@dbx-tools/appkit-lakebox 0.0.0-stage → 0.9.131

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,105 @@
-# Temporary Holding Version
+# @dbx-tools/appkit-lakebox
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Give every user of a Databricks App a terminal, a desktop, and long-running
+services in one shared, lazily created Databricks Lakebox.
+
+- One Lakebox per app, created on first use by the app service principal and
+  stopped by the platform after its idle timeout. Databricks assigns the
+  machine name; users see only the Lakebox product label.
+- Each signed-in user gets a locked, non-sudo Linux account with a persistent
+  home. Other users cannot read the home or reach the user's service ports.
+- Services run OCI images detached with direct crun. Terminal and desktop are
+  built-in services. Saved services restart when the Lakebox starts.
+- Every service is reachable at `/lakebox/<user hash>/<service>` behind the
+  app's authentication.
+- Agent tools, a Mastra workspace sandbox, and live machine metrics.
+
+## Register the plugin
+
+```ts
+import { createApp, lakebase, server } from "@databricks/appkit";
+import { lakebox } from "@dbx-tools/appkit-lakebox";
+
+await createApp({ plugins: [server(), lakebase(), lakebox({ idleTimeoutSeconds: 1_800 })] });
+```
+
+Lakebase persists the Databricks-assigned Lakebox ID, serializes first creation
+across app replicas, and retains last-known service definitions while the
+machine is stopped. The registry adopts an existing
+`dbx-lakebox-<application>` machine once, but new machines use the name
+Databricks assigns. Startup also deletes legacy per-user
+`dbx-<adjective>-<animal>-<nonce>` Lakeboxes and drops legacy Sandbox ownership
+schemas; no user data is migrated between machines.
+
+To share the runtime with Mastra, create it once:
+
+```ts
+import { lakebox, LakeboxRuntime } from "@dbx-tools/appkit-lakebox";
+import { resolveLakeboxPluginConfig } from "@dbx-tools/appkit-lakebox/config";
+import { lakeboxSkillMounts } from "@dbx-tools/appkit-lakebox/skills";
+import { lakeboxWorkspaceSandbox } from "@dbx-tools/appkit-lakebox/workspace";
+
+const runtime = new LakeboxRuntime(resolveLakeboxPluginConfig());
+
+lakebox({ runtime });
+mastra({ sandbox: lakeboxWorkspaceSandbox(runtime), localSkillMounts: lakeboxSkillMounts() });
+```
+
+## Create a service
+
+Agents call `create_lakebox_service`; REST clients `POST /api/lakebox/services`:
+
+```json
+{
+  "name": "hello",
+  "image": "docker.io/library/python:3.12-alpine",
+  "command": ["python", "-m", "http.server", "--bind", "127.0.0.1"],
+  "mounts": [{ "source": "data", "target": "/data" }]
+}
+```
+
+The call returns after the service listens. The runtime injects
+`SERVICE_NAME`, `SERVICE_PATH`, `SERVICE_PORT`, and `PORT`; routed services must
+listen on `127.0.0.1:$SERVICE_PORT`. Mount sources are relative to the user's
+home.
+
+This is a constrained container API, not the Docker CLI. There is no daemon,
+port publishing, privileged mode, device access, or bridge network. A Lakebox
+stop and start restarts services from their saved definitions; process memory
+does not resume.
+
+## Agent tools
+
+| Tool | Effect |
+| --- | --- |
+| `get_lakebox` | Status, the current user's account, and services. Never creates the Lakebox. |
+| `execute_lakebox_command` | Run a command as the user's account. |
+| `list_lakebox_services` | List the user's services. |
+| `create_lakebox_service` | Create or replace an image service and wait until ready. |
+| `start_lakebox_service`, `stop_lakebox_service` | Start a saved service, `terminal`, or `desktop`; stop one. |
+| `remove_lakebox_service` | Delete a saved service. Requires approval. |
+| `get_lakebox_service_logs` | Read a bounded service log. |
+
+## Configuration
+
+| Option | Default | Description |
+| --- | --- | --- |
+| `application` | `DBX_TOOLS_LAKEBOX_APPLICATION`, `DATABRICKS_APP_NAME`, or the project directory | Stable key for the persisted Lakebox resource ID. |
+| `idleTimeoutSeconds` | `3600` | Platform idle timeout, 60 to 86400 seconds. |
+| `auto` | `true` | Create or start the Lakebox on demand. |
+| `routePrefix` | `/lakebox` | AppKit root for service routes. |
+| `metricsIntervalSeconds` | `5` | Sample interval while a client watches metrics. |
+| `sshTransport` | `auto` | `auto`, `openssh`, or `ssh2`. |
+
+## Interactive testing
+
+`test/cli.ts` runs the real runtime against a workspace profile as any user:
+
+```sh
+bun packages/js/node/appkit-lakebox/test/cli.ts --profile <profile> --user a@example.com status
+bun packages/js/node/appkit-lakebox/test/cli.ts --profile <profile> --user b@example.com exec id
+bun packages/js/node/appkit-lakebox/test/cli.ts --profile <profile> --user a@example.com serve
+```
+
+`serve` starts that user's terminal and desktop and proxies their routes on
+`http://127.0.0.1:8787`.

