fix: align CLI auth compatibility checks (#1)

* fix: align CLI auth compatibility checks

* ci(connect): sync DataConnect download version

* fix: preserve relay body hash compatibility

* fix: point SDK gateway defaults at DP RPC

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: tnunamak

connect/src/app/admin/_lib/register-builder.ts

@@ -17,7 +17,7 @@ const BUILDER_REGISTRATION_TYPES = {
   ],
 } as const;
 
-const GATEWAY_URL = "https://data-gateway.vana.org";
+const GATEWAY_URL = process.env.DATA_GATEWAY_URL ?? "https://dp-rpc.vana.org";
 
 export type RegisterBuilderErrorCode =
   | "ALREADY_REGISTERED"

connect/src/config/config.ts

@@ -8,7 +8,7 @@ export type DownloadAsset = {
   comingSoon?: boolean;
 };
 
-const DOWNLOAD_VERSION = "0.7.35";
+const DOWNLOAD_VERSION = "0.7.52";
 const DATA_CONNECT_GITHUB_RELEASES_URL =
   "https://github.com/vana-com/data-connect/releases";
 

connect/src/lib/server-provider/register-on-chain.ts

@@ -36,8 +36,7 @@ const SERVER_REGISTRATION_TYPES = {
   ],
 } as const;
 
-const GATEWAY_URL =
-  process.env.DATA_GATEWAY_URL ?? "https://data-gateway.vana.org";
+const GATEWAY_URL = process.env.DATA_GATEWAY_URL ?? "https://dp-rpc.vana.org";
 
 export type RegisterServerErrorCode =
   | "ALREADY_REGISTERED"

src/cli/index.ts

@@ -1274,6 +1274,7 @@ async function runConnect(
     let ingestFailureMessage: string | null = null;
     let resultPath = getSourceResultPath(source);
     let collectedResult = false;
+    let blockedByRequiredInput = false;
     let ingestScopeResults:
       | Array<{
           scope: string;
@@ -1348,6 +1349,9 @@ async function runConnect(
       }
 
       if (event.type === "needs-input") {
+        if (options.noInput && !options.ipc) {
+          blockedByRequiredInput = true;
+        }
         await updateSourceState(resolution.source, {
           lastRunAt: new Date().toISOString(),
           lastRunOutcome: CliOutcomeStatus.NEEDS_INPUT,
@@ -1448,6 +1452,10 @@ async function runConnect(
       }
 
       if (event.type === "collection-complete" && event.resultPath) {
+        if (blockedByRequiredInput) {
+          continue;
+        }
+
         // Check if the result is actually an error object
         try {
           const raw = await fsp.readFile(event.resultPath, "utf8");

src/core/constants.ts

@@ -5,12 +5,12 @@ export type VanaEnvironment = "dev" | "prod";
 export const ENV_CONFIG = {
   dev: {
     sessionRelayUrl: "https://dev.session-relay.vana.org",
-    gatewayUrl: "https://dev.data-gateway.vana.org",
+    gatewayUrl: "https://dp-rpc-dev.vana.org",
     accountUrl: "https://account-dev.vana.org",
   },
   prod: {
     sessionRelayUrl: "https://session-relay.vana.org",
-    gatewayUrl: "https://data-gateway.vana.org",
+    gatewayUrl: "https://dp-rpc.vana.org",
     accountUrl: "https://account.vana.org",
   },
 } as const;

src/core/types.ts

@@ -72,6 +72,12 @@ export interface DataFetchParams {
 export interface RequestSignerConfig {
   /** Builder private key in hex format. */
   privateKey: `0x${string}`;
+  /**
+   * Body hash wire format.
+   * - `"legacy"`: bare sha256 hex, with `""` for empty bodies. Required by the current Session Relay.
+   * - `"prefixed"`: `sha256:<hex>`, including the canonical empty-body hash.
+   */
+  bodyHashFormat?: "legacy" | "prefixed";
 }
 
 /** Configuration for {@link createSessionRelay}. */

src/server/data-client.ts

@@ -28,7 +28,10 @@ export interface DataClient {
  */
 export function createDataClient(config: DataClientConfig): DataClient {
   const gatewayBase = config.gatewayUrl.replace(/\/+$/, "");
-  const signer = createRequestSigner({ privateKey: config.privateKey });
+  const signer = createRequestSigner({
+    privateKey: config.privateKey,
+    bodyHashFormat: "prefixed",
+  });
 
   return {
     async resolveServerUrl(userAddress: string): Promise<string> {

src/server/request-signer.ts

@@ -2,6 +2,10 @@ import { createHash } from "node:crypto";
 import { privateKeyToAccount } from "viem/accounts";
 import type { RequestSignerConfig } from "../core/types.js";
 
