@stage-labs/metro 0.1.0-beta.53 → 0.1.0-beta.55

package/runtime/node_modules/@metro-labs/mcp/src/daemon/siwe-routes.ts

@@ -1,86 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { log } from './log.js';
-import {
-  apiFailure,
-  bodyField,
-  cors,
-  readJsonBody,
-  sendJson,
-} from './api-http.js';
-import { mintNonce, takeNonce } from './siwe-nonces.js';
-import { verifySiweLogin } from './siwe-auth.js';
-import { signSession } from './session.js';
-import { SESSION_TTL_SEC } from './session-config.js';
-
-const NONCE_PATH = '/auth/siwe/nonce';
-const VERIFY_PATH = '/auth/siwe/verify';
-
-export interface SiweRouteDeps {
-  ensureUser: (address: string) => Promise<string>;
-}
-
-async function handleVerify(
-  req: IncomingMessage,
-  res: ServerResponse,
-  secret: string,
-  deps: SiweRouteDeps,
-): Promise<void> {
-  const body = await readJsonBody(req);
-  const message = bodyField(body, 'message');
-  const signature = bodyField(body, 'signature');
-  if (typeof message !== 'string' || typeof signature !== 'string') {
-    sendJson(req, res, 400, { error: 'message and signature are required' });
-    return;
-  }
-  const address = await verifySiweLogin({ message, signature }, { takeNonce });
-  const userId = await deps.ensureUser(address);
-  log.info({ userId, address }, 'siwe: session issued');
-  const session = signSession({ subject: address, agentIds: [] }, secret, {
-    ttlSec: SESSION_TTL_SEC,
-  });
-  sendJson(req, res, 200, { session, address });
-}
-
-const ROUTES: Record<string, string> = {
-  [NONCE_PATH]: 'GET',
-  [VERIFY_PATH]: 'POST',
-};
-
-function refused(
-  req: IncomingMessage,
-  res: ServerResponse,
-  path: string,
-): boolean {
-  if (req.method === 'OPTIONS') {
-    res.writeHead(204, cors(req)).end();
-    return true;
-  }
-  if (req.method !== ROUTES[path]) {
-    sendJson(req, res, 405, { error: 'method not allowed' });
-    return true;
-  }
-  return false;
-}
-
-export function handleSiweAuthRequest(
-  req: IncomingMessage,
-  res: ServerResponse,
-  deps: SiweRouteDeps,
-): boolean {
-  const path = (req.url ?? '').split('?')[0] ?? '';
-  if (ROUTES[path] === undefined) return false;
-  if (refused(req, res, path)) return true;
-  const secret = process.env.METRO_SESSION_SECRET?.trim() ?? '';
-  if (secret === '') {
-    sendJson(req, res, 503, { error: 'sign-in is not configured' });
-    return true;
-  }
-  if (path === NONCE_PATH) {
-    sendJson(req, res, 200, { nonce: mintNonce() });
-    return true;
-  }
-  handleVerify(req, res, secret, deps).catch((err: unknown) => {
-    apiFailure(req, res, err, 'siwe');
-  });
-  return true;
-}

package/runtime/node_modules/@metro-labs/mcp/src/db/users.ts

@@ -1,41 +0,0 @@
-import { eq } from 'drizzle-orm';
-import { ApiError } from '../daemon/api-error.js';
-import { getDb } from './client.js';
-import { newId } from './ids.js';
-import { users } from './schema.js';
-import { normalizeAddress } from './address.js';
-
-const UNIQUE_VIOLATION = '23505';
-
-export class UserError extends ApiError {}
-
-const CAUSE_DEPTH = 5;
-
-export function isUniqueViolation(err: unknown): boolean {
-  let current: unknown = err;
-  for (let depth = 0; depth < CAUSE_DEPTH; depth += 1) {
-    if (typeof current !== 'object' || current === null) return false;
-    const { code, cause } = current as { code?: unknown; cause?: unknown };
-    if (code === UNIQUE_VIOLATION) return true;
-    current = cause;
-  }
-  return false;
-}
-
-
-export async function ensureUserByAddress(raw: string): Promise<string> {
-  const address = normalizeAddress(raw);
-  if (address === null) throw new UserError('an Ethereum address is required', 400);
-  const db = getDb();
-  const inserted = await db
-    .insert(users)
-    .values({ id: newId(), address })
-    .onConflictDoNothing({ target: users.address })
-    .returning({ id: users.id });
-  const id = inserted[0]?.id;
-  if (id !== undefined) return id;
-  const rows = await db.select({ id: users.id }).from(users).where(eq(users.address, address));
-  const existing = rows[0]?.id;
-  if (existing === undefined) throw new UserError('user lookup returned no id', 500);
-  return existing;
-}