aaronrene / knowtation public
feat BREAKING auth feat/hub-session-establish-refresh #1 / 1
aaronrene · 15 days ago · Aug 27, 2026 · Diff

feat(auth): establish-refresh for durable operator session bootstrap

Add POST /api/v1/auth/establish-refresh so CLI and Hub UI can mint ktn_refresh from a valid session JWT when OAuth redirect drops Set-Cookie (Netlify). Includes hub-session-refresh operator scripts, KN0 deploy proof evidence PASS, and wiring tests.

sha256:365cce3393be497724020d7c6964375dd23e0a57899e3ea4100fca2a7d0416ce sha
sha256:118a888c120a64b124cfc642684a9c7f0b0c45204d467cf1262aaa334e2bcce2 parent
+30 ~24 −5 symbols
sha256:55fe2a6e689df9387e630091f1c81bd084444d653ebaec3a02398dceca1de84f snapshot
+30
symbols added
~24
symbols modified
−5
symbols removed
0
dead code introduced
Semantic Changes 59 symbols
+ scripts/lib/
~ docs/reviews/2026-08-27-rhf-b-kn0-deploy-proof.md .md 5 symbols added
+ RHF-b-KN0 deploy proof — hosted bridge section RHF-b-KN0 deploy proof — hosted bridge L1–26
+ Notes section Notes L16–23
+ Probes section Probes L9–16
+ table section table L11–15
+ Unblocks section Unblocks L23–26
~ scripts/hub-session-refresh.mjs .mjs 1 symbol added
+ usage function function usage L39–51
~ scripts/lib/hub-session-auth.mjs .mjs 9 symbols added
+ decodeAccessClaims function function decodeAccessClaims L53–72
+ ensureHostedSessionAccessToken function async_function ensureHostedSessionAccessToken L235–262
+ establishHostedRefreshFromAccess function async_function establishHostedRefreshFromAccess L104–154
+ expandHome function function expandHome L25–29
+ mintLegacySessionAccessToken function function mintLegacySessionAccessToken L271–283
+ readSetCookieValue function function readSetCookieValue L79–96
+ readTrimmedFile function function readTrimmedFile L35–37
+ refreshHostedSessionAccessToken function async_function refreshHostedSessionAccessToken L166–225
+ writeSecretFile function function writeSecretFile L43–47
~ scripts/verify-rhf-kn0-deploy-proof.mjs .mjs 1 symbol added
+ probeGrantMint function async_function probeGrantMint L35–61
~ test/auth-establish-refresh.test.mjs .mjs 5 symbols added
+ cookie method method cookie L20–22
+ json method method json L27–30
+ mockRes function function mockRes L9–34
+ set method method set L17–19
+ status method method status L23–26
~ .env.example .example
~ docs/OVERSEER-HANDOVER.md .md 6 symbols added, 5 symbols removed, 17 symbols modified
~ Archived — AIP-b Operator T2 live smoke (parallel residual)
~ Archived — CODEX-HUB-ACTOR (was PRIMARY after #331 — superseded)
~ code[text]
~ Archived — RHF-b-KN0 paste block (completed)
~ code[text]
~ Paste-ready prompt — AIP-b Operator T2 live smoke
~ code[text]
~ Paste-ready prompt — RHF-b-KN1 (separate chat; blocked until deploy proof PASS)
~ code[text]
~ Paste-ready prompt — Scooling F28b land + F26 smoke (product order — paste in Scooling chat)
~ code[text]
~ Paste-ready prompt — trend-agent propose re-smoke (after deploy; Operator, not AIP-b)
~ code[text]
~ This session — AIP-b Auto DONE (2026-08-24)
~ This session — RHF-b-KN0 Auto DONE (2026-08-27)
~ This session — SD-21 land AIP-b DONE (2026-08-24)
− NEXT SESSION — KN0 deploy proof re-run (then RHF-b-KN1) section NEXT SESSION — KN0 deploy proof re-run (then RHF-b-KN1) L37–192
− THE ONE NEXT STEP — Model: Operator section THE ONE NEXT STEP — Model: Operator L45–67
− code[text] variable variable code[text] L51–66
− This session — RHF-b-KN0 deploy proof Operator FINDINGS (2026-08-27) section This session — RHF-b-KN0 deploy proof Operator FINDINGS (2026-08-27) L84–91
− Product-order relay (2026-08-27, KN0 deploy proof FINDINGS) section Product-order relay (2026-08-27, KN0 deploy proof FINDINGS) L18–37
+ NEXT SESSION — RHF-b-KN1 DELEGATION-RETAIL section NEXT SESSION — RHF-b-KN1 DELEGATION-RETAIL L36–190
+ Prior — RHF-b-KN0 deploy proof Operator FINDINGS (2026-08-27) section Prior — RHF-b-KN0 deploy proof Operator FINDINGS (2026-08-27) L85–89
+ THE ONE NEXT STEP — Model: Operator + Auto section THE ONE NEXT STEP — Model: Operator + Auto L44–62
+ code[text] variable variable code[text] L46–61
+ This session — RHF-b-KN0 deploy proof Operator PASS (2026-08-27) section This session — RHF-b-KN0 deploy proof Operator PASS (2026-08-27) L79–85
+ Product-order relay (2026-08-27, KN0 deploy proof PASS) section Product-order relay (2026-08-27, KN0 deploy proof PASS) L18–36
~ Overseer Handover — Knowtation
~ docs/ROADMAP.md .md 5 symbols modified
~ Roadmap — knowtation
~ Build queue
~ table
~ Current status (2026-08-27)
~ table
~ hub/auth-session.mjs .mjs 2 symbols added
+ createEstablishRefreshHandler function function createEstablishRefreshHandler L183–213
+ establishRefreshHandler function async_function establishRefreshHandler L185–212
~ hub/gateway/README.md .md 2 symbols modified
~ Knowtation Hub Gateway
~ Routes
~ hub/gateway/server.mjs .mjs
~ test/gateway-auth-refresh-wiring.test.mjs .mjs
~ web/hub/hub.js .js 1 symbol added
+ establishPersistentSession function async_function establishPersistentSession L69–79
← Older Oldest on feat/hub-session-establish-refresh
All commits
Newer → Latest on feat/hub-session-establish-refresh

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:365cce3393be497724020d7c6964375dd23e0a57899e3ea4100fca2a7d0416ce --body "your comment"