@axiom-lattice/gateway 2.1.37 → 2.1.39

package/dist/index.js

@@ -44,6 +44,14 @@ var import_messages = require("@langchain/core/messages");
 var import_langgraph = require("@langchain/langgraph");
 var import_uuid = require("uuid");
 var import_core = require("@axiom-lattice/core");
+async function checkAgentExists(tenant_id, assistant_id) {
+  try {
+    const agentLattice = import_core.agentLatticeManager.getAgentLatticeWithTenant(tenant_id, assistant_id);
+    return agentLattice !== void 0;
+  } catch {
+    return false;
+  }
+}
 function getOrCreateChunkBuffer() {
   if (!(0, import_core.hasChunkBuffer)("default")) {
     const buffer = new import_core.InMemoryChunkBuffer({
@@ -67,7 +75,7 @@ async function agent_invoke({
   run_id,
   custom_run_config
 }) {
-  const agentLattice = (0, import_core.getAgentLattice)(assistant_id);
+  const agentLattice = import_core.agentLatticeManager.getAgentLatticeWithTenant(tenant_id, assistant_id);
   const runnable_agent = agentLattice?.client;
   const { message, ...rest } = input;
   const humanMessage = new import_messages.HumanMessage(message || "");
@@ -77,6 +85,7 @@ async function agent_invoke({
   }
   const runConfig = {
     ...agentLattice?.config?.runConfig || {},
+    tenantId: tenant_id,
     workspaceId: workspace_id,
     projectId: project_id,
     ...custom_run_config || {},
@@ -119,8 +128,8 @@ async function agent_stream({
   run_id,
   custom_run_config
 }) {
-  const runnable_agent = (0, import_core.getAgentClient)(assistant_id);
-  const agentLattice = (0, import_core.getAgentLattice)(assistant_id);
+  const runnable_agent = await (0, import_core.getAgentClient)(tenant_id, assistant_id);
+  const agentLattice = import_core.agentLatticeManager.getAgentLatticeWithTenant(tenant_id, assistant_id);
   const { message, ...rest } = input;
   let messages = [];
   if (!command) {
@@ -130,6 +139,7 @@ async function agent_stream({
   const chunkBuffer = getOrCreateChunkBuffer();
   const runConfig = {
     ...agentLattice?.config?.runConfig || {},
+    tenantId: tenant_id,
     workspaceId: workspace_id,
     projectId: project_id,
     ...custom_run_config || {},
@@ -208,10 +218,11 @@ async function agent_stream({
   }
 }
 async function agent_state({
+  assistant_id,
   thread_id,
-  assistant_id
+  tenant_id
 }) {
-  const runnable_agent = (0, import_core.getAgentClient)(assistant_id);
+  const runnable_agent = await (0, import_core.getAgentClient)(tenant_id, assistant_id);
   if (!runnable_agent) {
     throw new Error(`Agent ${assistant_id} not found`);
   }
@@ -225,7 +236,7 @@ async function agent_messages({
   tenant_id,
   assistant_id
 }) {
-  const runnable_agent = (0, import_core.getAgentClient)(assistant_id);
+  const runnable_agent = await (0, import_core.getAgentClient)(tenant_id, assistant_id);
   if (!runnable_agent) {
     throw new Error(`Agent ${assistant_id} not found`);
   }
@@ -246,8 +257,8 @@ async function agent_messages({
   const new_messages = messagesArray;
   return new_messages;
 }
-async function draw_graph(assistant_id) {
-  const runnable_agent = (0, import_core.getAgentClient)(assistant_id);
+async function draw_graph(assistant_id, tenant_id) {
+  const runnable_agent = await (0, import_core.getAgentClient)(tenant_id, assistant_id);
   if (!runnable_agent) {
     throw new Error(`Agent ${assistant_id} not found`);
   }
@@ -285,9 +296,18 @@ async function resume_stream({
 var import_core2 = require("@axiom-lattice/core");
 var import_crypto = require("crypto");
 var import_core3 = require("@axiom-lattice/core");
+function getTenantId(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
+  return request.headers["x-tenant-id"] || "default";
+}
 function convertAgentConfigToAssistant(config) {
   return {
     id: config.key,
+    tenantId: "default",
+    // Code-configured agents belong to default tenant
     name: config.name,
     description: config.description,
     graphDefinition: config,
@@ -299,13 +319,14 @@ function convertAgentConfigToAssistant(config) {
   };
 }
 async function getAssistantList(request, reply) {
-  const agentConfigs = await (0, import_core3.getAllAgentConfigs)();
+  const tenantId = getTenantId(request);
+  const agentConfigs = await import_core3.agentLatticeManager.getAllAgentConfigsByTenant(tenantId);
   const codeConfiguredAssistants = agentConfigs.map(
     convertAgentConfigToAssistant
   );
   const storeLattice = (0, import_core2.getStoreLattice)("default", "assistant");
   const assistantStore = storeLattice.store;
-  const storedAssistants = await assistantStore.getAllAssistants();
+  const storedAssistants = await assistantStore.getAllAssistants(tenantId);
   const assistantMap = /* @__PURE__ */ new Map();
   codeConfiguredAssistants.forEach((assistant) => {
     assistantMap.set(assistant.id, assistant);
@@ -325,12 +346,12 @@ async function getAssistantList(request, reply) {
 }
 async function getAssistant(request, reply) {
   const { id } = request.params;
+  const tenantId = getTenantId(request);
   const storeLattice = (0, import_core2.getStoreLattice)("default", "assistant");
   const assistantStore = storeLattice.store;
-  let assistant = await assistantStore.getAssistantById(id);
+  let assistant = await assistantStore.getAssistantById(tenantId, id);
   if (!assistant) {
-    const agentConfigs = await (0, import_core3.getAllAgentConfigs)();
-    const agentConfig = agentConfigs.find((config) => config.key === id);
+    const agentConfig = await import_core3.agentLatticeManager.getAgentConfigWithTenant(tenantId, id);
     if (agentConfig) {
       assistant = convertAgentConfigToAssistant(agentConfig);
     }
@@ -347,20 +368,20 @@ async function getAssistant(request, reply) {
     data: assistant
   };
 }
-async function upsertAssistant(id, data, reply, requireFields = false) {
+async function upsertAssistant(tenantId, id, data, reply, requireFields = false) {
   const storeLattice = (0, import_core2.getStoreLattice)("default", "assistant");
   const assistantStore = storeLattice.store;
-  const exists = await assistantStore.hasAssistant(id);
+  const exists = await assistantStore.hasAssistant(tenantId, id);
   let assistant;
   if (exists) {
-    assistant = await assistantStore.updateAssistant(id, data);
+    assistant = await assistantStore.updateAssistant(tenantId, id, data);
