@positronic/cloudflare 0.0.72 → 0.0.74

package/dist/src/api/auth-middleware.js

@@ -269,7 +269,7 @@ import { jwtVerify, decodeJwt, importJWK } from 'jose';
                     case 5:
                         _state.sent();
                         c.set('auth', {
-                            userId: userKey.userId,
+                            userName: userKey.userName,
                             isRoot: false
                         });
                         return [
@@ -320,7 +320,7 @@ import { jwtVerify, decodeJwt, importJWK } from 'jose';
                     case 10:
                         _state.sent();
                         c.set('auth', {
-                            userId: null,
+                            userName: null,
                             isRoot: true
                         });
                         return [

package/dist/src/api/brains.js

@@ -161,13 +161,13 @@ import { isSignalValid, brainMachineDefinition } from '@positronic/core';
 import { getManifest } from '../brain-runner-do.js';
 var brains = new Hono();
 /**
- * Get the userId for ownership filtering from the auth context.
+ * Get the userName for ownership filtering from the auth context.
  * Root users get null (no filter — sees everything).
- * Non-root users get their userId (sees only their own).
- */ function scopeUserId(context) {
+ * Non-root users get their userName (sees only their own).
+ */ function scopeUserName(context) {
     var auth = context.get('auth');
-    var _auth_userId;
-    return (auth === null || auth === void 0 ? void 0 : auth.isRoot) ? null : (_auth_userId = auth === null || auth === void 0 ? void 0 : auth.userId) !== null && _auth_userId !== void 0 ? _auth_userId : null;
+    var _auth_userName;
+    return (auth === null || auth === void 0 ? void 0 : auth.isRoot) ? null : (_auth_userName = auth === null || auth === void 0 ? void 0 : auth.userName) !== null && _auth_userName !== void 0 ? _auth_userName : null;
 }
 brains.post('/runs', function(context) {
     return _async_to_generator(function() {
@@ -229,7 +229,7 @@ brains.post('/runs', function(context) {
                     stub = namespace.get(doId);
                     // Read auth context for currentUser (every brain run must have an owner)
                     auth = context.get('auth');
-                    if (!(auth === null || auth === void 0 ? void 0 : auth.userId) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                    if (!(auth === null || auth === void 0 ? void 0 : auth.userName) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
                         return [
                             2,
                             context.json({
@@ -238,7 +238,7 @@ brains.post('/runs', function(context) {
                         ];
                     }
                     currentUser = {
-                        id: auth.userId || 'root'
+                        name: auth.userName || 'root'
                     };
                     // Pass options to the brain runner if provided
                     initialData = options ? {
@@ -341,7 +341,7 @@ brains.post('/runs/rerun', function(context) {
                 case 3:
                     // Read auth context for currentUser (every brain run must have an owner)
                     auth = context.get('auth');
-                    if (!(auth === null || auth === void 0 ? void 0 : auth.userId) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                    if (!(auth === null || auth === void 0 ? void 0 : auth.userName) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
                         return [
                             2,
                             context.json({
@@ -350,7 +350,7 @@ brains.post('/runs/rerun', function(context) {
                         ];
                     }
                     currentUser = {
-                        id: auth.userId || 'root'
+                        name: auth.userName || 'root'
                     };
                     // Create a new brain run with rerun parameters
                     newBrainRunId = uuidv4();
@@ -410,17 +410,17 @@ brains.get('/runs/:runId/watch', function(context) {
 });
 brains.get('/runs/:runId', function(context) {
     return _async_to_generator(function() {
-        var runId, userId, monitorId, monitorStub, run;
+        var runId, userName, monitorId, monitorStub, run;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     runId = context.req.param('runId');
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     monitorId = context.env.MONITOR_DO.idFromName('singleton');
                     monitorStub = context.env.MONITOR_DO.get(monitorId);
