@dbx-tools/appkit-lakebox 0.0.0-stage → 0.9.131

package/lib/src/services.d.ts

@@ -0,0 +1,101 @@
+import { type CreateLakeboxServiceRequest, type LakeboxBuiltInServiceName, type LakeboxService, type LakeboxUser } from "@dbx-tools/shared-lakebox";
+import { z } from "zod";
+export declare const LakeboxControllerDefinitionSchema: z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        terminal: "terminal";
+        desktop: "desktop";
+        image: "image";
+    }>;
+    image: z.ZodOptional<z.ZodString>;
+    pull: z.ZodDefault<z.ZodEnum<{
+        missing: "missing";
+        always: "always";
+    }>>;
+    command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    env: z.ZodRecord<z.ZodString, z.ZodString>;
+    workingDirectory: z.ZodOptional<z.ZodString>;
+    mounts: z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        target: z.ZodString;
+        readOnly: z.ZodBoolean;
+    }, z.core.$strict>>;
+    port: z.ZodNumber;
+    readiness: z.ZodEnum<{
+        tcp: "tcp";
+        none: "none";
+    }>;
+    readySeconds: z.ZodNumber;
+    autostart: z.ZodBoolean;
+    route: z.ZodBoolean;
+    stripPrefix: z.ZodBoolean;
+    openPath: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Service definition persisted in the user's Lakebox home. */
+export type LakeboxControllerDefinition = z.output<typeof LakeboxControllerDefinitionSchema>;
+export declare const LakeboxControllerServiceSchema: z.ZodObject<{
+    name: z.ZodString;
+    state: z.ZodEnum<{
+        error: "error";
+        starting: "starting";
+        stopped: "stopped";
+        ready: "ready";
+    }>;
+    definition: z.ZodObject<{
+        name: z.ZodString;
+        kind: z.ZodEnum<{
+            terminal: "terminal";
+            desktop: "desktop";
+            image: "image";
+        }>;
+        image: z.ZodOptional<z.ZodString>;
+        pull: z.ZodDefault<z.ZodEnum<{
+            missing: "missing";
+            always: "always";
+        }>>;
+        command: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        env: z.ZodRecord<z.ZodString, z.ZodString>;
+        workingDirectory: z.ZodOptional<z.ZodString>;
+        mounts: z.ZodArray<z.ZodObject<{
+            source: z.ZodString;
+            target: z.ZodString;
+            readOnly: z.ZodBoolean;
+        }, z.core.$strict>>;
+        port: z.ZodNumber;
+        readiness: z.ZodEnum<{
+            tcp: "tcp";
+            none: "none";
+        }>;
+        readySeconds: z.ZodNumber;
+        autostart: z.ZodBoolean;
+        route: z.ZodBoolean;
+        stripPrefix: z.ZodBoolean;
+        openPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    error: z.ZodOptional<z.ZodString>;
+    log: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+/** One service as reported by the remote controller. */
+export type LakeboxControllerService = z.infer<typeof LakeboxControllerServiceSchema>;
+/** Routing behavior derived from a saved definition. */
+export interface LakeboxServiceRoute {
+    port: number;
+    stripPrefix: boolean;
+    redirectToSlash: boolean;
+    htmlHead?: string;
+}
+/** Builds the package-owned definition for a built-in service. */
+export declare function builtInDefinition(name: LakeboxBuiltInServiceName, user: LakeboxUser): LakeboxControllerDefinition;
+/**
+ * Validates an agent or REST service request and resolves it to a persisted
+ * definition with injected variables and home-relative mounts.
+ */
+export declare function imageDefinition(input: CreateLakeboxServiceRequest, user: LakeboxUser): LakeboxControllerDefinition;
+/** Returns route behavior for a saved definition. */
+export declare function serviceRoute(definition: LakeboxControllerDefinition): LakeboxServiceRoute;
+/** Maps a controller report to the shared service shape. */
+export declare function toLakeboxService(service: LakeboxControllerService, user: LakeboxUser, routePrefix: string): LakeboxService;
+/** Resolve a routed service path against the browser app origin for agent output. */
+export declare function withServiceOrigin(service: LakeboxService, origin?: string): LakeboxService;
+/** Returns the stopped placeholder for a built-in service that has never started. */
+export declare function idleBuiltInService(name: LakeboxBuiltInServiceName, user: LakeboxUser, routePrefix: string): LakeboxService;

