refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
sosweetham wants to merge 2 commits into from
Closed

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync #985

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
133cd50
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
sosweetham May 31, 2026
17b5d66
fix(profile-editor): address CodeRabbit review on PR #985
sosweetham Jun 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions .env.example
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down
6 changes: 6 additions & 0 deletions platforms/profile-editor/api/nodemon.json
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
"watch": ["src"],
"ext": "ts,json",
"ignore": ["src/**/*.spec.ts"],
"exec": "ts-node src/index.ts"
}
20 changes: 7 additions & 13 deletions platforms/profile-editor/api/package.json
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
"name": "profile-editor-api",
"version": "1.0.0",
"description": "Profile Editor API for the w3ds ecosystem",
"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
"main": "src/index.ts",
"scripts": {
"start": "ts-node src/index.ts",
"dev": "nodemon --exec ts-node src/index.ts",
"build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
"build": "tsc",
"typeorm": "typeorm-ts-node-commonjs",
"migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
"migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
"migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
"migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
"migration:run": "npm run typeorm migration:run -- -d src/db.ts",
"migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
},
"dependencies": {
"@metastate-foundation/auth": "workspace:*",
"axios": "^1.6.7",
"cors": "^2.8.5",
"dotenv": "^16.4.5",
"express": "^4.18.2",
"form-data": "^4.0.5",
"graphql-request": "^6.1.0",
"jsonwebtoken": "^9.0.3",
"multer": "^2.1.1",
"pg": "^8.20.0",
"reflect-metadata": "^0.2.2",
"signature-validator": "workspace:*",
"web3-adapter": "workspace:*",
"typeorm": "^0.3.28",
"uuid": "^9.0.1"
"web3-adapter": "workspace:*",
"zod": "^3.23.8"
},
"devDependencies": {
"@types/cors": "^2.8.17",
"@types/express": "^4.17.21",
"@types/jsonwebtoken": "^9.0.10",
"@types/multer": "^2.1.0",
"@types/node": "^20.11.24",
"@types/pg": "^8.18.0",
"@types/uuid": "^9.0.8",
"nodemon": "^3.0.3",
"ts-node": "^10.9.2",
"typescript": "^5.3.3"
Expand Down
55 changes: 55 additions & 0 deletions platforms/profile-editor/api/src/aaas.ts
View file
Open in desktop
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
* Registers our `/api/webhook` as an AaaS subscription for the user and
* professional-profile ontologies (idempotent — skips if one already targets
* us). Logs and continues on failure so a down AaaS never blocks startup.
*/
export async function registerSubscriptionOnStartup(): Promise<void> {
if (!env.awarenessApiKey) {
console.warn(
"[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
);
return;
}

const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
const base = env.awarenessServiceUrl.replace(/\/$/, "");
Comment on lines +12 to +24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Missing null check for env.awarenessServiceUrl may cause runtime TypeError.

The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.

Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.

🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


try {
const { data } = await axios.get<{
subscriptions: Array<{ targetUrl: string }>;
}>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
console.log("[aaas] subscription already registered");
return;
}

await axios.post(
`${base}/api/subscriptions`,
{
targetUrl,
ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
evaultFilter: [],
},
{ headers, timeout: 10000 },
);
console.log(`[aaas] subscription registered -> ${targetUrl}`);
} catch (error) {
const message = axios.isAxiosError(error)
? (error.response?.data?.error ?? error.message)
: (error as Error).message;
console.error(
"[aaas] subscription registration failed (continuing):",
message,
);
}
}
134 changes: 0 additions & 134 deletions platforms/profile-editor/api/src/controllers/AuthController.ts
View file
Open in desktop

This file was deleted.

49 changes: 0 additions & 49 deletions platforms/profile-editor/api/src/controllers/DiscoveryController.ts
View file
Open in desktop

This file was deleted.

69 changes: 0 additions & 69 deletions platforms/profile-editor/api/src/controllers/FileProxyController.ts
View file
Open in desktop

This file was deleted.

