@open-matrix/platform-http-server (1.1.32)
Installation
@open-matrix:registry=npm install @open-matrix/platform-http-server@1.1.32"@open-matrix/platform-http-server": "1.1.32"About this package
@open-matrix/platform-http-server
HTTP gateway actors for Matrix runtimes.
The gateway actor translates external HTTP-shaped requests into Matrix actor
requests. Package runtimes expose static web assets through
MatrixHttpAssetEndpointActor, so Host-managed assets can be served over
Matrix without requiring a per-package HTTP origin.
The canonical asset actor implementation lives in
sdk/package-runtime/src/execute/package-web-module.ts. This package owns the
HTTP ingress and SystemGatewayHttpActor; its hosted factory mounts sealed
Chat and Director providers from the starter-application manifest and admits
only those supplied routes on the platform gateway.
Account management forwards the admitted browser proof to system.auth for namespace
claims and workspace-realm changes. API-key issue/revoke forwards either browser
headers or the presented management API key; the owner validates it again and records
the verified actor transactionally. CLI authorization-code exchange forwards the saved
browser proof. The gateway never invents audit actor IDs from a target account.
Route-key bootstrap admits both the home's owner and principals whose current
system.auth membership authorizes the requested authority root. The same authoritative
membership check guards the routed application page and browser credential minting, so
selecting a shared home cannot produce a bootstrap that the route or credential endpoint
later refuses. Missing or slow namespace/access-owner replies remain bounded, no-store,
retryable HTTP 503 responses on page, route-check, and bootstrap endpoints;
an answered non-membership check is a worded HTTP 403 refusal.
Password signup and Settings share readProfileDisplayName from @open-matrix/contracts: trim,
collapse whitespace, and cap at 120 characters. Registration requires a nonblank displayName;
the password principal stores that name. OAuth retains the provider's name.
Dependencies
Dependencies
| ID | Version |
|---|---|
| @hivecast/runtime-ownership | 1.1.32 |
| @nats-io/nats-core | ^3.4.0 |
| @open-matrix/contracts | 1.1.32 |
| @open-matrix/core | 1.1.32 |
| @open-matrix/credential-plane | 1.1.32 |
| @open-matrix/hivecast-brand | 1.1.32 |
| @open-matrix/host-control | 1.1.32 |
| @open-matrix/nats-auth | 1.1.32 |
| @open-matrix/nats-authority-port | 1.1.32 |
| @open-matrix/package-runtime | 1.1.32 |
| @open-matrix/platform-web-surface | 1.1.32 |
| @open-matrix/subjects | 1.1.32 |
| @open-matrix/system-auth | 1.1.32 |
| express | ^5.2.1 |
| nats | ^2.29.3 |
Development Dependencies
| ID | Version |
|---|---|
| @hivecast/settings | 1.1.32 |
| @matrix/test-utils | 1.1.32 |
| @open-matrix/browser-host | 1.1.32 |
| @open-matrix/identity-client | 1.1.32 |
| @open-matrix/system-postgres | 1.1.32 |
| @playwright/test | 1.61.0 |
| @types/express | ^5.0.6 |
| @types/node | ^25.0.10 |
| esbuild | ^0.25.0 |
| tsx | ^4.0.0 |
| typescript | ^5.3.0 |