package/lib/src/services.js

@@ -0,0 +1,188 @@
+import { createLakeboxServiceRequestSchema, lakeboxServiceKindSchema, lakeboxServiceStateSchema, } from "@dbx-tools/shared-lakebox";
+import { lakeboxServicePath } from "@dbx-tools/shared-lakebox/client";
+import { z } from "zod";
+import { desktopEnvironment, desktopHtmlHead, desktopOpenUrl } from "./desktop.js";
+import { LAKEBOX_RUNTIME_ROOT, lakeboxServicePort } from "./user.js";
+const TTYD_CLIENT_OPTIONS = [
+    "term=xterm-256color",
+    "rendererType=webgl",
+    "cursorStyle=bar",
+    "copyOnSelect=true",
+    "rightClickSelectsWord=true",
+    "disableLeaveAlert=true",
+    "disableResizeOverlay=true",
+];
+export const LakeboxControllerDefinitionSchema = z
+    .object({
+    name: z.string().describe("Service name."),
+    kind: lakeboxServiceKindSchema,
+    image: z.string().optional().describe("OCI image for image services."),
+    pull: z.enum(["missing", "always"]).default("missing").describe("Image pull policy."),
+    command: z
+        .array(z.string())
+        .optional()
+        .describe("Argv; omitted to use the image entrypoint and command."),
+    env: z
+        .record(z.string(), z.string())
+        .describe("Container environment, including injected values."),
+    workingDirectory: z.string().optional().describe("Container working directory."),
+    mounts: z
+        .array(z
+        .object({
+        source: z
+            .string()
+            .startsWith("/")
+            .describe("Absolute host path beneath the user's home."),
+        target: z.string().startsWith("/").describe("Container path."),
+        readOnly: z.boolean().describe("Read-only bind."),
+    })
+        .strict())
+        .describe("Bind mounts."),
+    port: z.number().int().describe("Derived loopback port."),
+    readiness: z.enum(["tcp", "none"]).describe("Readiness check."),
+    readySeconds: z.number().int().positive().describe("Maximum readiness wait."),
+    autostart: z.boolean().describe("Whether the service restarts when the Lakebox starts."),
+    route: z.boolean().describe("Whether AppKit routes the service."),
+    stripPrefix: z.boolean().describe("Whether the route prefix is removed before forwarding."),
+    openPath: z.string().optional().describe("Entry path appended to the route."),
+})
+    .strict()
+    .describe("Service definition persisted in the user's Lakebox home and read by the controller.");
+export const LakeboxControllerServiceSchema = z
+    .object({
+    name: z.string(),
+    state: lakeboxServiceStateSchema,
+    definition: LakeboxControllerDefinitionSchema,
+    error: z.string().optional(),
+    log: z.string().optional(),
+})
+    .passthrough()
+    .describe("One service as reported by the remote controller.");
+/** Builds the package-owned definition for a built-in service. */
+export function builtInDefinition(name, user) {
+    const port = lakeboxServicePort(user.hash, name);
+    const common = {
+        name,
+        kind: name,
+        pull: "missing",
+        mounts: [],
+        port,
+        readiness: "tcp",
+        autostart: false,
+        route: true,
+        stripPrefix: true,
+    };
+    if (name === "terminal") {
+        return {
+            ...common,
+            readySeconds: 60,
+            env: injectedEnvironment(user, name, port),
+            command: [
+                `${LAKEBOX_RUNTIME_ROOT}/bin/ttyd`,
+                "--interface",
+                "127.0.0.1",
+                "--port",
+                String(port),
+                "--writable",
+                ...TTYD_CLIENT_OPTIONS.flatMap((option) => ["--client-option", option]),
+                "/bin/bash",
+                "-l",
+            ],
+        };
+    }
+    return {
+        ...common,
