Jeroen UbbinkandClaude Opus 4.8 1045f1061b fix(settings): derive npub from the vault nsec, not a stale env value ...

initialize() only filled npub when it was empty, so an existing node
with a stale NSEC still lingering in its env/blob kept that value's
derived npub even after the vault took ownership of a different nsec.
The node then held the vault's private key but announced the old env
key's public key — a split identity that anything reading settings.npub
would broadcast.

npub is a pure derivation of nsec and is never configured on its own, so
derive it from the live (vault) nsec and override rather than only fill.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-23 10:51:20 +02:00

..

integration

fix(settings): derive npub from the vault nsec, not a stale env value

2026-07-23 10:51:20 +02:00

unit

fix(config): keep the vault the sole owner of node secrets

2026-07-23 10:51:20 +02:00

conftest.py

feat(db): add encrypted Secret store and migration

2026-07-23 10:50:51 +02:00

run_integration.py

dump wip stash

2025-08-06 20:31:55 -03:00