aaronrene / knowtation public
hub_vault_access.mjs
64 lines 1.9 KB
Raw
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf mirror: GitHub Phase A durable MCP OAuth (#270) Human minor ⚠ breaking 11 days ago
1 /**
2 * Multi-vault (Phase 15): user → vault_ids mapping in data/hub_vault_access.json.
3 * Format: { "user_id": ["vault_id1", "vault_id2"], ... }
4 * Users not in the map get ["default"] only.
5 */
6
7 import fs from 'fs';
8 import path from 'path';
9
10 const ACCESS_FILE = 'hub_vault_access.json';
11
12 /**
13 * @param {string} dataDir - e.g. config.data_dir
14 * @returns {{ [userId: string]: string[] }}
15 */
16 export function readVaultAccess(dataDir) {
17 if (!dataDir) return {};
18 const filePath = path.join(dataDir, ACCESS_FILE);
19 try {
20 if (!fs.existsSync(filePath)) return {};
21 const raw = fs.readFileSync(filePath, 'utf8');
22 const data = JSON.parse(raw);
23 const out = {};
24 if (data && typeof data === 'object') {
25 for (const [uid, arr] of Object.entries(data)) {
26 if (typeof uid === 'string' && uid.trim() && Array.isArray(arr)) {
27 out[uid.trim()] = arr.filter((v) => typeof v === 'string' && v.trim()).map((v) => v.trim());
28 }
29 }
30 }
31 return out;
32 } catch (_) {
33 return {};
34 }
35 }
36
37 /**
38 * @param {string} dataDir
39 * @param {{ [userId: string]: string[] }} access
40 */
41 export function writeVaultAccess(dataDir, access) {
42 if (!dataDir) throw new Error('data_dir required');
43 const filePath = path.join(dataDir, ACCESS_FILE);
44 const obj = {};
45 for (const [uid, arr] of Object.entries(access)) {
46 if (typeof uid === 'string' && uid.trim() && Array.isArray(arr)) {
47 obj[uid.trim()] = arr.filter((v) => typeof v === 'string' && v.trim()).map((v) => v.trim());
48 }
49 }
50 fs.mkdirSync(dataDir, { recursive: true });
51 fs.writeFileSync(filePath, JSON.stringify(obj, null, 2), 'utf8');
52 }
53
54 /**
55 * Get allowed vault IDs for a user. Returns ['default'] if not in map.
56 * @param {string} dataDir
57 * @param {string} userId
58 * @returns {string[]}
59 */
60 export function getAllowedVaultIds(dataDir, userId) {
61 const access = readVaultAccess(dataDir);
62 const allowed = access[userId];
63 return allowed && allowed.length > 0 ? allowed : ['default'];
64 }
File History 4 commits
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf mirror: GitHub Phase A durable MCP OAuth (#270) Human minor ⚠ 11 days ago
sha256:d8c648b20a4d53b2673c5c082ee7edfa7b2fc9b11080832da1f38807b6bf940b fix(7C-L1b): route hosted delegation proposals through cani… Human minor ⚠ 31 days ago
sha256:2827ba9e7632a4b141c50caf1e8f7d77abbc3515be20e7465f2bccb0ac4edf91 fix: repair endpoint now sets has_active_subscription when … Human minor ⚠ 51 days ago
sha256:6a102aafafdfe7e70a24f4e59740200f0ee713ce7915f1b53e9d4ba5ee8b4410 Initial Muse snapshot Human 83 days ago