package/index.ts

@@ -0,0 +1,32 @@
+// GENERATED by projen watch - DO NOT EDIT.
+// Regenerated from the exporting modules in ./src.
+// Hand edits are overwritten on the next watch; this file is read-only.
+
+export const PACKAGE_IDENTIFIER = "@dbx-tools/appkit-lakebox";
+export const PACKAGE_VERSION = "0.9.131";
+export * as config from "./src/config.ts";
+export * as desktop from "./src/desktop.ts";
+export * as metrics from "./src/metrics.ts";
+export * as plugin from "./src/plugin.ts";
+export * as routes from "./src/routes.ts";
+export * as runtime from "./src/runtime.ts";
+export * as services from "./src/services.ts";
+export * as skills from "./src/skills.ts";
+export * as user from "./src/user.ts";
+export * as workspace from "./src/workspace.ts";
+export { LakeboxPluginConfigSchema } from "./src/config.ts";
+export type { SerializableLakeboxPluginConfig, ResolvedLakeboxPluginConfig, LakeboxPluginConfig } from "./src/config.ts";
+export { desktopHtmlHead } from "./src/desktop.ts";
+export { LakeboxMetrics } from "./src/metrics.ts";
+export type { LakeboxCounters, LakeboxMetricsEvents } from "./src/metrics.ts";
+export { AppKitLakeboxPlugin, lakebox } from "./src/plugin.ts";
+export { LakeboxRouteRegistry } from "./src/routes.ts";
+export type { LakeboxRouteResolution, LakeboxRouteResolver } from "./src/routes.ts";
+export { LakeboxRuntime } from "./src/runtime.ts";
+export type { LakeboxIdentityResolver, LakeboxLegacyPool } from "./src/runtime.ts";
+export { LakeboxControllerDefinitionSchema, LakeboxControllerServiceSchema } from "./src/services.ts";
+export type { LakeboxControllerDefinition, LakeboxControllerService, LakeboxServiceRoute } from "./src/services.ts";
+export { LAKEBOX_SKILLS_MOUNT } from "./src/skills.ts";
+export { LAKEBOX_AGENT_USER, LAKEBOX_AGENT_HOME, LAKEBOX_STATE_ROOT, LAKEBOX_USERS_ROOT, LAKEBOX_RUNTIME_ROOT, LAKEBOX_RUN_ROOT, LAKEBOX_UID_MIN, LAKEBOX_UID_COUNT, LAKEBOX_PORT_MIN, LAKEBOX_PORT_COUNT } from "./src/user.ts";
+export { LakeboxWorkspaceSandbox } from "./src/workspace.ts";
+export type { LakeboxWorkspaceSandboxOptions } from "./src/workspace.ts";

