@axiom-lattice/gateway 2.1.102 → 2.1.104

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/gateway@2.1.102 build /home/runner/work/agentic/agentic/packages/gateway
+> @axiom-lattice/gateway@2.1.104 build /home/runner/work/agentic/agentic/packages/gateway
 > tsup src/index.ts --format cjs,esm --dts --clean --sourcemap
 
 CLI Building entry: src/index.ts
@@ -18,25 +18,25 @@
   You need to set the output format to "esm" for "import.meta" to work correctly.
 
 
+CJS dist/index.js     323.03 KB
+CJS dist/index.js.map 662.42 KB
+CJS ⚡️ Build success in 364ms
 ESM dist/index.mjs                             271.42 KB
 ESM dist/sender-PX32VSHB.mjs                   873.00 B
 ESM dist/WechatChannelAdapter-WSDKR4OA.mjs     8.27 KB
 ESM dist/chunk-6CUQGDJI.mjs                    6.42 KB
 ESM dist/a2a-ERG5RMUW.mjs                      15.95 KB
-ESM dist/resources-3DGHISBZ.mjs                8.12 KB
+ESM dist/resources-NE6DFF5I.mjs                10.75 KB
 ESM dist/chunk-R4ZO3HZ3.mjs                    1.44 KB
-ESM dist/index.mjs.map                         575.75 KB
 ESM dist/sender-PX32VSHB.mjs.map               2.07 KB
 ESM dist/WechatChannelAdapter-WSDKR4OA.mjs.map 16.28 KB
 ESM dist/chunk-6CUQGDJI.mjs.map                14.04 KB
 ESM dist/a2a-ERG5RMUW.mjs.map                  32.14 KB
-ESM dist/resources-3DGHISBZ.mjs.map            15.35 KB
+ESM dist/resources-NE6DFF5I.mjs.map            19.57 KB
 ESM dist/chunk-R4ZO3HZ3.mjs.map                2.35 KB
-ESM ⚡️ Build success in 520ms
-CJS dist/index.js     320.15 KB
-CJS dist/index.js.map 658.17 KB
-CJS ⚡️ Build success in 535ms
+ESM dist/index.mjs.map                         575.75 KB
+ESM ⚡️ Build success in 371ms
 DTS Build start
-DTS ⚡️ Build success in 18706ms
+DTS ⚡️ Build success in 16969ms
 DTS dist/index.d.ts  7.57 KB
 DTS dist/index.d.mts 7.57 KB

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @axiom-lattice/gateway
 
+## 2.1.104
+
+### Patch Changes
+
+- 4ff0c0f: enhance share
+- Updated dependencies [4ff0c0f]
+  - @axiom-lattice/core@2.1.92
+  - @axiom-lattice/agent-eval@2.1.86
+  - @axiom-lattice/pg-stores@1.0.83
+
+## 2.1.103
+
+### Patch Changes
+
+- 9d3cb30: fix share url
+- Updated dependencies [9d3cb30]
+  - @axiom-lattice/core@2.1.91
+  - @axiom-lattice/pg-stores@1.0.82
+  - @axiom-lattice/protocols@2.1.46
+  - @axiom-lattice/queue-redis@1.0.45
+  - @axiom-lattice/agent-eval@2.1.85
+
 ## 2.1.102
 
