string (shared with apps/web)
`STATUS_TTL_SECONDS`	`60`	Flip stuck-"working" peers to idle after this TTL
`HOOK_FRESH_WINDOW_SECONDS`	`30`	How long a hook signal beats JSONL inference

Routes (single port)

Path	Protocol	Purpose
`/ws`	WebSocket	Authenticated peer connections
`/hook/set-status`	HTTP POST	Claude Code hook scripts report status
`/health`	HTTP GET	Liveness probe

Depends on

@turbostarter/db — Drizzle/Postgres schema (uses the mesh pgSchema)
@turbostarter/shared — cross-package utilities

Deployment

Runs as a separate process (not inside Next.js). Intended deployment targets: Fly.io, Railway, or Coolify on the surfquant VPS. WebSocket server must be reachable at ic.claudemesh.com.

Status

Scaffold only. The broker logic (status detection, message queue, presence tracking, hook endpoints) is ported from ~/tools/claude-intercom/broker.ts in a follow-up step.