@axiom-lattice/core 2.1.89 → 2.1.91

package/dist/index.js

@@ -1612,6 +1612,7 @@ __export(index_exports, {
   TaskStatus: () => TaskStatus,
   TeamAgentGraphBuilder: () => TeamAgentGraphBuilder,
   ThreadStatus: () => ThreadStatus2,
+  TokenCache: () => TokenCache,
   ToolLatticeManager: () => ToolLatticeManager,
   VectorStoreLatticeManager: () => VectorStoreLatticeManager,
   VolumeFilesystem: () => VolumeFilesystem,
@@ -1649,8 +1650,10 @@ __export(index_exports, {
   createQuerySqlTool: () => createQuerySqlTool,
   createQueryTableDefinitionTool: () => createQueryTableDefinitionTool,
   createQueryTablesListTool: () => createQueryTablesListTool,
+  createResourceAddress: () => createResourceAddress,
   createSandboxProvider: () => createSandboxProvider,
   createSchedulerMiddleware: () => createSchedulerMiddleware,
+  createSharePayload: () => createSharePayload,
   createTaskMiddleware: () => createTaskMiddleware,
   createTeamMiddleware: () => createTeamMiddleware,
   createTeammateTools: () => createTeammateTools,
@@ -1670,6 +1673,7 @@ __export(index_exports, {
   formatGrepMatches: () => formatGrepMatches,
   formatGrepResults: () => formatGrepResults,
   formatReadResponse: () => formatReadResponse,
+  generateToken: () => generateToken,
   getAgentClient: () => getAgentClient,
   getAgentConfig: () => getAgentConfig,
   getAllAgentConfigs: () => getAllAgentConfigs,
@@ -7732,6 +7736,17 @@ var SandboxLatticeManager = class _SandboxLatticeManager extends BaseLatticeMana
     }
     return provider;
   }
+  /**
+   * Returns the first registered (default) sandbox provider.
+   *
+   * Used by the resource sharing system for file resolution
+   * when a specific provider key is not specified.
+   *
+   * @returns The default registered {@link SandboxProvider}.
+   */
+  getDefaultProvider() {
+    return this._requireProvider();
+  }
 };
 var sandboxLatticeManager = SandboxLatticeManager.getInstance();
 var getSandBoxManager = (key = "default") => {
@@ -24348,6 +24363,12 @@ var MicrosandboxServiceClient = class {
   }
 };
 
+// src/sandbox_lattice/resourceAddressUtils.ts
+function createResourceAddress(config) {
+  const volume = buildNamedVolumeName("p", "project", config.tenantId, config.workspaceId, config.projectId);
+  return { volume, resourcePath: config.resourcePath };
+}
+
 // src/sandbox_lattice/providers/MicrosandboxRemoteProvider.ts
 function parseOptionalNumberEnv(name, fallback) {
   const rawValue = process.env[name];
@@ -24373,6 +24394,7 @@ var MicrosandboxRemoteProvider = class {
   constructor(config) {
     this.config = config;
     this.creating = /* @__PURE__ */ new Map();
+    this.createResourceAddress = createResourceAddress;
     this.client = config.client ?? new MicrosandboxServiceClient({
       baseURL: config.baseURL,
       apiKey: config.apiKey ?? process.env.MICROSANDBOX_API_KEY
@@ -24423,6 +24445,13 @@ var MicrosandboxRemoteProvider = class {
   async listSandboxes() {
     return [];
   }
+  getResourceResolver() {
+    return {
+      resolve: async (address) => {
+        return this.client.volumeFsDownload(address.volume, address.resourcePath);
+      }
+    };
+  }
   buildEnsureInput(config) {
     const defaultMicrosandboxRemoteConfig = getDefaultMicrosandboxRemoteConfig();
     const image = this.config.image ?? defaultMicrosandboxRemoteConfig.image;
@@ -24658,6 +24687,7 @@ var RemoteSandboxProvider = class {
     this.creating = /* @__PURE__ */ new Map();
     this.workspace = DEFAULT_WORKSPACE;
     this.workspaceResolved = false;
+    this.createResourceAddress = createResourceAddress;
     this.client = new import_sandbox23.SandboxClient({
       baseUrl: config.baseURL,
       environment: ""
@@ -24719,6 +24749,14 @@ var RemoteSandboxProvider = class {
   async listSandboxes() {
     return Array.from(this.instances.values());
   }
+  getResourceResolver() {
+    return {
+      resolve: async (address) => {
+        const client = this.createVolumeFsClient(address.volume, `/project`);
+        return client.readRaw(address.resourcePath);
+      }
+    };
+  }
   createVolumeFsClient(_volumeName, pathPrefix) {
     const workspace = this.workspace;
     const resolve4 = (p) => {
@@ -24910,6 +24948,7 @@ var E2BProvider = class {
     this.config = config;
     this.instances = /* @__PURE__ */ new Map();
     this.creating = /* @__PURE__ */ new Map();
+    this.createResourceAddress = createResourceAddress;
   }
   async createSandbox(name, _config) {
     const existing = this.instances.get(name);
@@ -24967,6 +25006,16 @@ var E2BProvider = class {
   async listSandboxes() {
     return Array.from(this.instances.values());
   }
+  getResourceResolver() {
+    const instances = this.instances;
+    return {
+      resolve: async (address) => {
+        const entry = Array.from(instances.values())[0];
+        if (!entry) throw new Error("No sandbox instance available to resolve resource");
+        return entry.file.downloadFile({ file: `/project/${address.resourcePath}` });
+      }
+    };
+  }
 };
 