package/lib/index.d.ts

@@ -0,0 +1,28 @@
+export declare const PACKAGE_IDENTIFIER = "@dbx-tools/appkit-lakebox";
+export declare const PACKAGE_VERSION = "0.9.131";
+export * as config from "./src/config.ts";
+export * as desktop from "./src/desktop.ts";
+export * as metrics from "./src/metrics.ts";
+export * as plugin from "./src/plugin.ts";
+export * as routes from "./src/routes.ts";
+export * as runtime from "./src/runtime.ts";
+export * as services from "./src/services.ts";
+export * as skills from "./src/skills.ts";
+export * as user from "./src/user.ts";
+export * as workspace from "./src/workspace.ts";
+export { LakeboxPluginConfigSchema } from "./src/config.ts";
+export type { SerializableLakeboxPluginConfig, ResolvedLakeboxPluginConfig, LakeboxPluginConfig } from "./src/config.ts";
+export { desktopHtmlHead } from "./src/desktop.ts";
+export { LakeboxMetrics } from "./src/metrics.ts";
+export type { LakeboxCounters, LakeboxMetricsEvents } from "./src/metrics.ts";
+export { AppKitLakeboxPlugin, lakebox } from "./src/plugin.ts";
+export { LakeboxRouteRegistry } from "./src/routes.ts";
+export type { LakeboxRouteResolution, LakeboxRouteResolver } from "./src/routes.ts";
+export { LakeboxRuntime } from "./src/runtime.ts";
+export type { LakeboxIdentityResolver, LakeboxLegacyPool } from "./src/runtime.ts";
+export { LakeboxControllerDefinitionSchema, LakeboxControllerServiceSchema } from "./src/services.ts";
+export type { LakeboxControllerDefinition, LakeboxControllerService, LakeboxServiceRoute } from "./src/services.ts";
+export { LAKEBOX_SKILLS_MOUNT } from "./src/skills.ts";
+export { LAKEBOX_AGENT_USER, LAKEBOX_AGENT_HOME, LAKEBOX_STATE_ROOT, LAKEBOX_USERS_ROOT, LAKEBOX_RUNTIME_ROOT, LAKEBOX_RUN_ROOT, LAKEBOX_UID_MIN, LAKEBOX_UID_COUNT, LAKEBOX_PORT_MIN, LAKEBOX_PORT_COUNT } from "./src/user.ts";
+export { LakeboxWorkspaceSandbox } from "./src/workspace.ts";
+export type { LakeboxWorkspaceSandboxOptions } from "./src/workspace.ts";

package/lib/index.js

@@ -0,0 +1,26 @@
+// GENERATED by projen watch - DO NOT EDIT.
+// Regenerated from the exporting modules in ./src.
+// Hand edits are overwritten on the next watch; this file is read-only.
+export const PACKAGE_IDENTIFIER = "@dbx-tools/appkit-lakebox";
+export const PACKAGE_VERSION = "0.9.131";
+export * as config from "./src/config.js";
+export * as desktop from "./src/desktop.js";
+export * as metrics from "./src/metrics.js";
+export * as plugin from "./src/plugin.js";
+export * as routes from "./src/routes.js";
+export * as runtime from "./src/runtime.js";
+export * as services from "./src/services.js";
+export * as skills from "./src/skills.js";
+export * as user from "./src/user.js";
+export * as workspace from "./src/workspace.js";
+export { LakeboxPluginConfigSchema } from "./src/config.js";
+export { desktopHtmlHead } from "./src/desktop.js";
+export { LakeboxMetrics } from "./src/metrics.js";
+export { AppKitLakeboxPlugin, lakebox } from "./src/plugin.js";
+export { LakeboxRouteRegistry } from "./src/routes.js";
+export { LakeboxRuntime } from "./src/runtime.js";
+export { LakeboxControllerDefinitionSchema, LakeboxControllerServiceSchema } from "./src/services.js";
+export { LAKEBOX_SKILLS_MOUNT } from "./src/skills.js";
+export { LAKEBOX_AGENT_USER, LAKEBOX_AGENT_HOME, LAKEBOX_STATE_ROOT, LAKEBOX_USERS_ROOT, LAKEBOX_RUNTIME_ROOT, LAKEBOX_RUN_ROOT, LAKEBOX_UID_MIN, LAKEBOX_UID_COUNT, LAKEBOX_PORT_MIN, LAKEBOX_PORT_COUNT } from "./src/user.js";
+export { LakeboxWorkspaceSandbox } from "./src/workspace.js";
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/_package.d.ts

