gateway.mjs
35 lines 1.9 KB
Raw
sha256:e4c529f14a0bb908c1caaaeb3f95f3623a1a82e636e7e3722ca2cd3dc9821263 security: npm audit fix pre-bridge 2026-07-29 Human 41 days ago
1 /**
2 * Netlify serverless wrapper for the Knowtation Hub Gateway.
3 * Redirects all traffic to this function; the Express app handles /auth/* and /api/*.
4 * Persists hosted billing state in Netlify Blobs (store `gateway-billing`).
5 */
6 import serverless from 'serverless-http';
7 import { connectLambda, getStore } from '@netlify/blobs';
8 import { app } from '../../hub/gateway/server.mjs';
9
10 export const handler = async (event, context) => {
11 connectLambda(event);
12 globalThis.__knowtation_gateway_blob = getStore({ name: 'gateway-billing', consistency: 'eventual' });
13 globalThis.__knowtation_attest_blob = getStore({ name: 'gateway-attestation', consistency: 'eventual' });
14 // Refresh-token store. Strong consistency is NOT available here: this gateway runs in Netlify's
15 // Lambda compatibility mode (serverless-http + connectLambda), which wires up only edge
16 // (eventual) access and omits the `uncachedEdgeURL` that strong-consistency reads require — a
17 // strong read throws BlobsConsistencyError, which previously blocked every refresh-cookie write.
18 // We therefore use eventual consistency (same as the billing store). Reuse detection still holds
19 // after edge propagation (<60s, usually sub-second); see the trade-off note and hardening options
20 // in hub/gateway/refresh-token-store.mjs.
21 globalThis.__knowtation_gateway_auth_blob = getStore({ name: 'gateway-auth', consistency: 'eventual' });
22 // Phase C — dedicated agent-credential store (never refresh-tokens-v1 / gateway-auth).
23 globalThis.__knowtation_gateway_agent_cred_blob = getStore({
24 name: 'gateway-agent-credentials',
25 consistency: 'eventual',
26 });
27 try {
28 return await serverless(app)(event, context);
29 } finally {
30 delete globalThis.__knowtation_gateway_blob;
31 delete globalThis.__knowtation_attest_blob;
32 delete globalThis.__knowtation_gateway_auth_blob;
33 delete globalThis.__knowtation_gateway_agent_cred_blob;
34 }
35 };
File History 6 commits
sha256:e4c529f14a0bb908c1caaaeb3f95f3623a1a82e636e7e3722ca2cd3dc9821263 security: npm audit fix pre-bridge 2026-07-29 Human 41 days ago
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf mirror: GitHub Phase A durable MCP OAuth (#270) Human minor 57 days ago
sha256:873e30b7fafe601346295f8f4289f388f21d8f715f28584d5481899ba2b714fc Merge pull request #249 from aaronrene/muse-mirror Agent 75 days ago
sha256:d8c648b20a4d53b2673c5c082ee7edfa7b2fc9b11080832da1f38807b6bf940b fix(7C-L1b): route hosted delegation proposals through cani… Human minor 77 days ago
sha256:2827ba9e7632a4b141c50caf1e8f7d77abbc3515be20e7465f2bccb0ac4edf91 fix: repair endpoint now sets has_active_subscription when … Human minor 97 days ago