     if (!assistant) {
       return reply.status(500).send({
         success: false,
         message: "Failed to update assistant"
       });
     }
-    import_core3.eventBus.publish("assistant:updated", { id: assistant.id, name: assistant.name });
+    import_core3.eventBus.publish("assistant:updated", { id: assistant.id, name: assistant.name, tenantId });
     return {
       success: true,
       message: "Updated assistant",
@@ -376,8 +397,8 @@ async function upsertAssistant(id, data, reply, requireFields = false) {
       });
     }
   }
-  assistant = await assistantStore.createAssistant(id, data);
-  import_core3.eventBus.publish("assistant:created", { id: assistant.id, name: assistant.name });
+  assistant = await assistantStore.createAssistant(tenantId, id, data);
+  import_core3.eventBus.publish("assistant:created", { id: assistant.id, name: assistant.name, tenantId });
   return reply.status(201).send({
     success: true,
     message: "Created assistant",
@@ -385,6 +406,7 @@ async function upsertAssistant(id, data, reply, requireFields = false) {
   });
 }
 async function createAssistant(request, reply) {
+  const tenantId = getTenantId(request);
   const data = request.body;
   if (!data.name || !data.graphDefinition) {
     return reply.status(400).send({
@@ -393,49 +415,51 @@ async function createAssistant(request, reply) {
     });
   }
   const id = data.id ?? (0, import_crypto.randomUUID)();
-  return upsertAssistant(id, data, reply, true);
+  return upsertAssistant(tenantId, id, data, reply, true);
 }
 async function updateAssistant(request, reply) {
+  const tenantId = getTenantId(request);
   const { id } = request.params;
   const updates = request.body;
-  return upsertAssistant(id, updates, reply, false);
+  return upsertAssistant(tenantId, id, updates, reply, false);
 }
 async function deleteAssistant(request, reply) {
+  const tenantId = getTenantId(request);
   const { id } = request.params;
   const storeLattice = (0, import_core2.getStoreLattice)("default", "assistant");
   const assistantStore = storeLattice.store;
-  const agentConfigs = await (0, import_core3.getAllAgentConfigs)();
-  const isCodeConfigured = agentConfigs.some((config) => config.key === id);
+  const agentConfig = await import_core3.agentLatticeManager.getAgentConfigWithTenant(tenantId, id);
+  const isCodeConfigured = !!agentConfig;
   if (isCodeConfigured) {
-    const exists2 = await assistantStore.hasAssistant(id);
+    const exists2 = await assistantStore.hasAssistant(tenantId, id);
     if (!exists2) {
       return reply.status(404).send({
         success: false,
         message: "Assistant not found (code-configured assistants cannot be deleted from code, only from store)"
       });
     }
-    await assistantStore.deleteAssistant(id);
-    import_core3.eventBus.publish("assistant:deleted", { id });
+    await assistantStore.deleteAssistant(tenantId, id);
+    import_core3.eventBus.publish("assistant:deleted", { id, tenantId });
     return {
       success: true,
       message: "Deleted assistant from store (code-configured registration remains)"
     };
   }
-  const exists = await assistantStore.hasAssistant(id);
+  const exists = await assistantStore.hasAssistant(tenantId, id);
   if (!exists) {
     return reply.status(404).send({
       success: false,
       message: "Assistant not found"
     });
   }
-  const deleted = await assistantStore.deleteAssistant(id);
+  const deleted = await assistantStore.deleteAssistant(tenantId, id);
   if (!deleted) {
     return reply.status(500).send({
       success: false,
       message: "Failed to delete assistant"
     });
   }
-  import_core3.eventBus.publish("assistant:deleted", { id });
+  import_core3.eventBus.publish("assistant:deleted", { id, tenantId });
   return {
     success: true,
     message: "Successfully deleted assistant"
@@ -444,7 +468,8 @@ async function deleteAssistant(request, reply) {
 var getAgentGraph = async (request, reply) => {
   try {
     const { assistantId } = request.params;
-    const imageData = await draw_graph(assistantId);
+    const tenant_id = getTenantId(request);
+    const imageData = await draw_graph(assistantId, tenant_id);
     reply.header("Content-Type", "application/json").send({
       image: imageData
     });
@@ -481,6 +506,14 @@ var createRun = async (request, reply) => {
       return;
     }
     if (streaming) {
+      const agentExists = await checkAgentExists(tenant_id, assistant_id);
+      if (!agentExists) {
+        reply.status(404).send({
+          success: false,
+          error: `Agent ${assistant_id} not found for tenant ${tenant_id}`
+        });
+        return;
+      }
       const stream = await agent_stream({
         assistant_id,
         input,
@@ -500,13 +533,27 @@ var createRun = async (request, reply) => {
         "Access-Control-Allow-Origin": "*"
       });
       try {
+        let chunkCount = 0;
         for await (const chunk of stream) {
-          reply.raw.write(`data: ${JSON.stringify(chunk)}
+          chunkCount++;
+          const success = reply.raw.write(`data: ${JSON.stringify(chunk)}
 
 `);
+          if (!success) {
+            await new Promise((resolve) => reply.raw.once("drain", resolve));
+          }
         }
       } catch (error) {
-        console.error("Stream processing error:", error);
+        const errorEvent = {
+          type: "error",
+          data: {
+            id: (0, import_uuid2.v4)(),
+            content: error.message || "Stream processing error"
+          }
+        };
+        reply.raw.write(`data: ${JSON.stringify(errorEvent)}
+
+`);
       } finally {
         reply.raw.end();
       }
@@ -561,7 +608,16 @@ var resumeStream = async (request, reply) => {
 `);
       }
     } catch (error) {
-      console.error("Resume stream processing error:", error);
+      const errorEvent = {
+        type: "error",
+        data: {
+          id: (0, import_uuid2.v4)(),
+          content: error.message || "Resume stream processing error"
+        }
+      };
+      reply.raw.write(`data: ${JSON.stringify(errorEvent)}
+
+`);
     } finally {
       reply.raw.end();
     }
@@ -672,9 +728,11 @@ var getAgentState = async (request, reply) => {
       });
       return;
     }
+    const tenant_id = request.headers["x-tenant-id"];