Loading
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync#985

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Closed

sosweetham
wants to merge
2
commits into

from

 Closed


refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync
#985
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


2 commits


Select commit
Hold shift + click to select a range
133cd50

refactor(profile-editor): rebuild backend on web3-adapter for 2-way sync


sosweetham May 31, 2026
17b5d66

fix(profile-editor): address CodeRabbit review on PR #985


sosweetham Jun 1, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


12 changes: 12 additions & 0 deletions
.env.example

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -97,6 +97,11 @@ PUBLIC_PROVISIONER_SHARED_SECRET="your-provisioner-shared-secret"
PUBLIC_ESIGNER_BASE_URL="http://localhost:3004"
PUBLIC_FILE_MANAGER_BASE_URL="http://localhost:3005"
PUBLIC_PROFILE_EDITOR_BASE_URL=http://localhost:3007
PROFILE_EDITOR_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/profile_editor
PROFILE_EDITOR_JWT_SECRET="secret"
# web3-adapter SQLite id-map directory (localId <-> eVault globalId)
PROFILE_EDITOR_MAPPING_DB_PATH="/path/to/profile-editor/mapping/db"
# PROFILE_EDITOR_API_PORT=3007 # optional, defaults to 3007

DREAMSYNC_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/dreamsync
VITE_DREAMSYNC_BASE_URL="http://localhost:8888"
Expand DownExpand Up@@ -140,6 +145,13 @@ AWARENESS_PUBLIC_URL="http://localhost:4100"
AWARENESS_INGEST_SECRET="replace-with-a-strong-secret"
# Where evault-core forwards every awareness packet
AWARENESS_SERVICE_URL="http://localhost:4100"
# Consumer API key (aaas_...) the profile-editor backend uses to register its
# webhook subscription and poll AaaS. Issued from the AaaS portal after approval.
AWARENESS_API_KEY=""
# Public URL AaaS should POST awareness packets to. Override for local dev
# against prod AaaS — set it to your Cloudflare tunnel, e.g.
# https://xyz.trycloudflare.com/api/webhook. Defaults to {base}/api/webhook.
AWARENESS_WEBHOOK_URL=""
# Comma-separated eNames allowed to act as AaaS portal admins
AAAS_ADMIN_ENAMES=""

Expand Down

6 changes: 6 additions & 0 deletions
platforms/profile-editor/api/nodemon.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
{
	"watch": ["src"],
	"ext": "ts,json",
	"ignore": ["src/**/*.spec.ts"],
	"exec": "ts-node src/index.ts"
}

20 changes: 7 additions & 13 deletions
platforms/profile-editor/api/package.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -1,42 +1,36 @@
{
	"name": "profile-editor-api",
	"version": "1.0.0",
	"description": "Profile Editor API for the w3ds ecosystem",
	"description": "Profile Editor API for the w3ds ecosystem (AaaS-based)",
	"main": "src/index.ts",
	"scripts": {
 "start": "ts-node src/index.ts",
 "dev": "nodemon --exec ts-node src/index.ts",
 "build": "tsc && cp -r src/web3adapter/mappings dist/web3adapter/",
 "build": "tsc",
 "typeorm": "typeorm-ts-node-commonjs",
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/database/migrations/$name -d src/database/data-source.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/database/data-source.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/database/data-source.ts"
 "migration:generate": "bash -c 'read -p \"Migration name: \" name && npx typeorm-ts-node-commonjs migration:generate src/migrations/$name -d src/db.ts'",
 "migration:run": "npm run typeorm migration:run -- -d src/db.ts",
 "migration:revert": "npm run typeorm migration:revert -- -d src/db.ts"
	},
	"dependencies": {
 "@metastate-foundation/auth": "workspace:*",
 "axios": "^1.6.7",
 "cors": "^2.8.5",
 "dotenv": "^16.4.5",
 "express": "^4.18.2",
 "form-data": "^4.0.5",
 "graphql-request": "^6.1.0",
 "jsonwebtoken": "^9.0.3",
 "multer": "^2.1.1",
 "pg": "^8.20.0",
 "reflect-metadata": "^0.2.2",
 "signature-validator": "workspace:*",
 "web3-adapter": "workspace:*",
 "typeorm": "^0.3.28",
 "uuid": "^9.0.1"
 "web3-adapter": "workspace:*",
 "zod": "^3.23.8"
	},
	"devDependencies": {
 "@types/cors": "^2.8.17",
 "@types/express": "^4.17.21",
 "@types/jsonwebtoken": "^9.0.10",
 "@types/multer": "^2.1.0",
 "@types/node": "^20.11.24",
 "@types/pg": "^8.18.0",
 "@types/uuid": "^9.0.8",
 "nodemon": "^3.0.3",
 "ts-node": "^10.9.2",
 "typescript": "^5.3.3"
Expand Down