 // src/sandbox_lattice/providers/DaytonaProvider.ts
@@ -25094,6 +25143,7 @@ var DaytonaProvider = class {
     this.instances = /* @__PURE__ */ new Map();
     this.creating = /* @__PURE__ */ new Map();
     this.volumeId = null;
+    this.createResourceAddress = createResourceAddress;
     this.daytona = new import_sdk.Daytona({
       apiKey: config.apiKey,
       apiUrl: config.apiUrl,
@@ -25278,11 +25328,22 @@ var DaytonaProvider = class {
   async listSandboxes() {
     return Array.from(this.instances.values());
   }
+  getResourceResolver() {
+    const instances = this.instances;
+    return {
+      resolve: async (address) => {
+        const entry = Array.from(instances.values())[0];
+        if (!entry) throw new Error("No sandbox instance available to resolve resource");
+        return entry.file.downloadFile({ file: `/project/${address.resourcePath}` });
+      }
+    };
+  }
 };
 
 // src/sandbox_lattice/providers/LocalSandboxProvider.ts
 var path4 = __toESM(require("path"));
 var os = __toESM(require("os"));
+var fs4 = __toESM(require("fs/promises"));
 
 // src/sandbox_lattice/LocalSandboxInstance.ts
 var import_node_child_process = require("child_process");
@@ -25497,6 +25558,7 @@ var LocalSandboxProvider = class {
   constructor(config = {}) {
     this.instances = /* @__PURE__ */ new Map();
     this.creating = /* @__PURE__ */ new Map();
+    this.createResourceAddress = createResourceAddress;
     this.basePath = config.basePath ?? path4.join(os.homedir(), ".axiom-local-sandbox");
   }
   async createSandbox(name, _config) {
@@ -25549,6 +25611,14 @@ var LocalSandboxProvider = class {
   async listSandboxes() {
     return Array.from(this.instances.values());
   }
+  getResourceResolver() {
+    return {
+      resolve: async (address) => {
+        const hostPath = path4.join(this.basePath, "project", address.resourcePath);
+        return fs4.readFile(hostPath);
+      }
+    };
+  }
 };
 
 // src/sandbox_lattice/SandboxProviderFactory.ts
@@ -25605,6 +25675,77 @@ function createSandboxProvider(config) {
   }
 }
 
+// src/sandbox_lattice/TokenCache.ts
+var TokenCache = class {
+  constructor() {
+    this.cache = /* @__PURE__ */ new Map();
+    this.ttlMs = 6e4;
+  }
+  /**
+   * Look up a token in the cache.
+   *
+   * @param token - The share token.
+   * @returns The cached entry, or `null` if the token is absent or expired.
+   */
+  get(token) {
+    const item = this.cache.get(token);
+    if (!item) return null;
+    if (Date.now() > item.expires) {
+      this.cache.delete(token);
+      return null;
+    }
+    return item.entry;
+  }
+  /**
+   * Store a token → address mapping.
+   *
+   * @param token - The share token.
+   * @param entry - The cache entry to associate with the token.
+   */
+  set(token, entry) {
+    this.cache.set(token, { entry, expires: Date.now() + this.ttlMs });
+  }
+  /**
+   * Remove a cached entry (e.g. on revocation).
+   *
+   * @param token - The share token to invalidate.
+   */
+  invalidate(token) {
+    this.cache.delete(token);
+  }
+};
+
+// src/sandbox_lattice/ShareService.ts
+var import_crypto4 = require("crypto");
+var import_bcryptjs = __toESM(require("bcryptjs"));
+var TOKEN_BYTES = 24;
+function generateToken() {
+  return (0, import_crypto4.randomBytes)(TOKEN_BYTES).toString("base64url");
+}
+function createSharePayload(tenantId, workspaceId, projectId, userId, request) {
+  const resourcePath = (request.resourcePath || "").replace(/^\/?project\//, "");
+  return {
+    address: createResourceAddress({
+      tenantId,
+      workspaceId,
+      projectId,
+      resourcePath
+    }),
+    tenantId,
+    workspaceId,
+    projectId,
+    assistantId: request.assistantId ?? null,
+    vmIsolation: "project",
+    visibility: request.visibility ?? "public",
+    passwordHash: request.visibility === "password" && request.password ? import_bcryptjs.default.hashSync(request.password, 10) : null,
+    title: request.title ?? null,
+    createdBy: userId,
+    expiresAt: request.expiresAt ? new Date(request.expiresAt) : null,
+    maxAccess: request.maxAccess ?? null,
+    revoked: false
+  };
+}
+
 // src/channel/connectAllChannels.ts
 async function connectAllChannels(getAdapter, options = {}) {
   const store = getStoreLattice("default", "channelInstallation").store;
@@ -25645,7 +25786,7 @@ function getMenuRegistry() {
 var Protocols = __toESM(require("@axiom-lattice/protocols"));
 
