hanzoai/esign
2
0
Fork 0
mirror of https://github.com/hanzoai/sign.git synced 2026-10-21 01:21:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

LLM.md: the anonymous socket a recipient signs over

Browse Source
This commit is contained in:
zeekay
2026-10-20 12:42:06 -07:00
parent be1d26a502
commit d8aa5b641e
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
LLM.md
+7
View File
@@ -124,6 +124,13 @@ as the Remix/tRPC handlers.
(`envelope.recipient.set`), so a recipient created by one autosave is updated,
not deleted and recreated, by the next. `envelope-recipients.spec.ts`
("several recipients in one visit") holds both.
- A recipient has no account. The `/zap` socket opens without a session for the
app's own pages as an anonymous connection (`mint.ts`), and the dispatcher lets
it reach only `publicRoutes` (`zap/server/public-routes.ts`: the routes tRPC
served as public procedures, each authorised by the token it carries; their
handlers take `ZapConnectionContext`). Before this the socket refused them and
no recipient without an account could sign a field. `/v1/rpc` still needs a
token. `packages/trpc/__tests__/anonymous.test.ts` holds it.
- Sealing a completed document signs it with the certificate the local signer
reads: `NEXT_PRIVATE_SIGNING_LOCAL_FILE_CONTENTS` (base64 p12) and
`NEXT_PRIVATE_SIGNING_PASSPHRASE`, from KMS `hanzo/sign@prod`. The image has