@axiom-lattice/gateway 4.8.4 → 4.9.0

package/dist/{open-exposure-VU227IO3.mjs → open-exposure-27ESFWTB.mjs}

@@ -1,3 +1,6 @@
+import {
+  buildAgentCardForAssistant
+} from "./chunk-QUT2DS4R.mjs";
 import {
   buildTenantOpenPlugins,
   mergeOpenCatalog
@@ -6,9 +9,6 @@ import {
   openLattice
 } from "./chunk-HVIKCUOF.mjs";
 import "./chunk-73QZQQOT.mjs";
-import {
-  buildAgentCardForAssistant
-} from "./chunk-QUT2DS4R.mjs";
 import "./chunk-NFEGQTCC.mjs";
 
 // src/routes/open-exposure.ts
@@ -94,4 +94,4 @@ function registerOpenExposureRoutes(app, deps = {}) {
 export {
   registerOpenExposureRoutes
 };
-//# sourceMappingURL=open-exposure-VU227IO3.mjs.map
+//# sourceMappingURL=open-exposure-27ESFWTB.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/gateway",
-  "version": "4.8.4",
+  "version": "4.9.0",
   "main": "dist/index.js",
   "files": [
     "dist"
@@ -48,11 +48,11 @@
     "uuid": "^9.0.1",
     "web-push": "^3.6.7",
     "zod": "3.25.76",
-    "@axiom-lattice/cli-a2a": "0.2.19",
-    "@axiom-lattice/core": "6.3.3",
-    "@axiom-lattice/pg-stores": "3.3.3",
-    "@axiom-lattice/protocols": "4.7.1",
-    "@axiom-lattice/queue-redis": "1.1.19"
+    "@axiom-lattice/cli-a2a": "0.2.20",
+    "@axiom-lattice/core": "6.4.0",
+    "@axiom-lattice/pg-stores": "3.3.4",
+    "@axiom-lattice/protocols": "4.8.0",
+    "@axiom-lattice/queue-redis": "1.1.20"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",
@@ -76,7 +76,7 @@
     "tsup": "^8.5.0",
     "typescript": "^5.8.2",
     "@axiom-lattice/open-mcp-client": "0.1.0",
-    "@axiom-lattice/react-sdk": "4.8.0"
+    "@axiom-lattice/react-sdk": "4.9.0"
   },
   "scripts": {
     "build": "tsup src/index.ts --format cjs,esm --dts --clean --sourcemap && pnpm copy:embed-assets",

package/dist/a2a-FGYX2HH3.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/routes/a2a.ts"],"sourcesContent":["import type { FastifyInstance, FastifyRequest, FastifyReply } from \"fastify\";\nimport type {\n  A2AApiKeyStore,\n  CreateA2AApiKeyInput,\n} from \"@axiom-lattice/protocols\";\nimport { A2AAuthError } from \"../services/a2a/A2AAuthService\";\nimport type { A2AAuthService } from \"../services/a2a/A2AAuthService\";\n\n// ─── Key Store ────────────────────────────────────────────────────────────\n\nlet _a2aKeyStore: A2AApiKeyStore | null = null;\nlet _a2aAuthService: A2AAuthService | null = null;\n\n/** Inject the A2A key store used by the keys management routes. */\nexport function setA2AKeyStore(store: A2AApiKeyStore): void {\n  _a2aKeyStore = store;\n}\n\n/** Inject the A2A auth service used to create keys and refresh the key cache. */\nexport function setA2AAuthService(service: A2AAuthService): void {\n  _a2aAuthService = service;\n}\n\n/**\n * Reload cached key maps after a keys CRUD mutation. Delegates to the auth\n * service's key-map cache so authentication reflects the latest keys without\n * hitting the store on every request.\n */\nexport async function refreshStoreKeyMap(): Promise<void> {\n  if (_a2aAuthService) await _a2aAuthService.refresh();\n}\n\ninterface RequestWithUser extends FastifyRequest {\n  user?: { id: string; tenantId?: string };\n}\n\nasync function requireTenantSession(\n  request: FastifyRequest,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!getUserTenantId(request)) {\n    await reply.status(401).send({ success: false, error: \"Unauthorized\" });\n  }\n}\n\nasync function authorizeKeyMutation(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<boolean> {\n  if (!_a2aKeyStore) {\n    await reply.status(501).send({ error: \"Key store not configured\" });\n    return false;\n  }\n  const record = await _a2aKeyStore.findById(request.params.id);\n  if (!record) {\n    await reply.status(404).send({ success: false, error: \"A2A API key not found\" });\n    return false;\n  }\n  if (record.tenantId !