@axiom-lattice/core 3.1.0 → 3.1.2

package/dist/index.mjs

@@ -17030,6 +17030,51 @@ var FilesystemBackend = class {
       throw new Error(`Path: ${resolvedPath} outside root directory: ${this.cwd}`);
     }
   }
+  async assertVirtualOpenedFileContained(resolvedPath, openedStat) {
+    if (!this.virtualMode) {
+      return;
+    }
+    const [rootPath, realFilePath] = await Promise.all([
+      fs2.realpath(this.cwd),
+      fs2.realpath(resolvedPath)
+    ]);
+    const relative4 = path4.relative(rootPath, realFilePath);
+    if (relative4 === ".." || relative4.startsWith(`..${path4.sep}`) || path4.isAbsolute(relative4)) {
+      throw new Error(`Path: ${resolvedPath} outside root directory: ${this.cwd}`);
+    }
+    const realPathStat = await fs2.stat(realFilePath);
+    if (realPathStat.dev !== openedStat.dev || realPathStat.ino !== openedStat.ino) {
+      throw new Error(`File changed during secure read: ${resolvedPath}`);
+    }
+  }
+  async readFileBuffer(filePath) {
+    const resolvedPath = this.resolvePath(filePath);
+    await this.assertVirtualParentContained(resolvedPath);
+    if (!SUPPORTS_NOFOLLOW) {
+      const initialStat = await fs2.lstat(resolvedPath);
+      if (initialStat.isSymbolicLink()) {
+        throw new Error(`Symlinks are not allowed: ${filePath}`);
+      }
+    }
+    const flags = SUPPORTS_NOFOLLOW ? fsSync.constants.O_RDONLY | fsSync.constants.O_NOFOLLOW : fsSync.constants.O_RDONLY;
+    const fd = await fs2.open(resolvedPath, flags);
+    try {
+      const stat4 = await fd.stat();
+      if (!stat4.isFile()) {
+        throw new Error(`File '${filePath}' not found`);
+      }
+      await this.assertVirtualOpenedFileContained(resolvedPath, stat4);
+      if (!SUPPORTS_NOFOLLOW) {
+        const finalStat = await fs2.lstat(resolvedPath);
+        if (finalStat.isSymbolicLink() || finalStat.dev !== stat4.dev || finalStat.ino !== stat4.ino) {
+          throw new Error(`File changed during secure read: ${resolvedPath}`);
+        }
+      }
+      return { content: await fd.readFile(), stat: stat4 };
+    } finally {
+      await fd.close();
+    }
+  }
   validateDeleteTarget(filePath, stat4) {
     if (stat4.isSymbolicLink()) {
       return `Error: Cannot delete '${filePath}': symlinks are not allowed`;
@@ -17129,32 +17174,8 @@ var FilesystemBackend = class {
    */
   async read(filePath, offset = 0, limit = 2e3) {
     try {
-      const resolvedPath = this.resolvePath(filePath);
-      let content;
-      if (SUPPORTS_NOFOLLOW) {
-        const stat4 = await fs2.stat(resolvedPath);
-        if (!stat4.isFile()) {
-          return `Error: File '${filePath}' not found`;
-        }
-        const fd = await fs2.open(
-          resolvedPath,
-          fsSync.constants.O_RDONLY | fsSync.constants.O_NOFOLLOW
-        );
-        try {
-          content = await fd.readFile({ encoding: "utf-8" });
-        } finally {
-          await fd.close();
-        }
-      } else {
-        const stat4 = await fs2.lstat(resolvedPath);
-        if (stat4.isSymbolicLink()) {
-          return `Error: Symlinks are not allowed: ${filePath}`;
-        }
-        if (!stat4.isFile()) {
-          return `Error: File '${filePath}' not found`;
-        }
-        content = await fs2.readFile(resolvedPath, "utf-8");
-      }
+      const { content: buffer2 } = await this.readFileBuffer(filePath);
+      const content = buffer2.toString("utf-8");
       const emptyMsg = checkEmptyContent(content);
       if (emptyMsg) {
         return emptyMsg;
@@ -17178,35 +17199,19 @@ var FilesystemBackend = class {
    * @returns Raw file content as FileData
    */
   async readRaw(filePath) {
-    const resolvedPath = this.resolvePath(filePath);
-    let content;
-    let stat4;
-    if (SUPPORTS_NOFOLLOW) {
-      stat4 = await fs2.stat(resolvedPath);
-      if (!stat4.isFile()) throw new Error(`File '${filePath}' not found`);
-      const fd = await fs2.open(
-        resolvedPath,
-        fsSync.constants.O_RDONLY | fsSync.constants.O_NOFOLLOW
-      );
-      try {
-        content = await fd.readFile({ encoding: "utf-8" });
-      } finally {
-        await fd.close();
-      }
-    } else {
-      stat4 = await fs2.lstat(resolvedPath);
-      if (stat4.isSymbolicLink()) {
-        throw new Error(`Symlinks are not allowed: ${filePath}`);
-      }
-      if (!stat4.isFile()) throw new Error(`File '${filePath}' not found`);
-      content = await fs2.readFile(resolvedPath, "utf-8");
-    }
+    const { content: buffer2, stat: stat4 } = await this.readFileBuffer(filePath);