     const result = await agent_state({
       assistant_id: assistantId,
-      thread_id
+      thread_id,
+      tenant_id
     });
     if (!result) {
       reply.status(500).send(result);
@@ -774,11 +832,19 @@ var triggerAgentTask = async (request, reply) => {
 // src/controllers/threads.ts
 var import_core5 = require("@axiom-lattice/core");
 var import_crypto2 = require("crypto");
+function getTenantId2(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
+  return request.headers["x-tenant-id"] || "default";
+}
 async function getThreadList(request, reply) {
+  const tenantId = getTenantId2(request);
   const { assistantId } = request.params;
   const storeLattice = (0, import_core5.getStoreLattice)("default", "thread");
   const threadStore = storeLattice.store;
-  const threads = await threadStore.getThreadsByAssistantId(assistantId);
+  const threads = await threadStore.getThreadsByAssistantId(tenantId, assistantId);
   return {
     success: true,
     message: "Successfully retrieved thread list",
@@ -789,10 +855,11 @@ async function getThreadList(request, reply) {
   };
 }
 async function getThread(request, reply) {
-  const { assistantId, threadId } = request.params;
+  const tenantId = getTenantId2(request);
+  const { threadId } = request.params;
   const storeLattice = (0, import_core5.getStoreLattice)("default", "thread");
   const threadStore = storeLattice.store;
-  const thread = await threadStore.getThreadById(assistantId, threadId);
+  const thread = await threadStore.getThreadById(tenantId, threadId);
   if (!thread) {
     return reply.status(404).send({
       success: false,
@@ -806,12 +873,13 @@ async function getThread(request, reply) {
   };
 }
 async function createThread(request, reply) {
+  const tenantId = getTenantId2(request);
   const { assistantId } = request.params;
   const data = request.body;
   const threadId = (0, import_crypto2.randomUUID)();
   const storeLattice = (0, import_core5.getStoreLattice)("default", "thread");
   const threadStore = storeLattice.store;
-  const newThread = await threadStore.createThread(assistantId, threadId, data);
+  const newThread = await threadStore.createThread(tenantId, assistantId, threadId, data);
   return reply.status(201).send({
     success: true,
     message: "Successfully created thread",
@@ -819,11 +887,12 @@ async function createThread(request, reply) {
   });
 }
 async function updateThread(request, reply) {
-  const { assistantId, threadId } = request.params;
+  const tenantId = getTenantId2(request);
+  const { threadId } = request.params;
   const updates = request.body;
   const storeLattice = (0, import_core5.getStoreLattice)("default", "thread");
   const threadStore = storeLattice.store;
-  const exists = await threadStore.hasThread(assistantId, threadId);
+  const exists = await threadStore.hasThread(tenantId, threadId);
   if (!exists) {
     return reply.status(404).send({
       success: false,
@@ -831,7 +900,7 @@ async function updateThread(request, reply) {
     });
   }
   const updatedThread = await threadStore.updateThread(
-    assistantId,
+    tenantId,
     threadId,
     updates
   );
@@ -848,17 +917,18 @@ async function updateThread(request, reply) {
   };
 }
 async function deleteThread(request, reply) {
-  const { assistantId, threadId } = request.params;
+  const tenantId = getTenantId2(request);
+  const { threadId } = request.params;
   const storeLattice = (0, import_core5.getStoreLattice)("default", "thread");
   const threadStore = storeLattice.store;
-  const exists = await threadStore.hasThread(assistantId, threadId);
+  const exists = await threadStore.hasThread(tenantId, threadId);
   if (!exists) {
     return reply.status(404).send({
       success: false,
       message: "Thread not found"
     });
   }
-  const deleted = await threadStore.deleteThread(assistantId, threadId);
+  const deleted = await threadStore.deleteThread(tenantId, threadId);
   if (!deleted) {
     return reply.status(500).send({
       success: false,
@@ -873,6 +943,13 @@ async function deleteThread(request, reply) {
 
 // src/controllers/schedules.ts
 var import_core6 = require("@axiom-lattice/core");
+function getTenantId3(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
+  return request.headers["x-tenant-id"] || "default";
+}
 function getScheduleLattice() {
   const keys = import_core6.scheduleLatticeManager.getLatticeKeys();
   if (keys.length === 0) {
@@ -909,7 +986,9 @@ async function getThreadSchedules(request, reply) {
         }
       };
     }
+    const tenantId = getTenantId3(request);
     const filters = {
+      tenantId,
       threadId,
       assistantId
     };
@@ -924,6 +1003,7 @@ async function getThreadSchedules(request, reply) {
     }
     const tasks = await storage.getAllTasks(filters);
     const total = await storage.countTasks({
+      tenantId,
       threadId,
       assistantId,
       status
@@ -1382,6 +1462,13 @@ async function getHealth(request, reply) {
 // src/controllers/skills.ts
 var import_core9 = require("@axiom-lattice/core");
 var import_core10 = require("@axiom-lattice/core");
+function getTenantId4(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
+  return request.headers["x-tenant-id"] || "default";
+}
 function serializeSkill(skill) {
   const serialized = {
     id: skill.id,
@@ -1404,9 +1491,10 @@ function serializeSkill(skill) {
 }
 async function getSkillList(request, reply) {
   try {
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const skills = await skillStore.getAllSkills();
+    const skills = await skillStore.getAllSkills(tenantId);
     const serializedSkills = skills.map(serializeSkill);
     return {
       success: true,
@@ -1429,10 +1517,11 @@ async function getSkillList(request, reply) {
 }
 async function getSkill(request, reply) {
   try {
+    const tenantId = getTenantId4(request);
     const { id } = request.params;
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const skill = await skillStore.getSkillById(id);
+    const skill = await skillStore.getSkillById(tenantId, id);
     if (!skill) {
       return reply.status(404).send({
         success: false,
@@ -1481,16 +1570,17 @@ async function createSkill(request, reply) {
         message: `id "${id}" must equal name "${data.name}" (name is used for path addressing)`
       });
