@powerhousedao/switchboard 6.2.3-dev.35 → 6.2.3-dev.37

package/CHANGELOG.md

@@ -1,3 +1,23 @@
+## 6.2.3-dev.37 (2026-10-01)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.3-dev.36 (2026-10-01)
+
+### 🚀 Features
+
+- **switchboard:** pass the attachment provider to host-built subgraphs ([9264687cf6](https://github.com/powerhouse-inc/powerhouse/commit/9264687cf6))
+- **reactor-api:** declare caller-bound attachment types ([d6748866bc](https://github.com/powerhouse-inc/powerhouse/commit/d6748866bc))
+
+### 🩹 Fixes
+
+- **reactor-attachments:** reject mimeTypes a Content-Type header cannot carry ([2301dbe466](https://github.com/powerhouse-inc/powerhouse/commit/2301dbe466))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Opus 5.5
+
 ## 6.2.3-dev.35 (2026-10-01)
 
 ### 🚀 Features

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="691165f8-a729-5658-bf22-e7b2440e6156")}catch(e){}}();
-import { i as StoredDocumentsRefusedError, r as startSwitchboard, s as parseForcePgVersion } from "./server-CXAp5TOI.mjs";
+import { i as StoredDocumentsRefusedError, r as startSwitchboard, s as parseForcePgVersion } from "./server-D3CYuEka.mjs";
 import { metrics } from "@opentelemetry/api";
 import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
 import { ExpressInstrumentation } from "@opentelemetry/instrumentation-express";

