0.3.113: ship the rotation-key operator tools
Two CLI tools land on installed hpp instances (no runtime change):
scripts/rotation-check.mjs read-only alarm -- for each hosted DID, can we
still derive one of its PLC rotation keys from a
local secret? exit 1 if not. This is the check
that would have fired between 2026-07-02 and
2026-07-28 while wj62's key was still recoverable.
scripts/rotation-keys.mjs gen: a new offline recovery phrase, printed once,
saved nowhere. add: register a PUBLIC did:key as
an additional rotation key on a live DID, appended
(never prepended -- lower index is higher
authority), dry-run by default.
Also vendors atproto-did-peer 6ec4b28, which bounds every RPC with a deadline --
previously an alive-but-wedged peer hung the caller forever.
Refs: hyper-social #47
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
dda255f5b00c30962d654dcd12e0c344feb36478
by plankatron <fleeky@gmail.com> · 2026-08-17T20:53:37.000Z