gsadmin/temetro
1
0
Fork 0
mirror of https://github.com/temetro/temetro.git synced 2026-09-04 06:45:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: clinic→wallet record-update push

Browse Source 
A clinician can push an updated record to a wallet-linked patient (permanent
share). The snapshot is signed with the clinic Ed25519 key and sealed to the
wallet's X25519 key — derived from its Ed25519 wallet number via the birational
map, verified byte-for-byte against the wallet's own derivation. Stored pending,
delivered over the /wallet relay live and on the wallet's next authenticated
connect (offline catch-up). The patient approves/denies in-app; the wallet signs
its decision, the backend verifies it, and the record is replaced only on
approval. Wallet pins the clinic key (TOFU) and warns on change.

Backend: walletRecordUpdates table + service, ed25519PubToX25519Hex helper,
POST /api/patients/wallet/push, GET .../link/:fileNumber|updates|updates/:id,
wallet:update-request / wallet:update-response relay events.
Frontend: "Push to wallet" dialog with live status, wallet-link gating on the
patient sheet, "Sent updates" list under Settings → Signing, walletPush /
walletUpdatesList locale namespaces across all five languages. Bumps to v0.5.0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Khalid Abdi
2026-07-03 18:57:38 +03:00
parent b29fdff1cb
commit bb536ba6da
23 changed files with 5593 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+18
View File
@@ -7,6 +7,24 @@ for how releases are cut and published.
## [Unreleased]
## [0.5.0] — 2026-07-03
### Added
- **Clinic → wallet record-update push** — a clinician can push an updated record to a
**wallet-linked** patient (a permanent, approved share). The record snapshot is **signed**
with the clinic's Ed25519 key and **sealed** to the wallet's X25519 key (derived from its
Ed25519 wallet number via the birational map — verified byte-for-byte against the wallet's
own derivation), stored `pending`, and delivered over the `/wallet` relay live **and** on
the wallet's next authenticated connect (so an offline phone catches up). The patient
reviews it in a **pending-updates inbox** and approves/denies; the wallet signs its
decision, the backend verifies it, and the on-device record is replaced only on approval.
The wallet **pins** the clinic key (TOFU) and warns on a key change. New
`POST /api/patients/wallet/push`, `GET /api/patients/wallet/{link/:fileNumber,updates,updates/:id}`,
`walletRecordUpdates` table + service, `wallet:update-request` / `wallet:update-response`
relay events, a "Push to wallet" dialog with live status, and a "Sent updates" list under
Settings → Signing. New `walletPush` / `walletUpdatesList` locale namespaces across all five
languages. (The wallet app half ships in the sibling `temetro-app` repo.)
## [0.4.0] — 2026-07-03
### Added