     }
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const exists = await skillStore.hasSkill(id);
+    const exists = await skillStore.hasSkill(tenantId, id);
     if (exists) {
       return reply.status(409).send({
         success: false,
         message: `Skill with id "${id}" already exists`
       });
     }
-    const newSkill = await skillStore.createSkill(id, data);
+    const newSkill = await skillStore.createSkill(tenantId, id, data);
     return reply.status(201).send({
       success: true,
       message: "Successfully created skill",
@@ -1517,16 +1607,17 @@ async function updateSkill(request, reply) {
         });
       }
     }
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const exists = await skillStore.hasSkill(id);
+    const exists = await skillStore.hasSkill(tenantId, id);
     if (!exists) {
       return reply.status(404).send({
         success: false,
         message: "Skill not found"
       });
     }
-    const updatedSkill = await skillStore.updateSkill(id, updates);
+    const updatedSkill = await skillStore.updateSkill(tenantId, id, updates);
     if (!updatedSkill) {
       return reply.status(500).send({
         success: false,
@@ -1548,16 +1639,17 @@ async function updateSkill(request, reply) {
 async function deleteSkill(request, reply) {
   try {
     const { id } = request.params;
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const exists = await skillStore.hasSkill(id);
+    const exists = await skillStore.hasSkill(tenantId, id);
     if (!exists) {
       return reply.status(404).send({
         success: false,
         message: "Skill not found"
       });
     }
-    const deleted = await skillStore.deleteSkill(id);
+    const deleted = await skillStore.deleteSkill(tenantId, id);
     if (!deleted) {
       return reply.status(500).send({
         success: false,
@@ -1588,9 +1680,10 @@ async function searchSkillsByMetadata(request, reply) {
         }
       });
     }
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const skills = await skillStore.searchByMetadata(key, value);
+    const skills = await skillStore.searchByMetadata(tenantId, key, value);
     const serializedSkills = skills.map(serializeSkill);
     return {
       success: true,
@@ -1624,9 +1717,10 @@ async function filterSkillsByCompatibility(request, reply) {
         }
       });
     }
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const skills = await skillStore.filterByCompatibility(compatibility);
+    const skills = await skillStore.filterByCompatibility(tenantId, compatibility);
     const serializedSkills = skills.map(serializeSkill);
     return {
       success: true,
@@ -1660,9 +1754,10 @@ async function filterSkillsByLicense(request, reply) {
         }
       });
     }
+    const tenantId = getTenantId4(request);
     const storeLattice = (0, import_core9.getStoreLattice)("default", "skill");
     const skillStore = storeLattice.store;
-    const skills = await skillStore.filterByLicense(license);
+    const skills = await skillStore.filterByLicense(tenantId, license);
     const serializedSkills = skills.map(serializeSkill);
     return {
       success: true,
@@ -2152,17 +2247,17 @@ var ERROR_HTML = `<!DOCTYPE html>
 </body>
 </html>`;
 var SandboxService = class {
-  getFilesystemIsolatedLevel(assistantId) {
-    const agentConfig = (0, import_core12.getAgentConfig)(assistantId);
-    if (!agentConfig) {
+  getFilesystemIsolatedLevel(tenantId, assistantId) {
+    const agentLattice = import_core12.agentLatticeManager.getAgentLatticeWithTenant(tenantId, assistantId);
+    if (!agentLattice) {
       return null;
     }
-    const agentLattice = (0, import_core12.getAgentLattice)(assistantId);
     const filesystemConfig = agentLattice?.config?.middleware?.find((m) => m.type === "filesystem");
     if (!filesystemConfig) {
       return null;
     }
-    return filesystemConfig.config?.isolatedLevel || null;
+    const config = filesystemConfig.config;
+    return config?.isolatedLevel || null;
   }
   computeSandboxName(assistantId, threadId, isolatedLevel) {
     let sandboxName;
@@ -2181,7 +2276,7 @@ var SandboxService = class {
     return (0, import_core12.normalizeSandboxName)(sandboxName);
   }
   getTargetUrl(sandboxName) {
-    const sandboxManager = (0, import_core12.getSandBoxManager)("default");
+    const sandboxManager = (0, import_core12.getSandBoxManager)();
     return `${sandboxManager.getBaseURL()}/sandbox/${sandboxName}`;
   }
   async getVncHtml(sandboxName) {
@@ -2258,7 +2353,8 @@ function registerSandboxProxyRoutes(app2) {
     async (request, reply) => {
       console.log("[Sandbox Upload] Route matched:", request.url);
       const { assistantId, threadId } = request.params;
-      const isolatedLevel = sandboxService.getFilesystemIsolatedLevel(assistantId);
+      const tenantId = request.headers["x-tenant-id"] || "default";
+      const isolatedLevel = sandboxService.getFilesystemIsolatedLevel(tenantId, assistantId);
       if (!isolatedLevel) {
         return reply.status(500).send({ error: "Assistant sandbox config not found" });
       }
@@ -2267,7 +2363,7 @@ function registerSandboxProxyRoutes(app2) {
         threadId,
         isolatedLevel
       );
-      const sandboxManager = (0, import_core13.getSandBoxManager)("default");
+      const sandboxManager = (0, import_core13.getSandBoxManager)();
       const sandbox = await sandboxManager.createSandbox(sandboxName);
       try {
         const data = await request.file();
@@ -2301,10 +2397,11 @@ function registerSandboxProxyRoutes(app2) {
     async (request, reply) => {
       const { assistantId, threadId } = request.params;
       const { path: filePath } = request.query;
+      const tenantId = request.headers["x-tenant-id"] || "default";
       if (!filePath || typeof filePath !== "string") {
         return reply.status(400).send({ error: "Query parameter 'path' is required" });
       }
-      const isolatedLevel = sandboxService.getFilesystemIsolatedLevel(assistantId);
+      const isolatedLevel = sandboxService.getFilesystemIsolatedLevel(tenantId, assistantId);
       if (!isolatedLevel) {
         return reply.status(500).send({ error: "Assistant filesystem isolated level not found" });
       }
@@ -2313,7 +2410,7 @@ function registerSandboxProxyRoutes(app2) {