+        readySeconds: 180,
+        env: { ...desktopEnvironment(), ...injectedEnvironment(user, name, port) },
+        command: ["/bin/sh", `${LAKEBOX_RUNTIME_ROOT}/bin/desktop-session`],
+    };
+}
+/**
+ * Validates an agent or REST service request and resolves it to a persisted
+ * definition with injected variables and home-relative mounts.
+ */
+export function imageDefinition(input, user) {
+    const request = createLakeboxServiceRequestSchema.parse(input);
+    const port = lakeboxServicePort(user.hash, request.name);
+    return {
+        name: request.name,
+        kind: "image",
+        image: request.image,
+        pull: request.pull,
+        ...(request.command ? { command: request.command } : {}),
+        env: { ...request.env, ...injectedEnvironment(user, request.name, port, request.route) },
+        ...(request.workingDirectory ? { workingDirectory: request.workingDirectory } : {}),
+        mounts: request.mounts.map((mount) => ({
+            source: `${user.home}/${mount.source.replace(/^\.\/+|\/+$/g, "")}`,
+            target: mount.target,
+            readOnly: mount.readOnly,
+        })),
+        port,
+        readiness: request.route ? "tcp" : "none",
+        readySeconds: 300,
+        autostart: true,
+        route: request.route,
+        stripPrefix: request.stripPrefix,
+        ...(request.openPath ? { openPath: request.openPath.replace(/^\/+/, "") } : {}),
+    };
+}
+/** Returns route behavior for a saved definition. */
+export function serviceRoute(definition) {
+    return {
+        port: definition.port,
+        stripPrefix: definition.stripPrefix,
+        redirectToSlash: true,
+        ...(definition.kind === "desktop" ? { htmlHead: desktopHtmlHead } : {}),
+    };
+}
+/** Maps a controller report to the shared service shape. */
+export function toLakeboxService(service, user, routePrefix) {
+    const { definition } = service;
+    const path = lakeboxServicePath(routePrefix, user.hash, definition.name);
+    return {
+        name: definition.name,
+        kind: definition.kind,
+        ...(definition.image ? { image: definition.image } : {}),
+        ...(definition.openPath ? { openPath: definition.openPath } : {}),
+        state: service.state,
+        port: definition.port,
+        route: definition.route,
+        path,
+        ...(definition.route ? { openUrl: openUrl(definition, path) } : {}),
+        ...(service.error ? { error: service.error } : {}),
+        ...(service.log !== undefined ? { log: service.log } : {}),
+    };
+}
+/** Resolve a routed service path against the browser app origin for agent output. */
+export function withServiceOrigin(service, origin) {
+    if (!service.openUrl || !origin)
+        return service;
+    try {
+        const base = new URL(origin);
+        if (base.protocol !== "http:" && base.protocol !== "https:")
+            return service;
+        return { ...service, openUrl: new URL(service.openUrl, base).href };
+    }
+    catch {
+        return service;
+    }
+}
+/** Returns the stopped placeholder for a built-in service that has never started. */
+export function idleBuiltInService(name, user, routePrefix) {
+    return toLakeboxService({ name, state: "stopped", definition: builtInDefinition(name, user) }, user, routePrefix);
+}
+function openUrl(definition, path) {
+    if (definition.kind === "desktop")
+        return desktopOpenUrl(path);
+    return `${path}/${definition.openPath ?? ""}`;
+}
+function injectedEnvironment(user, name, port, route = true) {
+    const value = String(port);
+    return {
+        SERVICE_NAME: name,
+        SERVICE_PATH: route ? `${user.routePrefix}/${name}` : "",
+        SERVICE_PORT: value,
+        PORT: value,
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/skills.d.ts

