Jasper VanandBob b9cea3e912 feat(licensing): v2.6 Z2 — Ed25519 verify + PUBLIC_KEYS + entitlement cache (#341) ...

* feat(licensing): add server/licensing module with Ed25519 verify + entitlement cache

- Add paseto-ts dependency (WebCrypto Ed25519, works on all 7 deploy targets)
- server/licensing/public-keys.ts: PUBLIC_KEYS array with DEV placeholder PASERK key
- server/licensing/verify.ts: verifyCertificate() iterates PUBLIC_KEYS, validates
  signature, expiry and instance_id — returns null (never throws) on invalid certs
- server/licensing/entitlement.ts: loadEntitlement() with 60s in-process memoization;
  invalidateEntitlementCache() for post-refresh invalidation
- Update LicenseEntitlement.expires_at / issued_at to string (ISO-8601 wire format)
- Unit tests: valid cert, invalid sig, expired, wrong instance_id, key rotation

Agent-Profile: https://agent-kanban.dev/agents/a6bb038c4226a87f

* fix(licensing): apply biome lint fixes (import order, template literal)

Agent-Profile: https://agent-kanban.dev/agents/a6bb038c4226a87f

---------

Co-authored-by: Bob <aibob@mails.agent-kanban.dev>

2026-04-24 07:34:32 -04:00

..

schemas

refactor: replace presign+commit image flow with RESTful PUT/DELETE (#336)

2026-04-22 22:56:27 -04:00

types

feat(licensing): v2.6 Z2 — Ed25519 verify + PUBLIC_KEYS + entitlement cache (#341)

2026-04-24 07:34:32 -04:00

constants.test.ts

feat(auth): add registration mode control and email verification (#283)

2026-04-13 11:19:54 -04:00

constants.ts

feat: add licenseBinding table, migration 0013_licensing, and shared licensing types (#339)

2026-04-23 22:39:55 -04:00

oauth-providers.ts

feat(auth): add dynamic OAuth provider system (#282)

2026-04-12 21:46:11 -04:00