 // src/util/encryption.ts
-var import_crypto4 = require("crypto");
+var import_crypto5 = require("crypto");
 var ALGORITHM = "aes-256-gcm";
 var IV_LENGTH = 16;
 var SALT_LENGTH = 32;
@@ -25658,7 +25799,7 @@ function getEncryptionKey() {
     return cachedKey;
   }
   const key = process.env.LATTICE_ENCRYPTION_KEY || DEFAULT_ENCRYPTION_KEY;
-  cachedKey = (0, import_crypto4.pbkdf2Sync)(key, "lattice-encryption-salt", ITERATIONS, 32, "sha256");
+  cachedKey = (0, import_crypto5.pbkdf2Sync)(key, "lattice-encryption-salt", ITERATIONS, 32, "sha256");
   if (!keyValidated) {
     keyValidated = true;
     validateEncryptionKey();
@@ -25667,10 +25808,10 @@ function getEncryptionKey() {
 }
 function encrypt(plaintext, key) {
   const actualKey = key || getEncryptionKey();
-  const salt = (0, import_crypto4.randomBytes)(SALT_LENGTH);
-  const iv = (0, import_crypto4.randomBytes)(IV_LENGTH);
-  const derivedKey = (0, import_crypto4.pbkdf2Sync)(actualKey, salt, ITERATIONS, 32, "sha256");
-  const cipher = (0, import_crypto4.createCipheriv)(ALGORITHM, derivedKey, iv);
+  const salt = (0, import_crypto5.randomBytes)(SALT_LENGTH);
+  const iv = (0, import_crypto5.randomBytes)(IV_LENGTH);
+  const derivedKey = (0, import_crypto5.pbkdf2Sync)(actualKey, salt, ITERATIONS, 32, "sha256");
+  const cipher = (0, import_crypto5.createCipheriv)(ALGORITHM, derivedKey, iv);
   const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
   const authTag = cipher.getAuthTag();
   return Buffer.concat([salt, iv, encrypted, authTag]).toString("base64");
@@ -25682,8 +25823,8 @@ function decrypt(encrypted, key) {
   const iv = data.subarray(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);
   const authTag = data.subarray(-16);
   const ciphertext = data.subarray(SALT_LENGTH + IV_LENGTH, -16);
-  const derivedKey = (0, import_crypto4.pbkdf2Sync)(actualKey, salt, ITERATIONS, 32, "sha256");
-  const decipher = (0, import_crypto4.createDecipheriv)(ALGORITHM, derivedKey, iv);
+  const derivedKey = (0, import_crypto5.pbkdf2Sync)(actualKey, salt, ITERATIONS, 32, "sha256");
+  const decipher = (0, import_crypto5.createDecipheriv)(ALGORITHM, derivedKey, iv);
   decipher.setAuthTag(authTag);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
 }
@@ -25936,6 +26077,7 @@ PersonalAssistantConfig._config = deepClone(DEFAULT_CONFIG);
   TaskStatus,
   TeamAgentGraphBuilder,
   ThreadStatus,
+  TokenCache,
   ToolLatticeManager,
   VectorStoreLatticeManager,
   VolumeFilesystem,
@@ -25973,8 +26115,10 @@ PersonalAssistantConfig._config = deepClone(DEFAULT_CONFIG);
   createQuerySqlTool,
   createQueryTableDefinitionTool,
   createQueryTablesListTool,
+  createResourceAddress,
   createSandboxProvider,
   createSchedulerMiddleware,
+  createSharePayload,
   createTaskMiddleware,
   createTeamMiddleware,
   createTeammateTools,
@@ -25994,6 +26138,7 @@ PersonalAssistantConfig._config = deepClone(DEFAULT_CONFIG);
   formatGrepMatches,
   formatGrepResults,
   formatReadResponse,
+  generateToken,
   getAgentClient,
   getAgentConfig,
   getAllAgentConfigs,