@axiom-lattice/gateway 3.0.10 → 4.0.0

package/dist/A2AAuthService-DK5X6VIL.mjs

@@ -0,0 +1,11 @@
+import {
+  A2AAuthError,
+  A2AAuthService,
+  parseEnvKeys
+} from "./chunk-2HOCF46L.mjs";
+export {
+  A2AAuthError,
+  A2AAuthService,
+  parseEnvKeys
+};
+//# sourceMappingURL=A2AAuthService-DK5X6VIL.mjs.map

package/dist/A2AAuthService-DK5X6VIL.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/a2a-7N3WDAOP.mjs

@@ -0,0 +1,147 @@
+import {
+  A2AAuthError
+} from "./chunk-2HOCF46L.mjs";
+
+// src/routes/a2a.ts
+var _a2aKeyStore = null;
+var _a2aAuthService = null;
+function setA2AKeyStore(store) {
+  _a2aKeyStore = store;
+}
+function setA2AAuthService(service) {
+  _a2aAuthService = service;
+}
+async function refreshStoreKeyMap() {
+  if (_a2aAuthService) await _a2aAuthService.refresh();
+}
+async function requireTenantSession(request, reply) {
+  if (!getUserTenantId(request)) {
+    await reply.status(401).send({ success: false, error: "Unauthorized" });
+  }
+}
+async function authorizeKeyMutation(request, reply) {
+  if (!_a2aKeyStore) {
+    await reply.status(501).send({ error: "Key store not configured" });
+    return false;
+  }
+  const record = await _a2aKeyStore.findById(request.params.id);
+  if (!record) {
+    await reply.status(404).send({ success: false, error: "A2A API key not found" });
+    return false;
+  }
+  if (record.tenantId !== getUserTenantId(request)) {
+    await reply.status(403).send({ success: false, error: "Forbidden" });
+    return false;
+  }
+  return true;
+}
+function getUserTenantId(request) {
+  return request.user?.tenantId;
+}
+async function handleApiKeyList(request, reply) {
+  if (!_a2aKeyStore) {
+    reply.status(501).send({ error: "Key store not configured" });
+    return;
+  }
+  const records = await _a2aKeyStore.list({
+    tenantId: getUserTenantId(request),
+    limit: request.query.limit ? parseInt(request.query.limit, 10) : void 0,
+    offset: request.query.offset ? parseInt(request.query.offset, 10) : void 0
+  });
+  reply.status(200).send({
+    success: true,
+    data: {
+      records: records.map((r) => ({ ...r, key: r.key.slice(0, 8) + "..." })),
+      total: records.length
+    }
+  });
+}
+async function handleApiKeyCreate(request, reply) {
+  if (!_a2aKeyStore || !_a2aAuthService) {
+    reply.status(501).send({ error: "Key store not configured" });
+    return;
+  }
+  const body = request.body;
+  const tenantId = getUserTenantId(request);
+  try {
+    const record = await _a2aAuthService.createKeyScoped({
+      tenantId,
+      projectId: body.projectId,
+      assistantIds: body.assistantIds,
+      label: body.label
+    });
+    await refreshStoreKeyMap();
+    reply.status(201).send({ success: true, data: record });
+  } catch (err) {
+    if (err instanceof A2AAuthError) {
+      reply.status(err.statusCode).send({ success: false, error: err.message });
+      return;
+    }
+    request.log.error({ err }, "a2a:keys:create");
+    reply.status(500).send({ success: false, error: "Failed to create key" });
+  }
+}
+async function handleApiKeyDelete(request, reply) {
+  if (!await authorizeKeyMutation(request, reply)) return;
+  await _a2aKeyStore.delete(request.params.id);
+  await refreshStoreKeyMap();
+  reply.status(200).send({ success: true });
+}
+async function handleApiKeyDisable(request, reply) {
+  if (!await authorizeKeyMutation(request, reply)) return;
+  await _a2aKeyStore.disable(request.params.id);
+  await refreshStoreKeyMap();
+  reply.status(200).send({ success: true });
+}
+async function handleApiKeyEnable(request, reply) {
+  if (!await authorizeKeyMutation(request, reply)) return;
+  await _a2aKeyStore.enable(request.params.id);
+  await refreshStoreKeyMap();
+  reply.status(200).send({ success: true });
+}
+async function handleApiKeyRotate(request, reply) {
+  if (!await authorizeKeyMutation(request, reply)) return;
+  const record = await _a2aKeyStore.rotate(request.params.id);
+  await refreshStoreKeyMap();
+  reply.status(200).send({ success: true, data: record });
+}
+function registerA2ARoutes(app) {
+  const options = { preHandler: requireTenantSession };
+  app.get(
+    "/api/a2a/keys",
+    options,
+    handleApiKeyList
+  );
+  app.post(
+    "/api/a2a/keys",
+    options,
+    handleApiKeyCreate
+  );
+  app.delete(
+    "/api/a2a/keys/:id",
+    options,
+    handleApiKeyDelete
+  );
+  app.post(
+    "/api/a2a/keys/:id/disable",
+    options,
+    handleApiKeyDisable
+  );
+  app.post(
+    "/api/a2a/keys/:id/enable",
+    options,
+    handleApiKeyEnable
+  );
+  app.post(
+    "/api/a2a/keys/:id/rotate",
+    options,
+    handleApiKeyRotate
+  );
+}
+export {
+  refreshStoreKeyMap,
+  registerA2ARoutes,
+  setA2AAuthService,
+  setA2AKeyStore
+};
+//# sourceMappingURL=a2a-7N3WDAOP.mjs.map

