gateway.mjs
sha256:65ccb454656ea5acdea0a10e559b78bcde1eb6ff753ecc2911bc99d1c3d7cadd
feat(calendar): enforce agent context tiers in retrieval AP…
Human
minor
⚠ breaking
1 day ago
| 1 | /** |
| 2 | * Netlify serverless wrapper for the Knowtation Hub Gateway. |
| 3 | * Redirects all traffic to this function; the Express app handles /auth/* and /api/*. |
| 4 | * Persists hosted billing state in Netlify Blobs (store `gateway-billing`). |
| 5 | */ |
| 6 | import serverless from 'serverless-http'; |
| 7 | import { connectLambda, getStore } from '@netlify/blobs'; |
| 8 | import { app } from '../../hub/gateway/server.mjs'; |
| 9 | |
| 10 | export const handler = async (event, context) => { |
| 11 | connectLambda(event); |
| 12 | globalThis.__knowtation_gateway_blob = getStore({ name: 'gateway-billing', consistency: 'eventual' }); |
| 13 | globalThis.__knowtation_attest_blob = getStore({ name: 'gateway-attestation', consistency: 'eventual' }); |
| 14 | // Refresh-token store. Strong consistency is NOT available here: this gateway runs in Netlify's |
| 15 | // Lambda compatibility mode (serverless-http + connectLambda), which wires up only edge |
| 16 | // (eventual) access and omits the `uncachedEdgeURL` that strong-consistency reads require — a |
| 17 | // strong read throws BlobsConsistencyError, which previously blocked every refresh-cookie write. |
| 18 | // We therefore use eventual consistency (same as the billing store). Reuse detection still holds |
| 19 | // after edge propagation (<60s, usually sub-second); see the trade-off note and hardening options |
| 20 | // in hub/gateway/refresh-token-store.mjs. |
| 21 | globalThis.__knowtation_gateway_auth_blob = getStore({ name: 'gateway-auth', consistency: 'eventual' }); |
| 22 | try { |
| 23 | return await serverless(app)(event, context); |
| 24 | } finally { |
| 25 | delete globalThis.__knowtation_gateway_blob; |
| 26 | delete globalThis.__knowtation_attest_blob; |
| 27 | delete globalThis.__knowtation_gateway_auth_blob; |
| 28 | } |
| 29 | }; |
File History
2 commits
sha256:65ccb454656ea5acdea0a10e559b78bcde1eb6ff753ecc2911bc99d1c3d7cadd
feat(calendar): enforce agent context tiers in retrieval AP…
Human
minor
⚠
1 day ago
sha256:9103f98c89257ed2b01c237cea895dabb3e85ea337dccb1161c175e4422355b6
docs: accept Calendar Events v0 spec with Phase 0 security …
Human
1 day ago