Skip to content

fix(mu,scheduler-utils): fix whitelist blocking and bundled process l…#1302

Closed
Lucifer0x17 wants to merge 1 commit intomainfrom
fix/mu-whitelist-and-scheduler-utils-bundled-query
Closed

fix(mu,scheduler-utils): fix whitelist blocking and bundled process l…#1302
Lucifer0x17 wants to merge 1 commit intomainfrom
fix/mu-whitelist-and-scheduler-utils-bundled-query

Conversation

@Lucifer0x17
Copy link
Copy Markdown

  • MU whitelist bug: When PROCESS_WHITELIST_URL is unset or fetch fails, fetchProcessWhitelist() returns {} which is truthy in JS. The check whitelist && !whitelist[target] evaluates to true for every process, blocking all messages
    with 403. Fixed by adding Object.keys(whitelist).length > 0 guard.

    • scheduler-utils bundled item lookup: loadProcessSchedulerWith queries Arweave GraphQL with a Data-Protocol=ao tag filter. Both arweave.net/graphql and goldsky fail to match this filter on bundled data items (ANS-104), even when
      the tag exists on the item. Removed the filter from the query (safe since we query by exact transaction ID) and added code-level validation for Data-Protocol=ao instead.

    Test plan

    • Verified empty whitelist no longer blocks messages
    • Verified bundled process found via GraphQL without tag filter
    • Verified non-ao transactions rejected by code-level Data-Protocol check
    • End-to-end: legacy AOS Send() → local MU → SU → CU → HyperBEAM process inbox

…ookup

- fix(mu): empty process whitelist (`{}`) was truthy, blocking all
  messages with 403 when PROCESS_WHITELIST_URL is unset or fetch fails.
  Added Object.keys check so empty whitelist means "allow all".

- fix(scheduler-utils): GraphQL tag filter `Data-Protocol=ao` in
  loadProcessSchedulerWith does not match bundled data items (ANS-104)
  on Arweave gateways, even when the tag exists. Removed filter from
  query since we query by exact transaction ID, added code-level
  validation for Data-Protocol=ao instead.
@Lucifer0x17
Copy link
Copy Markdown
Author

This is addressed more gracfully by @VinceJuliano in a soeaerate commit.

@Lucifer0x17 Lucifer0x17 closed this Apr 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant