@axiom-lattice/gateway 4.7.0 → 4.8.1

package/dist/{open-STFMNRO5.mjs → open-UVKMONVE.mjs}

@@ -1,7 +1,7 @@
 import {
   OpenAuditService,
   OpenCredentialService
-} from "./chunk-52SUWMOX.mjs";
+} from "./chunk-JUA3VJE7.mjs";
 import {
   buildTenantOpenPlugins,
   mergeOpenCatalog
@@ -21,7 +21,7 @@ import {
   openLattice
 } from "./chunk-HVIKCUOF.mjs";
 import "./chunk-73QZQQOT.mjs";
-import "./chunk-WKNZ7GBC.mjs";
+import "./chunk-EXPERMZR.mjs";
 import "./chunk-NFEGQTCC.mjs";
 
 // src/routes/open.ts
@@ -271,7 +271,8 @@ function registerOpenRoutes(app, deps = {}) {
           const isTenantRoute = tenant.hasTool(toolName) && !globalToolNames.has(toolName);
           const runConfig = {
             sandboxName: context.sandboxName,
-            credentialId: context.credentialId
+            credentialId: context.credentialId,
+            depth: context.depth
           };
           const result = isTenantRoute ? await tenant.invoke(toolName, args, {
             tenantId: context.tenantId,
@@ -342,4 +343,4 @@ function registerOpenRoutes(app, deps = {}) {
 export {
   registerOpenRoutes
 };
-//# sourceMappingURL=open-STFMNRO5.mjs.map
+//# sourceMappingURL=open-UVKMONVE.mjs.map

package/dist/open-UVKMONVE.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/open.ts","../src/services/open/openRateLimiter.ts","../src/services/open/openMcpServer.ts"],"sourcesContent":["/**\n * Open API surface routes: POST/DELETE /open/mcp.\n *\n * The route is a thin shell — credential resolution (OpenAuthService),\n * catalog filtering and invocation (OpenLattice), and session lifecycle\n * (mcpTransportRegistry) live in services/open/*. The transport writes the\n * response itself, so the reply is hijacked (same precedent as the Project\n * Room SSE route).\n */\n\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport { isInitializeRequest } from \"@modelcontextprotocol/sdk/types.js\";\nimport { getStoreLattice } from \"@axiom-lattice/core\";\nimport type { A2AApiKeyStore, OpenAuditStore, OpenGrant, ProjectStore } from \"@axiom-lattice/protocols\";\nimport { OpenCredentialService } from \"../services/open/openCredentialService\";\nimport { OpenAuditService } from \"../services/open/openAuditService\";\nimport { OpenRateLimiter } from \"../services/open/openRateLimiter\";\nimport type { OpenCredential } from \"../services/open/openCredentialService\";\nimport {\n  openLattice,\n  ActionNotFoundError,\n  GrantDeniedError,\n  ValidationError,\n} from \"../services/open/openLattice\";\nimport { buildSessionServer } from \"../services/open/openMcpServer\";\nimport { collectExposedPluginUiResources } from \"../services/open/registerExposedPlugins\";\nimport {\n  buildTenantOpenPlugins,\n  mergeOpenCatalog,\n  type TenantOpenPlugins,\n} from \"../services/open/tenantOpenPlugins\";\nimport { getSession, deleteSession } from \"../services/open/mcpTransportRegistry\";\n\nexport interface OpenRouteDeps {\n  openAuth?: OpenCredentialService;\n  grantsSource?: (ctx: OpenCredential) => OpenGrant[];\n  audit?: OpenAuditService;\n  rateLimiter?: OpenRateLimiter;\n  /**\n   * Test seam: build the credential's tenant sandbox plugin bundle. Defaults to\n   * {@link buildTenantOpenPlugins} with the global catalog's tool names reserved\n   * so a tenant tool can never shadow a global/built-in one.\n   */\n  tenantPlugins?: (\n    tenantId: string,\n    grants: OpenGrant[],\n    reservedToolNames: ReadonlySet<string>,\n  ) => Promise<TenantOpenPlugins>;\n}\n\nfunction extractBearer(request: FastifyRequest): string | undefined {\n  const header = request.headers.authorization;\n  if (!header?.startsWith(\"Bearer \")) return undefined;\n  return header.slice(\"Bearer \".length).trim() || undefined;\n}\n\nfunction readSessionId(request: FastifyRequest): string | undefined {\n  const raw = request.headers[\"mcp-session-id\"];\n  const value = Array.isArray(raw) ? raw[0] : raw;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\n/**\n * Degraded tenant plugin bundle used when the sandbox catalog cannot be read.\n *\n * A catalog read failure must not 500 the session: the MCP server still builds\n * and serves the global tools. `invoke` is unreachable through normal routing\n * (`hasTool` is always false, so calls route to OpenLattice) but returns an\n * error result if it is ever reached.\n */\nfunction emptyTenantPlugins(): TenantOpenPlugins {\n  return {\n    tools: [],\n    uiResources: new Map(),\n    hasTool: () => false,\n    degraded: true,\n    invoke: async (toolName) => ({\n      content: [\n        { type: \"text\", text: `Tenant plugin catalog unavailable for ${toolName}` },\n      ],\n      isError: true,\n    }),\n  };\n}\n\n/** JSON-RPC error codes used on the Open surface. */\nconst RPC_ERROR = {\n  GRANT_DENIED: -32001,\n  ACTION_NOT_FOUND: -32002,\n  VALIDATION_FAILED: -32003,\n  EXECUTION_ERROR: -32004,\n  RATE_LIMITED: -32005,\n} as const;\n\nexport function registerOpenRoutes(\n  app: FastifyInstance,\n  deps: OpenRouteDeps = {},\n): void {\n  const openAuth =\n    deps.openAuth ??\n    new OpenCredentialService(\n      getStoreLattice(\"default\", \"a2aApiKey\").store as A2AApiKeyStore,\n      getStoreLattice(\"default\", \"project\").store as ProjectStore,\n    );\n  const grantsSource =\n    deps.grantsSource ?? ((ctx: OpenCredential) => ctx.grants);\n  const audit =\n    deps.audit ??\n    (() => {\n      try {\n        const store = getStoreLattice(\"default\", \"openAudit\").store as OpenAuditStore;\n        return new OpenAuditService(store);\n      } catch {\n        return undefined;\n      }\n    })();\n\n  const rateLimiter = deps.rateLimiter ?? new OpenRateLimiter();\n\n  app.post(\"/open/mcp\", async (request: FastifyRequest, reply: FastifyReply) => {\n    const context = await openAuth.resolve(extractBearer(request));\n    if (!context) {\n      return reply.status(401).send({ error: \"AUTH_FAILED\" });\n    }\n\n    const body: unknown = request.body;\n    const sessionId = readSessionId(request);\n\n    // Existing session: reuse its server/transport. Bearer must match the\n    // session's credential — a session is not usable by another key.\n    if (sessionId) {\n      const session = await getSession(sessionId);\n      if (\n        !session ||\n        session.credential.credentialId !== context.credentialId\n      ) {\n        return reply.status(404).send({ error: \"SESSION_NOT_FOUND\" });\n      }\n      reply.hijack();\n      await session.transport.handleRequest(request.raw, reply.raw, body);\n      return;\n    }\n\n    // New session: only initialize may create one. Registration into the\n    // session registry happens inside sessionIdGenerator (see openMcpServer).\n    if (!isInitializeRequest(body)) {\n      return reply.status(400).send({ error: \"SESSION_REQUIRED\" });\n    }\n\n    const grants = grantsSource(context);\n    const catalog = await openLattice.catalogFor(grants, { tenantId: context.tenantId });\n    // Tenant sandbox plugins are volume-resident and outside the OpenLattice\n    // registry; merge their grant-filtered tools/UI alongside the globals.\n    // Global/built-in tool names are reserved so a tenant plugin of the same\n    // type (kb/sandbox/agent) can neither crash `registerTool` with a duplicate\n    // nor capture the invoke routing for a global tool.\n    const globalToolNames = new Set(catalog.map((t) => t.toolName));\n    const buildTenant =\n      deps.tenantPlugins ??\n      ((tenantId, tenantGrants, reservedToolNames) =>\n        buildTenantOpenPlugins(tenantId, tenantGrants, { reservedToolNames }));\n    let tenant: TenantOpenPlugins;\n    try {\n      tenant = await buildTenant(context.tenantId, grants, globalToolNames);\n      if (tenant.degraded) {\n        // The catalog's common failure mode is a diagnostic, not a throw\n        // (`ensureLoaded` returns error-level diagnostics). Surface it and\n        // serve global tools only.\n        request.log.warn(\n          { tenantId: context.tenantId },\n          \"open mcp: tenant plugin catalog degraded; serving global tools only\",\n        );\n      }\n    } catch (error) {\n      // Sandbox catalogs are volume-resident and can be transiently\n      // unavailable; degrade to globals-only rather than failing the whole\n      // session so external hosts can still connect. `err` keeps the stack.\n      request.log.warn(\n        { tenantId: context.tenantId, err: error },\n        \"open mcp: tenant plugin catalog unavailable; serving global tools only\",\n      );\n      tenant = emptyTenantPlugins();\n    }\n    const mergedCatalog = mergeOpenCatalog(catalog, tenant.tools);\n    const uiResources = new Map([\n      ...collectExposedPluginUiResources(grants),\n      ...tenant.uiResources,\n    ]);\n    const built = await buildSessionServer({\n      credential: { credentialId: context.credentialId, kind: context.kind },\n      grants,\n      catalog: mergedCatalog,\n      uiResources,\n      invoke: async (toolName, args) => {\n        const startedAt = Date.now();\n        const sep = toolName.indexOf(\"_\");\n        const auditDomain = sep > 0 ? toolName.slice(0, sep) : toolName;\n        const auditAction = sep > 0 ? toolName.slice(sep + 1) : \"\";\n\n        const decision = rateLimiter.check(context.credentialId, auditDomain);\n        if (!decision.allowed) {\n          await audit?.record({\n            tenantId: context.tenantId,\n            credentialId: context.credentialId,\n            credentialKind: context.kind,\n            projectId: context.projectId,\n            domain: auditDomain,\n            action: auditAction,\n            args,\n            status: \"error\",\n            errorCode: \"RATE_LIMITED\",\n            durationMs: Date.now() - startedAt,\n          });\n          throw Object.assign(\n            new Error(\n              `RATE_LIMITED: retry after ${decision.retryAfterMs ?? 1000}ms`,\n            ),\n            { rpcCode: RPC_ERROR.RATE_LIMITED },\n          );\n        }\n\n        try {\n          const isTenantRoute = tenant.hasTool(toolName) && !globalToolNames.has(toolName);\n          const runConfig: Record<string, unknown> = {\n            sandboxName: context.sandboxName,\n            credentialId: context.credentialId,\n            depth: context.depth,\n          };\n          const result = isTenantRoute\n            ? await tenant.invoke(toolName, args, {\n                tenantId: context.tenantId,\n                projectId: context.projectId,\n                workspaceId: context.workspaceId,\n                runConfig,\n              })\n            : await openLattice.invoke(\n                grants,\n                {\n                  tenantId: context.tenantId,\n                  projectId: context.projectId,\n                  workspaceId: context.workspaceId,\n                  runConfig,\n                },\n                toolName,\n                args,\n              );\n          await audit?.record({\n            tenantId: context.tenantId,\n            credentialId: context.credentialId,\n            credentialKind: context.kind,\n            projectId: context.projectId,\n            domain: auditDomain,\n            action: auditAction,\n            args,\n            status: result.isError ? \"error\" : \"ok\",\n            ...(result.isError ? { errorCode: \"EXECUTION_ERROR\" } : {}),\n            durationMs: Date.now() - startedAt,\n          });\n          return result;\n        } catch (err) {\n          const code =\n            err instanceof GrantDeniedError\n              ? RPC_ERROR.GRANT_DENIED\n              : err instanceof ActionNotFoundError\n                ? RPC_ERROR.ACTION_NOT_FOUND\n                : err instanceof ValidationError\n                  ? RPC_ERROR.VALIDATION_FAILED\n                  : RPC_ERROR.EXECUTION_ERROR;\n          await audit?.record({\n            tenantId: context.tenantId,\n            credentialId: context.credentialId,\n            credentialKind: context.kind,\n            projectId: context.projectId,\n            domain: auditDomain,\n            action: auditAction,\n            args,\n            status: \"error\",\n            errorCode:\n              err instanceof GrantDeniedError\n                ? \"GRANT_DENIED\"\n                : err instanceof ActionNotFoundError\n                  ? \"ACTION_NOT_FOUND\"\n                  : err instanceof ValidationError\n                    ? \"VALIDATION_FAILED\"\n                    : \"EXECUTION_ERROR\",\n            durationMs: Date.now() - startedAt,\n          });\n          throw Object.assign(\n            new Error(err instanceof Error ? err.message : String(err)),\n            { rpcCode: code },\n          );\n        }\n      },\n    });\n    // buildSessionServer no longer connects internally (so it is testable\n    // over InMemoryTransport); the transport still needs an onmessage handler\n    // before handleRequest or initialize is swallowed and the request hangs.\n    await built.server.connect(built.transport);\n    reply.hijack();\n    await built.transport.handleRequest(request.raw, reply.raw, body);\n  });\n\n  app.delete(\n    \"/open/mcp\",\n    async (request: FastifyRequest, reply: FastifyReply) => {\n      const sessionId = readSessionId(request);\n      if (!sessionId) {\n        return reply.status(400).send({ error: \"SESSION_REQUIRED\" });\n      }\n      await deleteSession(sessionId);\n      return reply.status(204).send();\n    },\n  );\n}\n","/**\n * In-memory per-credential rate limiter (token bucket). The agent domain gets\n * a stricter bucket because each call consumes LLM budget.\n *\n * Process-local by design (V1 single-gateway); a distributed limiter is V2.\n */\n\nexport interface RateLimitDecision {\n  allowed: boolean;\n  retryAfterMs?: number;\n}\n\ninterface Bucket {\n  tokens: number;\n  updatedAt: number;\n}\n\nexport interface OpenRateLimiterOptions {\n  /** Default requests per minute per credential. */\n  defaultPerMinute?: number;\n  /** Stricter limit for the agent domain. */\n  agentPerMinute?: number;\n}\n\nexport class OpenRateLimiter {\n  private readonly buckets = new Map<string, Bucket>();\n  private readonly defaultPerMinute: number;\n  private readonly agentPerMinute: number;\n\n  constructor(options: OpenRateLimiterOptions = {}) {\n    this.defaultPerMinute = options.defaultPerMinute ?? 60;\n    this.agentPerMinute = options.agentPerMinute ?? 10;\n  }\n\n  private bucketClass(domain: string): string {\n    return domain === \"agent\" ? \"agent\" : \"default\";\n  }\n\n  private limitFor(domain: string): number {\n    return domain === \"agent\" ? this.agentPerMinute : this.defaultPerMinute;\n  }\n\n  /** Consume one token; denied calls report how long to wait. */\n  check(credentialId: string, domain: string): RateLimitDecision {\n    const limit = this.limitFor(domain);\n    const key = `${this.bucketClass(domain)}:${credentialId}`;\n    const now = Date.now();\n    const bucket = this.buckets.get(key) ?? { tokens: limit, updatedAt: now };\n\n    const refillPerMs = limit / 60_000;\n    const elapsed = now - bucket.updatedAt;\n    bucket.tokens = Math.min(limit, bucket.tokens + elapsed * refillPerMs);\n    bucket.updatedAt = now;\n\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      this.buckets.set(key, bucket);\n      return { allowed: true };\n    }\n\n    this.buckets.set(key, bucket);\n    const deficit = 1 - bucket.tokens;\n    return { allowed: false, retryAfterMs: Math.ceil(deficit / refillPerMs) };\n  }\n\n  /** Test helper. */\n  reset(): void {\n    this.buckets.clear();\n  }\n}\n","/**\n * Builds a per-session MCP server instance whose tool list is the\n * credential-filtered OpenLattice catalog. Per-session instances are what\n * make grant-filtered tools/list possible on the official SDK.\n *\n * Session registration happens inside sessionIdGenerator — the SDK invokes\n * it exactly once while handling initialize, which guarantees the registry\n * key equals the transport-generated id that the response header carries.\n *\n * Every tool executor routes through the OpenLattice invoke kernel, so\n * authorization is re-checked on each invocation (default-deny, live grants).\n */\n\nimport { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { StreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/streamableHttp.js\";\nimport { randomUUID } from \"crypto\";\nimport type { McpUiCsp, OpenGrant } from \"@axiom-lattice/protocols\";\nimport type { OpenToolDescriptor } from \"./openLattice\";\nimport { registerSession } from \"./mcpTransportRegistry\";\n\nexport const OPEN_MCP_SERVER_INFO = {\n  name: \"axiom-open\",\n  version: \"0.1.0\",\n} as const;\n\n/**\n * A `ui://` HTML resource served by the session. `read` is invoked per\n * `resources/read`, so the caller can fetch plugin UI lazily.\n */\nexport interface OpenUiResource {\n  /** MIME for the resource; defaults to \"text/html;profile=mcp-app\". */\n  mimeType?: string;\n  csp?: McpUiCsp;\n  read: () => Promise<{ html: string; csp?: McpUiCsp }>;\n}\n\nexport interface BuiltSession {\n  server: McpServer;\n  transport: StreamableHTTPServerTransport;\n  tools: OpenToolDescriptor[];\n}\n\n/**\n * Builds (but does not connect) a per-session MCP server. The caller MUST\n * connect it to a transport (`await built.server.connect(built.transport)`)\n * before handling requests — otherwise the transport has no onmessage\n * handler and initialize is swallowed. Deferring connect is what lets tests\n * attach the server to an `InMemoryTransport`.\n */\nexport async function buildSessionServer(options: {\n  credential: { credentialId: string; kind: string };\n  grants: OpenGrant[];\n  catalog: OpenToolDescriptor[];\n  invoke: (\n    toolName: string,\n    args: unknown,\n  ) => Promise<{\n    content: Array<{ type: \"text\"; text: string }>;\n    isError?: boolean;\n  }>;\n  uiResources?: Map<string, OpenUiResource>;\n}): Promise<BuiltSession> {\n  const { credential, catalog, invoke, uiResources } = options;\n  const server = new McpServer(OPEN_MCP_SERVER_INFO, {\n    capabilities: {\n      // The SDK has no `extensions` field; MCP App hosts discover the UI\n      // extension through `experimental`.\n      experimental: { \"io.modelcontextprotocol/ui\": {} },\n    },\n  });\n  for (const tool of catalog) {\n    server.registerTool(\n      tool.toolName,\n      {\n        description: tool.description,\n        inputSchema: tool.schema,\n        annotations: {\n          readOnlyHint: tool.annotations.readOnlyHint,\n          destructiveHint: tool.annotations.destructiveHint,\n        },\n        ...(tool.ui ? { _meta: { ui: { resourceUri: tool.ui.resourceUri } } } : {}),\n      },\n      async (args: unknown) => {\n        const result = await invoke(tool.toolName, args);\n        return { content: result.content, isError: result.isError };\n      },\n    );\n  }\n  for (const [uri, res] of uiResources ?? []) {\n    const mimeType = res.mimeType ?? \"text/html;profile=mcp-app\";\n    server.registerResource(\n      `mcp-app:${uri}`,\n      uri,\n      {\n        mimeType,\n        ...(res.csp ? { _meta: { ui: { csp: res.csp } } } : {}),\n      },\n      async (u) => {\n        const { html, csp } = await res.read();\n        return {\n          contents: [\n            {\n              uri: u.href,\n              mimeType,\n              text: html,\n              ...(csp ? { _meta: { ui: { csp } } } : {}),\n            },\n          ],\n        };\n      },\n    );\n  }\n  const transport = new StreamableHTTPServerTransport({\n    sessionIdGenerator: () => {\n      const sessionId = randomUUID();\n      void registerSession(\n        sessionId,\n        { credentialId: credential.credentialId, kind: credential.kind },\n        { server, transport },\n      );\n      return sessionId;\n    },\n    enableJsonResponse: true,\n    onsessionclosed: (closedId: string) => {\n      void import(\"./mcpTransportRegistry\").then(({ deleteSession }) =>\n        deleteSession(closedId),\n      );\n    },\n  });\n  return { server, transport, tools: catalog };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;;;ACYzB,IAAM,kBAAN,MAAsB;AAAA,EAK3B,YAAY,UAAkC,CAAC,GAAG;AAJlD,SAAiB,UAAU,oBAAI,IAAoB;AAKjD,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,iBAAiB,QAAQ,kBAAkB;AAAA,EAClD;AAAA,EAEQ,YAAY,QAAwB;AAC1C,WAAO,WAAW,UAAU,UAAU;AAAA,EACxC;AAAA,EAEQ,SAAS,QAAwB;AACvC,WAAO,WAAW,UAAU,KAAK,iBAAiB,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,cAAsB,QAAmC;AAC7D,UAAM,QAAQ,KAAK,SAAS,MAAM;AAClC,UAAM,MAAM,GAAG,KAAK,YAAY,MAAM,CAAC,IAAI,YAAY;AACvD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,QAAQ,OAAO,WAAW,IAAI;AAExE,UAAM,cAAc,QAAQ;AAC5B,UAAM,UAAU,MAAM,OAAO;AAC7B,WAAO,SAAS,KAAK,IAAI,OAAO,OAAO,SAAS,UAAU,WAAW;AACrE,WAAO,YAAY;AAEnB,QAAI,OAAO,UAAU,GAAG;AACtB,aAAO,UAAU;AACjB,WAAK,QAAQ,IAAI,KAAK,MAAM;AAC5B,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAEA,SAAK,QAAQ,IAAI,KAAK,MAAM;AAC5B,UAAM,UAAU,IAAI,OAAO;AAC3B,WAAO,EAAE,SAAS,OAAO,cAAc,KAAK,KAAK,UAAU,WAAW,EAAE;AAAA,EAC1E;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,QAAQ,MAAM;AAAA,EACrB;AACF;;;ACxDA,SAAS,iBAAiB;AAC1B,SAAS,qCAAqC;AAC9C,SAAS,kBAAkB;AAKpB,IAAM,uBAAuB;AAAA,EAClC,MAAM;AAAA,EACN,SAAS;AACX;AA0BA,eAAsB,mBAAmB,SAYf;AACxB,QAAM,EAAE,YAAY,SAAS,QAAQ,YAAY,IAAI;AACrD,QAAM,SAAS,IAAI,UAAU,sBAAsB;AAAA,IACjD,cAAc;AAAA;AAAA;AAAA,MAGZ,cAAc,EAAE,8BAA8B,CAAC,EAAE;AAAA,IACnD;AAAA,EACF,CAAC;AACD,aAAW,QAAQ,SAAS;AAC1B,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,QACE,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,aAAa;AAAA,UACX,cAAc,KAAK,YAAY;AAAA,UAC/B,iBAAiB,KAAK,YAAY;AAAA,QACpC;AAAA,QACA,GAAI,KAAK,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,KAAK,GAAG,YAAY,EAAE,EAAE,IAAI,CAAC;AAAA,MAC3E;AAAA,MACA,OAAO,SAAkB;AACvB,cAAM,SAAS,MAAM,OAAO,KAAK,UAAU,IAAI;AAC/C,eAAO,EAAE,SAAS,OAAO,SAAS,SAAS,OAAO,QAAQ;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AACA,aAAW,CAAC,KAAK,GAAG,KAAK,eAAe,CAAC,GAAG;AAC1C,UAAM,WAAW,IAAI,YAAY;AACjC,WAAO;AAAA,MACL,WAAW,GAAG;AAAA,MACd;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC;AAAA,MACvD;AAAA,MACA,OAAO,MAAM;AACX,cAAM,EAAE,MAAM,IAAI,IAAI,MAAM,IAAI,KAAK;AACrC,eAAO;AAAA,UACL,UAAU;AAAA,YACR;AAAA,cACE,KAAK,EAAE;AAAA,cACP;AAAA,cACA,MAAM;AAAA,cACN,GAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC;AAAA,YAC1C;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,IAAI,8BAA8B;AAAA,IAClD,oBAAoB,MAAM;AACxB,YAAM,YAAY,WAAW;AAC7B,WAAK;AAAA,QACH;AAAA,QACA,EAAE,cAAc,WAAW,cAAc,MAAM,WAAW,KAAK;AAAA,QAC/D,EAAE,QAAQ,UAAU;AAAA,MACtB;AACA,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB;AAAA,IACpB,iBAAiB,CAAC,aAAqB;AACrC,WAAK,OAAO,qCAAwB,EAAE;AAAA,QAAK,CAAC,EAAE,eAAAA,eAAc,MAC1DA,eAAc,QAAQ;AAAA,MACxB;AAAA,IACF;AAAA,EACF,CAAC;AACD,SAAO,EAAE,QAAQ,WAAW,OAAO,QAAQ;AAC7C;;;AFhFA,SAAS,cAAc,SAA6C;AAClE,QAAM,SAAS,QAAQ,QAAQ;AAC/B,MAAI,CAAC,QAAQ,WAAW,SAAS,EAAG,QAAO;AAC3C,SAAO,OAAO,MAAM,UAAU,MAAM,EAAE,KAAK,KAAK;AAClD;AAEA,SAAS,cAAc,SAA6C;AAClE,QAAM,MAAM,QAAQ,QAAQ,gBAAgB;AAC5C,QAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AAC5C,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAUA,SAAS,qBAAwC;AAC/C,SAAO;AAAA,IACL,OAAO,CAAC;AAAA,IACR,aAAa,oBAAI,IAAI;AAAA,IACrB,SAAS,MAAM;AAAA,IACf,UAAU;AAAA,IACV,QAAQ,OAAO,cAAc;AAAA,MAC3B,SAAS;AAAA,QACP,EAAE,MAAM,QAAQ,MAAM,yCAAyC,QAAQ,GAAG;AAAA,MAC5E;AAAA,MACA,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAGA,IAAM,YAAY;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,cAAc;AAChB;AAEO,SAAS,mBACd,KACA,OAAsB,CAAC,GACjB;AACN,QAAM,WACJ,KAAK,YACL,IAAI;AAAA,IACF,gBAAgB,WAAW,WAAW,EAAE;AAAA,IACxC,gBAAgB,WAAW,SAAS,EAAE;AAAA,EACxC;AACF,QAAM,eACJ,KAAK,iBAAiB,CAAC,QAAwB,IAAI;AACrD,QAAM,QACJ,KAAK,UACJ,MAAM;AACL,QAAI;AACF,YAAM,QAAQ,gBAAgB,WAAW,WAAW,EAAE;AACtD,aAAO,IAAI,iBAAiB,KAAK;AAAA,IACnC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEL,QAAM,cAAc,KAAK,eAAe,IAAI,gBAAgB;AAE5D,MAAI,KAAK,aAAa,OAAO,SAAyB,UAAwB;AAC5E,UAAM,UAAU,MAAM,SAAS,QAAQ,cAAc,OAAO,CAAC;AAC7D,QAAI,CAAC,SAAS;AACZ,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,cAAc,CAAC;AAAA,IACxD;AAEA,UAAM,OAAgB,QAAQ;AAC9B,UAAM,YAAY,cAAc,OAAO;AAIvC,QAAI,WAAW;AACb,YAAM,UAAU,MAAM,WAAW,SAAS;AAC1C,UACE,CAAC,WACD,QAAQ,WAAW,iBAAiB,QAAQ,cAC5C;AACA,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MAC9D;AACA,YAAM,OAAO;AACb,YAAM,QAAQ,UAAU,cAAc,QAAQ,KAAK,MAAM,KAAK,IAAI;AAClE;AAAA,IACF;AAIA,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAAA,IAC7D;AAEA,UAAM,SAAS,aAAa,OAAO;AACnC,UAAM,UAAU,MAAM,YAAY,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,CAAC;AAMnF,UAAM,kBAAkB,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;AAC9D,UAAM,cACJ,KAAK,kBACJ,CAAC,UAAU,cAAc,sBACxB,uBAAuB,UAAU,cAAc,EAAE,kBAAkB,CAAC;AACxE,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,YAAY,QAAQ,UAAU,QAAQ,eAAe;AACpE,UAAI,OAAO,UAAU;AAInB,gBAAQ,IAAI;AAAA,UACV,EAAE,UAAU,QAAQ,SAAS;AAAA,UAC7B;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AAId,cAAQ,IAAI;AAAA,QACV,EAAE,UAAU,QAAQ,UAAU,KAAK,MAAM;AAAA,QACzC;AAAA,MACF;AACA,eAAS,mBAAmB;AAAA,IAC9B;AACA,UAAM,gBAAgB,iBAAiB,SAAS,OAAO,KAAK;AAC5D,UAAM,cAAc,IAAI,IAAI;AAAA,MAC1B,GAAG,gCAAgC,MAAM;AAAA,MACzC,GAAG,OAAO;AAAA,IACZ,CAAC;AACD,UAAM,QAAQ,MAAM,mBAAmB;AAAA,MACrC,YAAY,EAAE,cAAc,QAAQ,cAAc,MAAM,QAAQ,KAAK;AAAA,MACrE;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA,QAAQ,OAAO,UAAU,SAAS;AAChC,cAAM,YAAY,KAAK,IAAI;AAC3B,cAAM,MAAM,SAAS,QAAQ,GAAG;AAChC,cAAM,cAAc,MAAM,IAAI,SAAS,MAAM,GAAG,GAAG,IAAI;AACvD,cAAM,cAAc,MAAM,IAAI,SAAS,MAAM,MAAM,CAAC,IAAI;AAExD,cAAM,WAAW,YAAY,MAAM,QAAQ,cAAc,WAAW;AACpE,YAAI,CAAC,SAAS,SAAS;AACrB,gBAAM,OAAO,OAAO;AAAA,YAClB,UAAU,QAAQ;AAAA,YAClB,cAAc,QAAQ;AAAA,YACtB,gBAAgB,QAAQ;AAAA,YACxB,WAAW,QAAQ;AAAA,YACnB,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,YAAY,KAAK,IAAI,IAAI;AAAA,UAC3B,CAAC;AACD,gBAAM,OAAO;AAAA,YACX,IAAI;AAAA,cACF,6BAA6B,SAAS,gBAAgB,GAAI;AAAA,YAC5D;AAAA,YACA,EAAE,SAAS,UAAU,aAAa;AAAA,UACpC;AAAA,QACF;AAEA,YAAI;AACF,gBAAM,gBAAgB,OAAO,QAAQ,QAAQ,KAAK,CAAC,gBAAgB,IAAI,QAAQ;AAC/E,gBAAM,YAAqC;AAAA,YACzC,aAAa,QAAQ;AAAA,YACrB,cAAc,QAAQ;AAAA,YACtB,OAAO,QAAQ;AAAA,UACjB;AACA,gBAAM,SAAS,gBACX,MAAM,OAAO,OAAO,UAAU,MAAM;AAAA,YAClC,UAAU,QAAQ;AAAA,YAClB,WAAW,QAAQ;AAAA,YACnB,aAAa,QAAQ;AAAA,YACrB;AAAA,UACF,CAAC,IACD,MAAM,YAAY;AAAA,YAChB;AAAA,YACA;AAAA,cACE,UAAU,QAAQ;AAAA,cAClB,WAAW,QAAQ;AAAA,cACnB,aAAa,QAAQ;AAAA,cACrB;AAAA,YACF;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACJ,gBAAM,OAAO,OAAO;AAAA,YAClB,UAAU,QAAQ;AAAA,YAClB,cAAc,QAAQ;AAAA,YACtB,gBAAgB,QAAQ;AAAA,YACxB,WAAW,QAAQ;AAAA,YACnB,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ,OAAO,UAAU,UAAU;AAAA,YACnC,GAAI,OAAO,UAAU,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,YACzD,YAAY,KAAK,IAAI,IAAI;AAAA,UAC3B,CAAC;AACD,iBAAO;AAAA,QACT,SAAS,KAAK;AACZ,gBAAM,OACJ,eAAe,mBACX,UAAU,eACV,eAAe,sBACb,UAAU,mBACV,eAAe,kBACb,UAAU,oBACV,UAAU;AACpB,gBAAM,OAAO,OAAO;AAAA,YAClB,UAAU,QAAQ;AAAA,YAClB,cAAc,QAAQ;AAAA,YACtB,gBAAgB,QAAQ;AAAA,YACxB,WAAW,QAAQ;AAAA,YACnB,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ;AAAA,YACR,WACE,eAAe,mBACX,iBACA,eAAe,sBACb,qBACA,eAAe,kBACb,sBACA;AAAA,YACV,YAAY,KAAK,IAAI,IAAI;AAAA,UAC3B,CAAC;AACD,gBAAM,OAAO;AAAA,YACX,IAAI,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,YAC1D,EAAE,SAAS,KAAK;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAID,UAAM,MAAM,OAAO,QAAQ,MAAM,SAAS;AAC1C,UAAM,OAAO;AACb,UAAM,MAAM,UAAU,cAAc,QAAQ,KAAK,MAAM,KAAK,IAAI;AAAA,EAClE,CAAC;AAED,MAAI;AAAA,IACF;AAAA,IACA,OAAO,SAAyB,UAAwB;AACtD,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,WAAW;AACd,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAAA,MAC7D;AACA,YAAM,cAAc,SAAS;AAC7B,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK;AAAA,IAChC;AAAA,EACF;AACF;","names":["deleteSession"]}

package/dist/{open-files-NPNQQ6TY.mjs → open-files-X3HXVEEM.mjs}

@@ -1,14 +1,14 @@
 import {
   OpenAuditService,
   OpenCredentialService
-} from "./chunk-52SUWMOX.mjs";
+} from "./chunk-JUA3VJE7.mjs";
 import {
   openLattice
 } from "./chunk-HVIKCUOF.mjs";
 import {
   resolveContextSandbox
-} from "./chunk-TJAUXMYJ.mjs";
-import "./chunk-WKNZ7GBC.mjs";
+} from "./chunk-URXZPI2F.mjs";
+import "./chunk-EXPERMZR.mjs";
 import "./chunk-NFEGQTCC.mjs";
 
 // src/routes/open-files.ts
@@ -143,4 +143,4 @@ function registerOpenFilesRoutes(app, deps = {}) {
 export {
   registerOpenFilesRoutes
 };
-//# sourceMappingURL=open-files-NPNQQ6TY.mjs.map
+//# sourceMappingURL=open-files-X3HXVEEM.mjs.map

package/dist/{open-session-IHDGAXL3.mjs → open-session-2Y7XJJW2.mjs}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-HVIKCUOF.mjs";
 import {
   BROWSER_GRANTS
-} from "./chunk-2POW27EI.mjs";
+} from "./chunk-7CG57LEF.mjs";
 import {
   init_openToken,
   signOpenToken
-} from "./chunk-WKNZ7GBC.mjs";
+} from "./chunk-EXPERMZR.mjs";
 import "./chunk-NFEGQTCC.mjs";
 
 // src/routes/open-session.ts
@@ -50,4 +50,4 @@ function registerOpenSessionRoutes(app) {
 export {
   registerOpenSessionRoutes
 };
-//# sourceMappingURL=open-session-IHDGAXL3.mjs.map
+//# sourceMappingURL=open-session-2Y7XJJW2.mjs.map

package/dist/{resources-DXPXAXEZ.mjs → resources-2L3KSUUU.mjs}

@@ -5,7 +5,7 @@ import {
 import {
   init_openToken,
   openToken_exports
-} from "./chunk-WKNZ7GBC.mjs";
+} from "./chunk-EXPERMZR.mjs";
 import {
   __toCommonJS
 } from "./chunk-NFEGQTCC.mjs";
@@ -414,4 +414,4 @@ var ResourceController = class {
 export {
   ResourceController
 };
-//# sourceMappingURL=resources-DXPXAXEZ.mjs.map
+//# sourceMappingURL=resources-2L3KSUUU.mjs.map

package/dist/sandboxOpenCredentialProvider-USIU7Z7H.mjs

@@ -0,0 +1,275 @@
+import {
+  init_openToken,
+  signOpenToken
+} from "./chunk-EXPERMZR.mjs";
+import "./chunk-NFEGQTCC.mjs";
+
+// src/services/open/sandboxOpenCredentialProvider.ts
+init_openToken();
+import { registerSandboxOpenCredentialProvider } from "@axiom-lattice/core";
+
+// src/services/open/sandboxOpenReflection.ts
+import {
+  PluginRegistry,
+  agentLatticeManager,
+  ensureBuiltinAgentsForTenant,
+  getSandboxPluginCatalog,
+  getStoreLattice
+} from "@axiom-lattice/core";
+var AGENT_REFLECTION_CACHE_TTL_MS = 6e4;
+var cache = /* @__PURE__ */ new Map();
+function cloneGrants(grants) {
+  return grants.map((grant) => ({
+    ...grant,
+    items: grant.items ? [...grant.items] : void 0
+  }));
+}
+function normalizeOpenExpose(value) {
+  if (!Array.isArray(value)) return [];
+  const out = [];
+  for (const entry of value) {
+    if (typeof entry === "string") {
+      if (entry) out.push(entry);
+    } else if (entry && typeof entry === "object") {
+      const name = entry.name;
+      if (typeof name === "string" && name) out.push(name);
+    }
+  }
+  return out;
+}
+function extractMiddleware(container) {
+  if (!container || typeof container !== "object") return void 0;
+  const raw = container.middleware;
+  if (!Array.isArray(raw)) return void 0;
+  const out = [];
+  for (const entry of raw) {
+    if (!entry || typeof entry !== "object") continue;
+    const type = entry.type;
+    if (typeof type !== "string" || type.length === 0) continue;
+    const enabled = entry.enabled;
+    const rawAllowed = entry.allowedTools;
+    const allowedTools = Array.isArray(rawAllowed) ? rawAllowed.filter((t) => typeof t === "string" && t.length > 0) : void 0;
+    out.push({ type, enabled: typeof enabled === "boolean" ? enabled : void 0, allowedTools });
+  }
+  return out;
+}
+function extractSubAgents(config) {
+  if (!config || typeof config !== "object") return void 0;
+  const raw = config.subAgents;
+  if (!Array.isArray(raw)) return void 0;
+  const out = raw.filter((id) => typeof id === "string" && id.length > 0);
+  return out.length > 0 ? out : void 0;
+}
+async function computeGrants(tenantId, assistantId, deps) {
+  await deps.ensure?.(tenantId);
+  let context = await deps.getAgentConfig?.(tenantId, assistantId);
+  if (context === void 0) {
+    const middleware = await deps.getAssistantMiddleware?.(tenantId, assistantId);
+    if (middleware === void 0) return [];
+    context = { middleware };
+  }
+  const byDomain = /* @__PURE__ */ new Map();
+  const add = (domain, items) => {
+    let bucket = byDomain.get(domain);
+    if (!bucket) {
+      bucket = /* @__PURE__ */ new Set();
+      byDomain.set(domain, bucket);
+    }
+    for (const item of items) bucket.add(item);
+  };
+  for (const entry of context.middleware ?? []) {
+    if (!entry || entry.enabled === false) continue;
+    if (typeof entry.type !== "string" || entry.type.length === 0) continue;
+    let actions = deps.exposedActionsByType(entry.type);
+    if (actions.length === 0) continue;
+    const allowedTools = entry.allowedTools;
+    if (Array.isArray(allowedTools) && allowedTools.length > 0) {
+      const allowed = new Set(allowedTools);
+      actions = actions.filter((action) => allowed.has(action));
+      if (actions.length === 0) continue;
+    }
+    add(entry.type, actions);
+  }
+  const subAgents = context.subAgents ?? [];
+  if (subAgents.length > 0 && deps.resolvableAssistants) {
+    const resolvable = await deps.resolvableAssistants(tenantId);
+    const kept = subAgents.filter(
+      (id) => typeof id === "string" && id.length > 0 && resolvable.has(id)
+    );
+    if (kept.length > 0) add("agent", kept);
+  }
+  return [...byDomain].map(([domain, items]) => ({ domain, items: [...items] }));
+}
+async function resolveAgentOpenGrants(tenantId, assistantId, deps) {
+  try {
+    const key = `${tenantId}:${assistantId}`;
+    const now = deps.now ? deps.now() : Date.now();
+    const hit = cache.get(key);
+    if (hit && hit.expiresAt > now) return cloneGrants(hit.grants);
+    const grants = await computeGrants(tenantId, assistantId, deps);
+    cache.set(key, { grants, expiresAt: now + AGENT_REFLECTION_CACHE_TTL_MS });
+    return cloneGrants(grants);
+  } catch {
+    return [];
+  }
+}
+function createDefaultAgentReflectionDeps(tenantId) {
+  ensureBuiltinAgentsForTenant(tenantId);
+  return {
+    ensure: (t) => agentLatticeManager.initializeStoredAssistantsForTenant(t),
+    getAgentConfig: (t, assistantId) => {
+      const config = agentLatticeManager.getAgentConfigWithTenant(t, assistantId);
+      if (!config) return void 0;
+      return {
+        middleware: extractMiddleware(config),
+        subAgents: extractSubAgents(config)
+      };
+    },
+    getAssistantMiddleware: async (t, assistantId) => {
+      const store = getStoreLattice("default", "assistant").store;
+      const assistant = await store.getAssistantById(t, assistantId);
+      return extractMiddleware(assistant?.graphDefinition);
+    },
+    exposedActionsByType: (type) => {
+      const plugin = PluginRegistry.get(type);
+      return plugin ? normalizeOpenExpose(plugin.meta.openExpose) : [];
+    },
+    resolvableAssistants: async (t) => new Set(
+      agentLatticeManager.getAllAgentLatticesByTenant(t).map((lattice) => lattice.config.key)
+    )
+  };
+}
+var PLUGIN_REFLECTION_CACHE_TTL_MS = 6e4;
+var pluginCache = /* @__PURE__ */ new Map();
+function mergeGrantsByDomain(grants) {
+  const order = [];
+  const items = /* @__PURE__ */ new Map();
+  const unrestricted = /* @__PURE__ */ new Set();
+  for (const grant of grants) {
+    if (!grant || typeof grant.domain !== "string" || grant.domain.length === 0) continue;
+    if (!items.has(grant.domain)) {
+      items.set(grant.domain, /* @__PURE__ */ new Set());
+      order.push(grant.domain);
+    }
+    if (!grant.items || grant.items.length === 0) {
+      unrestricted.add(grant.domain);
+      continue;
+    }
+    const bucket = items.get(grant.domain);
+    if (!bucket) continue;
+    for (const item of grant.items) {
+      if (typeof item === "string" && item.length > 0) bucket.add(item);
+    }
+  }
+  return order.map((domain) => {
+    if (unrestricted.has(domain)) return { domain };
+    return { domain, items: [...items.get(domain) ?? []] };
+  });
+}
+async function computePluginGrants(tenantId, deps) {
+  const grants = [...deps.globalExposedDomains?.() ?? []];
+  if (deps.tenantExposedDomains) {
+    grants.push(...await deps.tenantExposedDomains(tenantId));
+  }
+  if (deps.resolvableAssistants) {
+    const resolvable = await deps.resolvableAssistants(tenantId);
+    if (resolvable.size > 0) {
+      grants.push({ domain: "agent", items: [...resolvable] });
+    }
+  }
+  return mergeGrantsByDomain(grants);
+}
+async function resolvePluginOpenGrants(tenantId, deps) {
+  try {
+    const now = deps.now ? deps.now() : Date.now();
+    const hit = pluginCache.get(tenantId);
+    if (hit && hit.expiresAt > now) return cloneGrants(hit.grants);
+    await deps.ensure?.(tenantId);
+    const grants = await computePluginGrants(tenantId, deps);
+    pluginCache.set(tenantId, { grants, expiresAt: now + PLUGIN_REFLECTION_CACHE_TTL_MS });
+    return cloneGrants(grants);
+  } catch {
+    return [];
+  }
+}
+function buildTenantExposedGrants(manifests) {
+  const grants = [];
+  for (const manifest of manifests) {
+    const items = (manifest.tools ?? []).filter((tool) => tool.expose === true).map((tool) => tool.name);
+    if (items.length > 0) grants.push({ domain: manifest.type, items });
+  }
+  return grants;
+}
+function createDefaultPluginReflectionDeps() {
+  return {
+    ensure: (tenantId) => agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
+    globalExposedDomains: () => {
+      const grants = [];
+      for (const type of PluginRegistry.list()) {
+        const plugin = PluginRegistry.get(type);
+        const items = normalizeOpenExpose(plugin?.meta.openExpose);
+        if (items.length > 0) grants.push({ domain: type, items });
+      }
+      return grants;
+    },
+    tenantExposedDomains: async (tenantId) => {
+      const { manifests } = await getSandboxPluginCatalog().ensureLoaded(tenantId);
+      return buildTenantExposedGrants(Object.values(manifests));
+    },
+    resolvableAssistants: async (tenantId) => new Set(
+      agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
+    )
+  };
+}
+
+// src/services/open/sandboxOpenCredentialProvider.ts
+var DEFAULT_SANDBOX_OPEN_GRANTS = [
+  { domain: "sandbox", items: ["files_read", "files_list", "files_write", "shell_exec"] },
+  { domain: "kb", items: ["search", "entries_read"] }
+];
+var MAX_SANDBOX_OPEN_DEPTH = 5;
+function defaultReflection() {
+  return {
+    agent: (tenantId, assistantId) => resolveAgentOpenGrants(tenantId, assistantId, createDefaultAgentReflectionDeps(tenantId)),
+    plugin: (tenantId) => resolvePluginOpenGrants(tenantId, createDefaultPluginReflectionDeps())
+  };
+}
+function createSandboxOpenCredentialProvider(options) {
+  const reflection = options.reflection ?? defaultReflection();
+  return async (context) => {
+    if (!options.gatewayUrl) return void 0;
+    const depth = (context.depth ?? 0) + 1;
+    if (depth > MAX_SANDBOX_OPEN_DEPTH) {
+      options.onError?.(new Error("sandbox open credential depth exceeded"));
+      return void 0;
+    }
+    const reflected = context.assistantId ? await reflection.agent(context.tenantId, context.assistantId) : await reflection.plugin(context.tenantId);
+    const grants = mergeGrantsByDomain([...DEFAULT_SANDBOX_OPEN_GRANTS, ...reflected]);
+    const token = signOpenToken({
+      kind: "sandbox_token",
+      tenantId: context.tenantId,
+      workspaceId: context.workspaceId ?? "",
+      projectId: context.projectId ?? "",
+      sandboxName: context.sandboxName,
+      grants,
+      depth
+    });
+    return { gatewayUrl: options.gatewayUrl, token };
+  };
+}
+function registerGatewaySandboxOpenCredentialProvider(onError) {
+  return registerSandboxOpenCredentialProvider(
+    createSandboxOpenCredentialProvider({
+      gatewayUrl: process.env.PUBLIC_GATEWAY_URL?.trim() || void 0,
+      onError
+    }),
+    { onError }
+  );
+}
+export {
+  DEFAULT_SANDBOX_OPEN_GRANTS,
+  MAX_SANDBOX_OPEN_DEPTH,
+  createSandboxOpenCredentialProvider,
+  registerGatewaySandboxOpenCredentialProvider
+};
+//# sourceMappingURL=sandboxOpenCredentialProvider-USIU7Z7H.mjs.map

