jarvisandClaude Sonnet 4.6 733f3b6611 feat(federation): seal federation peer client keys at rest (FED-M2-05) ...

- Add packages/auth/src/seal.ts: shared AES-256-GCM seal/unseal using BETTER_AUTH_SECRET
- Export seal/unseal from @mosaicstack/auth index
- Refactor provider-credentials.service.ts to import seal/unseal from @mosaicstack/auth
- Add apps/gateway/src/federation/peer-key.util.ts: sealClientKey/unsealClientKey wrappers
- Add peer-key.spec.ts with 5 vitest tests (round-trip, non-determinism, at-rest, tamper, missing secret)
- Document key rotation deferred procedure in docs/federation/SETUP.md

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

2026-04-21 22:02:59 -05:00

..

agent

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

auth

feat(federation): seal federation peer client keys at rest (FED-M2-05)

2026-04-21 22:02:59 -05:00

brain

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

config

feat(storage): pgvector adapter support gated on tier=federated (FED-M1-03) (#472)

2026-04-19 23:42:18 +00:00

coord

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

db

feat(db): federation schema — grants/peers/audit_log [FED-M2-01] (#486)

2026-04-22 02:02:21 +00:00

design-tokens

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

forge

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

log

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

macp

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

memory

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

mosaic

feat(mosaic-portainer): PORTAINER_INSECURE flag for self-signed TLS (#484)

2026-04-22 01:21:54 +00:00

prdy

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

quality-rails

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

queue

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00

storage

fix(storage): redact credentials in driver errors + advisory lock (FED-M1-10) (#479)

2026-04-20 02:02:57 +00:00

types

chore: sweep mosaicstack/mosaic-stack → mosaicstack/stack + add short install URL (#448)

2026-04-06 00:39:56 +00:00