@synoi/gateway-lite 0.1.0 → 0.1.1

package/dist/cdro-mirror.js

@@ -180,7 +180,10 @@ function mirrorManifest(input) {
         store.putCDRO(cdro, 'manifest');
         bumpStats('gateway_manifest', true);
         // Return the oid_hex for the heartbeat to send alongside manifest_sha256.
-        const stored = store.getCDROById(cdro.object_id);
+        // gateway_manifest is a genuinely global infra object type (edge-store.ts
+        // INFRA_OBJECT_TYPES), not tenant-scoped -- allowGlobal is the sanctioned
+        // scope-blind read path for it (Saga tenant-isolation work).
+        const stored = store.getCDROById(cdro.object_id, undefined, { allowGlobal: true });
         return stored?.oid_hex ?? null;
     }
     catch (err) {
@@ -232,14 +235,17 @@ function getMirroredReceipt(receipt_id) {
     const store = lazyStore();
     if (!store)
         return null;
-    const row = store.getCDROById(receipt_id);
+    // decision_receipt is a genuinely global infra object type (edge-store.ts
+    // INFRA_OBJECT_TYPES), not tenant-scoped -- allowGlobal is the sanctioned
+    // scope-blind read path for it (Saga tenant-isolation work).
+    const row = store.getCDROById(receipt_id, undefined, { allowGlobal: true });
     return row?.cdro ?? null;
 }
 function getMirroredManifest(manifest_sha256) {
     const store = lazyStore();
     if (!store)
         return null;
-    const row = store.getCDROById(`manifest:${manifest_sha256}`);
+    const row = store.getCDROById(`manifest:${manifest_sha256}`, undefined, { allowGlobal: true });
     return row?.cdro ?? null;
 }
 // ── Stats ──────────────────────────────────────────────────────────────────

package/dist/verify-router.js

@@ -755,7 +755,7 @@ from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
 import requests
 receipt = requests.get('/verify/RECEIPT_ID').json()['receipt']
 pubkey_pem = requests.get('/verify/pubkey').json()['public_key'].encode()
-fields = sorted([f for f in ['action_class','decision','degraded','gateway_manifest_sha256','grant_oid','intent_oid','oid_hex','receipt_id','recorded_at','risk_level','rule_id','subject_oid','tenant_id'] if receipt.get(f) is not None])
+fields = sorted([f for f in ${JSON.stringify([...exports.CANONICAL_FIELDS].sort())} if receipt.get(f) is not None])
 canonical = json.dumps({k: receipt[k] for k in fields}, separators=(',',':')).encode()
 from cryptography.hazmat.primitives.serialization import load_pem_public_key
 pub = load_pem_public_key(pubkey_pem)