                     return [
                         4,
-                        monitorStub.getRun(runId, userId)
+                        monitorStub.getRun(runId, userName)
                     ];
                 case 1:
                     run = _state.sent();
@@ -676,7 +676,7 @@ brains.post('/runs/:runId/resume', function(context) {
 });
 brains.get('/:identifier/history', function(context) {
     return _async_to_generator(function() {
-        var identifier, limit, manifest, resolution, brain, brainTitle, monitorId, monitorStub, userId, runs;
+        var identifier, limit, manifest, resolution, brain, brainTitle, monitorId, monitorStub, userName, runs;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -717,10 +717,10 @@ brains.get('/:identifier/history', function(context) {
                     // Get the monitor singleton instance
                     monitorId = context.env.MONITOR_DO.idFromName('singleton');
                     monitorStub = context.env.MONITOR_DO.get(monitorId);
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     return [
                         4,
-                        monitorStub.history(brainTitle, limit, userId)
+                        monitorStub.history(brainTitle, limit, userName)
                     ];
                 case 1:
                     runs = _state.sent();
@@ -736,7 +736,7 @@ brains.get('/:identifier/history', function(context) {
 });
 brains.get('/:identifier/active-runs', function(context) {
     return _async_to_generator(function() {
-        var identifier, manifest, resolution, brain, brainTitle, monitorId, monitorStub, userId, runs;
+        var identifier, manifest, resolution, brain, brainTitle, monitorId, monitorStub, userName, runs;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -776,10 +776,10 @@ brains.get('/:identifier/active-runs', function(context) {
                     // Get the monitor singleton instance
                     monitorId = context.env.MONITOR_DO.idFromName('singleton');
                     monitorStub = context.env.MONITOR_DO.get(monitorId);
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     return [
                         4,
-                        monitorStub.activeRuns(brainTitle, userId)
+                        monitorStub.activeRuns(brainTitle, userName)
                     ];
                 case 1:
                     runs = _state.sent();
@@ -960,7 +960,7 @@ brains.get('/', function(context) {
 // Create a new schedule
 brains.post('/schedules', function(context) {
     return _async_to_generator(function() {
-        var body, cronExpression, identifier, manifest, resolution, brain, brainTitle, scheduleDoId, scheduleStub, auth, runAsUserId, timezone, schedule, error, errorMessage;
+        var body, cronExpression, identifier, manifest, resolution, brain, brainTitle, scheduleDoId, scheduleStub, auth, runAsUserName, timezone, schedule, error, errorMessage;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -1043,7 +1043,7 @@ brains.post('/schedules', function(context) {
                     scheduleStub = context.env.SCHEDULE_DO.get(scheduleDoId);
                     // Require authentication — scheduled runs will execute as this user
                     auth = context.get('auth');
-                    if (!(auth === null || auth === void 0 ? void 0 : auth.userId) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
+                    if (!(auth === null || auth === void 0 ? void 0 : auth.userName) && !(auth === null || auth === void 0 ? void 0 : auth.isRoot)) {
                         return [
                             2,
                             context.json({
@@ -1051,7 +1051,7 @@ brains.post('/schedules', function(context) {
                             }, 401)
                         ];
                     }
-                    runAsUserId = auth.userId || 'root';
+                    runAsUserName = auth.userName || 'root';
                     // Determine timezone: use provided value, fall back to project timezone
                     timezone = body.timezone;
                     if (!!timezone) return [
@@ -1081,7 +1081,7 @@ brains.post('/schedules', function(context) {
                     }
                     return [
                         4,
-                        scheduleStub.createSchedule(brainTitle, cronExpression, timezone, runAsUserId)
+                        scheduleStub.createSchedule(brainTitle, cronExpression, timezone, runAsUserName)
                     ];
                 case 4:
                     schedule = _state.sent();
@@ -1109,16 +1109,16 @@ brains.post('/schedules', function(context) {
