refactor(auth): drop challenge_id surrogate; promote nonce_hex to PK

MusehubAuthChallenge.challenge_id was a UUID surrogate that earned nothing — nonce_hex was already UNIQUE, already the lookup key in all service code, and is the cryptographic identity of a challenge by definition.

Changes: - Drop challenge_id column from model and DB - Make nonce_hex the primary_key=True column - Remove redundant UniqueConstraint on nonce_hex (PK implies uniqueness) - Remove import uuid and _new_uuid() from musehub_auth_models.py - Alembic 0022: migrate the live table (drop PK, drop column, drop UQ, add new PK) - TDD: test_nonce_is_primary_key asserts challenge_id is gone and nonce_hex is PK

sha256:25fcc3cf9f4d4c8df0981a16b8a4e25251fd6c07630ecfe4281274a1d3f064e4 sha

sha256:a6618a4d802ae7047d228a08a873420f92f37b799484eca54d116ce8096b1cf5 parent

sha256:f70ff831ba052b4ff9a6bc9fd6f470233f427a7d7a9f4709934dc15d12624030 snapshot

← Older Oldest on task/auth-challenge-nonce-pk

All commits

Newer → Latest on task/auth-challenge-nonce-pk

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:25fcc3cf9f4d4c8df0981a16b8a4e25251fd6c07630ecfe4281274a1d3f064e4 --body "your comment"

Provenance signed

AI Agent

claude-sonnet-4-6

Bump BREAKING

Agent claude-code

Breaking

musehub/db/muse_cli_models.py::MuseCliTagmusehub/db/muse_cli_models.py::import::uuidmusehub/db/musehub_auth_models.py::MusehubAuthChallengemusehub/db/musehub_auth_models.py::MusehubAuthKeymusehub/db/musehub_auth_models.py::import::uuidmusehub/db/musehub_collaborator_models.py::MusehubCollaboratormusehub/db/musehub_domain_models.py::MusehubDomainInstallmusehub/db/musehub_domain_models.py::import::uuidmusehub/db/musehub_label_models.py::MusehubLabelmusehub/db/musehub_models.py::MusehubBackgroundJobmusehub/db/musehub_models.py::MusehubBridgeMirrormusehub/db/musehub_models.py::MusehubCommitmusehub/db/musehub_models.py::MusehubIdentitymusehub/db/musehub_models.py::MusehubIssuemusehub/db/musehub_models.py::MusehubIssueEventmusehub/db/musehub_models.py::MusehubProposalmusehub/db/musehub_models.py::MusehubRepomusehub/db/musehub_models.py::MusehubSnapshotmusehub/db/musehub_models.py::MusehubWebhookDeliverymusehub/db/musehub_models.py::import::uuidmusehub/services/musehub_domains.py::import::uuidmusehub/services/musehub_intel_providers.py::EntangleProvidermusehub/services/musehub_webhook_dispatcher.py::import::uuid

Signature Cryptographically verified

Snapshot

ID sha256:f70ff831ba052b4ff9a6bc9fd6f470233f427a7d7a9f4709934dc15d12624030

Files 0

Browse tree at this commit →

Commit

SHA sha256:25fcc3cf9f4d4c8df0981a16b8a4e25251fd6c07630ecfe4281274a1d3f064e4

Parent

sha256:a6618a4d802ae7047d228a08a873420f92f37b799484eca54d116ce8096b1cf5

Branch task/auth-challenge-nonce-pk