package/dist/sandboxOpenCredentialProvider-USIU7Z7H.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/open/sandboxOpenCredentialProvider.ts","../src/services/open/sandboxOpenReflection.ts"],"sourcesContent":["/**\n * Gateway composition-root implementation of the sandbox open-credential seam.\n *\n * Mints a short-lived, self-bound `sandbox_token` for sandbox code so it can call\n * the Open MCP endpoint. Core stays credential-agnostic; only the gateway knows\n * the signing secret and the public URL.\n */\n\nimport type { OpenGrant } from \"@axiom-lattice/protocols\";\nimport type { SandboxOpenCredentialProvider } from \"@axiom-lattice/core\";\nimport { registerSandboxOpenCredentialProvider } from \"@axiom-lattice/core\";\nimport { signOpenToken } from \"./openToken\";\nimport {\n  createDefaultAgentReflectionDeps,\n  createDefaultPluginReflectionDeps,\n  mergeGrantsByDomain,\n  resolveAgentOpenGrants,\n  resolvePluginOpenGrants,\n} from \"./sandboxOpenReflection\";\n\n/** Conservative default grants for sandbox-initiated Open calls (B0). */\nexport const DEFAULT_SANDBOX_OPEN_GRANTS: OpenGrant[] = [\n  { domain: \"sandbox\", items: [\"files_read\", \"files_list\", \"files_write\", \"shell_exec\"] },\n  { domain: \"kb\", items: [\"search\", \"entries_read\"] },\n];\n\n/** Maximum nested sandbox Open orchestration depth before minting is refused. */\nexport const MAX_SANDBOX_OPEN_DEPTH = 5;\n\n/** Reflection seam: how the provider derives caller grants for a mint. */\nexport interface SandboxOpenReflection {\n  /** Reflect an agent caller's own Open capabilities. */\n  agent: (tenantId: string, assistantId: string) => Promise<OpenGrant[]>;\n  /** Reflect the tenant's grantable Open catalog for a plugin handler caller. */\n  plugin: (tenantId: string) => Promise<OpenGrant[]>;\n}\n\n/** Options for {@link createSandboxOpenCredentialProvider}. */\nexport interface SandboxOpenCredentialProviderFactoryOptions {\n  /** Public base URL of this gateway (`PUBLIC_GATEWAY_URL`). Absent ⇒ inject nothing. */\n  gatewayUrl?: string;\n  /** Best-effort hook for structured warnings (e.g. depth cap reached). */\n  onError?: (error: unknown) => void;\n  /** Test seam replacing the live reflection resolvers. */\n  reflection?: SandboxOpenReflection;\n}\n\n/** Default reflection wired to the live tenant registries. */\nfunction defaultReflection(): SandboxOpenReflection {\n  return {\n    agent: (tenantId, assistantId) =>\n      resolveAgentOpenGrants(tenantId, assistantId, createDefaultAgentReflectionDeps(tenantId)),\n    plugin: (tenantId) =>\n      resolvePluginOpenGrants(tenantId, createDefaultPluginReflectionDeps()),\n  };\n}\n\n/**\n * Build the provider.\n *\n * Grants are the union of the conservative B0 defaults with grants reflected\n * from the caller's identity (`assistantId` ⇒ agent reflection, otherwise the\n * tenant Open catalog). Each mint increments the orchestration `depth`; past\n * {@link MAX_SANDBOX_OPEN_DEPTH} the provider refuses to mint, breaking cycles.\n *\n * @param options - Gateway URL, error hook, and optional reflection seam.\n * @returns A {@link SandboxOpenCredentialProvider}\n */\nexport function createSandboxOpenCredentialProvider(\n  options: SandboxOpenCredentialProviderFactoryOptions,\n): SandboxOpenCredentialProvider {\n  const reflection = options.reflection ?? defaultReflection();\n  return async (context) => {\n    if (!options.gatewayUrl) return undefined;\n    const depth = (context.depth ?? 0) + 1;\n    if (depth > MAX_SANDBOX_OPEN_DEPTH) {\n      options.onError?.(new Error(\"sandbox open credential depth exceeded\"));\n      return undefined;\n    }\n    const reflected = context.assistantId\n      ? await reflection.agent(context.tenantId, context.assistantId)\n      : await reflection.plugin(context.tenantId);\n    const grants = mergeGrantsByDomain([...DEFAULT_SANDBOX_OPEN_GRANTS, ...reflected]);\n    const token = signOpenToken({\n      kind: \"sandbox_token\",\n      tenantId: context.tenantId,\n      workspaceId: context.workspaceId ?? \"\",\n      projectId: context.projectId ?? \"\",\n      sandboxName: context.sandboxName,\n      grants,\n      depth,\n    });\n    return { gatewayUrl: options.gatewayUrl, token };\n  };\n}\n\n/**\n * Register the gateway provider from `PUBLIC_GATEWAY_URL`.\n *\n * @param onError - Optional hook for structured warnings when resolution fails\n * @returns An unregister function (for tests/shutdown)\n */\nexport function registerGatewaySandboxOpenCredentialProvider(\n  onError?: (error: unknown) => void,\n): () => void {\n  return registerSandboxOpenCredentialProvider(\n    createSandboxOpenCredentialProvider({\n      gatewayUrl: process.env.PUBLIC_GATEWAY_URL?.trim() || undefined,\n      onError,\n    }),\n    { onError },\n  );\n}\n","/**\n * Agent Open-grant reflection (B1).\n *\n * Computes the extra Open grants a sandbox caller may use, derived from the\n * caller agent's own configuration (never from author declarations). The\n * invariant is: *what sandbox code can call ⊆ what the caller could already\n * call*. Grants are additive to the conservative B0 defaults and are bounded by\n * tenant-scoped resolution plus depth/rate/audit on the Open door.\n *\n * Mapping (`middleware[].enabled !== false`):\n * - middleware `type` whose plugin declares `meta.openExpose` → same-name domain\n *   (identity; covers `task`, `document-parser`, and plugin types);\n * - `subAgents` (DeepAgentConfig) intersected with tenant-resolvable assistants\n *   → the `agent` domain;\n * - anything else → ignored.\n *\n * Results are cached per `(tenantId, assistantId)` for\n * {@link AGENT_REFLECTION_CACHE_TTL_MS}. Any resolution error degrades to `[]`\n * so the caller falls back to the default grants rather than failing.\n */\n\nimport type { AssistantStore, OpenGrant } from \"@axiom-lattice/protocols\";\nimport {\n  PluginRegistry,\n  agentLatticeManager,\n  ensureBuiltinAgentsForTenant,\n  getSandboxPluginCatalog,\n  getStoreLattice,\n} from \"@axiom-lattice/core\";\n\n/** The subset of an agent config relevant to Open-grant reflection. */\nexport interface SandboxOpenReflectionContext {\n  middleware?: Array<{ type: string; enabled?: boolean; allowedTools?: string[] }>;\n  subAgents?: string[];\n}\n\n/** Injectable sources for {@link resolveAgentOpenGrants}. */\nexport interface AgentReflectionDeps {\n  /** Optional: hydrate stored/builtin/plugin agents for the tenant before resolution. */\n  ensure?: (tenantId: string) => Promise<void>;\n  /** Resolve an agent's config (middleware + subAgents) or undefined. */\n  getAgentConfig?: (tenantId: string, assistantId: string) => SandboxOpenReflectionContext | undefined;\n  /** Fallback: the assistant's persisted middleware. */\n  getAssistantMiddleware?: (tenantId: string, assistantId: string) => Promise<Array<{ type: string; enabled?: boolean; allowedTools?: string[] }> | undefined>;\n  /** Normalized exposed action names for a middleware/plugin type, or [] if none. */\n  exposedActionsByType: (type: string) => string[];\n  /** Assistant ids resolvable in the tenant (for subAgents filtering). */\n  resolvableAssistants?: (tenantId: string) => Promise<Set<string>>;\n  /** Clock seam for cache TTL tests. */\n  now?: () => number;\n}\n\n/** How long a per-agent reflection result is reused. */\nexport const AGENT_REFLECTION_CACHE_TTL_MS = 60_000;\n\ninterface CacheEntry {\n  grants: OpenGrant[];\n  expiresAt: number;\n}\n\nconst cache = new Map<string, CacheEntry>();\n\n/** Clear the reflection cache. Test-only seam. */\nexport function clearAgentReflectionCacheForTests(): void {\n  cache.clear();\n}\n\nfunction cloneGrants(grants: OpenGrant[]): OpenGrant[] {\n  return grants.map((grant) => ({\n    ...grant,\n    items: grant.items ? [...grant.items] : undefined,\n  }));\n}\n\n/** Normalize `meta.openExpose` (`string[] | {name}[]`) to action names. */\nexport function normalizeOpenExpose(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  const out: string[] = [];\n  for (const entry of value) {\n    if (typeof entry === \"string\") {\n      if (entry) out.push(entry);\n    } else if (entry && typeof entry === \"object\") {\n      const name = (entry as { name?: unknown }).name;\n      if (typeof name === \"string\" && name) out.push(name);\n    }\n  }\n  return out;\n}\n\n/** Extract middleware type list from an agent config / graphDefinition. */\nfunction extractMiddleware(\n  container: unknown,\n): Array<{ type: string; enabled?: boolean; allowedTools?: string[] }> | undefined {\n  if (!container || typeof container !== \"object\") return undefined;\n  const raw = (container as { middleware?: unknown }).middleware;\n  if (!Array.isArray(raw)) return undefined;\n  const out: Array<{ type: string; enabled?: boolean; allowedTools?: string[] }> = [];\n  for (const entry of raw) {\n    if (!entry || typeof entry !== \"object\") continue;\n    const type = (entry as { type?: unknown }).type;\n    if (typeof type !== \"string\" || type.length === 0) continue;\n    const enabled = (entry as { enabled?: unknown }).enabled;\n    const rawAllowed = (entry as { allowedTools?: unknown }).allowedTools;\n    const allowedTools = Array.isArray(rawAllowed)\n      ? rawAllowed.filter((t): t is string => typeof t === \"string\" && t.length > 0)\n      : undefined;\n    out.push({ type, enabled: typeof enabled === \"boolean\" ? enabled : undefined, allowedTools });\n  }\n  return out;\n}\n\n/** Extract subAgent ids from an agent config. */\nfunction extractSubAgents(config: unknown): string[] | undefined {\n  if (!config || typeof config !== \"object\") return undefined;\n  const raw = (config as { subAgents?: unknown }).subAgents;\n  if (!Array.isArray(raw)) return undefined;\n  const out = raw.filter((id): id is string => typeof id === \"string\" && id.length > 0);\n  return out.length > 0 ? out : undefined;\n}\n\nasync function computeGrants(\n  tenantId: string,\n  assistantId: string,\n  deps: AgentReflectionDeps,\n): Promise<OpenGrant[]> {\n  await deps.ensure?.(tenantId);\n\n  let context = await deps.getAgentConfig?.(tenantId, assistantId);\n  if (context === undefined) {\n    const middleware = await deps.getAssistantMiddleware?.(tenantId, assistantId);\n    if (middleware === undefined) return [];\n    context = { middleware };\n  }\n\n  const byDomain = new Map<string, Set<string>>();\n  const add = (domain: string, items: Iterable<string>): void => {\n    let bucket = byDomain.get(domain);\n    if (!bucket) {\n      bucket = new Set<string>();\n      byDomain.set(domain, bucket);\n    }\n    for (const item of items) bucket.add(item);\n  };\n\n  for (const entry of context.middleware ?? []) {\n    if (!entry || entry.enabled === false) continue;\n    if (typeof entry.type !== \"string\" || entry.type.length === 0) continue;\n    let actions = deps.exposedActionsByType(entry.type);\n    if (actions.length === 0) continue;\n    const allowedTools = entry.allowedTools;\n    if (Array.isArray(allowedTools) && allowedTools.length > 0) {\n      const allowed = new Set(allowedTools);\n      actions = actions.filter((action) => allowed.has(action));\n      if (actions.length === 0) continue;\n    }\n    add(entry.type, actions);\n  }\n\n  const subAgents = context.subAgents ?? [];\n  if (subAgents.length > 0 && deps.resolvableAssistants) {\n    const resolvable = await deps.resolvableAssistants(tenantId);\n    const kept = subAgents.filter(\n      (id) => typeof id === \"string\" && id.length > 0 && resolvable.has(id),\n    );\n    if (kept.length > 0) add(\"agent\", kept);\n  }\n\n  return [...byDomain].map(([domain, items]) => ({ domain, items: [...items] }));\n}\n\n/**\n * Resolve the reflected Open grants for an agent caller.\n *\n * @param tenantId - Tenant scope (grants never cross tenants).\n * @param assistantId - Caller agent id.\n * @param deps - Resolvers; {@link createDefaultAgentReflectionDeps} wires the\n *   real registries/store.\n * @returns Reflected grants (possibly `[]`); never throws.\n */\nexport async function resolveAgentOpenGrants(\n  tenantId: string,\n  assistantId: string,\n  deps: AgentReflectionDeps,\n): Promise<OpenGrant[]> {\n  try {\n    const key = `${tenantId}:${assistantId}`;\n    const now = deps.now ? deps.now() : Date.now();\n    const hit = cache.get(key);\n    if (hit && hit.expiresAt > now) return cloneGrants(hit.grants);\n\n    const grants = await computeGrants(tenantId, assistantId, deps);\n    cache.set(key, { grants, expiresAt: now + AGENT_REFLECTION_CACHE_TTL_MS });\n    return cloneGrants(grants);\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Default reflection deps wired to the live registries.\n *\n * Reads the agent lattice manager (seeded with built-ins for the tenant),\n * falls back to the assistant store, resolves plugin exposes from\n * {@link PluginRegistry}, and filters subAgents against tenant-resolvable\n * assistants.\n *\n * @param tenantId - Tenant whose built-in/plugin agents are ensured.\n * @returns Deps for {@link resolveAgentOpenGrants}.\n */\nexport function createDefaultAgentReflectionDeps(tenantId: string): AgentReflectionDeps {\n  ensureBuiltinAgentsForTenant(tenantId);\n  return {\n    ensure: (t) => agentLatticeManager.initializeStoredAssistantsForTenant(t),\n    getAgentConfig: (t, assistantId) => {\n      const config = agentLatticeManager.getAgentConfigWithTenant(t, assistantId);\n      if (!config) return undefined;\n      return {\n        middleware: extractMiddleware(config),\n        subAgents: extractSubAgents(config),\n      };\n    },\n    getAssistantMiddleware: async (t, assistantId) => {\n      const store = getStoreLattice(\"default\", \"assistant\").store as AssistantStore;\n      const assistant = await store.getAssistantById(t, assistantId);\n      return extractMiddleware(assistant?.graphDefinition);\n    },\n    exposedActionsByType: (type) => {\n      const plugin = PluginRegistry.get(type);\n      return plugin ? normalizeOpenExpose(plugin.meta.openExpose) : [];\n    },\n    resolvableAssistants: async (t) =>\n      new Set(\n        agentLatticeManager.getAllAgentLatticesByTenant(t).map((lattice) => lattice.config.key),\n      ),\n  };\n}\n\n/** How long a per-tenant plugin reflection result is reused. */\nexport const PLUGIN_REFLECTION_CACHE_TTL_MS = 60_000;\n\n/**\n * Injectable sources for {@link resolvePluginOpenGrants}.