 // List all schedules
 brains.get('/schedules', function(context) {
     return _async_to_generator(function() {
-        var scheduleId, scheduleStub, userId, result;
+        var scheduleId, scheduleStub, userName, result;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     scheduleId = context.env.SCHEDULE_DO.idFromName('singleton');
                     scheduleStub = context.env.SCHEDULE_DO.get(scheduleId);
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     return [
                         4,
-                        scheduleStub.listSchedules(userId)
+                        scheduleStub.listSchedules(userName)
                     ];
                 case 1:
                     result = _state.sent();
@@ -1133,7 +1133,7 @@ brains.get('/schedules', function(context) {
 // Get scheduled run history - MUST be before :scheduleId route
 brains.get('/schedules/runs', function(context) {
     return _async_to_generator(function() {
-        var scheduleIdParam, limit, scheduleDoId, scheduleStub, userId, result;
+        var scheduleIdParam, limit, scheduleDoId, scheduleStub, userName, result;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
@@ -1141,10 +1141,10 @@ brains.get('/schedules/runs', function(context) {
                     limit = Number(context.req.query('limit') || '100');
                     scheduleDoId = context.env.SCHEDULE_DO.idFromName('singleton');
                     scheduleStub = context.env.SCHEDULE_DO.get(scheduleDoId);
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     return [
                         4,
-                        scheduleStub.getAllRuns(scheduleIdParam, limit, userId)
+                        scheduleStub.getAllRuns(scheduleIdParam, limit, userName)
                     ];
                 case 1:
                     result = _state.sent();

package/dist/src/api/index.js

@@ -153,7 +153,7 @@ app.get('/auth/setup', function(context) {
                 context.json({
                     backend: 'cloudflare',
                     rootKeyConfigured: rootKeyConfigured,
-                    instructions: "To configure root authentication:\n1. Run: px auth format-jwk-key\n2. In Cloudflare dashboard, go to Workers & Pages > Your project > Settings > Variables and Secrets\n3. Add a new secret named ROOT_PUBLIC_KEY\n4. Paste the JWK value from step 1"
+                    instructions: "To configure root authentication:\n1. Convert your SSH public key to JWK format\n2. In Cloudflare dashboard, go to Workers & Pages > Your project > Settings > Variables and Secrets\n3. Add a new secret named ROOT_PUBLIC_KEY with the JWK value"
                 })
             ];
         });
@@ -205,6 +205,31 @@ app.use('*', function(c, next) {
         });
     })();
 });
+// Whoami endpoint (requires auth, handled by middleware above)
+app.get('/auth/whoami', function(context) {
+    return _async_to_generator(function() {
+        var auth;
+        return _ts_generator(this, function(_state) {
+            auth = context.get('auth');
+            if (auth.isRoot) {
+                return [
+                    2,
+                    context.json({
+                        name: 'root',
+                        isRoot: true
+                    })
+                ];
+            }
+            return [
+                2,
+                context.json({
+                    name: auth.userName,
+                    isRoot: false
+                })
+            ];
+        });
+    })();
+});
 // Mount route modules
 app.route('/brains', brains);
 app.route('/resources', resources);

package/dist/src/api/store.js

@@ -173,13 +173,13 @@ function _ts_generator(thisArg, body) {
 import { Hono } from 'hono';
 var store = new Hono();
 /**
- * Get the userId for ownership filtering from the auth context.
+ * Get the userName for ownership filtering from the auth context.
  * Root users get null (no filter — sees everything).
- * Non-root users get their userId.
- */ function scopeUserId(context) {
+ * Non-root users get their userName.
+ */ function scopeUserName(context) {
     var auth = context.get('auth');
-    var _auth_userId;
-    return (auth === null || auth === void 0 ? void 0 : auth.isRoot) ? null : (_auth_userId = auth === null || auth === void 0 ? void 0 : auth.userId) !== null && _auth_userId !== void 0 ? _auth_userId : null;
+    var _auth_userName;
+    return (auth === null || auth === void 0 ? void 0 : auth.isRoot) ? null : (_auth_userName = auth === null || auth === void 0 ? void 0 : auth.userName) !== null && _auth_userName !== void 0 ? _auth_userName : null;
 }
 /**
  * Check if the authenticated user is root.