package/dist/{server-CXAp5TOI.mjs → server-D3CYuEka.mjs}

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bf12fafa-a066-5f83-98b1-3dddd60afc6a")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="98e9dab8-b145-5eb1-8457-7a9d38dda98e")}catch(e){}}();
 import { n as addDefaultReactorDrive, r as isPostgresUrl, t as addDefaultDrive } from "./utils-uaBlzyjS.mjs";
 import { createRequire, register } from "node:module";
 import { ReactorInstrumentation } from "@powerhousedao/opentelemetry-instrumentation-reactor";
@@ -13,7 +13,7 @@ import { AtomicNodeFs } from "@powerhousedao/pglite-fs";
 import { ChannelScheme, DriveCollectionId, EventBus, REACTOR_SCHEMA, ReactorBuilder, ReactorClientBuilder, UnsupportedStoredProtocolError, createHybridProjectionCoordinatorFactory, instrumentPgPool, parseDriveUrl, supportsLiveReadModelRegistration } from "@powerhousedao/reactor";
 import { AuthorizationPolicy, BaseSubgraph, ForbiddenError, HttpPackageLoader, ImportPackageLoader, PGLITE_UTC_PARSERS, PackageManagementService, PackagesSubgraph, PrivacyPermissionAdapter, callerSubject, createCanonicalDocumentIdResolver, getUniqueDocumentModels, initializeAndStartAPI, resolveRenownConfig } from "@powerhousedao/reactor-api";
 import { httpsHooksPath } from "@powerhousedao/reactor-api/https-hooks";
-import { AttachmentAlreadyExists, AttachmentNotFound, AttachmentPending, AttachmentReferenceReadModel, AttachmentSchemaCompiler, HashMismatch, InvalidAttachmentRef, ReservationNotFound, SizeMismatch, UploadTooLarge, createRef, createRemoteAttachmentService, parseAttachmentDownloadTarget, parseRef } from "@powerhousedao/reactor-attachments";
+import { AttachmentAlreadyExists, AttachmentNotFound, AttachmentPending, AttachmentReferenceReadModel, AttachmentSchemaCompiler, HashMismatch, InvalidAttachmentMetadata, InvalidAttachmentRef, ReservationNotFound, SizeMismatch, UploadTooLarge, createRef, createRemoteAttachmentService, parseAttachmentDownloadTarget, parseRef, validateReserveMetadata } from "@powerhousedao/reactor-attachments";
 import { createAttachmentClient } from "@powerhousedao/reactor-attachments/client";
 import { DriveNodeView, NodeProcessor, ReactorDriveClient, createReactorDriveResolvers, reactorDriveDocumentModelModule, reactorDriveSubgraphTypeDefs } from "@powerhousedao/reactor-drive";
 import { DEFAULT_KEYPAIR_PATH, DEFAULT_RENOWN_URL, NodeKeyStorage, RENOWN_READ_MODEL_SUBGRAPH, RenownBuilder, RenownCryptoBuilder, createLocalCredentialVerifier, createRenownTrustPolicy, resolveSwitchboardEndpoint } from "@renown/sdk/node";
@@ -152,10 +152,6 @@ function mountAuthenticatedNodeRoute(api, method, path, handler, options) {
 const logger$2 = childLogger(["switchboard", "attachments"]);
 const RETRY_AFTER_SECONDS = 5;
 const HASH_PATTERN = /^[a-f0-9]{64}$/i;
-const CONTROL_CHARS = /[\x00-\x1f\x7f]/;
-const MIME_TYPE_PATTERN = /^[!#$%&'*+\-.^_`|~\w]+\/[!#$%&'*+\-.^_`|~\w]+(?:\s*;\s*[!#$%&'*+\-.^_`|~\w]+=(?:[!#$%&'*+\-.^_`|~\w]+|"(?:[^"\\\r\n]|\\[^\r\n])*"))*$/;
-const MAX_FILENAME_LEN = 255;
-const MAX_MIMETYPE_LEN = 255;
 function sendJson(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("Content-Type", "application/json");
@@ -192,27 +188,34 @@ async function readJsonBody(req, body) {
 function parseReserveOptions(input) {
 	if (input === null || typeof input !== "object") return null;
 	const obj = input;
-	if (typeof obj.mimeType !== "string" || obj.mimeType.length === 0 || obj.mimeType.length > MAX_MIMETYPE_LEN || !MIME_TYPE_PATTERN.test(obj.mimeType)) return null;
-	if (typeof obj.fileName !== "string" || obj.fileName.length === 0 || obj.fileName.length > MAX_FILENAME_LEN || CONTROL_CHARS.test(obj.fileName)) return null;
-	let extension = null;
-	if (typeof obj.extension === "string") {
-		if (obj.extension.length === 0 || /[\\/]/.test(obj.extension)) return null;
-		extension = obj.extension;
-	} else if (obj.extension !== void 0 && obj.extension !== null) return null;
+	const { mimeType, fileName } = obj;
+	const extension = obj.extension ?? null;
+	try {
+		validateReserveMetadata({
+			mimeType,
+			fileName,
+			extension
+		});
+	} catch (err) {
+		if (err instanceof InvalidAttachmentMetadata) return null;
+		throw err;
+	}
+	if (typeof mimeType !== "string" || typeof fileName !== "string") return null;
+	if (extension !== null && typeof extension !== "string") return null;
 	if (obj.clientHash !== void 0) {
 		if (typeof obj.clientHash !== "string" || !HASH_PATTERN.test(obj.clientHash)) return null;
 		if (typeof obj.sizeBytes !== "number" || !Number.isInteger(obj.sizeBytes) || obj.sizeBytes <= 0 || !Number.isSafeInteger(obj.sizeBytes)) return null;
 		return {
-			mimeType: obj.mimeType,
-			fileName: obj.fileName,
+			mimeType,
+			fileName,
 			extension,
 			clientHash: obj.clientHash.toLowerCase(),
 			sizeBytes: obj.sizeBytes
 		};
 	}
 	return {
-		mimeType: obj.mimeType,
-		fileName: obj.fileName,
+		mimeType,
+		fileName,
 		extension
 	};
 }
@@ -2836,7 +2839,8 @@ async function initServer(serverPort, options, renown, renownConfig) {
 			graphqlManager,
 			syncManager: api.syncManager,
 			authorizationService: graphqlManager.getAuthorizationService(),
-			path: graphqlManager.getBasePath()
+			path: graphqlManager.getBasePath(),
+			attachments: api.attachmentClientProvider
 		});
 		lateSubgraphs.push(graphqlManager.registerSubgraphInstance(workflowSubgraph, "graphql", false).catch((error) => {
 			logger.error("Failed to register workflow-runtime subgraph: @error", error);
@@ -2891,7 +2895,8 @@ async function initServer(serverPort, options, renown, renownConfig) {
 			path: graphqlManager.getBasePath(),
 			authorizationService: graphqlManager.getAuthorizationService(),
 			packageManagementService,
-			http: graphqlManager.scopeForPackage("@powerhousedao/switchboard")
+			http: graphqlManager.scopeForPackage("@powerhousedao/switchboard"),
+			attachments: api.attachmentClientProvider
 		});
 		lateSubgraphs.push(graphqlManager.registerSubgraphInstance(packagesSubgraph, "graphql", false).catch((error) => {
 			logger.error("Failed to register packages subgraph: @error", error);
@@ -3032,5 +3037,5 @@ if (import.meta.main) await startSwitchboard({ fatalErrorShutdown: true });
 //#endregion
 export { resolveUnsupportedStoredDocuments as a, StoredDocumentsRefusedError as i, isPortAvailable as n, applySwitchboardReactorDefaults as o, startSwitchboard as r, parseForcePgVersion as s, deriveAttachmentServiceConfig as t };
 
-//# sourceMappingURL=server-CXAp5TOI.mjs.map
-//# debugId=bf12fafa-a066-5f83-98b1-3dddd60afc6a
+//# sourceMappingURL=server-D3CYuEka.mjs.map
+//# debugId=98e9dab8-b145-5eb1-8457-7a9d38dda98e