\n *\n * Plugin handlers have no `assistantId`, so reflection targets the tenant's\n * grantable Open catalog instead of a caller's own configuration.\n *\n * @property ensure - Optional: hydrate stored/builtin/plugin agents before reflecting the agent domain.\n * @property globalExposedDomains - Global plugin `openExpose` domains (tenant-agnostic).\n * @property tenantExposedDomains - Tenant sandbox plugin exposed domains.\n * @property resolvableAssistants - Tenant-resolvable assistant ids for the `agent` domain.\n * @property now - Clock seam for cache TTL tests.\n */\nexport interface PluginReflectionDeps {\n  /** Optional: hydrate stored/builtin/plugin agents before reflecting the agent domain. */\n  ensure?: (tenantId: string) => Promise<void>;\n  globalExposedDomains?: () => OpenGrant[];\n  tenantExposedDomains?: (tenantId: string) => Promise<OpenGrant[]>;\n  resolvableAssistants?: (tenantId: string) => Promise<Set<string>>;\n  now?: () => number;\n}\n\ninterface PluginCacheEntry {\n  grants: OpenGrant[];\n  expiresAt: number;\n}\n\nconst pluginCache = new Map<string, PluginCacheEntry>();\n\n/** Clear the plugin reflection cache. Test-only seam. */\nexport function clearPluginReflectionCacheForTests(): void {\n  pluginCache.clear();\n}\n\n/**\n * Merge grants by domain, preserving first-seen domain order and unioning items.\n *\n * An absent/empty `items` list means \"every action in the domain\" per\n * {@link OpenGrant}, so a domain carrying one collapses to `{ domain }`.\n *\n * @param grants - Raw grants from every reflection source.\n * @returns One normalized grant per domain.\n */\nexport function mergeGrantsByDomain(grants: OpenGrant[]): OpenGrant[] {\n  const order: string[] = [];\n  const items = new Map<string, Set<string>>();\n  const unrestricted = new Set<string>();\n\n  for (const grant of grants) {\n    if (!grant || typeof grant.domain !== \"string\" || grant.domain.length === 0) continue;\n    if (!items.has(grant.domain)) {\n      items.set(grant.domain, new Set());\n      order.push(grant.domain);\n    }\n    if (!grant.items || grant.items.length === 0) {\n      unrestricted.add(grant.domain);\n      continue;\n    }\n    const bucket = items.get(grant.domain);\n    if (!bucket) continue;\n    for (const item of grant.items) {\n      if (typeof item === \"string\" && item.length > 0) bucket.add(item);\n    }\n  }\n\n  return order.map((domain) => {\n    if (unrestricted.has(domain)) return { domain };\n    return { domain, items: [...(items.get(domain) ?? [])] };\n  });\n}\n\nasync function computePluginGrants(\n  tenantId: string,\n  deps: PluginReflectionDeps,\n): Promise<OpenGrant[]> {\n  const grants: OpenGrant[] = [...(deps.globalExposedDomains?.() ?? [])];\n  if (deps.tenantExposedDomains) {\n    grants.push(...(await deps.tenantExposedDomains(tenantId)));\n  }\n  if (deps.resolvableAssistants) {\n    const resolvable = await deps.resolvableAssistants(tenantId);\n    if (resolvable.size > 0) {\n      grants.push({ domain: \"agent\", items: [...resolvable] });\n    }\n  }\n  return mergeGrantsByDomain(grants);\n}\n\n/**\n * Resolve the reflected Open grants for a plugin handler caller.\n *\n * Plugin handlers carry no `assistantId`, so grants come from the tenant's\n * grantable Open catalog (global plugin exposes ∪ tenant sandbox plugin\n * exposes) plus the `agent` domain for tenant-resolvable assistants. Results\n * are cached per tenant for {@link PLUGIN_REFLECTION_CACHE_TTL_MS}; any\n * resolution error degrades to `[]` so the caller falls back to the default\n * grants rather than failing.\n *\n * @param tenantId - Tenant scope (grants never cross tenants).\n * @param deps - Resolvers; {@link createDefaultPluginReflectionDeps} wires the\n *   real registries/catalog.\n * @returns Reflected grants (possibly `[]`); never throws.\n */\nexport async function resolvePluginOpenGrants(\n  tenantId: string,\n  deps: PluginReflectionDeps,\n): Promise<OpenGrant[]> {\n  try {\n    const now = deps.now ? deps.now() : Date.now();\n    const hit = pluginCache.get(tenantId);\n    if (hit && hit.expiresAt > now) return cloneGrants(hit.grants);\n\n    await deps.ensure?.(tenantId);\n    const grants = await computePluginGrants(tenantId, deps);\n    pluginCache.set(tenantId, { grants, expiresAt: now + PLUGIN_REFLECTION_CACHE_TTL_MS });\n    return cloneGrants(grants);\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Map validated tenant plugin manifests to exposed Open grants.\n *\n * Only tools declaring `expose === true` become grant items; plugins with no\n * exposed tools are skipped. The domain is the plugin `type`.\n *\n * @param manifests - Validated tenant plugin manifests (or any shape with a\n *   `type` and `tools[].name`/`tools[].expose`).\n * @returns One grant per plugin that exposes at least one tool.\n */\nexport function buildTenantExposedGrants(\n  manifests: Array<{ type: string; tools?: Array<{ name: string; expose?: boolean }> }>,\n): OpenGrant[] {\n  const grants: OpenGrant[] = [];\n  for (const manifest of manifests) {\n    const items = (manifest.tools ?? [])\n      .filter((tool) => tool.expose === true)\n      .map((tool) => tool.name);\n    if (items.length > 0) grants.push({ domain: manifest.type, items });\n  }\n  return grants;\n}\n\n/**\n * Default plugin reflection deps wired to the live registries.\n *\n * Ensures stored/builtin/plugin agents for the tenant, then reads global plugin\n * exposes from {@link PluginRegistry}, tenant sandbox plugin exposes from\n * {@link getSandboxPluginCatalog} manifests, and tenant-resolvable assistants\n * from the agent lattice manager.\n *\n * @returns Deps for {@link resolvePluginOpenGrants}.\n */\nexport function createDefaultPluginReflectionDeps(): PluginReflectionDeps {\n  return {\n    ensure: (tenantId) => agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),\n    globalExposedDomains: () => {\n      const grants: OpenGrant[] = [];\n      for (const type of PluginRegistry.list()) {\n        const plugin = PluginRegistry.get(type);\n        const items = normalizeOpenExpose(plugin?.meta.openExpose);\n        if (items.length > 0) grants.push({ domain: type, items });\n      }\n      return grants;\n    },\n    tenantExposedDomains: async (tenantId) => {\n      const { manifests } = await getSandboxPluginCatalog().ensureLoaded(tenantId);\n      return buildTenantExposedGrants(Object.values(manifests));\n    },\n    resolvableAssistants: async (tenantId) =>\n      new Set(\n        agentLatticeManager\n          .getAllAgentLatticesByTenant(tenantId)\n          .map((lattice) => lattice.config.key),\n      ),\n  };\n}\n"],"mappings":";;;;;;;AAWA;AADA,SAAS,6CAA6C;;;ACYtD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAyBA,IAAM,gCAAgC;AAO7C,IAAM,QAAQ,oBAAI,IAAwB;AAO1C,SAAS,YAAY,QAAkC;AACrD,SAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC5B,GAAG;AAAA,IACH,OAAO,MAAM,QAAQ,CAAC,GAAG,MAAM,KAAK,IAAI;AAAA,EAC1C,EAAE;AACJ;AAGO,SAAS,oBAAoB,OAA0B;AAC5D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,MAAgB,CAAC;AACvB,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,UAAU;AAC7B,UAAI,MAAO,KAAI,KAAK,KAAK;AAAA,IAC3B,WAAW,SAAS,OAAO,UAAU,UAAU;AAC7C,YAAM,OAAQ,MAA6B;AAC3C,UAAI,OAAO,SAAS,YAAY,KAAM,KAAI,KAAK,IAAI;AAAA,IACrD;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,kBACP,WACiF;AACjF,MAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,QAAM,MAAO,UAAuC;AACpD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAChC,QAAM,MAA2E,CAAC;AAClF,aAAW,SAAS,KAAK;AACvB,QAAI,CAAC,SAAS,OAAO,UAAU,SAAU;AACzC,UAAM,OAAQ,MAA6B;AAC3C,QAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG;AACnD,UAAM,UAAW,MAAgC;AACjD,UAAM,aAAc,MAAqC;AACzD,UAAM,eAAe,MAAM,QAAQ,UAAU,IACzC,WAAW,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,IAC3E;AACJ,QAAI,KAAK,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,UAAU,QAAW,aAAa,CAAC;AAAA,EAC9F;AACA,SAAO;AACT;AAGA,SAAS,iBAAiB,QAAuC;AAC/D,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,MAAO,OAAmC;AAChD,MAAI,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAChC,QAAM,MAAM,IAAI,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AACpF,SAAO,IAAI,SAAS,IAAI,MAAM;AAChC;AAEA,eAAe,cACb,UACA,aACA,MACsB;AACtB,QAAM,KAAK,SAAS,QAAQ;AAE5B,MAAI,UAAU,MAAM,KAAK,iBAAiB,UAAU,WAAW;AAC/D,MAAI,YAAY,QAAW;AACzB,UAAM,aAAa,MAAM,KAAK,yBAAyB,UAAU,WAAW;AAC5E,QAAI,eAAe,OAAW,QAAO,CAAC;AACtC,cAAU,EAAE,WAAW;AAAA,EACzB;AAEA,QAAM,WAAW,oBAAI,IAAyB;AAC9C,QAAM,MAAM,CAAC,QAAgB,UAAkC;AAC7D,QAAI,SAAS,SAAS,IAAI,MAAM;AAChC,QAAI,CAAC,QAAQ;AACX,eAAS,oBAAI,IAAY;AACzB,eAAS,IAAI,QAAQ,MAAM;AAAA,IAC7B;AACA,eAAW,QAAQ,MAAO,QAAO,IAAI,IAAI;AAAA,EAC3C;AAEA,aAAW,SAAS,QAAQ,cAAc,CAAC,GAAG;AAC5C,QAAI,CAAC,SAAS,MAAM,YAAY,MAAO;AACvC,QAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,WAAW,EAAG;AAC/D,QAAI,UAAU,KAAK,qBAAqB,MAAM,IAAI;AAClD,QAAI,QAAQ,WAAW,EAAG;AAC1B,UAAM,eAAe,MAAM;AAC3B,QAAI,MAAM,QAAQ,YAAY,KAAK,aAAa,SAAS,GAAG;AAC1D,YAAM,UAAU,IAAI,IAAI,YAAY;AACpC,gBAAU,QAAQ,OAAO,CAAC,WAAW,QAAQ,IAAI,MAAM,CAAC;AACxD,UAAI,QAAQ,WAAW,EAAG;AAAA,IAC5B;AACA,QAAI,MAAM,MAAM,OAAO;AAAA,EACzB;AAEA,QAAM,YAAY,QAAQ,aAAa,CAAC;AACxC,MAAI,UAAU,SAAS,KAAK,KAAK,sBAAsB;AACrD,UAAM,aAAa,MAAM,KAAK,qBAAqB,QAAQ;AAC3D,UAAM,OAAO,UAAU;AAAA,MACrB,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,KAAK,WAAW,IAAI,EAAE;AAAA,IACtE;AACA,QAAI,KAAK,SAAS,EAAG,KAAI,SAAS,IAAI;AAAA,EACxC;AAEA,SAAO,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,QAAQ,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE;AAC/E;AAWA,eAAsB,uBACpB,UACA,aACA,MACsB;AACtB,MAAI;AACF,UAAM,MAAM,GAAG,QAAQ,IAAI,WAAW;AACtC,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,KAAK,IAAI;AAC7C,UAAM,MAAM,MAAM,IAAI,GAAG;AACzB,QAAI,OAAO,IAAI,YAAY,IAAK,QAAO,YAAY,IAAI,MAAM;AAE7D,UAAM,SAAS,MAAM,cAAc,UAAU,aAAa,IAAI;AAC9D,UAAM,IAAI,KAAK,EAAE,QAAQ,WAAW,MAAM,8BAA8B,CAAC;AACzE,WAAO,YAAY,MAAM;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAaO,SAAS,iCAAiC,UAAuC;AACtF,+BAA6B,QAAQ;AACrC,SAAO;AAAA,IACL,QAAQ,CAAC,MAAM,oBAAoB,oCAAoC,CAAC;AAAA,IACxE,gBAAgB,CAAC,GAAG,gBAAgB;AAClC,YAAM,SAAS,oBAAoB,yBAAyB,GAAG,WAAW;AAC1E,UAAI,CAAC,OAAQ,QAAO;AACpB,aAAO;AAAA,QACL,YAAY,kBAAkB,MAAM;AAAA,QACpC,WAAW,iBAAiB,MAAM;AAAA,MACpC;AAAA,IACF;AAAA,IACA,wBAAwB,OAAO,GAAG,gBAAgB;AAChD,YAAM,QAAQ,gBAAgB,WAAW,WAAW,EAAE;AACtD,YAAM,YAAY,MAAM,MAAM,iBAAiB,GAAG,WAAW;AAC7D,aAAO,kBAAkB,WAAW,eAAe;AAAA,IACrD;AAAA,IACA,sBAAsB,CAAC,SAAS;AAC9B,YAAM,SAAS,eAAe,IAAI,IAAI;AACtC,aAAO,SAAS,oBAAoB,OAAO,KAAK,UAAU,IAAI,CAAC;AAAA,IACjE;AAAA,IACA,sBAAsB,OAAO,MAC3B,IAAI;AAAA,MACF,oBAAoB,4BAA4B,CAAC,EAAE,IAAI,CAAC,YAAY,QAAQ,OAAO,GAAG;AAAA,IACxF;AAAA,EACJ;AACF;AAGO,IAAM,iCAAiC;AA4B9C,IAAM,cAAc,oBAAI,IAA8B;AAgB/C,SAAS,oBAAoB,QAAkC;AACpE,QAAM,QAAkB,CAAC;AACzB,QAAM,QAAQ,oBAAI,IAAyB;AAC3C,QAAM,eAAe,oBAAI,IAAY;AAErC,aAAW,SAAS,QAAQ;AAC1B,QAAI,CAAC,SAAS,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,WAAW,EAAG;AAC7E,QAAI,CAAC,MAAM,IAAI,MAAM,MAAM,GAAG;AAC5B,YAAM,IAAI,MAAM,QAAQ,oBAAI,IAAI,CAAC;AACjC,YAAM,KAAK,MAAM,MAAM;AAAA,IACzB;AACA,QAAI,CAAC,MAAM,SAAS,MAAM,MAAM,WAAW,GAAG;AAC5C,mBAAa,IAAI,MAAM,MAAM;AAC7B;AAAA,IACF;AACA,UAAM,SAAS,MAAM,IAAI,MAAM,MAAM;AACrC,QAAI,CAAC,OAAQ;AACb,eAAW,QAAQ,MAAM,OAAO;AAC9B,UAAI,OAAO,SAAS,YAAY,KAAK,SAAS,EAAG,QAAO,IAAI,IAAI;AAAA,IAClE;AAAA,EACF;AAEA,SAAO,MAAM,IAAI,CAAC,WAAW;AAC3B,QAAI,aAAa,IAAI,MAAM,EAAG,QAAO,EAAE,OAAO;AAC9C,WAAO,EAAE,QAAQ,OAAO,CAAC,GAAI,MAAM,IAAI,MAAM,KAAK,CAAC,CAAE,EAAE;AAAA,EACzD,CAAC;AACH;AAEA,eAAe,oBACb,UACA,MACsB;AACtB,QAAM,SAAsB,CAAC,GAAI,KAAK,uBAAuB,KAAK,CAAC,CAAE;AACrE,MAAI,KAAK,sBAAsB;AAC7B,WAAO,KAAK,GAAI,MAAM,KAAK,qBAAqB,QAAQ,CAAE;AAAA,EAC5D;AACA,MAAI,KAAK,sBAAsB;AAC7B,UAAM,aAAa,MAAM,KAAK,qBAAqB,QAAQ;AAC3D,QAAI,WAAW,OAAO,GAAG;AACvB,aAAO,KAAK,EAAE,QAAQ,SAAS,OAAO,CAAC,GAAG,UAAU,EAAE,CAAC;AAAA,IACzD;AAAA,EACF;AACA,SAAO,oBAAoB,MAAM;AACnC;AAiBA,eAAsB,wBACpB,UACA,MACsB;AACtB,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,KAAK,IAAI;AAC7C,UAAM,MAAM,YAAY,IAAI,QAAQ;AACpC,QAAI,OAAO,IAAI,YAAY,IAAK,QAAO,YAAY,IAAI,MAAM;AAE7D,UAAM,KAAK,SAAS,QAAQ;AAC5B,UAAM,SAAS,MAAM,oBAAoB,UAAU,IAAI;AACvD,gBAAY,IAAI,UAAU,EAAE,QAAQ,WAAW,MAAM,+BAA+B,CAAC;AACrF,WAAO,YAAY,MAAM;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAYO,SAAS,yBACd,WACa;AACb,QAAM,SAAsB,CAAC;AAC7B,aAAW,YAAY,WAAW;AAChC,UAAM,SAAS,SAAS,SAAS,CAAC,GAC/B,OAAO,CAAC,SAAS,KAAK,WAAW,IAAI,EACrC,IAAI,CAAC,SAAS,KAAK,IAAI;AAC1B,QAAI,MAAM,SAAS,EAAG,QAAO,KAAK,EAAE,QAAQ,SAAS,MAAM,MAAM,CAAC;AAAA,EACpE;AACA,SAAO;AACT;AAYO,SAAS,oCAA0D;AACxE,SAAO;AAAA,IACL,QAAQ,CAAC,aAAa,oBAAoB,oCAAoC,QAAQ;AAAA,IACtF,sBAAsB,MAAM;AAC1B,YAAM,SAAsB,CAAC;AAC7B,iBAAW,QAAQ,eAAe,KAAK,GAAG;AACxC,cAAM,SAAS,eAAe,IAAI,IAAI;AACtC,cAAM,QAAQ,oBAAoB,QAAQ,KAAK,UAAU;AACzD,YAAI,MAAM,SAAS,EAAG,QAAO,KAAK,EAAE,QAAQ,MAAM,MAAM,CAAC;AAAA,MAC3D;AACA,aAAO;AAAA,IACT;AAAA,IACA,sBAAsB,OAAO,aAAa;AACxC,YAAM,EAAE,UAAU,IAAI,MAAM,wBAAwB,EAAE,aAAa,QAAQ;AAC3E,aAAO,yBAAyB,OAAO,OAAO,SAAS,CAAC;AAAA,IAC1D;AAAA,IACA,sBAAsB,OAAO,aAC3B,IAAI;AAAA,MACF,oBACG,4BAA4B,QAAQ,EACpC,IAAI,CAAC,YAAY,QAAQ,OAAO,GAAG;AAAA,IACxC;AAAA,EACJ;AACF;;;AD3YO,IAAM,8BAA2C;AAAA,EACtD,EAAE,QAAQ,WAAW,OAAO,CAAC,cAAc,cAAc,eAAe,YAAY,EAAE;AAAA,EACtF,EAAE,QAAQ,MAAM,OAAO,CAAC,UAAU,cAAc,EAAE;AACpD;AAGO,IAAM,yBAAyB;AAqBtC,SAAS,oBAA2C;AAClD,SAAO;AAAA,IACL,OAAO,CAAC,UAAU,gBAChB,uBAAuB,UAAU,aAAa,iCAAiC,QAAQ,CAAC;AAAA,IAC1F,QAAQ,CAAC,aACP,wBAAwB,UAAU,kCAAkC,CAAC;AAAA,EACzE;AACF;AAaO,SAAS,oCACd,SAC+B;AAC/B,QAAM,aAAa,QAAQ,cAAc,kBAAkB;AAC3D,SAAO,OAAO,YAAY;AACxB,QAAI,CAAC,QAAQ,WAAY,QAAO;AAChC,UAAM,SAAS,QAAQ,SAAS,KAAK;AACrC,QAAI,QAAQ,wBAAwB;AAClC,cAAQ,UAAU,IAAI,MAAM,wCAAwC,CAAC;AACrE,aAAO;AAAA,IACT;AACA,UAAM,YAAY,QAAQ,cACtB,MAAM,WAAW,MAAM,QAAQ,UAAU,QAAQ,WAAW,IAC5D,MAAM,WAAW,OAAO,QAAQ,QAAQ;AAC5C,UAAM,SAAS,oBAAoB,CAAC,GAAG,6BAA6B,GAAG,SAAS,CAAC;AACjF,UAAM,QAAQ,cAAc;AAAA,MAC1B,MAAM;AAAA,MACN,UAAU,QAAQ;AAAA,MAClB,aAAa,QAAQ,eAAe;AAAA,MACpC,WAAW,QAAQ,aAAa;AAAA,MAChC,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,EAAE,YAAY,QAAQ,YAAY,MAAM;AAAA,EACjD;AACF;AAQO,SAAS,6CACd,SACY;AACZ,SAAO;AAAA,IACL,oCAAoC;AAAA,MAClC,YAAY,QAAQ,IAAI,oBAAoB,KAAK,KAAK;AAAA,MACtD;AAAA,IACF,CAAC;AAAA,IACD,EAAE,QAAQ;AAAA,EACZ;AACF;","names":[]}