@@ -0,0 +1,2 @@
+/** Read one source or packaged resource from the appkit-lakebox package root. */
+export declare function readPackageResource(...segments: string[]): string;

package/lib/src/_package.js

@@ -0,0 +1,11 @@
+import { readFileSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+/** Read one source or packaged resource from the appkit-lakebox package root. */
+export function readPackageResource(...segments) {
+    const moduleDirectory = dirname(fileURLToPath(import.meta.url));
+    const parent = dirname(moduleDirectory);
+    const packageRoot = basename(parent) === "lib" ? dirname(parent) : parent;
+    return readFileSync(join(packageRoot, ...segments), "utf8");
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/_resource-registry.d.ts

@@ -0,0 +1,41 @@
+import { type LakeboxEntry } from "@dbx-tools/lakebox/rest";
+import { type PgPoolLike } from "@dbx-tools/postgres";
+interface ResourceCache {
+    generateKey(parts: (string | number | object)[], userKey: string): string;
+    get<T>(key: string): Promise<T | null>;
+    set<T>(key: string, value: T, options?: {
+        ttl?: number;
+    }): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+/** Lakebox client capabilities required by the persistent resource registry. */
+export interface LakeboxResourceClient {
+    workspaceScope(): Promise<string>;
+    list(signal?: AbortSignal): Promise<LakeboxEntry[]>;
+    get(id: string, signal?: AbortSignal): Promise<LakeboxEntry>;
+    create(signal?: AbortSignal): Promise<LakeboxEntry>;
+    delete(id: string, signal?: AbortSignal): Promise<void>;
+}
+/**
+ * Persists the Databricks-assigned Lakebox ID and serializes first creation
+ * across app replicas with the Lakebase service-principal pool.
+ */
+export declare class LakeboxResourceRegistry {
+    private readonly application;
+    private readonly pool?;
+    private readonly cache;
+    private readonly pending;
+    private readonly legacyChecked;
+    constructor(application: string, pool?: PgPoolLike | undefined, cache?: () => ResourceCache);
+    /** Resolves the current app Lakebox without creating one. */
+    read(client: LakeboxResourceClient, signal?: AbortSignal): Promise<LakeboxEntry | undefined>;
+    /** Returns the current app Lakebox or creates one with a Databricks-assigned name. */
+    getOrCreate(client: LakeboxResourceClient, signal?: AbortSignal): Promise<LakeboxEntry>;
+    /** Clears the persisted pointer after the managed Lakebox is deleted. */
+    clear(client: LakeboxResourceClient): Promise<void>;
+    private resolve;
+    private write;
+    private key;
+    private withLock;
+}
+export {};

