mirror of
https://github.com/trustgraph-ai/trustgraph.git
synced 2026-06-21 04:38:07 +02:00
115e325071
Workspace identity is now determined by queue infrastructure instead of message body fields, closing a privilege-escalation vector where a caller could spoof workspace in the request payload. - Add WorkspaceProcessor base class: discovers workspaces from config at startup, creates per-workspace consumers (queue:workspace), and manages consumer lifecycle on workspace create/delete events - Roll out to librarian, flow-svc, and knowledge cores - Remove workspace field from request schemas (FlowRequest, LibrarianRequest, KnowledgeRequest, CollectionManagementRequest) and from DocumentMetadata / ProcessingMetadata — table stores now accept workspace as an explicit parameter for Cassandra partition keys - Strip workspace encode/decode from all message translators and gateway serializers - Config service gets a dual-queue regime: a system queue for cross-workspace ops (getvalues-all-ws, bootstrapper writes to __workspaces__) and per-workspace queues for tenant-scoped ops, with workspace discovery from its own Cassandra store - Gateway enforces workspace requirement for workspace dispatchers — config moves from system_dispatchers to workspace_dispatchers so the gateway can never route to the system config queue - Add workspace lifecycle hooks to AsyncProcessor so any processor can react to workspace create/delete without subclassing WorkspaceProcessor
96 lines
3.3 KiB
Python
96 lines
3.3 KiB
Python
from typing import Dict, Any, List
|
|
from ...schema import CollectionManagementRequest, CollectionManagementResponse, CollectionMetadata, Error
|
|
from .base import MessageTranslator
|
|
|
|
|
|
class CollectionManagementRequestTranslator(MessageTranslator):
|
|
"""Translator for CollectionManagementRequest schema objects"""
|
|
|
|
def decode(self, data: Dict[str, Any]) -> CollectionManagementRequest:
|
|
return CollectionManagementRequest(
|
|
operation=data.get("operation"),
|
|
collection=data.get("collection"),
|
|
timestamp=data.get("timestamp"),
|
|
name=data.get("name"),
|
|
description=data.get("description"),
|
|
tags=data.get("tags"),
|
|
tag_filter=data.get("tag_filter"),
|
|
limit=data.get("limit")
|
|
)
|
|
|
|
def encode(self, obj: CollectionManagementRequest) -> Dict[str, Any]:
|
|
result = {}
|
|
|
|
if obj.operation is not None:
|
|
result["operation"] = obj.operation
|
|
if obj.collection is not None:
|
|
result["collection"] = obj.collection
|
|
if obj.timestamp is not None:
|
|
result["timestamp"] = obj.timestamp
|
|
if obj.name is not None:
|
|
result["name"] = obj.name
|
|
if obj.description is not None:
|
|
result["description"] = obj.description
|
|
if obj.tags is not None:
|
|
result["tags"] = list(obj.tags)
|
|
if obj.tag_filter is not None:
|
|
result["tag_filter"] = list(obj.tag_filter)
|
|
if obj.limit is not None:
|
|
result["limit"] = obj.limit
|
|
|
|
return result
|
|
|
|
|
|
class CollectionManagementResponseTranslator(MessageTranslator):
|
|
"""Translator for CollectionManagementResponse schema objects"""
|
|
|
|
def decode(self, data: Dict[str, Any]) -> CollectionManagementResponse:
|
|
|
|
# Handle error
|
|
error = None
|
|
if "error" in data and data["error"]:
|
|
error_data = data["error"]
|
|
error = Error(
|
|
type=error_data.get("type"),
|
|
message=error_data.get("message")
|
|
)
|
|
|
|
# Handle collections array
|
|
collections = []
|
|
if "collections" in data:
|
|
for coll_data in data["collections"]:
|
|
collections.append(CollectionMetadata(
|
|
collection=coll_data.get("collection"),
|
|
name=coll_data.get("name"),
|
|
description=coll_data.get("description"),
|
|
tags=coll_data.get("tags", [])
|
|
))
|
|
|
|
return CollectionManagementResponse(
|
|
error=error,
|
|
timestamp=data.get("timestamp"),
|
|
collections=collections
|
|
)
|
|
|
|
def encode(self, obj: CollectionManagementResponse) -> Dict[str, Any]:
|
|
result = {}
|
|
|
|
|
|
if obj.error is not None:
|
|
result["error"] = {
|
|
"type": obj.error.type,
|
|
"message": obj.error.message
|
|
}
|
|
if obj.timestamp is not None:
|
|
result["timestamp"] = obj.timestamp
|
|
if obj.collections is not None:
|
|
result["collections"] = []
|
|
for coll in obj.collections:
|
|
result["collections"].append({
|
|
"collection": coll.collection,
|
|
"name": coll.name,
|
|
"description": coll.description,
|
|
"tags": list(coll.tags) if coll.tags else []
|
|
})
|
|
|
|
return result
|