@opendatalabs/personal-server-ts-core 1.10.1 → 1.11.0

package/dist/write/route.js

@@ -0,0 +1,132 @@
+/**
+ * The write-session handshake, as a runtime-agnostic request handler.
+ *
+ * `POST /v1/write/session`: a registered builder proves control of its key and
+ * of a write-grant with a Web3Signed proof (the same handshake shape as the
+ * self-signing MCP session) and gets a short-lived bearer token. That token
+ * then gates delegated writes on the EXISTING ingest endpoint
+ * (`POST /v1/data/:scope`) and the derivative question routes. The Personal
+ * Server keeps signing AddData as the owner; the builder never holds the owner
+ * key.
+ *
+ * This lived in the Node server as a Hono route (packages/server/src/routes/
+ * write-session.ts) and reached for `node:crypto` for two things: a sha-256 of
+ * the proof header, and 32 random bytes for the token. Both have Web Crypto
+ * equivalents, so the handshake is expressed here over plain `Request` /
+ * `Response` and BOTH builds mount the same handler — the Node route is a Hono
+ * wrapper around it, and the browser runtime dispatches to it directly. There
+ * is one implementation of who may open a write session.
+ */
+import { authenticateRequest } from "../auth/index.js";
+import { ProtocolError } from "../errors/catalog.js";
+import { hashConnectionToken } from "../mcp/connection-api.js";
+import { createWriteSession, } from "./session.js";
+function jsonError(status, errorCode, message) {
+    return { error: { code: status, errorCode, message } };
+}
+function jsonResponse(body, status) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "Content-Type": "application/json" },
+    });
+}
+/**
+ * Only ProtocolErrors are client-facing. Anything else (gateway, store,
+ * runtime failures) is logged with its cause and answered generically so
+ * internal details never reach the caller. Same mapping as the core data
+ * handler.
+ */
+function internalError(logger, err, stage) {
+    logger?.error?.({ err, stage }, "Write session handshake failed with an unexpected error");
+    return jsonResponse(jsonError(500, "INTERNAL_ERROR", "Internal server error"), 500);
+}
+function defaultRandomToken() {
+    const bytes = new Uint8Array(32);
+    globalThis.crypto.getRandomValues(bytes);
+    const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+    return `vana_write_${hex}`;
+}
+/**
+ * Handle one `POST /v1/write/session` request. The caller has already matched
+ * the method and path; anything reaching here is treated as the handshake.
+ */
+export async function handleWriteSessionRequest(request, deps) {
+    // Fail closed: minting a session requires this server's owner to bind the
+    // grant to (createWriteSession rejects wrong-owner grants).
+    if (!deps.serverOwner) {
+        return jsonResponse(jsonError(500, "SERVER_NOT_CONFIGURED", "Server owner is not configured"), 500);
+    }
+    let authResult;
+    try {
+        authResult = await authenticateRequest({
+            request,
+            serverOrigin: deps.serverOrigin,
+            devToken: deps.devToken,
+            accessToken: deps.accessToken,
+            sessionTokenVerifier: deps.tokenStore,
+            serverOwner: deps.serverOwner,
+        });
+    }
+    catch (err) {
+        if (!(err instanceof ProtocolError)) {
+            return internalError(deps.logger, err, "authenticate");
+        }
+        return jsonResponse(jsonError(401, "WRITE_SESSION_AUTH_FAILED", err.message), 401);
+    }
+    // A bearer credential (dev token, control-plane token, CLI session) proves
+    // nothing about the builder's key, so it can never open a write session.
+    if (authResult.mechanism !== "web3-signed") {
+        return jsonResponse(jsonError(401, "WRITE_SESSION_PROOF_REQUIRED", "POST /v1/write/session requires a Web3Signed proof signed by the builder key"), 401);
+    }
+    const grantId = authResult.auth.payload.grantId;
+    if (!grantId) {
+        return jsonResponse(jsonError(400, "GRANT_ID_REQUIRED", "The Web3Signed proof must carry a grantId (the write-grant issued to the builder)"), 400);
+    }
+    // Replay guard: bind to a digest of the exact proof header, remembered
+    // until the proof's own expiry (a replay only matters while still valid).
+    const proofHeader = request.headers.get("authorization") ?? "";
+    const proofId = await hashConnectionToken(proofHeader);
+    const expSec = authResult.auth.payload.exp;
+    const expiresAtMs = (typeof expSec === "number"
+        ? expSec
+        : Math.floor(Date.now() / 1000) + 300) * 1000;
+    try {
+        const session = await createWriteSession({
+            builderAddress: authResult.auth.signer,
+            grantId,
+            proof: { id: proofId, expiresAtMs },
+        }, {
+            store: deps.sessionStore,
+            authSessionVerifier: deps.authSessionVerifier,
+            grantVerifier: deps.grantVerifier,
+            serverOwner: deps.serverOwner,
+            randomToken: deps.randomToken ?? defaultRandomToken,
+            ...(deps.ttlMs === undefined ? {} : { ttlMs: deps.ttlMs }),
+            ...(deps.now === undefined ? {} : { now: deps.now }),
+            ...(deps.replayStore === undefined
+                ? {}
+                : { replayStore: deps.replayStore }),
+        });
+        deps.logger?.info?.({
+            builder: authResult.auth.signer,
+            grantId: session.grantId,
+            writeScopes: session.writeScopes,
+        }, "Write session minted");
+        const body = {
+            access_token: session.accessToken,
+            token_type: "Bearer",
+            expires_in: session.expiresInSeconds,
+            // Write patterns, prefix stripped — what POST /v1/data/:scope will
+            // accept under this token.
+            scope: session.writeScopes.join(" "),
+        };
+        return jsonResponse(body, 200);
+    }
+    catch (err) {
+        if (err instanceof ProtocolError) {
+            return jsonResponse(err.toJSON(), err.code);
+        }
+        return internalError(deps.logger, err, "create-session");
+    }
+}
+//# sourceMappingURL=route.js.map

