@hachej/boring-core 0.1.82 → 0.1.83

package/dist/app/server/index.js

@@ -69,6 +69,7 @@ var MAX_SESSION_OWNER_CACHE = 5e3;
 function createCoreWorkspaceBridge(options) {
   const { resolveWorkspaceId, workspaceStore, validateWorkspaceId, agentSessionId } = options;
   const admittedBrowserWorkspaces = /* @__PURE__ */ new WeakMap();
+  const admittedRuntimeWorkspaces = /* @__PURE__ */ new WeakMap();
   const bridges = /* @__PURE__ */ new Map();
   const getBridge = (workspaceId) => {
     const safeWorkspaceId = validateWorkspaceId(workspaceId);
@@ -100,6 +101,8 @@ function createCoreWorkspaceBridge(options) {
     return runtime;
   };
   const resolveBridgeWorkspaceId = async (request) => {
+    const admittedRuntimeWorkspace = admittedRuntimeWorkspaces.get(request);
+    if (admittedRuntimeWorkspace) return admittedRuntimeWorkspace;
     const authHeader = request.headers.authorization;
     if (options.workspaceBridge?.runtimeTokenSecret && typeof authHeader === "string" && authHeader.startsWith("Bearer ")) {
       return verifyWorkspaceBridgeRuntimeToken(authHeader.slice("Bearer ".length), {
@@ -176,6 +179,7 @@ function createCoreWorkspaceBridge(options) {
     }
   } : void 0;
   const registerHttpRoutes = async (app) => {
+    const assertRuntimeWorkspaceScope = options.assertRuntimeWorkspaceScope;
     await app.register(async (bridgeApp) => {
       bridgeApp.addHook("preHandler", async (request) => {
         const pathname = request.url.split("?")[0];
@@ -189,6 +193,10 @@ function createCoreWorkspaceBridge(options) {
         getIdempotencyStore: async (request) => getRuntime(await resolveBridgeWorkspaceId(request)).idempotencyStore,
         runtimeTokenSecret: options.workspaceBridge?.runtimeTokenSecret,
         runtimeRefreshTokenSecret: options.workspaceBridge?.runtimeRefreshTokenSecret,
+        assertRuntimeWorkspaceScope: assertRuntimeWorkspaceScope ? async (request, claims) => {
+          await assertRuntimeWorkspaceScope(request, claims.workspaceId);
+          admittedRuntimeWorkspaces.set(request, claims.workspaceId);
+        } : void 0,
         getRuntimeRefreshTokenStore: (_request, claims) => getRuntime(claims.workspaceId).refreshTokenStore,
         getOwnerWorkspaceId: async (request) => await resolveBridgeWorkspaceId(request),
         browserAuthPolicy: createBrowserBridgeAuthPolicy({
@@ -923,7 +931,10 @@ async function createCoreWorkspaceAgentServer(options = {}) {
     workspaceStore,
     corsOrigins: app.config.cors.origins,
     validateWorkspaceId: validateWorkspaceIdSegment,
-    agentSessionId: agentSessionIdFromRequest
+    agentSessionId: agentSessionIdFromRequest,
+    assertRuntimeWorkspaceScope: options.requestScopeResolver ? (request, workspaceId) => {
+      if (request.requestScope?.workspaceId !== workspaceId) d1HostScopeViolation(request);
+    } : void 0
   });
   app.addHook("preHandler", async (request) => {
     await coreBridge.rememberSessionOwner(request);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.82",
+  "version": "0.1.83",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -80,9 +80,9 @@
     "react-router-dom": "^7.18.0",
     "smol-toml": "^1.7.0",
     "zod": "^3.25.76",
-    "@hachej/boring-agent": "0.1.82",
-    "@hachej/boring-ui-kit": "0.1.82",
-    "@hachej/boring-workspace": "0.1.82"
+    "@hachej/boring-agent": "0.1.83",
+    "@hachej/boring-workspace": "0.1.83",
+    "@hachej/boring-ui-kit": "0.1.83"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",