@axiom-lattice/gateway 2.1.93 → 2.1.95

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/gateway",
-  "version": "2.1.93",
+  "version": "2.1.95",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
@@ -40,9 +40,9 @@
     "redis": "^5.0.1",
     "uuid": "^9.0.1",
     "zod": "3.25.76",
-    "@axiom-lattice/agent-eval": "2.1.75",
-    "@axiom-lattice/core": "2.1.81",
-    "@axiom-lattice/pg-stores": "1.0.72",
+    "@axiom-lattice/agent-eval": "2.1.77",
+    "@axiom-lattice/core": "2.1.83",
+    "@axiom-lattice/pg-stores": "1.0.74",
     "@axiom-lattice/protocols": "2.1.43",
     "@axiom-lattice/queue-redis": "1.0.42"
   },

package/src/controllers/workspace.ts

@@ -262,6 +262,8 @@ export class WorkspaceController {
       throw new Error("Workspace not found");
     }
 
+    console.log(`[getBackend] storageType=${workspace.storageType} filePath=${filePath}`);
+
     if (workspace.storageType === "sandbox") {
       const sandboxManager = getSandBoxManager();
 
@@ -273,18 +275,23 @@ export class WorkspaceController {
         projectId,
       };
 
+      console.log(`[getBackend] trying volume backend for path=${filePath} assistant_id=${assistantId}`);
       const volumeBackend = await sandboxManager.getVolumeBackendForPath(volumeConfig, filePath || "/project");
       if (volumeBackend) {
+        console.log(`[getBackend] using VolumeFilesystem`);
         return { backend: volumeBackend, workspace };
       }
 
+      console.log(`[getBackend] volume not found, falling back to SandboxFilesystem`);
       const sandbox = await sandboxManager.getSandboxFromConfig(volumeConfig);
+      console.log(`[getBackend] sandbox acquired, name=${(sandbox as any).name || "unknown"}`);
       return {
         backend: new SandboxFilesystem({
           sandboxInstance: sandbox,
         }), workspace
       };
     } else {
+      console.log(`[getBackend] using FilesystemBackend rootDir=/lattice_store/tenants/${tenantId}/workspaces/${workspaceId}/${projectId}`);
       return {
         backend: new FilesystemBackend({
           rootDir: `/lattice_store/tenants/${tenantId}/workspaces/${workspaceId}/${projectId}`,
@@ -549,8 +556,13 @@ export class WorkspaceController {
     const path = (request.query.path as string) || "/";
     const assistantId = request.query.assistantId;
 
+    console.log(`[listPath] tenantId=${tenantId} workspaceId=${workspaceId} projectId=${projectId} path=${path} assistantId=${assistantId}`);
+
     const { backend } = await this.getBackend(tenantId, workspaceId, projectId, assistantId, path);
+    console.log(`[listPath] backend type=${backend.constructor.name} calling lsInfo(${path})`);
+
     const files = await backend.lsInfo(path);
+    console.log(`[listPath] result count=${files.length}`);
 
     return { success: true, data: files };
   }

package/src/index.ts

@@ -125,6 +125,11 @@ app.addHook("preHandler", async (request, reply) => {
   // Public routes don't require authentication
   if (PUBLIC_ROUTES.some((r) => request.url === r)) return;
 
+  // Allow direct URL access for iframe endpoints (viewfile, downloadfile)
+  // These carry tenant context via query params and are accessed by iframes
+  const urlPath = request.url.split("?")[0];
+  if (urlPath.includes("/viewfile") || urlPath.includes("/downloadfile")) return;
+
   return reply.status(401).send({
     success: false,
     error: "Unauthorized - Missing or invalid token",