gateway.mjs
45 lines 2.3 KB
Raw
sha256:700fafdd1afa490919f9515d660ca6e75456bcd5bb67513abcd8757a634c01f6 docs: record AIP-b SD-21 land (KN #308) Human 9 days ago
1 /**
2 * Netlify serverless wrapper for the Knowtation Hub Gateway.
3 * Redirects all traffic to this function; the Express app handles /auth/* and /api/*.
4 * Persists hosted billing state in Netlify Blobs (store `gateway-billing`).
5 */
6 import serverless from 'serverless-http';
7 import { connectLambda, getStore } from '@netlify/blobs';
8 import { app } from '../../hub/gateway/server.mjs';
9
10 export const handler = async (event, context) => {
11 connectLambda(event);
12 globalThis.__knowtation_gateway_blob = getStore({ name: 'gateway-billing', consistency: 'eventual' });
13 globalThis.__knowtation_attest_blob = getStore({ name: 'gateway-attestation', consistency: 'eventual' });
14 // Refresh-token store. Strong consistency is NOT available here: this gateway runs in Netlify's
15 // Lambda compatibility mode (serverless-http + connectLambda), which wires up only edge
16 // (eventual) access and omits the `uncachedEdgeURL` that strong-consistency reads require — a
17 // strong read throws BlobsConsistencyError, which previously blocked every refresh-cookie write.
18 // We therefore use eventual consistency (same as the billing store). Reuse detection still holds
19 // after edge propagation (<60s, usually sub-second); see the trade-off note and hardening options
20 // in hub/gateway/refresh-token-store.mjs.
21 globalThis.__knowtation_gateway_auth_blob = getStore({ name: 'gateway-auth', consistency: 'eventual' });
22 // Phase C — dedicated agent-credential store (never refresh-tokens-v1 / gateway-auth).
23 globalThis.__knowtation_gateway_agent_cred_blob = getStore({
24 name: 'gateway-agent-credentials',
25 consistency: 'eventual',
26 });
27 globalThis.__knowtation_gateway_ingest_rules_blob = getStore({
28 name: 'gateway-automation-ingest-rules',
29 consistency: 'eventual',
30 });
31 globalThis.__knowtation_gateway_ingest_idempotency_blob = getStore({
32 name: 'gateway-automation-ingest-idempotency',
33 consistency: 'eventual',
34 });
35 try {
36 return await serverless(app)(event, context);
37 } finally {
38 delete globalThis.__knowtation_gateway_blob;
39 delete globalThis.__knowtation_attest_blob;
40 delete globalThis.__knowtation_gateway_auth_blob;
41 delete globalThis.__knowtation_gateway_agent_cred_blob;
42 delete globalThis.__knowtation_gateway_ingest_rules_blob;
43 delete globalThis.__knowtation_gateway_ingest_idempotency_blob;
44 }
45 };
File History 1 commit
sha256:700fafdd1afa490919f9515d660ca6e75456bcd5bb67513abcd8757a634c01f6 docs: record AIP-b SD-21 land (KN #308) Human 9 days ago