55 changes: 55 additions & 0 deletions
platforms/profile-editor/api/src/aaas.ts

View file


Open in desktop

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
import axios from "axios";
import { env } from "./env";

const USER_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440000";
const PROFESSIONAL_PROFILE_ONTOLOGY = "550e8400-e29b-41d4-a716-446655440009";

/**
 * Registers our `/api/webhook` as an AaaS subscription for the user and
 * professional-profile ontologies (idempotent — skips if one already targets
 * us). Logs and continues on failure so a down AaaS never blocks startup.
 */
export async function registerSubscriptionOnStartup(): Promise<void> {
 if (!env.awarenessApiKey) {
 console.warn(
 "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",
 );
 return;
 }

 const targetUrl =
 env.awarenessWebhookUrl ||
 `${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
 const headers = { Authorization: `Bearer ${env.awarenessApiKey}` };
 const base = env.awarenessServiceUrl.replace(/\/$/, "");

Comment on lines

+12
 to 
+24

@coderabbitaicoderabbitaiBotMay 31, 2026

Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win
Missing null check for env.awarenessServiceUrl may cause runtime TypeError.
The function checks env.awarenessApiKey on line 13, but proceeds to use env.awarenessServiceUrl.replace() on line 24 without verifying it's defined. If the API key is set but the service URL is not, this will throw a TypeError: Cannot read properties of undefined (reading 'replace'), bypassing the graceful error handling.
Similarly, env.baseUrl is used on line 22 without a guard when env.awarenessWebhookUrl is not set.
🛡️ Proposed fix to validate required config
 export async function registerSubscriptionOnStartup(): Promise<void> {
- if (!env.awarenessApiKey) {+ if (!env.awarenessApiKey || !env.awarenessServiceUrl) {
console.warn(
- "[aaas] AWARENESS_API_KEY not set — skipping subscription registration",+ "[aaas] AWARENESS_API_KEY or AWARENESS_SERVICE_URL not set — skipping subscription registration",
);
return;
}
+ if (!env.awarenessWebhookUrl && !env.baseUrl) {+ console.warn(+ "[aaas] Neither AWARENESS_WEBHOOK_URL nor BASE_URL set — skipping subscription registration",+ );+ return;+ }+
const targetUrl =
env.awarenessWebhookUrl ||
`${env.baseUrl.replace(/\/$/, "")}/api/webhook`;
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@platforms/profile-editor/api/src/aaas.ts` around lines 12 - 24, The
registerSubscriptionOnStartup function uses env.baseUrl and
env.awarenessServiceUrl without null/undefined checks which can cause a
TypeError when one is missing; update registerSubscriptionOnStartup to validate
that env.awarenessServiceUrl (and env.baseUrl when awarenessWebhookUrl is not
provided) are defined before calling .replace(), and if they are missing either
log an explicit error/warning and return early or throw a clear error —
reference the symbols env.awarenessServiceUrl, env.baseUrl, and
env.awarenessWebhookUrl and perform the checks near where targetUrl and base are
computed so the function never calls .replace() on undefined.


 try {
 const { data } = await axios.get<{
 subscriptions: Array<{ targetUrl: string }>;
 }>(`${base}/api/subscriptions`, { headers, timeout: 10000 });

 if (data.subscriptions?.some((s) => s.targetUrl === targetUrl)) {
 console.log("[aaas] subscription already registered");
 return;
 }

 await axios.post(
 `${base}/api/subscriptions`,
 {
 targetUrl,
 ontologyFilter: [USER_ONTOLOGY, PROFESSIONAL_PROFILE_ONTOLOGY],
 evaultFilter: [],
 },
 { headers, timeout: 10000 },
 );
 console.log(`[aaas] subscription registered -> ${targetUrl}`);
 } catch (error) {
 const message = axios.isAxiosError(error)
 ? (error.response?.data?.error ?? error.message)
 : (error as Error).message;
 console.error(
 "[aaas] subscription registration failed (continuing):",
 message,
 );
 }
}

134 changes: 0 additions & 134 deletions
platforms/profile-editor/api/src/controllers/AuthController.ts

View file


Open in desktop


This file was deleted.


49 changes: 0 additions & 49 deletions
platforms/profile-editor/api/src/controllers/DiscoveryController.ts

View file


Open in desktop


This file was deleted.


69 changes: 0 additions & 69 deletions
platforms/profile-editor/api/src/controllers/FileProxyController.ts

View file


Open in desktop


This file was deleted.

Loading
Loading