@axiom-lattice/gateway 2.1.64 → 2.1.66

package/dist/index.mjs

@@ -204,6 +204,11 @@ import {
   agentInstanceManager as agentInstanceManager2
 } from "@axiom-lattice/core";
 import { MessageChunkTypes } from "@axiom-lattice/protocols";
+function getUserId(request) {
+  const authUser = request.user;
+  if (authUser?.id) return authUser.id;
+  return request.headers["x-user-id"] || void 0;
+}
 var createRun = async (request, reply) => {
   try {
     const {
@@ -221,6 +226,8 @@ var createRun = async (request, reply) => {
     const workspace_id = request.headers["x-workspace-id"];
     const project_id = request.headers["x-project-id"];
     const x_request_id = request.headers["x-request-id"] || v4();
+    const user_id = getUserId(request);
+    const mergedConfig = user_id ? { ...custom_run_config, user_id } : custom_run_config;
     if (!assistant_id) {
       reply.status(400).send({
         success: false,
@@ -234,7 +241,7 @@ var createRun = async (request, reply) => {
       tenant_id,
       workspace_id,
       project_id,
-      custom_run_config
+      custom_run_config: mergedConfig
     });
     if (streaming) {
       reply.hijack();
@@ -249,7 +256,7 @@ var createRun = async (request, reply) => {
         const result = await agent.addMessage({
           input: messageInput,
           command,
-          custom_run_config
+          custom_run_config: mergedConfig
         }, mode);
         const stream = agent.chunkStream(result.messageId, [MessageChunkTypes.MESSAGE_COMPLETED]);
         for await (const chunk of stream) {
@@ -279,7 +286,7 @@ var createRun = async (request, reply) => {
       const result = await agent.invoke({
         input: { message: msg, ...restInputNonStream },
         command,
-        custom_run_config
+        custom_run_config: mergedConfig
       });
       reply.status(200).send({
         success: true,
@@ -5004,35 +5011,31 @@ var AuthController = class {
     }
   }
 };
+function extractUserFromAuthHeader(authHeader) {
+  if (!authHeader?.startsWith("Bearer ")) return void 0;
+  const token = authHeader.substring(7);
+  try {
+    const payload = JSON.parse(atob(token));
+    if (payload.exp && payload.exp < Date.now()) return void 0;
+    return {
+      id: payload.userId,
+      tenantId: payload.tenantId
+    };
+  } catch {
+    return void 0;
+  }
+}
 function registerAuthRoutes(app2, config) {
   const controller = new AuthController(config);
   const authHook = async (request, reply) => {
-    const authHeader = request.headers.authorization;
-    if (!authHeader || !authHeader.startsWith("Bearer ")) {
-      return reply.status(401).send({
-        success: false,
-        error: "Unauthorized - Missing or invalid token"
-      });
-    }
-    const token = authHeader.substring(7);
-    try {
-      const payload = JSON.parse(atob(token));
-      if (payload.exp && payload.exp < Date.now()) {
-        return reply.status(401).send({
-          success: false,
-          error: "Unauthorized - Token expired"
-        });
-      }
-      request.user = {
-        id: payload.userId,
-        tenantId: payload.tenantId
-      };
-    } catch {
+    const user = extractUserFromAuthHeader(request.headers.authorization);
+    if (!user) {
       return reply.status(401).send({
         success: false,
-        error: "Unauthorized - Invalid token"
+        error: "Unauthorized"
       });
     }
+    request.user = user;
   };
   app2.post("/api/auth/register", controller.register.bind(controller));
   app2.post("/api/auth/login", controller.login.bind(controller));
@@ -6235,7 +6238,6 @@ import {
   sandboxLatticeManager as sandboxLatticeManager2,
   sqlDatabaseManager as sqlDatabaseManager2,
   getStoreLattice as getStoreLattice13,
-  storeLatticeManager,
   agentInstanceManager as agentInstanceManager8,
   createSandboxProvider
 } from "@axiom-lattice/core";