         threadId,
         isolatedLevel
       );
-      const sandboxManager = (0, import_core13.getSandBoxManager)("default");
+      const sandboxManager = (0, import_core13.getSandBoxManager)();
       const sandbox = await sandboxManager.createSandbox(sandboxName);
       try {
         const resolvedPath = filePath.startsWith("/home/gem") ? filePath : `/home/gem/${filePath.replace(/^\//, "")}`;
@@ -2379,6 +2476,14 @@ var WorkspaceController = class {
     this.projectStore = (0, import_core14.getStoreLattice)("default", "project").store;
   }
   getTenantId(request) {
+    const userTenantId = request.user?.tenantId;
+    if (userTenantId) {
+      return userTenantId;
+    }
+    const queryTenantId = request.query?.tenantId;
+    if (queryTenantId) {
+      return String(queryTenantId);
+    }
     return request.headers["x-tenant-id"] || "default";
   }
   // ==================== Workspace CRUD ====================
@@ -2492,8 +2597,7 @@ var WorkspaceController = class {
     return { success: true };
   }
   // ==================== File Operations ====================
-  async getBackend(workspaceId, projectId) {
-    const tenantId = "default";
+  async getBackend(tenantId, workspaceId, projectId) {
     const workspace = await this.workspaceStore.getWorkspaceById(
       tenantId,
       workspaceId
@@ -2502,18 +2606,24 @@ var WorkspaceController = class {
       throw new Error("Workspace not found");
     }
     if (workspace.storageType === "sandbox") {
-      const sandboxManager = (0, import_core16.getSandBoxManager)("default");
+      const sandboxManager = (0, import_core16.getSandBoxManager)();
       const sandboxName = "global";
       const sandbox = await sandboxManager.createSandbox(sandboxName);
-      return { backend: new import_core15.SandboxFilesystem({
-        sandboxInstance: sandbox,
-        workingDirectory: `/workspaces/${workspaceId}/${projectId}`
-      }), workspace };
+      return {
+        backend: new import_core15.SandboxFilesystem({
+          sandboxInstance: sandbox,
+          workingDirectory: `/tenants/${tenantId}/workspaces/${workspaceId}/${projectId}`
+        }),
+        workspace
+      };
     } else {
-      return { backend: new import_core15.FilesystemBackend({
-        rootDir: `/lattice_store/workspaces/${workspaceId}/${projectId}`,
-        virtualMode: true
-      }), workspace };
+      return {
+        backend: new import_core15.FilesystemBackend({
+          rootDir: `/lattice_store/tenants/${tenantId}/workspaces/${workspaceId}/${projectId}`,
+          virtualMode: true
+        }),
+        workspace
+      };
     }
   }
   getFilenameFromPath(filePath) {
@@ -2543,18 +2653,19 @@ var WorkspaceController = class {
     return mimeTypes[ext] || "application/octet-stream";
   }
   async downloadFile(request, reply) {
+    const tenantId = this.getTenantId(request);
     const { workspaceId, projectId } = request.params;
     const filePath = request.query.path;
     if (!filePath) {
       return reply.status(400).send({ success: false, error: "Path is required" });
     }
     try {
-      const { workspace } = await this.getBackend(workspaceId, projectId);
+      const { workspace } = await this.getBackend(tenantId, workspaceId, projectId);
       const resolvedPath = filePath.startsWith("/") ? filePath : `/${filePath}`;
       if (workspace.storageType === "sandbox") {
-        const sandboxManager = (0, import_core16.getSandBoxManager)("default");
+        const sandboxManager = (0, import_core16.getSandBoxManager)();
         const sandbox = await sandboxManager.createSandbox("global");
-        const realPath = path.join("/home/gem/workspaces", workspaceId, projectId, resolvedPath);
+        const realPath = path.join("/home/gem/tenants", tenantId, "workspaces", workspaceId, projectId, resolvedPath);
         const filename2 = this.getFilenameFromPath(resolvedPath);
         const inferredContentType = this.getMimeType(filename2);
         const downloadResult = await sandbox.file.downloadFile({
@@ -2571,13 +2682,13 @@ var WorkspaceController = class {
           const webStream = body.stream();
           const nodeStream = import_stream2.Readable.fromWeb(webStream);
           const contentType2 = body.contentType ?? inferredContentType;
-          const contentDisposition2 = body.contentDisposition ?? `inline; filename*=UTF-8''${encodeURIComponent(filename2)}`;
+          const contentDisposition2 = body.contentDisposition ?? `attachment; filename*=UTF-8''${encodeURIComponent(filename2)}`;
           return reply.status(200).type(contentType2).header("Content-Disposition", contentDisposition2).send(nodeStream);
         }
         const bodyUnknown = downloadResult.body;
         let buf;
         let contentType = inferredContentType;
-        let contentDisposition = `inline; filename*=UTF-8''${encodeURIComponent(filename2)}`;
+        let contentDisposition = `attachment; filename*=UTF-8''${encodeURIComponent(filename2)}`;
         if (bodyUnknown instanceof ArrayBuffer) {
           buf = Buffer.from(bodyUnknown);
         } else if (bodyUnknown instanceof Buffer) {
@@ -2595,28 +2706,96 @@ var WorkspaceController = class {
         }
         return reply.status(200).type(contentType).header("Content-Disposition", contentDisposition).send(buf);
       }
-      const { backend } = await this.getBackend(workspaceId, projectId);
+      const { backend } = await this.getBackend(tenantId, workspaceId, projectId);
       const content = await backend.read(resolvedPath, 0, Infinity);
       const filename = this.getFilenameFromPath(resolvedPath);
       const mimeType = this.getMimeType(filename);
       const buffer = Buffer.from(content, "utf-8");
-      return reply.status(200).type(mimeType).header("Content-Disposition", `inline; filename*=UTF-8''${encodeURIComponent(filename)}`).send(buffer);
+      return reply.status(200).type(mimeType).header("Content-Disposition", `attachment; filename*=UTF-8''${encodeURIComponent(filename)}`).send(buffer);
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
       return reply.status(502).send({ success: false, error: `Download proxy error: ${message}` });
     }
   }
+  /**
+   * View a file inline in the browser (not download).
+   * Returns file content with inline Content-Disposition for preview.
