Files

Alejandro Gutiérrez b55cf269a4 feat: implement inbound webhooks for external service integration

Add the webhook handler module (webhooks.ts) that verifies secrets
against the mesh.webhook table and broadcasts incoming HTTP POST
payloads to all connected mesh peers. This completes the webhook
feature whose schema, types, WS CRUD handlers, and CLI tools were
added in the previous commits.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-07 23:58:01 +01:00

scripts

fix(web): disable anonymous login by default (guest button removal)

2026-04-05 15:26:13 +01:00

src

feat: implement inbound webhooks for external service integration

2026-04-07 23:58:01 +01:00

tests

feat(broker): invite signature verification + atomic one-time-use

2026-04-04 23:02:12 +01:00

DEPLOY_SPEC.md

docs(broker): production deployment spec

2026-04-04 22:15:24 +01:00

Dockerfile

refactor(deploy): trim docker images via pnpm deploy --legacy

2026-04-05 15:37:21 +01:00

eslint.config.js

feat(broker): scaffold apps/broker workspace (bun WS runtime, no port yet)

2026-04-04 21:24:17 +01:00

package.json

feat(web): restore payload CMS (cuidecar pattern + importMap)

2026-04-06 14:30:16 +01:00

README.md

fix(broker): default port 7899 → 7900 to avoid collision with claude-intercom dev

2026-04-04 21:48:57 +01:00

tsconfig.json

feat(broker): scaffold apps/broker workspace (bun WS runtime, no port yet)

2026-04-04 21:24:17 +01:00

vitest.config.ts

feat(crypto): client-side direct-message encryption with crypto_box

2026-04-04 22:48:33 +01:00

README.md

@claudemesh/broker

WebSocket broker for claudemesh — routes E2E-encrypted messages between Claude Code peer sessions, tracks presence, and stores metadata-only audit logs in Postgres.

What it is

A standalone Bun-runtime WebSocket server that sits between Claude Code sessions. Peers connect with their identity pubkey, join meshes they've been invited to, and exchange encrypted envelopes. The broker never sees plaintext — it only routes ciphertext and records routing events.

Running locally

# from the repo root
pnpm --filter=@claudemesh/broker dev     # watch mode
pnpm --filter=@claudemesh/broker start   # production

Required env vars

Var	Default	Purpose
`BROKER_PORT`	`7900`	Single port for HTTP routes + WebSocket upgrade
`DATABASE_URL`	—	Postgres connection string (shared with apps/web)
`STATUS_TTL_SECONDS`	`60`	Flip stuck-"working" peers to idle after this TTL
`HOOK_FRESH_WINDOW_SECONDS`	`30`	How long a hook signal beats JSONL inference

Routes (single port)

Path	Protocol	Purpose
`/ws`	WebSocket	Authenticated peer connections
`/hook/set-status`	HTTP POST	Claude Code hook scripts report status
`/health`	HTTP GET	Liveness probe

Depends on

@turbostarter/db — Drizzle/Postgres schema (uses the mesh pgSchema)
@turbostarter/shared — cross-package utilities

Deployment

Runs as a separate process (not inside Next.js). Intended deployment targets: Fly.io, Railway, or Coolify on the surfquant VPS. WebSocket server must be reachable at ic.claudemesh.com.

Status

Scaffold only. The broker logic (status detection, message queue, presence tracking, hook endpoints) is ported from ~/tools/claude-intercom/broker.ts in a follow-up step.