@@ -6279,16 +6281,33 @@ app.addContentTypeParser("application/json", { parseAs: "string" }, function(req
     done(err, void 0);
   }
 });
+var getHeaderValue = (header) => {
+  if (Array.isArray(header)) {
+    return header[0];
+  }
+  return header;
+};
+var PUBLIC_ROUTES = ["/api/auth/login", "/api/auth/register", "/health"];
+app.addHook("preHandler", async (request, reply) => {
+  const user = extractUserFromAuthHeader(request.headers.authorization);
+  if (user) {
+    request.user = user;
+    return;
+  }
+  const authRequired = process.env.AUTH_REQUIRED === "true";
+  if (!authRequired) return;
+  if (request.method === "OPTIONS") return;
+  if (PUBLIC_ROUTES.some((r) => request.url === r)) return;
+  return reply.status(401).send({
+    success: false,
+    error: "Unauthorized - Missing or invalid token"
+  });
+});
 app.addHook("onRequest", (request, reply, done) => {
-  const getHeaderValue = (header) => {
-    if (Array.isArray(header)) {
-      return header[0];
-    }
-    return header;
-  };
   const context = {
     "x-tenant-id": getHeaderValue(request.headers["x-tenant-id"]),
-    "x-request-id": getHeaderValue(request.headers["x-request-id"])
+    "x-request-id": getHeaderValue(request.headers["x-request-id"]),
+    "x-user-id": getHeaderValue(request.headers["x-user-id"])
   };
   if (loggerLattice.updateContext) {
     loggerLattice.updateContext(context);
@@ -6296,15 +6315,10 @@ app.addHook("onRequest", (request, reply, done) => {
   done();
 });
 app.addHook("onResponse", (request, reply, done) => {
-  const getHeaderValue = (header) => {
-    if (Array.isArray(header)) {
-      return header[0];
-    }
-    return header;
-  };
   const context = {
     "x-tenant-id": getHeaderValue(request.headers["x-tenant-id"]),
-    "x-request-id": getHeaderValue(request.headers["x-request-id"])
+    "x-request-id": getHeaderValue(request.headers["x-request-id"]),
+    "x-user-id": getHeaderValue(request.headers["x-user-id"])
   };
   done();
 });
@@ -6329,15 +6343,10 @@ app.register(staticPlugin, {
   prefix: "/"
 });
 app.setErrorHandler((error, request, reply) => {
-  const getHeaderValue = (header) => {
-    if (Array.isArray(header)) {
-      return header[0];
-    }
-    return header;
-  };
   const context = {
     "x-tenant-id": getHeaderValue(request.headers["x-tenant-id"]),
-    "x-request-id": getHeaderValue(request.headers["x-request-id"])
+    "x-request-id": getHeaderValue(request.headers["x-request-id"]),
+    "x-user-id": getHeaderValue(request.headers["x-user-id"])
   };
   logger.error(
     `\u8BF7\u6C42\u9519\u8BEF: ${request.method} ${request.url} error:${error.message}`,
@@ -6395,21 +6404,6 @@ var start = async (config) => {
       sandboxLatticeManager2.registerLattice("default", getConfiguredSandboxProvider());
       logger.info("Registered sandbox manager from env configuration");
     }
-    if (process.env.DATABASE_URL) {
-      try {
-        const { PostgreSQLWorkflowTrackingStore } = await import("@axiom-lattice/pg-stores");
-        const pgStore = new PostgreSQLWorkflowTrackingStore({
-          poolConfig: process.env.DATABASE_URL
-        });
-        if (storeLatticeManager.hasLattice("default", "workflowTracking")) {
-          storeLatticeManager.removeLattice("default", "workflowTracking");
-        }
-        storeLatticeManager.registerLattice("default", "workflowTracking", pgStore);
-        logger.info("Workflow tracking store switched to PostgreSQL");
-      } catch (error) {
-        logger.warn("Failed to switch workflow tracking to PostgreSQL, keeping in-memory: " + (error instanceof Error ? error.message : String(error)));
-      }
-    }
     const target_port = config?.port || Number(process.env.PORT) || 4001;
     await app.listen({ port: target_port, host: "0.0.0.0" });
     logger.info(`Lattice Gateway is running on port: ${target_port}`);