package/dist/{sandboxProvider-I3P66VXT.mjs → sandboxProvider-DUYWHYJN.mjs}

@@ -1,10 +1,10 @@
 import {
   createOpenSandboxProvider,
   resolveContextSandbox
-} from "./chunk-TJAUXMYJ.mjs";
+} from "./chunk-URXZPI2F.mjs";
 import "./chunk-NFEGQTCC.mjs";
 export {
   createOpenSandboxProvider,
   resolveContextSandbox
 };
-//# sourceMappingURL=sandboxProvider-I3P66VXT.mjs.map
+//# sourceMappingURL=sandboxProvider-DUYWHYJN.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/gateway",
-  "version": "4.7.0",
+  "version": "4.8.1",
   "main": "dist/index.js",
   "files": [
     "dist"
@@ -48,11 +48,11 @@
     "uuid": "^9.0.1",
     "web-push": "^3.6.7",
     "zod": "3.25.76",
-    "@axiom-lattice/cli-a2a": "0.2.17",
-    "@axiom-lattice/core": "6.2.0",
-    "@axiom-lattice/pg-stores": "3.2.2",
-    "@axiom-lattice/protocols": "4.6.1",
-    "@axiom-lattice/queue-redis": "1.1.17"
+    "@axiom-lattice/cli-a2a": "0.2.18",
+    "@axiom-lattice/core": "6.3.1",
+    "@axiom-lattice/pg-stores": "3.3.1",
+    "@axiom-lattice/protocols": "4.7.0",
+    "@axiom-lattice/queue-redis": "1.1.18"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",
@@ -75,7 +75,8 @@
     "tsconfig-paths": "^4.2.0",
     "tsup": "^8.5.0",
     "typescript": "^5.8.2",
-    "@axiom-lattice/react-sdk": "4.6.1"
+    "@axiom-lattice/open-mcp-client": "0.1.0",
+    "@axiom-lattice/react-sdk": "4.6.4"
   },
   "scripts": {
     "build": "tsup src/index.ts --format cjs,esm --dts --clean --sourcemap && pnpm copy:embed-assets",
@@ -87,6 +88,11 @@
     "test:watch": "jest --watch",
     "test:coverage": "jest --coverage",
     "test:live:mcp": "tsx scripts/live-mcp-e2e.ts",
-    "test:e2e:mcp-app": "tsx scripts/mcp-app-e2e.ts"
+    "test:e2e:mcp-app": "tsx scripts/mcp-app-e2e.ts",
+    "test:e2e:open-mcp-client": "tsx scripts/open-mcp-client-e2e.ts",
+    "test:e2e:open-mcp-sandbox-token": "tsx scripts/open-mcp-sandbox-token-e2e.ts",
+    "test:e2e:sandbox-open-credential": "tsx scripts/sandbox-open-credential-e2e.ts",
+    "test:e2e:sandbox-open-orchestration": "tsx scripts/sandbox-open-orchestration-e2e.ts",
+    "test:e2e:sandbox-plugin-loop": "tsx scripts/sandbox-plugin-loop-e2e.ts"
   }
 }

package/dist/chunk-52SUWMOX.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/services/open/openCredentialService.ts","../src/services/open/openAuthService.ts","../src/services/open/openAuditService.ts"],"sourcesContent":["/**\n * Unified Open credential resolution: tries stateless tokens first, then the\n * unified API key store. Produces a single OpenCredential shape consumed by\n * the /open/mcp route and provider executors.\n */\n\nimport type {\n  A2AApiKeyStore,\n  OpenGrant,\n  ProjectStore,\n} from \"@axiom-lattice/protocols\";\nimport { effectiveGrants } from \"@axiom-lattice/protocols\";\nimport { verifyOpenToken } from \"./openToken\";\nimport { OpenAuthService, type OpenRequestContext } from \"./openAuthService\";\n\nexport interface OpenCredential {\n  credentialId: string;\n  kind: \"api_key\" | \"sandbox_token\" | \"browser_token\";\n  tenantId: string;\n  projectId: string;\n  workspaceId?: string;\n  /** Only set for sandbox tokens — the self-binding target. */\n  sandboxName?: string;\n  grants: OpenGrant[];\n}\n\nexport class OpenCredentialService {\n  private readonly auth: OpenAuthService;\n\n  constructor(\n    keyStore: A2AApiKeyStore,\n    private readonly projectStore?: ProjectStore,\n  ) {\n    this.auth = new OpenAuthService(keyStore);\n  }\n\n  async resolve(bearer: string | undefined): Promise<OpenCredential | null> {\n    if (!bearer) return null;\n\n    // Stateless tokens first (no store hit, self-contained).\n    const token = verifyOpenToken(bearer);\n    if (token) {\n      if (token.kind === \"sandbox_token\") {\n        return {\n          credentialId: `sandbox:${token.sandboxName}`,\n          kind: \"sandbox_token\",\n          tenantId: token.tenantId,\n          projectId: token.projectId,\n          workspaceId: token.workspaceId,\n          sandboxName: token.sandboxName,\n          grants: token.grants as OpenGrant[],\n        };\n      }\n      return {\n        credentialId: `browser:${token.preview ? \"preview:\" : \"\"}${token.shareId ?? token.tenantId}`,\n        kind: \"browser_token\",\n        tenantId: token.tenantId,\n        projectId: token.projectId,\n        workspaceId: token.workspaceId,\n        grants: token.grants as OpenGrant[],\n      };\n    }\n\n    const ctx: OpenRequestContext | null = await this.auth.resolve(bearer);\n    if (!ctx) return null;\n    // API keys carry tenant+project only; backfill the addressing workspaceId\n    // so sandbox resolution targets the right sandbox (authorization stays\n    // tenant+project — see design §6.2).\n    let workspaceId: string | undefined;\n    if (this.projectStore) {\n      try {\n        const project = await this.projectStore.getProjectById(\n          ctx.tenantId,\n          ctx.projectId,\n        );\n        workspaceId = project?.workspaceId;\n      } catch {\n        // Project lookup unavailable — leave workspaceId unset.\n      }\n    }\n    return {\n      credentialId: ctx.credentialId,\n      kind: \"api_key\",\n      tenantId: ctx.tenantId,\n      projectId: ctx.projectId,\n      workspaceId,\n      grants: ctx.grants,\n    };\n  }\n}\n\nexport { effectiveGrants };\n","/**\n * OpenAuthService — resolves an Open-door bearer credential against the\n * unified API key store and produces the request context (tenant/project\n * always from the stored record, never from the caller).\n *\n * The A2A door keeps its own A2AAuthService (assistantIds semantics, env\n * fallback); this service is store-only and grants-based.\n */\n\nimport type { A2AApiKeyStore, OpenGrant } from \"@axiom-lattice/protocols\";\nimport { effectiveGrants } from \"@axiom-lattice/protocols\";\n\nexport interface OpenRequestContext {\n  credentialId: string;\n  kind: \"api_key\";\n  tenantId: string;\n  projectId: string;\n  grants: OpenGrant[];\n}\n\nexport class OpenAuthService {\n  constructor(private readonly keyStore: A2AApiKeyStore) {}\n\n  async resolve(bearer: string | undefined): Promise<OpenRequestContext | null> {\n    if (!bearer) return null;\n    const record = await this.keyStore.findByKey(bearer);\n    if (!record || !record.enabled) return null;\n    return {\n      credentialId: record.id,\n      kind: \"api_key\",\n      tenantId: record.tenantId,\n      projectId: record.projectId,\n      grants: effectiveGrants(record),\n    };\n  }\n}\n","/**\n * OpenAuditService — records every Open-surface invocation (append-only).\n * Auditing must never break a request, so all failures are swallowed.\n */\n\nimport type { OpenAuditStore, OpenCredentialKind } from \"@axiom-lattice/protocols\";\n\nconst SENSITIVE_KEY = /pass(word)?|secret|token|api[-_]?key|authorization|credential/i;\nconst MAX_ARGS_CHARS = 2000;\n\n/** Recursively mask sensitive fields and truncate oversized payloads. */\nexport function redactArgs(args: unknown, depth = 0): unknown {\n  if (args === null || typeof args !== \"object\") return args;\n  if (depth > 6) return \"[depth-limit]\";\n  if (Array.isArray(args)) return args.map((v) => redactArgs(v, depth + 1));\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args as Record<string, unknown>)) {\n    out[key] = SENSITIVE_KEY.test(key) ? \"[redacted]\" : redactArgs(value, depth + 1);\n  }\n  return out;\n}\n\nfunction truncate(value: unknown): unknown {\n  const s = JSON.stringify(value ?? null);\n  if (s.length <= MAX_ARGS_CHARS) return value ?? null;\n  return `${s.slice(0, MAX_ARGS_CHARS)}...[truncated]`;\n}\n\nexport interface OpenAuditInput {\n  tenantId: string;\n  credentialId: string;\n  credentialKind: OpenCredentialKind;\n  projectId: string;\n  domain: string;\n  action: string;\n  args: unknown;\n  status: \"ok\" | \"error\";\n  errorCode?: string;\n  durationMs: number;\n}\n\nexport class OpenAuditService {\n  constructor(private readonly store: OpenAuditStore) {}\n\n  async record(input: OpenAuditInput): Promise<void> {\n    try {\n      await this.store.append({\n        ...input,\n        args: truncate(redactArgs(input.args)),\n      });\n    } catch {\n      // Never let audit failures affect the request.\n    }\n  }\n}\n"],"mappings":";;;;;;AAYA;AADA,SAAS,mBAAAA,wBAAuB;;;ACDhC,SAAS,uBAAuB;AAUzB,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,UAA0B;AAA1B;AAAA,EAA2B;AAAA,EAExD,MAAM,QAAQ,QAAgE;AAC5E,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,SAAS,MAAM,KAAK,SAAS,UAAU,MAAM;AACnD,QAAI,CAAC,UAAU,CAAC,OAAO,QAAS,QAAO;AACvC,WAAO;AAAA,MACL,cAAc,OAAO;AAAA,MACrB,MAAM;AAAA,MACN,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,MAClB,QAAQ,gBAAgB,MAAM;AAAA,IAChC;AAAA,EACF;AACF;;;ADTO,IAAM,wBAAN,MAA4B;AAAA,EAGjC,YACE,UACiB,cACjB;AADiB;AAEjB,SAAK,OAAO,IAAI,gBAAgB,QAAQ;AAAA,EAC1C;AAAA,EAEA,MAAM,QAAQ,QAA4D;AACxE,QAAI,CAAC,OAAQ,QAAO;AAGpB,UAAM,QAAQ,gBAAgB,MAAM;AACpC,QAAI,OAAO;AACT,UAAI,MAAM,SAAS,iBAAiB;AAClC,eAAO;AAAA,UACL,cAAc,WAAW,MAAM,WAAW;AAAA,UAC1C,MAAM;AAAA,UACN,UAAU,MAAM;AAAA,UAChB,WAAW,MAAM;AAAA,UACjB,aAAa,MAAM;AAAA,UACnB,aAAa,MAAM;AAAA,UACnB,QAAQ,MAAM;AAAA,QAChB;AAAA,MACF;AACA,aAAO;AAAA,QACL,cAAc,WAAW,MAAM,UAAU,aAAa,EAAE,GAAG,MAAM,WAAW,MAAM,QAAQ;AAAA,QAC1F,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,MAAiC,MAAM,KAAK,KAAK,QAAQ,MAAM;AACrE,QAAI,CAAC,IAAK,QAAO;AAIjB,QAAI;AACJ,QAAI,KAAK,cAAc;AACrB,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,aAAa;AAAA,UACtC,IAAI;AAAA,UACJ,IAAI;AAAA,QACN;AACA,sBAAc,SAAS;AAAA,MACzB,QAAQ;AAAA,MAER;AAAA,IACF;AACA,WAAO;AAAA,MACL,cAAc,IAAI;AAAA,MAClB,MAAM;AAAA,MACN,UAAU,IAAI;AAAA,MACd,WAAW,IAAI;AAAA,MACf;AAAA,MACA,QAAQ,IAAI;AAAA,IACd;AAAA,EACF;AACF;;;AElFA,IAAM,gBAAgB;AACtB,IAAM,iBAAiB;AAGhB,SAAS,WAAW,MAAe,QAAQ,GAAY;AAC5D,MAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,IAAI,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC;AACxE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAA+B,GAAG;AAC1E,QAAI,GAAG,IAAI,cAAc,KAAK,GAAG,IAAI,eAAe,WAAW,OAAO,QAAQ,CAAC;AAAA,EACjF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAyB;AACzC,QAAM,IAAI,KAAK,UAAU,SAAS,IAAI;AACtC,MAAI,EAAE,UAAU,eAAgB,QAAO,SAAS;AAChD,SAAO,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC;AACtC;AAeO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,OAAuB;AAAvB;AAAA,EAAwB;AAAA,EAErD,MAAM,OAAO,OAAsC;AACjD,QAAI;AACF,YAAM,KAAK,MAAM,OAAO;AAAA,QACtB,GAAG;AAAA,QACH,MAAM,SAAS,WAAW,MAAM,IAAI,CAAC;AAAA,MACvC,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;","names":["effectiveGrants"]}