ltcai 6.3.0 → 6.3.1

package/lattice_brain/__init__.py

@@ -26,7 +26,7 @@ from .storage import (
     storage_from_env,
 )
 
-__version__ = "6.3.0"
+__version__ = "6.3.1"
 
 __all__ = [
     "AgentRuntime",

package/lattice_brain/runtime/multi_agent.py

@@ -19,7 +19,7 @@ from datetime import datetime
 from typing import Any, Callable, Dict, List, Optional
 
 
-MULTI_AGENT_VERSION = "6.3.0"
+MULTI_AGENT_VERSION = "6.3.1"
 
 AGENT_ROLES = ("researcher", "planner", "executor", "reviewer", "release")
 CORE_PIPELINE = ("planner", "executor", "reviewer")

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "6.3.0"
+__version__ = "6.3.1"

package/latticeai/app_factory.py

@@ -18,6 +18,7 @@ import threading
 from typing import TYPE_CHECKING, Any, Dict, List, Optional
 
 from latticeai.runtime.app_context_runtime import build_app_context
+from latticeai.runtime.access_runtime import build_access_runtime
 from latticeai.runtime.bootstrap import build_session_runtime
 from latticeai.runtime.brain_runtime import build_brain_runtime
 from latticeai.runtime.chat_wiring import (
@@ -122,12 +123,11 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
     from latticeai.core.enterprise import (
         capability_registry,
     )
-    from latticeai.core.policy import normalize_role, policy_matrix, require_capability
+    from latticeai.core.policy import policy_matrix
     from latticeai.core.users import (
         ensure_user_identity,
         load_users_file,
         migrate_knowledge_graph_identity,
-        normalize_email,
         save_users_file,
         user_id_for_email as _user_id_for_email,
     )
@@ -813,42 +813,21 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
     def clear_conversation(conversation_id: str, started_at: Optional[str] = None) -> Dict:
         return CONVERSATIONS.clear_conversation(conversation_id, started_at=started_at)
 
-    def get_user_role(email: str, users: Optional[Dict] = None) -> str:
-        users = users or load_users()
-        identity = str(email or "")
-        normalized_email = normalize_email(identity)
-        user = users.get(normalized_email) or users.get(identity) or next(
-            (
-                item for item in users.values()
-                if isinstance(item, dict) and item.get("id") == identity
-            ),
-            {},
-        )
-        if isinstance(user, dict) and user.get("role"):
-            return normalize_role(user["role"])
-        admin_emails = {normalize_email(item) for item in CONFIG.admin_emails}
-        if normalized_email in admin_emails:
-            return "admin"
-        first_email = next(iter(users), None)
-        return "admin" if first_email == normalized_email else "user"
-
-    def _extract_bearer_token(request: Request) -> Optional[str]:
-        auth = request.headers.get("Authorization", "")
-        if auth.startswith("Bearer "):
-            return auth[7:].strip()
-        return request.cookies.get("session_token")
-
-    def get_current_user(request: Request) -> Optional[str]:
-        token = _extract_bearer_token(request)
-        if token:
-            return get_session_email(token)
-        return None
-
-    def require_user(request: Request) -> str:
-        email = get_current_user(request)
-        if REQUIRE_AUTH and not email:
-            raise HTTPException(status_code=401, detail="인증이 필요합니다.")
-        return email or ""
+    _access_runtime = build_access_runtime(
+        config=CONFIG,
+        require_auth=REQUIRE_AUTH,
+        http_exception=HTTPException,
+        request_type=Request,
+        load_users=load_users,
+        get_session_email=get_session_email,
+        user_id_for_email=_user_id_for_email,
+    )
+    get_user_role = _access_runtime["get_user_role"]
+    _extract_bearer_token = _access_runtime["_extract_bearer_token"]
+    get_current_user = _access_runtime["get_current_user"]
+    require_user = _access_runtime["require_user"]
+    require_admin = _access_runtime["require_admin"]
+    public_user = _access_runtime["public_user"]
 
 
     # ── Rate limiting & file validation — delegated to latticeai.core.security ────
@@ -917,35 +896,6 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
             raise HTTPException(status_code=403, detail="승인된 파일 내용과 요청 내용이 다릅니다.")
 
 
-    def require_admin(request: Request) -> tuple[str, Dict]:
-        users = load_users()
-        if not REQUIRE_AUTH:
-            return "", users
-        token = _extract_bearer_token(request)
-        if token:
-            email = get_session_email(token)
-            if email:
-                role = get_user_role(email, users)
-                try:
-                    require_capability(role, "admin:users")
-                    return email, users
-                except PermissionError:
-                    pass
-        raise HTTPException(status_code=403, detail="관리자 권한이 필요합니다.")
-
-    def public_user(email: str, user: Dict, users: Dict) -> Dict:
-        role = get_user_role(email, users)
-        user_id = user.get("id") or _user_id_for_email(users, email)
-        return {
-            "id": user_id,
-            "email": email,
-            "identity": user_id,
-            "name": user.get("name", ""),
-            "nickname": user.get("nickname", ""),
-            "role": role,
-            "disabled": bool(user.get("disabled", False)),
-        }
-
     def get_history_user(email: Optional[str], nickname: Optional[str] = None) -> Dict:
         if not email:
             return {"user_email": None, "user_nickname": nickname or None}

package/latticeai/core/marketplace.py

@@ -11,7 +11,7 @@ from copy import deepcopy
 from typing import Any, Dict, List, Optional
 
 
-MARKETPLACE_VERSION = "6.3.0"
+MARKETPLACE_VERSION = "6.3.1"
 TEMPLATE_KINDS = ("plugin", "workflow", "agent")
 