+   */
+  async viewFile(request, reply) {
+    const tenantId = this.getTenantId(request);
+    const { workspaceId, projectId } = request.params;
+    const filePath = request.query.path;
+    if (!filePath) {
+      return reply.status(400).send({ success: false, error: "Path is required" });
+    }
+    try {
+      const { workspace } = await this.getBackend(tenantId, workspaceId, projectId);
+      const resolvedPath = filePath.startsWith("/") ? filePath : `/${filePath}`;
+      if (workspace.storageType === "sandbox") {
+        const sandboxManager = (0, import_core16.getSandBoxManager)();
+        const sandbox = await sandboxManager.createSandbox("global");
+        const realPath = path.join("/home/gem/tenants", tenantId, "workspaces", workspaceId, projectId, resolvedPath);
+        const filename2 = this.getFilenameFromPath(resolvedPath);
+        const inferredContentType = this.getMimeType(filename2);
+        const downloadResult = await sandbox.file.downloadFile({
+          path: realPath
+        });
+        if (!downloadResult.ok) {
+          return reply.status(502).send({
+            success: false,
+            error: `View error: ${JSON.stringify(downloadResult.error)}`
+          });
+        }
+        const body = downloadResult.body;
+        if (typeof body?.stream === "function") {
+          const webStream = body.stream();
+          const nodeStream = import_stream2.Readable.fromWeb(webStream);
+          const contentType2 = body.contentType ?? inferredContentType;
+          return reply.status(200).type(contentType2).header("Content-Disposition", "inline").send(nodeStream);
+        }
+        const bodyUnknown = downloadResult.body;
+        let buf;
+        let contentType = inferredContentType;
+        if (bodyUnknown instanceof ArrayBuffer) {
+          buf = Buffer.from(bodyUnknown);
+        } else if (bodyUnknown instanceof Buffer) {
+          buf = bodyUnknown;
+        } else if (bodyUnknown && typeof bodyUnknown.arrayBuffer === "function") {
+          const res = bodyUnknown;
+          buf = Buffer.from(await res.arrayBuffer());
+          if (res.headers?.get("content-type")) contentType = res.headers.get("content-type");
+        } else if (bodyUnknown && typeof bodyUnknown.blob === "function") {
+          const blob = await bodyUnknown.blob();
+          buf = Buffer.from(await blob.arrayBuffer());
+        } else {
+          return reply.status(502).send({ success: false, error: "Unexpected view response format" });
+        }
+        return reply.status(200).type(contentType).header("Content-Disposition", "inline").send(buf);
+      }
+      const { backend } = await this.getBackend(tenantId, workspaceId, projectId);
+      const content = await backend.read(resolvedPath, 0, Infinity);
+      const filename = this.getFilenameFromPath(resolvedPath);
+      const mimeType = this.getMimeType(filename);
+      const buffer = Buffer.from(content, "utf-8");
+      return reply.status(200).type(mimeType).header("Content-Disposition", "inline").send(buffer);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return reply.status(502).send({ success: false, error: `View proxy error: ${message}` });
+    }
+  }
   async listPath(request) {
+    const tenantId = this.getTenantId(request);
     const { workspaceId, projectId } = request.params;
     const path2 = request.query.path || "/";
-    const { backend } = await this.getBackend(workspaceId, projectId);
+    const { backend } = await this.getBackend(tenantId, workspaceId, projectId);
     const files = await backend.lsInfo(path2);
     return { success: true, data: files };
   }
   async readFile(request) {
+    const tenantId = this.getTenantId(request);
     const { workspaceId, projectId } = request.params;
     const { path: path2, offset = 0, limit = 1e3 } = request.query;
-    const { backend } = await this.getBackend(workspaceId, projectId);
+    const { backend } = await this.getBackend(tenantId, workspaceId, projectId);
     const content = await backend.read(path2, Number(offset), Number(limit));
     return { success: true, data: { content, offset, limit } };
   }
@@ -2653,10 +2832,10 @@ var WorkspaceController = class {
         return reply.status(400).send({ success: false, error: "Invalid path parameter" });
       }
       if (workspace.storageType === "sandbox") {
-        const sandboxManager = (0, import_core16.getSandBoxManager)("default");
+        const sandboxManager = (0, import_core16.getSandBoxManager)();
         const sandboxName = "global";
         const sandbox = await sandboxManager.createSandbox(sandboxName);
-        const baseDir = path.join("/home/gem/workspaces", workspaceId, projectId);
+        const baseDir = path.join("/home/gem/tenants", tenantId, "workspaces", workspaceId, projectId);
         const realPath = pathValue ? path.join(baseDir, pathValue, filename) : path.join(baseDir, filename);
         const uploadResult = await sandbox.file.uploadFile({
           file: buffer,
@@ -2668,7 +2847,7 @@ var WorkspaceController = class {
             error: `Upload error: ${JSON.stringify(uploadResult.error)}`
           });
         }
-        const relativePath = uploadResult.body?.data?.file_path?.replace(path.join("/home/gem/workspaces", workspaceId, projectId), "") || (pathValue ? `/${pathValue}/${filename}` : `/${filename}`);
+        const relativePath = uploadResult.body?.data?.file_path?.replace(path.join("/home/gem/tenants", tenantId, "workspaces", workspaceId, projectId), "") || (pathValue ? `/${pathValue}/${filename}` : `/${filename}`);
         const result2 = {
           path: relativePath,
           name: filename,
@@ -2678,7 +2857,7 @@ var WorkspaceController = class {
         };
         return reply.status(200).send({ success: true, data: result2 });
       }
-      const rootDir = `/lattice_store/workspaces/${workspaceId}/${projectId}`;
+      const rootDir = `/lattice_store/tenants/${tenantId}/workspaces/${workspaceId}/${projectId}`;
       const targetDir = pathValue ? path.join(rootDir, pathValue) : rootDir;
       const targetPath = path.join(targetDir, filename);
       await fs.mkdir(path.dirname(targetPath), { recursive: true });
@@ -2752,16 +2931,24 @@ function registerWorkspaceRoutes(app2) {
     "/api/workspaces/:workspaceId/projects/:projectId/downloadfile",
     controller.downloadFile.bind(controller)
   );
+  app2.get(
+    "/api/workspaces/:workspaceId/projects/:projectId/viewfile",
+    controller.viewFile.bind(controller)
+  );
 }
 
 // src/controllers/database-configs.ts
 var import_core17 = require("@axiom-lattice/core");
 var import_crypto3 = require("crypto");
-function getTenantId(request) {
+function getTenantId5(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
   return request.headers["x-tenant-id"] || "default";
 }
 async function getDatabaseConfigList(request, reply) {
-  const tenantId = getTenantId(request);
+  const tenantId = getTenantId5(request);
   try {
     const storeLattice = (0, import_core17.getStoreLattice)("default", "database");
     const store = storeLattice.store;
@@ -2791,7 +2978,7 @@ async function getDatabaseConfigList(request, reply) {
   }
 }
 async function getDatabaseConfig(request, reply) {
-  const tenantId = getTenantId(request);
+  const tenantId = getTenantId5(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core17.getStoreLattice)("default", "database");
@@ -2817,7 +3004,7 @@ async function getDatabaseConfig(request, reply) {
   }
 }
 async function createDatabaseConfig(request, reply) {
-  const tenantId = getTenantId(request);
+  const tenantId = getTenantId5(request);
   const body = request.body;
   try {
     const storeLattice = (0, import_core17.getStoreLattice)("default", "database");
