Auto-deploy to Fly + single-user auth#23

Open

qtpi-bonding wants to merge 26 commits into

raroque:mainfrom

qtpi-bonding:feat/auto-deploy-pr

Commits on Apr 28, 2026

docs: add auto-deploy PR design spec

qtpi-bonding
and
claude
committed
docs: add auto-deploy PR implementation plan

qtpi-bonding
and
claude
committed
chore: run npm install to sync package-lock.json

qtpi-bonding
and
claude
committed
feat(auth): add verifyHmac helper with timing-safe comparison

qtpi-bonding
and
claude
committed
feat(auth): add requireAdmin JWT middleware with public allowlist

qtpi-bonding
and
claude
committed
feat(sendblue): verify HMAC signature and phone whitelist on inbound webhook

qtpi-bonding
and
claude
committed
chore(test): add pretest stub-generator so npm test works without convex codegen

qtpi-bonding
and
claude
committed
feat(convex): add Convex Auth password provider

qtpi-bonding
and
claude
committed
feat(convex): add bootstrap + setPassword admin actions
qtpi-bonding
committed
refactor: classify Convex functions as internal vs public+auth

qtpi-bonding
and
claude
committed
fix(convex): add internal twins for dual-use functions

qtpi-bonding
and
claude
committed
feat(server): wire requireAdmin middleware, auth WS upgrade, serve debug UI

qtpi-bonding
and
claude
committed
feat(debug): wrap UI in ConvexAuthProvider and add login form
qtpi-bonding
committed
feat(debug): add authed apiClient wrapper and migrate fetch calls
qtpi-bonding
committed
feat(deploy): add multi-stage Dockerfile (node:22-slim, tsx runtime)

qtpi-bonding
and
claude
committed
feat(deploy): add fly.toml (single machine, always-on)

qtpi-bonding
and
claude
committed
docs(env): document SENDBLUE_SIGNING_SECRET, BOOP_ADMIN_PASSWORD, CLAUDE_CODE_OAUTH_TOKEN

qtpi-bonding
and
claude
committed
feat(ci): add deploy workflow (test → convex → bootstrap → fly → smoke)

qtpi-bonding
and
claude
committed
feat(deploy): add interactive scripts/deploy.ts (mirrors setup.ts patterns)

qtpi-bonding
and
claude
committed
docs: add deploying.md and link from README

qtpi-bonding
and
claude
committed
docs: add CHANGELOG entry + setup-deploy-auth migration skill

qtpi-bonding
and
claude
committed
fix(auth): use CONVEX_SITE_URL for JWKS endpoint and JWT issuer

qtpi-bonding
and
claude
committed
fix(ws): hoist JWT verifier so JWKS cache survives across connections

qtpi-bonding
and
claude
committed
fix(deploy): push CONVEX_SITE_URL to Fly secrets

qtpi-bonding
and
claude
committed
fix(auth): make bootstrap idempotent against concurrent invocations

qtpi-bonding
and
claude
committed
fix(server): correct relative path to debug UI dist in production

qtpi-bonding
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Auto-deploy to Fly + single-user auth#23

Auto-deploy to Fly + single-user auth#23
qtpi-bonding wants to merge 26 commits into
raroque:mainfrom
qtpi-bonding:feat/auto-deploy-pr

Commits on Apr 28, 2026

docs: add auto-deploy PR design spec

docs: add auto-deploy PR implementation plan

chore: run npm install to sync package-lock.json

feat(auth): add verifyHmac helper with timing-safe comparison

feat(auth): add requireAdmin JWT middleware with public allowlist

feat(sendblue): verify HMAC signature and phone whitelist on inbound webhook

chore(test): add pretest stub-generator so npm test works without convex codegen

feat(convex): add Convex Auth password provider

feat(convex): add bootstrap + setPassword admin actions

refactor: classify Convex functions as internal vs public+auth

fix(convex): add internal twins for dual-use functions

feat(server): wire requireAdmin middleware, auth WS upgrade, serve debug UI

feat(debug): wrap UI in ConvexAuthProvider and add login form

feat(debug): add authed apiClient wrapper and migrate fetch calls

feat(deploy): add multi-stage Dockerfile (node:22-slim, tsx runtime)

feat(deploy): add fly.toml (single machine, always-on)

docs(env): document SENDBLUE_SIGNING_SECRET, BOOP_ADMIN_PASSWORD, CLAUDE_CODE_OAUTH_TOKEN

feat(ci): add deploy workflow (test → convex → bootstrap → fly → smoke)

feat(deploy): add interactive scripts/deploy.ts (mirrors setup.ts patterns)

docs: add deploying.md and link from README

docs: add CHANGELOG entry + setup-deploy-auth migration skill

fix(auth): use CONVEX_SITE_URL for JWKS endpoint and JWT issuer

fix(ws): hoist JWT verifier so JWKS cache survives across connections

fix(deploy): push CONVEX_SITE_URL to Fly secrets

fix(auth): make bootstrap idempotent against concurrent invocations

fix(server): correct relative path to debug UI dist in production