package/lib/src/_resource-registry.js

@@ -0,0 +1,128 @@
+import { CacheManager } from "@databricks/appkit";
+import { LakeboxApiError } from "@dbx-tools/lakebox/rest";
+import { withAdvisoryLock } from "@dbx-tools/postgres";
+import { log } from "@dbx-tools/shared-core";
+import { z } from "zod";
+const CACHE_NAMESPACE = "appkit-lakebox:resource";
+const RESOURCE_TTL_SECONDS = 365 * 24 * 60 * 60;
+const LEGACY_PREFIX = "dbx-lakebox-";
+const logger = log.logger("appkit-lakebox:resource");
+const LakeboxResourceReferenceSchema = z
+    .object({ sandboxId: z.string().min(1).describe("Databricks Lakebox identifier.") })
+    .strict()
+    .describe("Persistent pointer to the Databricks-assigned app Lakebox.");
+/**
+ * Persists the Databricks-assigned Lakebox ID and serializes first creation
+ * across app replicas with the Lakebase service-principal pool.
+ */
+export class LakeboxResourceRegistry {
+    application;
+    pool;
+    cache;
+    pending = new Map();
+    legacyChecked = new Set();
+    constructor(application, pool, cache = () => CacheManager.getInstanceSync()) {
+        this.application = application;
+        this.pool = pool;
+        this.cache = cache;
+    }
+    /** Resolves the current app Lakebox without creating one. */
+    async read(client, signal) {
+        const scope = await client.workspaceScope();
+        return this.resolve(client, scope, signal);
+    }
+    /** Returns the current app Lakebox or creates one with a Databricks-assigned name. */
+    async getOrCreate(client, signal) {
+        const scope = await client.workspaceScope();
+        const current = this.pending.get(scope);
+        if (current)
+            return current;
+        const pending = this.withLock(scope, async () => {
+            const existing = await this.resolve(client, scope, signal);
+            if (existing)
+                return existing;
+            const created = await client.create(signal);
+            try {
+                await this.write(scope, created.sandboxId);
+            }
+            catch (error) {
+                await client.delete(created.sandboxId, signal).catch(() => undefined);
+                throw error;
+            }
+            logger.info("created app Lakebox", { id: created.sandboxId });
+            return created;
+        }).finally(() => this.pending.delete(scope));
+        this.pending.set(scope, pending);
+        return pending;
+    }
+    /** Clears the persisted pointer after the managed Lakebox is deleted. */
+    async clear(client) {
+        const scope = await client.workspaceScope();
+        await this.cache().delete(this.key(scope));
+        this.legacyChecked.add(scope);
+    }
+    async resolve(client, scope, signal) {
+        const key = this.key(scope);
+        const value = await this.cache().get(key);
+        const parsed = LakeboxResourceReferenceSchema.safeParse(value);
+        if (value !== null && !parsed.success) {
+            logger.warn("discarded invalid cached Lakebox resource reference", {
+                application: this.application,
+            });
+            await this.cache().delete(key);
+        }
+        if (parsed.success) {
+            try {
+                return await client.get(parsed.data.sandboxId, signal);
+            }
+            catch (error) {
+                if (!(error instanceof LakeboxApiError) || error.status !== 404)
+                    throw error;
+                await this.cache().delete(key);
+                this.legacyChecked.add(scope);
+                return undefined;
+            }
+        }
+        if (this.legacyChecked.has(scope))
+            return undefined;
+        this.legacyChecked.add(scope);
+        const legacy = selectLegacyLakebox(await client.list(signal), legacyLakeboxName(this.application));
+        if (!legacy)
+            return undefined;
+        await this.write(scope, legacy.sandboxId);
+        logger.info("adopted legacy named app Lakebox", { id: legacy.sandboxId });
+        return legacy;
+    }
+    async write(scope, sandboxId) {
+        await this.cache().set(this.key(scope), LakeboxResourceReferenceSchema.parse({ sandboxId }), {
+            ttl: RESOURCE_TTL_SECONDS,
+        });
+    }
+    key(scope) {
+        return this.cache().generateKey([CACHE_NAMESPACE, this.application], scope);
+    }
+    withLock(scope, fn) {
+        if (!this.pool)
+            return fn();
+        return withAdvisoryLock(this.pool, [CACHE_NAMESPACE, this.application, scope], fn);
+    }
+}
+function legacyLakeboxName(application) {
+    const slug = application
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-|-$/g, "")
+        .slice(0, 200);
+    if (!slug)
+        throw new Error("A managed Lakebox requires a non-empty application key");
+    return `${LEGACY_PREFIX}${slug}`;
+}
+function selectLegacyLakebox(entries, name) {
+    return entries
+        .filter((entry) => entry.name === name)
+        .sort((left, right) => (Date.parse(left.createTime ?? "") || Number.MAX_SAFE_INTEGER) -
+        (Date.parse(right.createTime ?? "") || Number.MAX_SAFE_INTEGER) ||
+        left.sandboxId.localeCompare(right.sandboxId))[0];
+}
+//# sourceMappingURL=data:application/json;base64,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