package/dist/write/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../src/write/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAK/D,OAAO,EACL,kBAAkB,GAGnB,MAAM,cAAc,CAAC;AAsCtB,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAe;IACnE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAc;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,MAA2C,EAC3C,GAAY,EACZ,KAAa;IAEb,MAAM,EAAE,KAAK,EAAE,CACb,EAAE,GAAG,EAAE,KAAK,EAAE,EACd,yDAAyD,CAC1D,CAAC;IACF,OAAO,YAAY,CACjB,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,EACzD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACnC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,cAAc,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAgB,EAChB,IAAmC;IAEnC,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO,YAAY,CACjB,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,gCAAgC,CAAC,EACzE,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,mBAAmB,CAAC;YACrC,OAAO;YACP,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,oBAAoB,EAAE,IAAI,CAAC,UAAU;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC,EAAE,CAAC;YACpC,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,YAAY,CACjB,SAAS,CAAC,GAAG,EAAE,2BAA2B,EAAE,GAAG,CAAC,OAAO,CAAC,EACxD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,UAAU,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;QAC3C,OAAO,YAAY,CACjB,SAAS,CACP,GAAG,EACH,8BAA8B,EAC9B,8EAA8E,CAC/E,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,YAAY,CACjB,SAAS,CACP,GAAG,EACH,mBAAmB,EACnB,mFAAmF,CACpF,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3C,MAAM,WAAW,GACf,CAAC,OAAO,MAAM,KAAK,QAAQ;QACzB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC;YACE,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;YACtC,OAAO;YACP,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;SACpC,EACD;YACE,KAAK,EAAE,IAAI,CAAC,YAAY;YACxB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,kBAAkB;YACnD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;SACvC,CACF,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB;YACE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,EACD,sBAAsB,CACvB,CAAC;QACF,MAAM,IAAI,GAA6B;YACrC,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,OAAO,CAAC,gBAAgB;YACpC,mEAAmE;YACnE,2BAA2B;YAC3B,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;SACrC,CAAC;QACF,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-core",
-  "version": "1.10.1",
+  "version": "1.11.0",
   "description": "Protocol logic for the Vana Personal Server — auth, grants, scopes, storage, keys",
   "license": "MIT",
   "repository": {