2 commits

Author	SHA1	Message	Date
Wuesteon	4d15d9e764	🔒 security(auth): migrate to EdDSA JWT and add automated monitoring ... BREAKING: JWT keys are now auto-managed by Better Auth (EdDSA/Ed25519) - Remove all JWT_PRIVATE_KEY, JWT_PUBLIC_KEY, JWT_SECRET references - Keys stored in auth.jwks database table (auto-generated on first run) - Delete obsolete generate-keys.sh and generate-staging-secrets.sh scripts - Clean up legacy AUTH_*.md analysis files from root Security Improvements: - Add security_events table for audit logging - Add SecurityEventsService for tracking auth events - Enhanced security headers (HSTS, CSP, X-Frame-Options) - Rate limiting configuration Monitoring Setup: - Add auth-health-check.sh for automated testing - Add generate-dashboard.sh for HTML status dashboard - Tests: health endpoint, JWKS (EdDSA), security headers, response time - Ready for Hetzner cron deployment Documentation: - Update deployment docs with Better Auth notes - Update environment variable references - Add security improvements documentation 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2025-12-18 21:42:47 +01:00
Wuesteon	ad495b2044	📝 docs: restructure CLAUDE.md and documentation (74% reduction) ... Optimize CLAUDE.md based on industry best practices from HN and HumanLayer: Changes: - Trim CLAUDE.md from 678 to 176 lines (74% reduction, 5.7KB) - Add "Critical Gotchas" section for common AI mistakes - Add verification signature (🏗️ ManaCore Monorepo) - Create docs/README.md navigation hub with "I want to..." index - Delete 5 outdated audit files (ENV_AUDIT_*, DEPENDENCY_ALIGNMENT) - Archive 7 analysis/historical docs to docs/archive/ - Keep authentication docs separate per request (.claude/guidelines/) Benefits: - Better AI instruction adherence (within ~150-200 line budget) - Progressive disclosure via signposting to detailed docs - Cleaner navigation with topic-based organization - Reduced maintenance burden (stale docs archived) Backup: CLAUDE.md.backup preserves original 678-line version Change log: docs/archive/RESTRUCTURE_2025-12-16.md	2025-12-16 17:37:19 +01:00