package/dist/a2a-7N3WDAOP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/a2a.ts"],"sourcesContent":["import type { FastifyInstance, FastifyRequest, FastifyReply } from \"fastify\";\nimport type {\n  A2AApiKeyStore,\n  CreateA2AApiKeyInput,\n} from \"@axiom-lattice/protocols\";\nimport { A2AAuthError } from \"../services/a2a/A2AAuthService\";\nimport type { A2AAuthService } from \"../services/a2a/A2AAuthService\";\n\n// ─── Key Store ────────────────────────────────────────────────────────────\n\nlet _a2aKeyStore: A2AApiKeyStore | null = null;\nlet _a2aAuthService: A2AAuthService | null = null;\n\n/** Inject the A2A key store used by the keys management routes. */\nexport function setA2AKeyStore(store: A2AApiKeyStore): void {\n  _a2aKeyStore = store;\n}\n\n/** Inject the A2A auth service used to create keys and refresh the key cache. */\nexport function setA2AAuthService(service: A2AAuthService): void {\n  _a2aAuthService = service;\n}\n\n/**\n * Reload cached key maps after a keys CRUD mutation. Delegates to the auth\n * service's key-map cache so authentication reflects the latest keys without\n * hitting the store on every request.\n */\nexport async function refreshStoreKeyMap(): Promise<void> {\n  if (_a2aAuthService) await _a2aAuthService.refresh();\n}\n\ninterface RequestWithUser extends FastifyRequest {\n  user?: { id: string; tenantId?: string };\n}\n\nasync function requireTenantSession(\n  request: FastifyRequest,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!getUserTenantId(request)) {\n    await reply.status(401).send({ success: false, error: \"Unauthorized\" });\n  }\n}\n\nasync function authorizeKeyMutation(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<boolean> {\n  if (!_a2aKeyStore) {\n    await reply.status(501).send({ error: \"Key store not configured\" });\n    return false;\n  }\n  const record = await _a2aKeyStore.findById(request.params.id);\n  if (!record) {\n    await reply.status(404).send({ success: false, error: \"A2A API key not found\" });\n    return false;\n  }\n  if (record.tenantId !== getUserTenantId(request)) {\n    await reply.status(403).send({ success: false, error: \"Forbidden\" });\n    return false;\n  }\n  return true;\n}\n\nfunction getUserTenantId(request: FastifyRequest): string | undefined {\n  return (request as RequestWithUser).user?.tenantId;\n}\n\n// ─── API Key Management Handlers ─────────────────────────────────────────\n\nasync function handleApiKeyList(\n  request: FastifyRequest<{ Querystring: { tenantId?: string; limit?: string; offset?: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n\n  const records = await _a2aKeyStore.list({\n    tenantId: getUserTenantId(request),\n    limit: request.query.limit ? parseInt(request.query.limit, 10) : undefined,\n    offset: request.query.offset ? parseInt(request.query.offset, 10) : undefined,\n  });\n\n  reply.status(200).send({\n    success: true,\n    data: {\n      records: records.map((r) => ({ ...r, key: r.key.slice(0, 8) + \"...\" })),\n      total: records.length,\n    },\n  });\n}\n\nasync function handleApiKeyCreate(\n  request: FastifyRequest<{ Body: Partial<CreateA2AApiKeyInput> }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore || !_a2aAuthService) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n\n  const body = request.body as Partial<CreateA2AApiKeyInput>;\n  const tenantId = getUserTenantId(request)!;\n\n  try {\n    const record = await _a2aAuthService.createKeyScoped({\n      tenantId,\n      projectId: body.projectId,\n      assistantIds: body.assistantIds,\n      label: body.label,\n    });\n    await refreshStoreKeyMap();\n    reply.status(201).send({ success: true, data: record });\n  } catch (err) {\n    if (err instanceof A2AAuthError) {\n      reply.status(err.statusCode).send({ success: false, error: err.message });\n      return;\n    }\n    request.log.error({ err }, \"a2a:keys:create\");\n    reply.status(500).send({ success: false, error: \"Failed to create key\" });\n  }\n}\n\nasync function