== getUserTenantId(request)) {\n    await reply.status(403).send({ success: false, error: \"Forbidden\" });\n    return false;\n  }\n  return true;\n}\n\nfunction getUserTenantId(request: FastifyRequest): string | undefined {\n  return (request as RequestWithUser).user?.tenantId;\n}\n\n// ─── API Key Management Handlers ─────────────────────────────────────────\n\nasync function handleApiKeyList(\n  request: FastifyRequest<{ Querystring: { tenantId?: string; limit?: string; offset?: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n\n  const records = await _a2aKeyStore.list({\n    tenantId: getUserTenantId(request),\n    limit: request.query.limit ? parseInt(request.query.limit, 10) : undefined,\n    offset: request.query.offset ? parseInt(request.query.offset, 10) : undefined,\n  });\n\n  reply.status(200).send({\n    success: true,\n    data: {\n      records: records.map((r) => ({ ...r, key: r.key.slice(0, 8) + \"...\" })),\n      total: records.length,\n    },\n  });\n}\n\nasync function handleApiKeyCreate(\n  request: FastifyRequest<{ Body: Partial<CreateA2AApiKeyInput> }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore || !_a2aAuthService) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n\n  const body = request.body as Partial<CreateA2AApiKeyInput>;\n  const tenantId = getUserTenantId(request)!;\n\n  try {\n    const record = await _a2aAuthService.createKeyScoped({\n      tenantId,\n      projectId: body.projectId,\n      assistantIds: body.assistantIds,\n      grants: body.grants,\n      label: body.label,\n    });\n    await refreshStoreKeyMap();\n    reply.status(201).send({ success: true, data: record });\n  } catch (err) {\n    if (err instanceof A2AAuthError) {\n      reply.status(err.statusCode).send({ success: false, error: err.message });\n      return;\n    }\n    request.log.error({ err }, \"a2a:keys:create\");\n    reply.status(500).send({ success: false, error: \"Failed to create key\" });\n  }\n}\n\nasync function handleApiKeyUpdate(\n  request: FastifyRequest<{ Params: { id: string }; Body: Partial<CreateA2AApiKeyInput> }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!_a2aKeyStore || !_a2aAuthService) {\n    reply.status(501).send({ error: \"Key store not configured\" });\n    return;\n  }\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  const body = request.body as Partial<CreateA2AApiKeyInput>;\n  const tenantId = getUserTenantId(request)!;\n  try {\n    const record = await _a2aAuthService.updateKeyScoped(\n      request.params.id,\n      tenantId,\n      {\n        label: body.label,\n        projectId: body.projectId,\n        assistantIds: body.assistantIds,\n        grants: body.grants,\n      },\n    );\n    await refreshStoreKeyMap();\n    reply.status(200).send({ success: true, data: record });\n  } catch (err) {\n    if (err instanceof A2AAuthError) {\n      reply.status(err.statusCode).send({ success: false, error: err.message });\n      return;\n    }\n    request.log.error({ err }, \"a2a:keys:update\");\n    reply.status(500).send({ success: false, error: \"Failed to update key\" });\n  }\n}\n\nasync function handleApiKeyDelete(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.delete(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyDisable(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.disable(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyEnable(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  await _a2aKeyStore!.enable(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true });\n}\n\nasync function handleApiKeyRotate(\n  request: FastifyRequest<{ Params: { id: string } }>,\n  reply: FastifyReply,\n): Promise<void> {\n  if (!(await authorizeKeyMutation(request, reply))) return;\n\n  const record = await _a2aKeyStore!.rotate(request.params.id);\n  await refreshStoreKeyMap();\n\n  reply.status(200).send({ success: true, data: record });\n}\n\n// ─── Route Registration ───────────────────────────────────────────────────\n\n/**\n * Register the API key management routes.\n *\n * `/api/keys` is the canonical unified surface; `/api/a2a/keys` remains as a\n * backward-compatible alias for existing clients.