 ### Patch Changes

package/dist/index.js

@@ -1197,10 +1197,11 @@ var resources_exports = {};
 __export(resources_exports, {
   ResourceController: () => ResourceController
 });
-var import_core35, ResourceController;
+var import_bcryptjs, import_core35, ResourceController;
 var init_resources = __esm({
   "src/controllers/resources.ts"() {
     "use strict";
+    import_bcryptjs = __toESM(require("bcryptjs"));
     import_core35 = require("@axiom-lattice/core");
     init_mime();
     ResourceController = class {
@@ -1227,8 +1228,8 @@ var init_resources = __esm({
         try {
           await this.deps.store.create({ ...payload, token });
           this.deps.logger.info(
-            "Share created",
-            { token, resourcePath: body.resourcePath, userId }
+            "[share] created",
+            { token, originalPath: body.resourcePath, normalizedPath: payload.address.resourcePath, volume: payload.address.volume, userId }
           );
         } catch {
           return reply.status(500).send({ error: "Failed to create share" });
@@ -1270,22 +1271,44 @@ var init_resources = __esm({
         const params = request.params;
         const { token } = params;
         const subPath = params["*"] ?? "";
+        this.deps.logger.info("[share] resolve start", { token, subPath });
         const cached = this.deps.cache.get(token);
         if (cached && !cached.requiresUnlock) {
-          return this._serveFile(cached.address, token, subPath, reply);
+          this.deps.logger.info("[share] cache hit", { token, volume: cached.address.volume, resourcePath: cached.address.resourcePath });
+          return this._serveFile(cached.address, token, subPath, cached.sandboxConfig ?? { tenantId: "default", workspaceId: "", projectId: "", assistantId: null }, reply);
         }
+        this.deps.logger.info("[share] cache miss, querying DB", { token });
         const record = await this.deps.store.findByToken(token);
-        if (!record || record.revoked) return reply.status(404).send("Not found");
+        if (!record || record.revoked) {
+          this.deps.logger.warn("[share] token not found or revoked", { token, found: !!record, revoked: record?.revoked });
+          return reply.status(404).send("Not found");
+        }
         if (record.expiresAt && new Date(record.expiresAt) < /* @__PURE__ */ new Date()) {
+          this.deps.logger.info("[share] token expired", { token, expiresAt: record.expiresAt });
           return reply.status(410).send("Expired");
         }
-        if (!this._isInternalRequest(request)) {
+        this.deps.logger.info("[share] record found", {
+          token,
+          volume: record.address.volume,
+          resourcePath: record.address.resourcePath,
+          visibility: record.visibility,
+          workspaceId: record.workspaceId,
+          projectId: record.projectId
+        });
+        const isInternal = this._isInternalRequest(request);
+        if (!isInternal) {
           if (record.visibility === "password") {
             const unlocked = this._isUnlocked(request, token);
             if (!unlocked) {
-              this.deps.cache.set(token, { address: record.address, requiresUnlock: true });
+              this.deps.logger.info("[share] password protected, returning password page", { token });
+              this.deps.cache.set(token, {
+                address: record.address,
+                requiresUnlock: true,
+                sandboxConfig: { tenantId: record.tenantId, workspaceId: record.workspaceId, projectId: record.projectId, assistantId: record.assistantId }
+              });
               return reply.type("text/html").send(this._passwordPage(token));
             }
+            this.deps.logger.info("[share] password unlocked", { token });
           }
         }
         if (record.maxAccess !== null) {
@@ -1295,11 +1318,13 @@ var init_resources = __esm({
           this.deps.store.incrementAccess(token).catch(() => {
           });
         }
+        const sandboxConfig = { tenantId: record.tenantId, workspaceId: record.workspaceId, projectId: record.projectId, assistantId: record.assistantId };
         this.deps.cache.set(token, {
           address: record.address,
-          requiresUnlock: record.visibility === "password" && !this._isInternalRequest(request)
+          requiresUnlock: record.visibility === "password" && !isInternal,
+          sandboxConfig
         });
-        return this._serveFile(record.address, token, subPath, reply);
+        return this._serveFile(record.address, token, subPath, sandboxConfig, reply);
       }
       async unlockShare(request, reply) {
         const { token } = request.params;
@@ -1308,7 +1333,7 @@ var init_resources = __esm({
         if (!record || !record.passwordHash) {
           return reply.status(404).send({ error: "Invalid request" });
         }
-        const valid = password === record.passwordHash;
+        const valid = await import_bcryptjs.default.compare(password, record.passwordHash);
         if (!valid) {
           return reply.status(401).send({ error: "Incorrect password" });
         }
@@ -1326,20 +1351,45 @@ var init_resources = __esm({
         const cookie = request.headers.cookie ?? "";
         return cookie.includes(`share_unlock_${token}=1`);
       }
-      async _serveFile(address, token, subPath, reply) {
+      async _serveFile(address, token, subPath, sandboxConfig, reply) {
         const provider = this.deps.sandboxManager.getDefaultProvider();
         const resolver = provider.getResourceResolver();
-        const fullPath = subPath ? this._resolveSafeSubPath(address.resourcePath, subPath) : address.resourcePath;
+        const sandboxPath = subPath ? this._resolveSafeSubPath(address.resourcePath, subPath) : address.resourcePath;
+        this.deps.logger.info("[share] serving file", {
+          token,
+          volume: address.volume,
+          sandboxPath,
+          subPath: subPath || "(none)",
+          tenantId: sandboxConfig.tenantId,
+          workspaceId: sandboxConfig.workspaceId,
+          projectId: sandboxConfig.projectId
+        });
         let buf;
         try {
-          buf = await resolver.resolve({ ...address, resourcePath: fullPath });
+          buf = await resolver.resolve({ ...address, resourcePath: sandboxPath });
+          this.deps.logger.info("[share] resolved via volume FS", { token, size: buf.length });
         } catch (err) {
-          this.deps.logger.warn(
-            "Resource resolution failed",
-            { token, resourcePath: fullPath, error: err.message }
-          );
-          return reply.status(404).send("File not found");
+          this.deps.logger.warn("[share] volume FS failed, trying sandbox fallback", {
+            token,
+            path: sandboxPath,
+            error: err.message
+          });
+          try {
+            const sandbox = await this.deps.sandboxManager.getSandboxFromConfig({
+              assistant_id: sandboxConfig.assistantId ?? "",
+              thread_id: "",
+              tenantId: sandboxConfig.tenantId,
+              workspaceId: sandboxConfig.workspaceId,
+              projectId: sandboxConfig.projectId
+            });
+            buf = await sandbox.file.downloadFile({ file: `/project/${sandboxPath}` });
+            this.deps.logger.info("[share] resolved via sandbox fallback", { token, size: buf.length });
+          } catch (err2) {
+            this.deps.logger.warn("[share] all resolution attempts failed", { token, resourcePath: sandboxPath, error: err2.message });
+            return reply.status(404).send("File not found");
+          }
         }
+        const fullPath = sandboxPath;
         const filename = fullPath.split("/").pop() || "download";
         const isHtml = !subPath && /\.(html|htm)$/i.test(filename);
         if (isHtml) {