@@ -192,18 +192,18 @@ var store = new Hono();
  *
  * R2 key patterns:
  *   shared:   store/{brainTitle}/{key}.json
- *   per-user: store/{brainTitle}/user/{userId}/{key}.json
+ *   per-user: store/{brainTitle}/user/{userName}/{key}.json
  */ function parseStoreKey(r2Key) {
     // Remove "store/" prefix
     var withoutPrefix = r2Key.slice('store/'.length);
-    // Check for per-user pattern: {brainTitle}/user/{userId}/{key}.json
+    // Check for per-user pattern: {brainTitle}/user/{userName}/{key}.json
     var userMatch = withoutPrefix.match(/^([^/]+)\/user\/([^/]+)\/(.+)\.json$/);
     if (userMatch) {
         return {
             brainTitle: userMatch[1],
             key: userMatch[3],
             scope: 'user',
-            userId: userMatch[2]
+            userName: userMatch[2]
         };
     }
     // Check for shared pattern: {brainTitle}/{key}.json
@@ -278,12 +278,12 @@ store.get('/:brainTitle/shared/:key', function(context) {
 // GET /store/:brainTitle/user/:key - Get per-user key value
 store.get('/:brainTitle/user/:key', function(context) {
     return _async_to_generator(function() {
-        var userId, bucket, brainTitle, key, targetUserId, r2Key, object, value, _;
+        var userName, bucket, brainTitle, key, targetUserName, r2Key, object, value, _;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    userId = scopeUserId(context);
-                    if (!userId && !isRoot(context)) {
+                    userName = scopeUserName(context);
+                    if (!userName && !isRoot(context)) {
                         return [
                             2,
                             context.json({
@@ -296,8 +296,8 @@ store.get('/:brainTitle/user/:key', function(context) {
                     key = decodeURIComponent(context.req.param('key'));
                     // For root users, they could be looking at any user's key
                     // But for non-root, it's always their own
-                    targetUserId = userId;
-                    r2Key = "store/".concat(brainTitle, "/user/").concat(targetUserId, "/").concat(key, ".json");
+                    targetUserName = userName;
+                    r2Key = "store/".concat(brainTitle, "/user/").concat(targetUserName, "/").concat(key, ".json");
                     return [
                         4,
                         bucket.get(r2Key)
@@ -327,7 +327,7 @@ store.get('/:brainTitle/user/:key', function(context) {
                             key: key,
                             value: value,
                             scope: 'user',
-                            userId: targetUserId
+                            userName: targetUserName
                         })
                     ];
             }
@@ -372,12 +372,12 @@ store.delete('/:brainTitle/shared/:key', function(context) {
 // DELETE /store/:brainTitle/user/:key - Delete per-user key
 store.delete('/:brainTitle/user/:key', function(context) {
     return _async_to_generator(function() {
-        var userId, bucket, brainTitle, key, targetUserId, r2Key;
+        var userName, bucket, brainTitle, key, targetUserName, r2Key;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    userId = scopeUserId(context);
-                    if (!userId && !isRoot(context)) {
+                    userName = scopeUserName(context);
+                    if (!userName && !isRoot(context)) {
                         return [
                             2,
                             context.json({
@@ -388,8 +388,8 @@ store.delete('/:brainTitle/user/:key', function(context) {
                     bucket = context.env.RESOURCES_BUCKET;
                     brainTitle = decodeURIComponent(context.req.param('brainTitle'));
                     key = decodeURIComponent(context.req.param('key'));
-                    targetUserId = userId;
-                    r2Key = "store/".concat(brainTitle, "/user/").concat(targetUserId, "/").concat(key, ".json");
+                    targetUserName = userName;
+                    r2Key = "store/".concat(brainTitle, "/user/").concat(targetUserName, "/").concat(key, ".json");
                     return [
                         4,
                         bucket.delete(r2Key)
@@ -409,13 +409,13 @@ store.delete('/:brainTitle/user/:key', function(context) {
 // GET /store/:brainTitle - List keys for a brain
 store.get('/:brainTitle', function(context) {
     return _async_to_generator(function() {
-        var bucket, brainTitle, userId, rootUser, prefix, keys, cursor, listed, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, object, parsed;