\n */\nexport function registerA2ARoutes(app: FastifyInstance): void {\n  const options = { preHandler: requireTenantSession };\n  for (const base of [\"/api/keys\", \"/api/a2a/keys\"]) {\n    app.get<{ Querystring: { tenantId?: string; limit?: string; offset?: string } }>(\n      base,\n      options,\n      handleApiKeyList,\n    );\n\n    app.post<{ Body: Partial<CreateA2AApiKeyInput> }>(\n      base,\n      options,\n      handleApiKeyCreate,\n    );\n\n    app.delete<{ Params: { id: string } }>(\n      `${base}/:id`,\n      options,\n      handleApiKeyDelete,\n    );\n\n    app.post<{ Params: { id: string } }>(\n      `${base}/:id/disable`,\n      options,\n      handleApiKeyDisable,\n    );\n\n    app.post<{ Params: { id: string } }>(\n      `${base}/:id/enable`,\n      options,\n      handleApiKeyEnable,\n    );\n\n    app.post<{ Params: { id: string } }>(\n      `${base}/:id/rotate`,\n      options,\n      handleApiKeyRotate,\n    );\n    app.patch<{ Params: { id: string }; Body: Partial<CreateA2AApiKeyInput> }>(\n      `${base}/:id`,\n      options,\n      handleApiKeyUpdate,\n    );\n  }\n}\n"],"mappings":";;;;;;AAUA,IAAI,eAAsC;AAC1C,IAAI,kBAAyC;AAGtC,SAAS,eAAe,OAA6B;AAC1D,iBAAe;AACjB;AAGO,SAAS,kBAAkB,SAA+B;AAC/D,oBAAkB;AACpB;AAOA,eAAsB,qBAAoC;AACxD,MAAI,gBAAiB,OAAM,gBAAgB,QAAQ;AACrD;AAMA,eAAe,qBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,OAAO,GAAG;AAC7B,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,eAAe,CAAC;AAAA,EACxE;AACF;AAEA,eAAe,qBACb,SACA,OACkB;AAClB,MAAI,CAAC,cAAc;AACjB,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAClE,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM,aAAa,SAAS,QAAQ,OAAO,EAAE;AAC5D,MAAI,CAAC,QAAQ;AACX,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,wBAAwB,CAAC;AAC/E,WAAO;AAAA,EACT;AACA,MAAI,OAAO,aAAa,gBAAgB,OAAO,GAAG;AAChD,UAAM,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,YAAY,CAAC;AACnE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAA6C;AACpE,SAAQ,QAA4B,MAAM;AAC5C;AAIA,eAAe,iBACb,SACA,OACe;AACf,MAAI,CAAC,cAAc;AACjB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,aAAa,KAAK;AAAA,IACtC,UAAU,gBAAgB,OAAO;AAAA,IACjC,OAAO,QAAQ,MAAM,QAAQ,SAAS,QAAQ,MAAM,OAAO,EAAE,IAAI;AAAA,IACjE,QAAQ,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM,QAAQ,EAAE,IAAI;AAAA,EACtE,CAAC;AAED,QAAM,OAAO,GAAG,EAAE,KAAK;AAAA,IACrB,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,EAAE;AAAA,MACtE,OAAO,QAAQ;AAAA,IACjB;AAAA,EACF,CAAC;AACH;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,CAAC,iBAAiB;AACrC,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ;AACrB,QAAM,WAAW,gBAAgB,OAAO;AAExC,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,gBAAgB;AAAA,MACnD;AAAA,MACA,WAAW,KAAK;AAAA,MAChB,cAAc,KAAK;AAAA,MACnB,QAAQ,KAAK;AAAA,MACb,OAAO,KAAK;AAAA,IACd,CAAC;AACD,UAAM,mBAAmB;AACzB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,cAAc;AAC/B,YAAM,OAAO,IAAI,UAAU,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,IAAI,QAAQ,CAAC;AACxE;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,EAAE,IAAI,GAAG,iBAAiB;AAC5C,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,uBAAuB,CAAC;AAAA,EAC1E;AACF;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAC,gBAAgB,CAAC,iBAAiB;AACrC,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,2BAA2B,CAAC;AAC5D;AAAA,EACF;AACA,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,OAAO,QAAQ;AACrB,QAAM,WAAW,gBAAgB,OAAO;AACxC,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB;AAAA,MACnC,QAAQ,OAAO;AAAA,MACf;AAAA,MACA;AAAA,QACE,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,cAAc,KAAK;AAAA,QACnB,QAAQ,KAAK;AAAA,MACf;AAAA,IACF;AACA,UAAM,mBAAmB;AACzB,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,eAAe,cAAc;AAC/B,YAAM,OAAO,IAAI,UAAU,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,IAAI,QAAQ,CAAC;AACxE;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,EAAE,IAAI,GAAG,iBAAiB;AAC5C,UAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,uBAAuB,CAAC;AAAA,EAC1E;AACF;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC5C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,oBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,QAAQ,QAAQ,OAAO,EAAE;AAC7C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC5C,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C;AAEA,eAAe,mBACb,SACA,OACe;AACf,MAAI,CAAE,MAAM,qBAAqB,SAAS,KAAK,EAAI;AAEnD,QAAM,SAAS,MAAM,aAAc,OAAO,QAAQ,OAAO,EAAE;AAC3D,QAAM,mBAAmB;AAEzB,QAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,OAAO,CAAC;AACxD;AAUO,SAAS,kBAAkB,KAA4B;AAC5D,QAAM,UAAU,EAAE,YAAY,qBAAqB;AACnD,aAAW,QAAQ,CAAC,aAAa,eAAe,GAAG;AACjD,QAAI;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAEA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,QAAI;AAAA,MACF,GAAG,IAAI;AAAA,MACP;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}