gateway.mjs
sha256:700fafdd1afa490919f9515d660ca6e75456bcd5bb67513abcd8757a634c01f6
docs: record AIP-b SD-21 land (KN #308)
Human
9 days ago
| 1 | /** |
| 2 | * Netlify serverless wrapper for the Knowtation Hub Gateway. |
| 3 | * Redirects all traffic to this function; the Express app handles /auth/* and /api/*. |
| 4 | * Persists hosted billing state in Netlify Blobs (store `gateway-billing`). |
| 5 | */ |
| 6 | import serverless from 'serverless-http'; |
| 7 | import { connectLambda, getStore } from '@netlify/blobs'; |
| 8 | import { app } from '../../hub/gateway/server.mjs'; |
| 9 | |
| 10 | export const handler = async (event, context) => { |
| 11 | connectLambda(event); |
| 12 | globalThis.__knowtation_gateway_blob = getStore({ name: 'gateway-billing', consistency: 'eventual' }); |
| 13 | globalThis.__knowtation_attest_blob = getStore({ name: 'gateway-attestation', consistency: 'eventual' }); |
| 14 | // Refresh-token store. Strong consistency is NOT available here: this gateway runs in Netlify's |
| 15 | // Lambda compatibility mode (serverless-http + connectLambda), which wires up only edge |
| 16 | // (eventual) access and omits the `uncachedEdgeURL` that strong-consistency reads require — a |
| 17 | // strong read throws BlobsConsistencyError, which previously blocked every refresh-cookie write. |
| 18 | // We therefore use eventual consistency (same as the billing store). Reuse detection still holds |
| 19 | // after edge propagation (<60s, usually sub-second); see the trade-off note and hardening options |
| 20 | // in hub/gateway/refresh-token-store.mjs. |
| 21 | globalThis.__knowtation_gateway_auth_blob = getStore({ name: 'gateway-auth', consistency: 'eventual' }); |
| 22 | // Phase C — dedicated agent-credential store (never refresh-tokens-v1 / gateway-auth). |
| 23 | globalThis.__knowtation_gateway_agent_cred_blob = getStore({ |
| 24 | name: 'gateway-agent-credentials', |
| 25 | consistency: 'eventual', |
| 26 | }); |
| 27 | globalThis.__knowtation_gateway_ingest_rules_blob = getStore({ |
| 28 | name: 'gateway-automation-ingest-rules', |
| 29 | consistency: 'eventual', |
| 30 | }); |
| 31 | globalThis.__knowtation_gateway_ingest_idempotency_blob = getStore({ |
| 32 | name: 'gateway-automation-ingest-idempotency', |
| 33 | consistency: 'eventual', |
| 34 | }); |
| 35 | try { |
| 36 | return await serverless(app)(event, context); |
| 37 | } finally { |
| 38 | delete globalThis.__knowtation_gateway_blob; |
| 39 | delete globalThis.__knowtation_attest_blob; |
| 40 | delete globalThis.__knowtation_gateway_auth_blob; |
| 41 | delete globalThis.__knowtation_gateway_agent_cred_blob; |
| 42 | delete globalThis.__knowtation_gateway_ingest_rules_blob; |
| 43 | delete globalThis.__knowtation_gateway_ingest_idempotency_blob; |
| 44 | } |
| 45 | }; |
File History
1 commit
sha256:700fafdd1afa490919f9515d660ca6e75456bcd5bb67513abcd8757a634c01f6
docs: record AIP-b SD-21 land (KN #308)
Human
9 days ago