@@ -2833,7 +3020,7 @@ async function createDatabaseConfig(request, reply) {
     const id = body.id || (0, import_crypto3.randomUUID)();
     const config = await store.createConfig(tenantId, id, body);
     try {
-      import_core17.sqlDatabaseManager.registerDatabase(config.key, config.config);
+      import_core17.sqlDatabaseManager.registerDatabase(tenantId, config.key, config.config);
     } catch (error) {
       console.warn("Failed to auto-register database:", error);
     }
@@ -2852,7 +3039,7 @@ async function createDatabaseConfig(request, reply) {
   }
 }
 async function updateDatabaseConfig(request, reply) {
-  const tenantId = getTenantId(request);
+  const tenantId = getTenantId5(request);
   const { key } = request.params;
   const updates = request.body;
   try {
@@ -2875,7 +3062,7 @@ async function updateDatabaseConfig(request, reply) {
     }
     if (updates.config) {
       try {
-        import_core17.sqlDatabaseManager.registerDatabase(updated.key, updated.config);
+        import_core17.sqlDatabaseManager.registerDatabase(tenantId, updated.key, updated.config);
       } catch (error) {
         console.warn("Failed to re-register database:", error);
       }
@@ -2894,7 +3081,7 @@ async function updateDatabaseConfig(request, reply) {
   }
 }
 async function deleteDatabaseConfig(request, reply) {
-  const tenantId = getTenantId(request);
+  const tenantId = getTenantId5(request);
   const { keyOrId } = request.params;
   try {
     const storeLattice = (0, import_core17.getStoreLattice)("default", "database");
@@ -2924,8 +3111,8 @@ async function deleteDatabaseConfig(request, reply) {
       };
     }
     try {
-      if (import_core17.sqlDatabaseManager.hasDatabase(configKey)) {
-        await import_core17.sqlDatabaseManager.removeDatabase(configKey);
+      if (import_core17.sqlDatabaseManager.hasDatabase(tenantId, configKey)) {
+        await import_core17.sqlDatabaseManager.removeDatabase(tenantId, configKey);
       }
     } catch (error) {
       console.warn("Failed to remove from SqlDatabaseManager:", error);
@@ -2943,7 +3130,7 @@ async function deleteDatabaseConfig(request, reply) {
   }
 }
 async function testDatabaseConnection(request, reply) {
-  const tenantId = getTenantId(request);
+  const tenantId = getTenantId5(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core17.getStoreLattice)("default", "database");
@@ -2957,16 +3144,16 @@ async function testDatabaseConnection(request, reply) {
       };
     }
     const testKey = `__test_${key}_${Date.now()}`;
-    import_core17.sqlDatabaseManager.registerDatabase(testKey, config.config);
+    import_core17.sqlDatabaseManager.registerDatabase(tenantId, testKey, config.config);
     const startTime = Date.now();
-    const db = import_core17.sqlDatabaseManager.getDatabase(testKey);
+    const db = import_core17.sqlDatabaseManager.getDatabase(tenantId, testKey);
     try {
       await db.connect();
       await db.listTables();
       const latency = Date.now() - startTime;
       await new Promise((resolve) => setTimeout(resolve, 100));
       await db.disconnect();
-      await import_core17.sqlDatabaseManager.removeDatabase(testKey);
+      await import_core17.sqlDatabaseManager.removeDatabase(tenantId, testKey);
       return {
         success: true,
         message: "Connection test successful",
@@ -2978,7 +3165,7 @@ async function testDatabaseConnection(request, reply) {
     } catch (error) {
       try {
         await db.disconnect();
-        await import_core17.sqlDatabaseManager.removeDatabase(testKey);
+        await import_core17.sqlDatabaseManager.removeDatabase(tenantId, testKey);
       } catch {
       }
       return {
@@ -3032,11 +3219,15 @@ function registerDatabaseConfigRoutes(app2) {
 // src/controllers/metrics-configs.ts
 var import_core18 = require("@axiom-lattice/core");
 var import_crypto4 = require("crypto");
-function getTenantId2(request) {
+function getTenantId6(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
   return request.headers["x-tenant-id"] || "default";
 }
 async function getMetricsServerConfigList(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
     const store = storeLattice.store;
@@ -3062,7 +3253,7 @@ async function getMetricsServerConfigList(request, reply) {
   }
 }
 async function getMetricsServerConfig(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3088,7 +3279,7 @@ async function getMetricsServerConfig(request, reply) {
   }
 }
 async function createMetricsServerConfig(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const body = request.body;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3120,7 +3311,7 @@ async function createMetricsServerConfig(request, reply) {
     };
     const config = await store.createConfig(tenantId, id, configData);
     try {
-      import_core18.metricsServerManager.registerServer(config.key, config.config);
+      import_core18.metricsServerManager.registerServer(tenantId, config.key, config.config);
     } catch (error) {
       console.warn("Failed to auto-register metrics server:", error);
     }
@@ -3139,7 +3330,7 @@ async function createMetricsServerConfig(request, reply) {
   }
 }
 async function updateMetricsServerConfig(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   const updates = request.body;
   try {
@@ -3171,7 +3362,7 @@ async function updateMetricsServerConfig(request, reply) {
     }
     if (updates.config) {
       try {
-        import_core18.metricsServerManager.registerServer(updated.key, updated.config);
+        import_core18.metricsServerManager.registerServer(tenantId, updated.key, updated.config);
       } catch (error) {
         console.warn("Failed to re-register metrics server:", error);
       }
@@ -3190,7 +3381,7 @@ async function updateMetricsServerConfig(request, reply) {
   }
 }
 async function deleteMetricsServerConfig(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { keyOrId } = request.params;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3218,8 +3409,8 @@ async function deleteMetricsServerConfig(request, reply) {
       };
     }
     try {
-      if (import_core18.metricsServerManager.hasServer(configKey)) {
-        import_core18.metricsServerManager.removeServer(configKey);
+      if (import_core18.metricsServerManager.hasServer(tenantId, configKey)) {
+        import_core18.metricsServerManager.removeServer(tenantId, configKey);
       }
     } catch (error) {
       console.warn("Failed to remove from MetricsServerManager:", error);
@@ -3237,7 +3428,7 @@ async function deleteMetricsServerConfig(request, reply) {
   }
 }
 async function testMetricsServerConnection(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3251,11 +3442,11 @@ async function testMetricsServerConnection(request, reply) {
       };
     }
     const testKey = `__test_${key}_${Date.now()}`;
-    import_core18.metricsServerManager.registerServer(testKey, config.config);
+    import_core18.metricsServerManager.registerServer(tenantId, testKey, config.config);
     try {
-      const client = import_core18.metricsServerManager.getClient(testKey);
+      const client = import_core18.metricsServerManager.getClient(tenantId, testKey);
       const result = await client.testConnection();
-      import_core18.metricsServerManager.removeServer(testKey);
+      import_core18.metricsServerManager.removeServer(tenantId, testKey);
       return {
         success: true,
         message: result.connected ? "Connection test successful" : "Connection test failed",
@@ -3263,7 +3454,7 @@ async function testMetricsServerConnection(request, reply) {
       };
     } catch (error) {
       try {
-        import_core18.metricsServerManager.removeServer(testKey);
+        import_core18.metricsServerManager.removeServer(tenantId, testKey);
       } catch {
       }
       return {
