Files

Claude (The Golden Chronicler #50) 04e9b407d5 feat: Migrate Arbiter and Modpack Version Checker to monorepo

WHAT WAS DONE:
- Migrated Arbiter (discord-oauth-arbiter) code to services/arbiter/
- Migrated Modpack Version Checker code to services/modpack-version-checker/
- Created .env.example for Arbiter with all required environment variables
- Moved systemd service file to services/arbiter/deploy/
- Organized directory structure per Gemini monorepo recommendations

WHY:
- Consolidate all service code in one repository
- Prepare for Gemini code review (Panel v1.12 compatibility check)
- Enable service-prefixed Git tagging (arbiter-v2.1.0, modpack-v1.0.0)
- Support npm workspaces for shared dependencies

SERVICES MIGRATED:
1. Arbiter (Discord OAuth bot) - Originally written by Gemini + Claude
   - Full source code from ops-manual docs/implementation/
   - Created comprehensive .env.example
   - Ready for Panel v1.12 compatibility verification

2. Modpack Version Checker (Python CLI tool)
   - Full source code from ops-manual docs/tasks/
   - Written for Panel v1.11, needs Gemini review for v1.12
   - Never had code review before

STILL TODO:
- Whitelist Manager - Pull from Billing VPS (38.68.14.188)
  - Currently deployed and running
  - Needs Panel v1.12 API compatibility fix (Task #86)
  - Requires SSH access to pull code

NEXT STEPS:
- Gemini code review for Panel v1.12 API compatibility
- Create package.json for each service
- Test npm workspaces integration
- Deploy after verification

FILES:
- services/arbiter/ (25 new files, full application)
- services/modpack-version-checker/ (21 new files, full application)

Signed-off-by: The Golden Chronicler <claude@firefrostgaming.com>

2026-03-31 21:52:42 +00:00

5.4 KiB

Raw Permalink Blame History

Firefrost Arbiter - Changelog

All notable changes to The Arbiter will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[2.0.0] - 2026-03-30

Major Release: OAuth Soft Gate System

Added

OAuth Subscriber Linking Flow
- Email-based linking system with 24-hour token expiration
- Discord OAuth2 integration for automatic role assignment
- Ghost CMS integration to store Discord IDs
- Secure single-use cryptographic tokens (32-byte)
Manual Admin Interface
- Web-based admin panel for Trinity members
- Search subscribers by email (queries Ghost CMS)
- Manual role assignment with required reason field
- Role removal functionality
- Audit log (last 50 actions with timestamps)
- Trinity-only access via Discord ID whitelist
Enhanced Webhook System
- HMAC SHA256 signature verification
- Zod schema validation for all payloads
- Support for subscription events: created, upgraded, downgraded, cancelled
- Automatic email dispatch on subscription creation
- Intelligent role updates (strip old roles, assign new)
Security Measures
- Rate limiting (100 requests/15min per IP)
- Session management with SQLite storage
- HTTPS enforcement via Nginx
- Admin authentication via Discord OAuth
- Webhook signature verification
- Input validation on all endpoints
Operational Features
- Health check endpoint (/health) with version info
- Automated daily backups (4 AM, 7-day retention)
- SQLite databases for tokens and sessions
- Automated token cleanup (daily)
- Comprehensive logging for all operations
- Systemd service configuration
User Experience
- 6 branded error pages (Pico.css dark theme)
- Success/error states for all flows
- Email notifications with plain text format
- Mobile-responsive admin interface
Documentation
- Complete README (5,700 words)
- Deployment guide (3,800 words)
- Troubleshooting guide (3,200 words)
- Implementation summary (2,400 words)

Changed

Complete codebase rewrite from v1.0
Modular architecture (14 source files vs 1-2 in v1.0)
Enhanced Discord service with role management functions
Improved error handling across all endpoints

Technical Details

Dependencies Added: better-sqlite3, nodemailer, @tryghost/admin-api, express-session, connect-sqlite3, express-rate-limit, zod
New Routes: /link, /auth/callback, /admin, /admin/login, /admin/callback, /admin/api/*, /webhook/billing
Database: SQLite (linking.db, sessions.db)
Email: Nodemailer via Mailcow SMTP
Session Store: SQLite-backed sessions
Architecture: Express 4.x, Discord.js 14.x, Ghost Admin API 5.x

Security

All webhook payloads verified via HMAC
All inputs validated via Zod schemas
Rate limiting on public endpoints
Admin access restricted to Discord ID whitelist
Session cookies: httpOnly, SameSite, secure in production
Automated token expiration and cleanup

Deployment

Target: Command Center (63.143.34.217)
Domain: discord-bot.firefrostgaming.com
Port: 3500 (proxied via Nginx)
Service: arbiter.service (systemd)
Backup: Automated daily at 4:00 AM CST

Backward Compatibility

Maintains all Arbiter 1.0 functionality
Existing webhook endpoints continue to work
Discord bot integration unchanged
Holly's admin configuration preserved

Contributors

Architecture: Gemini AI (7-hour consultation)
Implementation: Claude (Chronicler #49)
For: Michael "Frostystyle" Krause, Meg "Gingerfury", Holly "unicorn20089"
Date: March 30, 2026

[1.0.0] - Date Unknown

Initial Release

Features

Basic Discord bot integration
Simple webhook receiver
Manual role assignment
Admin configuration panel (Holly's setup)
Direct Discord command-based role management

Implementation

Single-file architecture
Basic webhook processing
Manual intervention required for all subscribers
No automation, no audit logging, no email notifications

Status

Served well for initial setup
Foundation for Arbiter 2.0
Retired: March 30, 2026 (replaced by v2.0.0)

Version History Summary

Version	Date	Description	Status
1.0.0	Unknown	Initial simple webhook system	Retired
2.0.0	2026-03-30	Complete OAuth soft gate	Current

Semantic Versioning Guide

MAJOR.MINOR.PATCH

MAJOR: Breaking changes (e.g., 1.0 → 2.0)
MINOR: New features, backward compatible (e.g., 2.0 → 2.1)
PATCH: Bug fixes, backward compatible (e.g., 2.0.0 → 2.0.1)

Examples of Future Changes:

2.0.1 - Bug fix release

Fix: Email delivery issue
Fix: Session timeout edge case

2.1.0 - Minor feature release

Add: SMS notifications option
Add: Export audit log to CSV

3.0.0 - Major breaking release

Change: Different database system
Change: API endpoint restructure
Remove: Deprecated features

5.4 KiB Raw Permalink Blame History