Replaces wasteful 30s polling with event-driven design: - No polling - worker sleeps until woken by SignalReplication() - Replication triggers immediately on write operations - Perfect for low-change vaults (could be days without writes) Changes: - edition/replication.go: Event-driven worker with channel signaling - edition/edition.go: Add SignalReplication var - edition/community.go: No-op SignalReplication stub - edition/commercial.go: Wire up signalReplication Architecture: 1. Write handler marks entry dirty (replication_dirty = 1) 2. Calls edition.SignalReplication() (non-blocking) 3. Worker wakes, batches ALL dirty entries 4. POSTs to backup POP 5. Clears dirty flags on success 6. Worker sleeps until next signal Retry logic: - Exponential backoff: 1s, 5s, 25s, 125s... - Max 5 retries, then operator alert - Dirty entries persist in DB until replicated Resource efficiency: - CPU: Only wakes on actual writes (not 2,880x/day polling) - Network: Only sends when data changes - For 10 writes/day: ~288x fewer wakeups than polling Documentation: - SPEC-replication-async.md: Full event-driven design spec |
||
|---|---|---|
| .. | ||
| clavis-android | ||
| clavis-chrome | ||
| clavis-cli | ||
| clavis-crypto | ||
| clavis-firefox | ||
| clavis-ios | ||
| clavis-safari | ||
| clavis-vault | ||
| .DS_Store | ||
| ._.DS_Store | ||
| Makefile | ||
| README.md | ||
README.md
Clavis
Secure vault platform with multi-client support.
Architecture
Clavis is the vault server. Everything else is a client that talks to it.
Structure
Active Development
| Directory | Purpose | Status |
|---|---|---|
clavis-vault/ |
Vault server with embedded UI (Go, FIPS 140-3) | Active |
clavis-crypto/ |
JavaScript crypto layer | Active |
clavis-cli/ |
CLI for agents | Active |
clavis-chrome/ |
Chrome browser extension | Active |
Planned
| Directory | Purpose | Status |
|---|---|---|
clavis-firefox/ |
Firefox browser extension | Announced |
clavis-safari/ |
Safari browser extension | Announced |
clavis-ios/ |
iOS native app | Announced |
clavis-android/ |
Android native app | Announced |
Build
make deploy # Build + test + restart everything
make deploy-vault # Build + test + restart vault only
make deploy-web # Build + restart website only
make status # Check running processes
make logs-vault # Tail vault logs
make logs-web # Tail web logs
Clients
The vault supports multiple client types:
- Web: Built-in UI served by vault (
clavis-vault/) - CLI: Command-line tool for automation/agents (
clavis-cli/) - Browser Extension: Auto-fill and TOTP in Chrome (
clavis-chrome/) - Mobile: Native iOS/Android apps (planned)
Security
- FIPS 140-3 validated crypto (BoringCrypto via GOEXPERIMENT)
- Zero-knowledge architecture
- Vault server is the single source of truth
License
Proprietary — © Clavitor