@odla-ai/chapter 0.39.1 → 0.39.2

package/dist/worker/index.d.cts

@@ -117,16 +117,14 @@ interface ResolvedMemberContent {
 interface ChapterBuilderLibrary {
     /** Keep local admin authoring enabled. Defaults to true. */
     localAuthoring?: boolean;
-    /** Signed sources this app accepts. Hub sources are Chapters; Chapter sources are Built Not Found. */
+    /** Existing Chapter-network peers this app accepts. Hub sources must be
+     * configured network targets; a Chapter source must be a configured reader. */
     sources?: readonly {
         sourceId: string;
-        /** Vault key holding the dedicated Builder Library edge secret. */
-        secretName?: string;
     }[];
 }
 interface ResolvedBuilderLibrarySource {
     sourceId: string;
-    secretName: string;
 }
 /** Validated Builder Library settings carried on a resolved Chapter. */
 interface ResolvedBuilderLibrary {
@@ -1123,13 +1121,15 @@ interface BuilderLibraryReceipt {
 
 /** Inputs for one signed Builder Library peer delivery. */
 interface BuilderLibraryDeliveryOptions {
+    /** Existing Chapter-network share secret for this parent/chapter edge. */
     secret: string;
     sender: string;
     targetUrl: string | URL;
     envelope: BuilderLibraryEnvelope;
     fetch?: typeof globalThis.fetch;
 }
-/** Deliver one exact Builder Library revision over its dedicated signed edge. */
+/** Deliver one exact Builder Library revision over the existing signed Chapter
+ * network edge. No Builder-specific credential is created. */
 declare function deliverBuilderLibrary(options: BuilderLibraryDeliveryOptions): Promise<BuilderLibraryReceipt>;
 
 /** Current wire version for parent-authored admission decisions. */

package/dist/worker/index.d.ts

@@ -117,16 +117,14 @@ interface ResolvedMemberContent {
 interface ChapterBuilderLibrary {
     /** Keep local admin authoring enabled. Defaults to true. */
     localAuthoring?: boolean;
-    /** Signed sources this app accepts. Hub sources are Chapters; Chapter sources are Built Not Found. */
+    /** Existing Chapter-network peers this app accepts. Hub sources must be
+     * configured network targets; a Chapter source must be a configured reader. */
     sources?: readonly {
         sourceId: string;
-        /** Vault key holding the dedicated Builder Library edge secret. */
-        secretName?: string;
     }[];
 }
 interface ResolvedBuilderLibrarySource {
     sourceId: string;
-    secretName: string;
 }
 /** Validated Builder Library settings carried on a resolved Chapter. */
 interface ResolvedBuilderLibrary {
@@ -1123,13 +1121,15 @@ interface BuilderLibraryReceipt {
 
 /** Inputs for one signed Builder Library peer delivery. */
 interface BuilderLibraryDeliveryOptions {
+    /** Existing Chapter-network share secret for this parent/chapter edge. */
     secret: string;
     sender: string;
     targetUrl: string | URL;
     envelope: BuilderLibraryEnvelope;
     fetch?: typeof globalThis.fetch;
 }
-/** Deliver one exact Builder Library revision over its dedicated signed edge. */
+/** Deliver one exact Builder Library revision over the existing signed Chapter
+ * network edge. No Builder-specific credential is created. */
 declare function deliverBuilderLibrary(options: BuilderLibraryDeliveryOptions): Promise<BuilderLibraryReceipt>;
 
 /** Current wire version for parent-authored admission decisions. */

package/dist/worker/index.js

@@ -6074,9 +6074,23 @@ async function saveLocalBuilderLibrary(db, document, environment, expectedRevisi
 
 // src/worker-routes-builder-library.ts
 var BODY_CAP2 = 1e6;
-async function verifySource(req, db, sources) {
+async function verifySource(req, db, ctx) {
+  const sources = ctx.chapter.builderLibrary?.sources ?? [];
+  if (ctx.chapter.mode === "chapter") {
+    const secret = await getVaultSecret(db, "network_share_secret");
+    if (!secret) return null;
+    const verified = await verifyFederatedRequest8(req, {
+      secret,
+      senders: sources.map((source2) => source2.sourceId)
+    });
+    if (!verified.ok) return null;
+    const source = sources.find((candidate) => candidate.sourceId === verified.sender);
+    return source ? { source, body: verified.body } : null;
+  }
   for (const source of sources) {
-    const secret = await getVaultSecret(db, source.secretName);
+    const target = ctx.chapter.network.targets.find((candidate) => candidate.id === source.sourceId);
+    if (!target) continue;
+    const secret = await getVaultSecret(db, target.secretName);
     if (!secret) continue;
     const verified = await verifyFederatedRequest8(req.clone(), { secret, senders: [source.sourceId] });
     if (verified.ok) return { source, body: verified.body };
@@ -6088,7 +6102,7 @@ var handleBuilderLibraryControl = async (req, url, env, ctx) => {
   const settings = ctx.chapter.builderLibrary;
   if (!settings) return json({ error: "not found" }, 404);
   const db = ctx.makeDb(env);
-  const verified = await verifySource(req, db, settings.sources);
+  const verified = await verifySource(req, db, ctx);
   if (!verified) return json({ error: "unauthorized" }, 401);
   let input;
   try {