handleApiKeyDelete(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.delete(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyDisable(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.disable(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyEnable(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.enable(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyRotate(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  const record = await _a2aKeyStore!.rotate(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true, data: record });\n}\n\n// ─── Route Registration ───────────────────────────────────────────────────\n\n/** Register the internal A2A API key management routes. */\nexport function registerA2ARoutes(app: FastifyInstance): void {\n  const options = { preHandler: requireTenantSession };\n  app.get<{ Querystring: { tenantId?: string; limit?: string; offset?: string } }>(\n    \"/api/a2a/keys\",\n    options,\n    handleApiKeyList,\n  );\n\n  app.post<{ Body: Partial<CreateA2AApiKeyInput> }>(\n    \"/api/a2a/keys\",\n    options,\n    handleApiKeyCreate,\n  );\n\n  app.delete<{ Params: { id: string } }>(\n    \"/api/a2a/keys/:id\",\n    options,\n    handleApiKeyDelete,\n  );\n\n  app.post<{ Params: { id: string } }>(\n    \"/api/a2a/keys/:id/disable\",\n    options,\n    handleApiKeyDisable,\n  );\n\n  app.post<{ Params: { id: string } }>(\n    \"/api/a2a/keys/:id/enable\",\n    options,\n    handleApiKeyEnable,\n  );\n\n  app.post<{ Params: { id: string } }>(\n    \"/api/a2a/keys/:id/rotate\",\n    options,\n    handleApiKeyRotate,\n  );\n}\n"],"mappings":";;;;;AAUA,IAAI,eAAsC;AAC1C,IAAI,kBAAyC;AAGtC,SAAS,eAAe,OAA6B;AAC1D,iBAAe;AACjB;AAGO,SAAS,kBAAkB,SAA+B;AAC/D,oBAAkB;AACpB;AAOA,eAAsB,qBAAoC;AACxD,MAAI,gBAAiB,OAAM,gBAAgB,QAAQ;AACrD;AAMA,eAAe,qBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,OAAO,GAAG;AAC7B,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,eAAe,CAAC;AAAA,EACxE;AACF;AAEA,eAAe,qBACb,SACA,OACkB;AAClB,MAAI,CAAC,cAAc;AACjB,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAClE,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM,aAAa,SAAS,QAAQ,OAAO,EAAE;AAC5D,MAAI,CAAC,QAAQ;AACX,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,wBAAwB,CAAC;AAC/E,WAAO;AAAA,EACT;AACA,MAAI,OAAO,aAAa,gBAAgB,OAAO,GAAG;AAChD,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,CAAC;AACnE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAA6C;AACpE,SAAQ,QAA4B,MAAM;AAC5C;AAIA,eAAe,iBACb,SACA,OACe;AACf,MAAI,CAAC,cAAc;AACjB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,aAAa,KAAK;AAAA,IACtC,UAAU,gBAAgB,OAAO;AAAA,IACjC,OAAO,QAAQ,MAAM,QAAQ,SAAS,QAAQ,MAAM,OAAO,EAAE,IAAI;AAAA,IACjE,QAAQ,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM,QAAQ,EAAE,IAAI;AAAA,EACtE,CAAC;AAED,QAAM,OAAO,GAAG,EAAE,KAAK;AAAA,IACrB,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,EAAE;AAAA,MACtE,OAAO,QAAQ;AAAA,IACjB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,CAAC,iBAAiB;AACrC,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ;AACrB,QAAM,WAAW,gBAAgB,OAAO;AAExC,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,gBAAgB;AAAA,MACnD;AAAA,MACA,WAAW,KAAK;AAAA,MAChB,cAAc,KAAK;AAAA,MACnB,OAAO,KAAK;AAAA,IACd,CAAC;AACD,UAAM,mBAAmB;AACzB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,cAAc;AAC/B,YAAM,OAAO,IAAI,UAAU,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,IAAI,QAAQ,CAAC;AACxE;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,EAAE,IAAI,GAAG,iBAAiB;AAC5C,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,uBAAuB,CAAC;AAAA,EAC1E;AACF;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC5C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,oBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,QAAQ,QAAQ,OAAO,EAAE;AAC7C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC5C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,SAAS,MAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC3D,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AACxD;AAKO,SAAS,kBAAkB,KAA4B;AAC5D,QAAM,UAAU,EAAE,YAAY,qBAAqB;AACnD,MAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}