+const EMPTY_BODY_HASH =
+  "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
+type BodyHashFormat = NonNullable<RequestSignerConfig["bodyHashFormat"]>;
+
 function base64urlEncode(input: string): string {
   return Buffer.from(input, "utf-8")
     .toString("base64")
@@ -21,14 +25,18 @@ function canonicalizeJson(obj: unknown): unknown {
   return sorted;
 }
 
-function computeBodyHash(body?: string): string {
+function computeBodyHash(
+  body: string | undefined,
+  format: BodyHashFormat,
+): string {
   if (!body || body.length === 0) {
-    return "";
+    return format === "prefixed" ? EMPTY_BODY_HASH : "";
   }
   const parsed = JSON.parse(body);
   const canonical = canonicalizeJson(parsed);
   const canonicalStr = JSON.stringify(canonical);
-  return createHash("sha256").update(canonicalStr).digest("hex");
+  const hash = createHash("sha256").update(canonicalStr).digest("hex");
+  return format === "prefixed" ? `sha256:${hash}` : hash;
 }
 
 /**
@@ -64,6 +72,7 @@ export function createRequestSigner(
   config: RequestSignerConfig,
 ): RequestSigner {
   const account = privateKeyToAccount(config.privateKey);
+  const bodyHashFormat = config.bodyHashFormat ?? "legacy";
 
   return {
     address: account.address,
@@ -73,7 +82,7 @@ export function createRequestSigner(
 
       const payload: Record<string, unknown> = {
         aud: params.aud,
-        bodyHash: computeBodyHash(params.body),
+        bodyHash: computeBodyHash(params.body, bodyHashFormat),
         exp: now + 300,
         iat: now,
         method: params.method,

test/cli/index.test.ts

@@ -1070,12 +1070,12 @@ describe("runCli", () => {
           account: {
             address: "0x2ab394e4be7c43ac360d226a31e1c90bc01aafa1",
             session_token: "vana_account_session",
-            expires_at: "2026-04-22T19:25:14.420Z",
+            expires_at: "2027-04-22T19:25:14.420Z",
           },
           personal_server: {
             url: "https://0x2ab394e4be7c43ac360d226a31e1c90bc01aafa1.myvana.app",
             session_token: "vana_ps_session",
-            expires_at: "2026-04-22T19:25:14.420Z",
+            expires_at: "2027-04-22T19:25:14.420Z",
           },
         });
       }
@@ -1137,6 +1137,12 @@ describe("runCli", () => {
         message: "Steam needs credentials",
         fields: ["username", "password"],
       },
+      {
+        type: "collection-complete",
+        source: "steam",
+        resultPath: "/tmp/.vana/steam-result.json",
+        logPath: "/tmp/logs/run.log",
+      },
     ];
 
     const { runCli } = await import("../../src/cli/index.js");
@@ -1168,6 +1174,19 @@ describe("runCli", () => {
         source: "steam",
       }),
     );
+    expect(lines).not.toContainEqual(
+      expect.objectContaining({
+        type: "outcome",
+        status: "connected_local_only",
+        source: "steam",
+      }),
+    );
+    expect(mockUpdateSourceState).not.toHaveBeenCalledWith(
+      "steam",
+      expect.objectContaining({
+        lastRunOutcome: "connected_local_only",
+      }),
+    );
   });
 
   it("shows a clear human message when input is required in no-input mode", async () => {

test/core/constants.test.ts

@@ -10,13 +10,14 @@ describe("getEnvConfig", () => {
     const config = getEnvConfig("dev");
     expect(config).toBe(ENV_CONFIG.dev);
     expect(config.sessionRelayUrl).toContain("session-relay");
-    expect(config.gatewayUrl).toContain("data-gateway");
+    expect(config.gatewayUrl).toBe("https://dp-rpc-dev.vana.org");
     expect(config.accountUrl).toBe("https://account-dev.vana.org");
   });
 
   it("returns prod config for 'prod'", () => {
     const config = getEnvConfig("prod");
     expect(config).toBe(ENV_CONFIG.prod);
+    expect(config.gatewayUrl).toBe("https://dp-rpc.vana.org");
     expect(config.accountUrl).toBe("https://account.vana.org");
   });