+    const content = buffer2.toString("utf-8");
     return {
       content: content.split("\n"),
       created_at: stat4.ctime.toISOString(),
       modified_at: stat4.mtime.toISOString()
     };
   }
+  /** Read file content as raw bytes without following symbolic links. */
+  async readBinary(filePath) {
+    const { content } = await this.readFileBuffer(filePath);
+    return content;
+  }
   /**
    * Create a new file with content.
    * Returns WriteResult. External storage sets filesUpdate=null.
@@ -21798,7 +21803,7 @@ registerToolLattice(
   "update_agent",
   {
     name: "update_agent",
-    description: "Update an existing agent's configuration. Provide the agent ID and the fields to change. Returns the updated agent's ID and name. NOTE: For user approval/confirmation scenarios, add middleware with type: 'ask_user_to_clarify'.",
+    description: "Update an existing agent's configuration. Provide the agent ID and the fields to change. Returns the updated agent's ID and name. NOTE: For user approval/confirmation scenarios, add middleware with type: 'ask_user_to_clarify'. IMPORTANT: do NOT set 'modelKey' unless the user explicitly specified a model \u2014 leaving it unset makes the runtime use the 'default' model.",
     schema: updateAgentSchema
   },
   async (input, exeConfig) => {
@@ -22036,6 +22041,8 @@ OVERRIDES the defaults above:
   (parentId); NEVER create a new parent task for the round.
 - The round is pre-approved \u2014 skip the DESIGN\u2192CONFIRM gates: show the
   design in your reply, then build directly.
+- Do NOT set modelKey in update_agent unless the user explicitly named a
+  model \u2014 leaving it unset makes the runtime use the 'default' model.
 - Every update_agent call must be mirrored by a manage_task work item
   whose summary names the changed keys (e.g. "update_agent: prompt,
   modelKey") \u2014 the round feed highlights these so the user can see what
@@ -26625,14 +26632,22 @@ var DEFAULT_CALIBRATION_PROBES = [
     expectedPass: false
   }
 ];
+function resolveJudgeModelKey(explicitKey, manager) {
+  if (explicitKey) return explicitKey;
+  const models = manager.getAllLattices();
+  const defaultModel = models.find((m) => m.key === "default");
+  if (defaultModel) return defaultModel.key;
+  const first = models[0];
+  if (!first) {
+    throw new Error("No model registered \u2014 register a model or provide a judgeModelKey");
+  }
+  return first.key;
+}
 var LatticeEvalProject = class {
   constructor(project, onCaseComplete) {
     this.suites = /* @__PURE__ */ new Map();
     this.project = project;
-    const judgeModelKey = this.project.judge_agent_config.modelKey;
-    if (!judgeModelKey) {
-      throw new Error("judge_agent_config.modelKey is required \u2014 only pre-registered models are allowed");
-    }
+    const judgeModelKey = resolveJudgeModelKey(this.project.judge_agent_config.modelKey, modelLatticeManager);
     if (!modelLatticeManager.hasLattice(judgeModelKey)) {
       throw new Error(
         `Judge model "${judgeModelKey}" not found. Register it first or provide a valid modelKey.`
@@ -29063,7 +29078,9 @@ function createManageEvalTool() {
             data = await store.createProject(tid, uuidv48(), {
               name: input.name,
               description: input.description,
-              judgeModelConfig: { modelKey: input.judgeModelKey },
+              // No judge key given → default to the 'default' model key (the same
+              // convention the UI model selector uses); never an empty modelKey.
+              judgeModelConfig: { modelKey: input.judgeModelKey ?? "default" },
               targetServerConfig: {
                 workspace_id: ctx.workspaceId,
                 project_id: ctx.projectId,
@@ -29138,7 +29155,7 @@ function createManageEvalTool() {
       description: `Create, update, delete evaluation projects, suites, and test cases.
  
 Project: create_project(name, description?, judgeModelKey?, concurrency?, targetAgentId?) | update_project | delete_project
-  judgeModelKey defaults to first available model. concurrency defaults to 3.
+  judgeModelKey defaults to the "default" model. concurrency defaults to 3.
   delete_project rejected if active runs exist.
   **When creating a project from within a workspace, the workspace/project context is
   automatically bound \u2014 eval runs will execute in the same workspace.**
@@ -31416,6 +31433,7 @@ export {
   registerWorkflowRun,
   removeCollectionVectorStore,
   renderTemplate,
+  resolveJudgeModelKey,
   resolvePath,
   sandboxLatticeManager,
   sanitizeToolCallId,