@@ -3288,7 +3479,7 @@ async function testMetricsServerConnection(request, reply) {
   }
 }
 async function listAvailableMetrics(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3301,10 +3492,10 @@ async function listAvailableMetrics(request, reply) {
         message: "Metrics server configuration not found"
       };
     }
-    if (!import_core18.metricsServerManager.hasServer(key)) {
-      import_core18.metricsServerManager.registerServer(key, config.config);
+    if (!import_core18.metricsServerManager.hasServer(tenantId, key)) {
+      import_core18.metricsServerManager.registerServer(tenantId, key, config.config);
     }
-    const client = import_core18.metricsServerManager.getClient(key);
+    const client = import_core18.metricsServerManager.getClient(tenantId, key);
     const metrics = await client.listMetrics();
     return {
       success: true,
@@ -3326,7 +3517,7 @@ async function listAvailableMetrics(request, reply) {
   }
 }
 async function queryMetricsData(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   const { metricName, startTime, endTime, step, labels } = request.body;
   try {
@@ -3347,10 +3538,10 @@ async function queryMetricsData(request, reply) {
         message: "metricName is required"
       };
     }
-    if (!import_core18.metricsServerManager.hasServer(key)) {
-      import_core18.metricsServerManager.registerServer(key, config.config);
+    if (!import_core18.metricsServerManager.hasServer(tenantId, key)) {
+      import_core18.metricsServerManager.registerServer(tenantId, key, config.config);
     }
-    const client = import_core18.metricsServerManager.getClient(key);
+    const client = import_core18.metricsServerManager.getClient(tenantId, key);
     const result = await client.queryMetricData(metricName, {
       startTime,
       endTime,
@@ -3374,7 +3565,7 @@ async function queryMetricsData(request, reply) {
   }
 }
 async function getDataSources(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3415,7 +3606,7 @@ async function getDataSources(request, reply) {
   }
 }
 async function getDatasourceMetrics(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key, datasourceId } = request.params;
   try {
     const storeLattice = (0, import_core18.getStoreLattice)("default", "metrics");
@@ -3452,7 +3643,7 @@ async function getDatasourceMetrics(request, reply) {
   }
 }
 async function querySemanticMetrics(request, reply) {
-  const tenantId = getTenantId2(request);
+  const tenantId = getTenantId6(request);
   const { key } = request.params;
   const body = request.body;
   try {
@@ -3483,14 +3674,32 @@ async function querySemanticMetrics(request, reply) {
     const semanticConfig = config.config;
     const client = new import_core18.SemanticMetricsClient(semanticConfig);
     const result = await client.semanticQuery(body);
+    const allDataPoints = [];
+    const metricNames = [];
+    for (const metricResult of result.results) {
+      metricNames.push(metricResult.metricName);
+      for (const row of metricResult.rows) {
+        allDataPoints.push({
+          timestamp: row.timestamp ? new Date(row.timestamp).getTime() : void 0,
+          value: typeof row.value === "number" ? row.value : 0,
+          metricName: metricResult.metricName,
+          labels: Object.fromEntries(
+            Object.entries(row).filter(([k]) => k !== "value" && k !== "timestamp").map(([k, v]) => [k, String(v)])
+          )
+        });
+      }
+    }
     return {
       success: true,
       message: "Semantic query executed successfully",
       data: {
         datasourceId: result.datasourceId,
-        metrics: result.metrics,
-        dataPoints: result.dataPoints,
-        metadata: result.metadata
+        metrics: metricNames,
+        dataPoints: allDataPoints,
+        metadata: {
+          rowCount: allDataPoints.length,
+          queryTimeMs: result.totalExecutionTimeMs
+        }
       }
     };
   } catch (error) {
@@ -3589,11 +3798,15 @@ function registerMetricsServerConfigRoutes(app2) {
 // src/controllers/mcp-configs.ts
 var import_core19 = require("@axiom-lattice/core");
 var import_crypto5 = require("crypto");
-function getTenantId3(request) {
+function getTenantId7(request) {
+  const userTenantId = request.user?.tenantId;
+  if (userTenantId) {
+    return userTenantId;
+  }
   return request.headers["x-tenant-id"] || "default";
 }
 async function getMcpServerConfigList(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
     const store = storeLattice.store;
@@ -3619,7 +3832,7 @@ async function getMcpServerConfigList(request, reply) {
   }
 }
 async function getMcpServerConfig(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -3645,7 +3858,7 @@ async function getMcpServerConfig(request, reply) {
   }
 }
 async function createMcpServerConfig(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const body = request.body;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -3684,7 +3897,7 @@ async function createMcpServerConfig(request, reply) {
   }
 }
 async function updateMcpServerConfig(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { key } = request.params;
   const updates = request.body;
   try {
@@ -3734,7 +3947,7 @@ async function updateMcpServerConfig(request, reply) {
   }
 }
 async function deleteMcpServerConfig(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { keyOrId } = request.params;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -3781,7 +3994,7 @@ async function deleteMcpServerConfig(request, reply) {
   }
 }
 async function testMcpServerConnection(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -3834,7 +4047,7 @@ async function testMcpServerConnection(request, reply) {
   }
 }
 async function listMcpServerTools(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -3867,7 +4080,7 @@ async function listMcpServerTools(request, reply) {
   }
 }
 async function connectMcpServer(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -3904,7 +4117,7 @@ async function connectMcpServer(request, reply) {
   }
 }
 async function disconnectMcpServer(request, reply) {
-  const tenantId = getTenantId3(request);
+  const tenantId = getTenantId7(request);
   const { key } = request.params;
   try {
     const storeLattice = (0, import_core19.getStoreLattice)("default", "mcp");
@@ -4747,7 +4960,7 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
         reader.releaseLock();
       }
       if (callback_event) {
-        const state = await agent_state({ assistant_id, thread_id });
+        const state = await agent_state({ assistant_id, thread_id, tenant_id });
         import_core23.eventBus.publish(callback_event, {
           success: true,
           state,
@@ -4761,7 +4974,7 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
     } else {
       await response.text();
       if (callback_event) {
-        const state = await agent_state({ assistant_id, thread_id });
+        const state = await agent_state({ assistant_id, thread_id, tenant_id });
         import_core23.eventBus.publish(callback_event, {
           success: true,
           state,
@@ -5075,6 +5288,13 @@ var start = async (config) => {
       logger = loggerLattice.client;
     }
     app.decorate("loggerLattice", loggerLattice);
+    if (!import_core24.sandboxLatticeManager.hasLattice("default")) {
+      const sandboxBaseURL = process.env.SANDBOX_BASE_URL || "http://localhost:8080";
+      import_core24.sandboxLatticeManager.registerLattice("default", {
+        baseURL: sandboxBaseURL
+      });
+      logger.info(`Registered sandbox manager with baseURL: ${sandboxBaseURL}`);
+    }
     const target_port = config?.port || Number(process.env.PORT) || 4001;
     await app.listen({ port: target_port, host: "0.0.0.0" });
     logger.info(`Lattice Gateway is running on port: ${target_port}`);