+        var bucket, brainTitle, userName, rootUser, prefix, keys, cursor, listed, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, object, parsed;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     bucket = context.env.RESOURCES_BUCKET;
                     brainTitle = decodeURIComponent(context.req.param('brainTitle'));
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     rootUser = isRoot(context);
                     prefix = "store/".concat(brainTitle, "/");
                     keys = [];
@@ -439,13 +439,13 @@ store.get('/:brainTitle', function(context) {
                             // Access control: non-root only sees their own per-user keys
                             if (!rootUser) {
                                 if (parsed.scope === 'shared') continue;
-                                if (parsed.scope === 'user' && parsed.userId !== userId) continue;
+                                if (parsed.scope === 'user' && parsed.userName !== userName) continue;
                             }
                             keys.push(_object_spread_props(_object_spread({
                                 key: parsed.key,
                                 scope: parsed.scope
-                            }, parsed.userId && {
-                                userId: parsed.userId
+                            }, parsed.userName && {
+                                userName: parsed.userName
                             }), {
                                 size: object.size,
                                 lastModified: object.uploaded.toISOString()
@@ -488,13 +488,13 @@ store.get('/:brainTitle', function(context) {
 // DELETE /store/:brainTitle - Clear all accessible keys for a brain
 store.delete('/:brainTitle', function(context) {
     return _async_to_generator(function() {
-        var bucket, brainTitle, userId, rootUser, prefix, deleted, cursor, listed, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, object, parsed, err;
+        var bucket, brainTitle, userName, rootUser, prefix, deleted, cursor, listed, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, object, parsed, err;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     bucket = context.env.RESOURCES_BUCKET;
                     brainTitle = decodeURIComponent(context.req.param('brainTitle'));
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     rootUser = isRoot(context);
                     prefix = "store/".concat(brainTitle, "/");
                     deleted = 0;
@@ -537,7 +537,7 @@ store.delete('/:brainTitle', function(context) {
                             3,
                             6
                         ];
-                        if (parsed.scope === 'user' && parsed.userId !== userId) return [
+                        if (parsed.scope === 'user' && parsed.userName !== userName) return [
                             3,
                             6
                         ];
@@ -605,12 +605,12 @@ store.delete('/:brainTitle', function(context) {
 // GET /store - List brains with store data
 store.get('/', function(context) {
     return _async_to_generator(function() {
-        var bucket, userId, rootUser, brainTitles, listed, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, prefix, title, cursor, listed1, _iteratorNormalCompletion1, _didIteratorError1, _iteratorError1, _iterator1, _step1, object, parsed, brains;
+        var bucket, userName, rootUser, brainTitles, listed, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, prefix, title, cursor, listed1, _iteratorNormalCompletion1, _didIteratorError1, _iteratorError1, _iterator1, _step1, object, parsed, brains;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
                     bucket = context.env.RESOURCES_BUCKET;
-                    userId = scopeUserId(context);
+                    userName = scopeUserName(context);
                     rootUser = isRoot(context);
                     brainTitles = new Set();
                     if (!rootUser) return [
@@ -670,7 +670,7 @@ store.get('/', function(context) {
                             object = _step1.value;
                             parsed = parseStoreKey(object.key);
                             if (!parsed) continue;
-                            if (parsed.scope === 'user' && parsed.userId === userId) {
+                            if (parsed.scope === 'user' && parsed.userName === userName) {
                                 brainTitles.add(parsed.brainTitle);
                             }
                         }