 

package/latticeai/core/workspace_os.py

@@ -19,7 +19,7 @@ from pathlib import Path
 from typing import Any, Callable, Dict, Iterable, List, Optional
 
 
-WORKSPACE_OS_VERSION = "6.3.0"
+WORKSPACE_OS_VERSION = "6.3.1"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type

package/latticeai/runtime/access_runtime.py

@@ -0,0 +1,97 @@
+"""Access-control helper closures for the app factory."""
+
+from __future__ import annotations
+
+from typing import Any, Callable, Dict, Optional
+
+
+def build_access_runtime(
+    *,
+    config: Any,
+    require_auth: bool,
+    http_exception: Any,
+    request_type: Any,
+    load_users: Callable[[], Dict],
+    get_session_email: Callable[[str], Optional[str]],
+    user_id_for_email: Callable[[Dict, str], str],
+) -> Dict[str, Any]:
+    """Build user/admin access helpers without changing legacy call signatures."""
+
+    from latticeai.core.policy import normalize_role, require_capability
+    from latticeai.core.users import normalize_email
+
+    def get_user_role(email: str, users: Optional[Dict] = None) -> str:
+        users = users or load_users()
+        identity = str(email or "")
+        normalized_email = normalize_email(identity)
+        user = users.get(normalized_email) or users.get(identity) or next(
+            (
+                item
+                for item in users.values()
+                if isinstance(item, dict) and item.get("id") == identity
+            ),
+            {},
+        )
+        if isinstance(user, dict) and user.get("role"):
+            return normalize_role(user["role"])
+        admin_emails = {normalize_email(item) for item in config.admin_emails}
+        if normalized_email in admin_emails:
+            return "admin"
+        first_email = next(iter(users), None)
+        return "admin" if first_email == normalized_email else "user"
+
+    def extract_bearer_token(request: request_type) -> Optional[str]:
+        auth = request.headers.get("Authorization", "")
+        if auth.startswith("Bearer "):
+            return auth[7:].strip()
+        return request.cookies.get("session_token")
+
+    def get_current_user(request: request_type) -> Optional[str]:
+        token = extract_bearer_token(request)
+        if token:
+            return get_session_email(token)
+        return None
+
+    def require_user(request: request_type) -> str:
+        email = get_current_user(request)
+        if require_auth and not email:
+            raise http_exception(status_code=401, detail="인증이 필요합니다.")
+        return email or ""
+
+    def require_admin(request: request_type) -> tuple[str, Dict]:
+        users = load_users()
+        if not require_auth:
+            return "", users
+        token = extract_bearer_token(request)
+        if token:
+            email = get_session_email(token)
+            if email:
+                role = get_user_role(email, users)
+                try:
+                    require_capability(role, "admin:users")
+                    return email, users
+                except PermissionError:
+                    pass
+        raise http_exception(status_code=403, detail="관리자 권한이 필요합니다.")
+
+    def public_user(email: str, user: Dict, users: Dict) -> Dict:
+        role = get_user_role(email, users)
+        user_id = user.get("id") or user_id_for_email(users, email)
+        return {
+            "id": user_id,
+            "email": email,
+            "identity": user_id,
+            "name": user.get("name", ""),
+            "nickname": user.get("nickname", ""),
+            "role": role,
+            "disabled": bool(user.get("disabled", False)),
+        }
+
+    return {
+        "get_user_role": get_user_role,
+        "_extract_bearer_token": extract_bearer_token,
+        "get_current_user": get_current_user,
+        "require_user": require_user,
+        "require_admin": require_admin,
+        "public_user": public_user,
+    }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ltcai",
-  "version": "6.3.0",
+  "version": "6.3.1",
   "description": "Lattice AI — local-first Digital Brain that keeps your knowledge durable across any AI model.",
   "homepage": "https://github.com/TaeSooPark-PTS/LatticeAI#readme",
   "repository": {

package/src-tauri/Cargo.lock

@@ -1654,7 +1654,7 @@ dependencies = [
 
 [[package]]
 name = "lattice-ai-desktop"
-version = "6.3.0"
+version = "6.3.1"
 dependencies = [
  "plist",
  "serde",

package/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "lattice-ai-desktop"
-version = "6.3.0"
+version = "6.3.1"
 description = "Lattice AI Digital Brain desktop shell"
 authors = ["TaeSoo Park"]
 edition = "2021"

package/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Lattice AI",
-  "version": "6.3.0",
+  "version": "6.3.1",
   "identifier": "ai.lattice.desktop",
   "build": {
     "beforeDevCommand": "npm run frontend:dev",

package/static/app/asset-manifest.json

@@ -1,12 +1,12 @@
 {
-  "version": "6.3.0",
+  "version": "6.3.1",
   "generated_at": "vite",
   "entrypoints": {
     "app": "/static/app/index.html"
   },
   "assets": {
     "../node_modules/@tauri-apps/api/core.js": "/static/app/assets/core-CwxXejkd.js",
-    "index.html": "/static/app/assets/index-D76dWuQk.js",
+    "index.html": "/static/app/assets/index-t1jx1BR9.js",
     "assets/index-Div5vMlq.css": "/static/app/assets/index-Div5vMlq.css"
   },
   "vite": {
@@ -17,7 +17,7 @@
       "isDynamicEntry": true
     },
     "index.html": {
-      "file": "assets/index-D76dWuQk.js",
+      "file": "assets/index-t1jx1BR9.js",
       "name": "index",
       "src": "index.html",
       "isEntry": true,