@@ -0,0 +1,5 @@
+import type { LocalSkillDirectoryMount } from "@dbx-tools/appkit-mastra";
+/** Default agent-workspace path for packaged Lakebox service recipes. */
+export declare const LAKEBOX_SKILLS_MOUNT = "/.dbx-tools/skills";
+/** Returns the packaged Lakebox recipe tree as a Mastra local skill mount. */
+export declare function lakeboxSkillMounts(): LocalSkillDirectoryMount[];

package/lib/src/skills.js

@@ -0,0 +1,21 @@
+import { existsSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+/** Default agent-workspace path for packaged Lakebox service recipes. */
+export const LAKEBOX_SKILLS_MOUNT = "/.dbx-tools/skills";
+/** Returns the packaged Lakebox recipe tree as a Mastra local skill mount. */
+export function lakeboxSkillMounts() {
+    return [{ root: lakeboxSkillsRoot(), mountPath: LAKEBOX_SKILLS_MOUNT }];
+}
+function lakeboxSkillsRoot() {
+    const moduleDirectory = dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+        resolve(moduleDirectory, "../skills"),
+        resolve(moduleDirectory, "../../skills"),
+    ];
+    const root = candidates.find((candidate) => existsSync(candidate));
+    if (!root)
+        throw new Error("Packaged Lakebox skills are unavailable");
+    return root;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/user.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Deterministic Lakebox user and service-port derivation.
+ *
+ * One FNV-1a hash of the authenticated identity is the only routing key. It
+ * selects the Linux account, UID, persistent home, AppKit route segment, and,
+ * with a service name, the loopback service port. Nothing here is persisted:
+ * every caller recomputes the same values, and collisions fail closed where
+ * they are observed.
+ *
+ * @module
+ */
+import type { LakeboxUser } from "@dbx-tools/shared-lakebox";
+/** Platform account that owns the persistent volume and the SSH session. */
+export declare const LAKEBOX_AGENT_USER = "sandbox-agent";
+/** Persistent home mounted by the platform. Only this path survives a restart. */
+export declare const LAKEBOX_AGENT_HOME = "/home/sandbox-agent";
+/** Root of package-owned persistent state. */
+export declare const LAKEBOX_STATE_ROOT = "/home/sandbox-agent/.dbx-tools";
+/** Persistent backing directories for Lakebox user homes. */
+export declare const LAKEBOX_USERS_ROOT = "/home/sandbox-agent/.dbx-tools/users";
+/** Shared read-only runtime binaries, such as the container bundle and ttyd. */
+export declare const LAKEBOX_RUNTIME_ROOT = "/home/sandbox-agent/.dbx-tools/runtime";
+/** Per-boot runtime state root; reset with the root filesystem. */
+export declare const LAKEBOX_RUN_ROOT = "/run/lakebox";
+/** First derived Linux UID. The persistent idmapped volume stores UIDs below 65536. */
+export declare const LAKEBOX_UID_MIN = 20000;
+/** Number of derivable UIDs. */
+export declare const LAKEBOX_UID_COUNT = 40000;
+/** First derived service port. Platform listeners stay below this value. */
+export declare const LAKEBOX_PORT_MIN = 20000;
+/** Number of derivable service ports; the kernel ephemeral range starts at 32768. */
+export declare const LAKEBOX_PORT_COUNT = 12000;
+/** Normalizes an authenticated identity before hashing. */
+export declare function normalizeLakeboxIdentity(identity: string): string;
+/**
+ * Derives the Lakebox account for one authenticated identity.
+ *
+ * @param routePrefix - AppKit root for user service routes.
+ */
+export declare function lakeboxUser(identity: string, routePrefix: string): LakeboxUser;
+/** Returns the persistent backing directory for a user hash. */
+export declare function lakeboxPersistentHome(userHash: string): string;
+/** Derives the loopback port for one user's service. */
+export declare function lakeboxServicePort(userHash: string, serviceName: string): number;
+/** Returns whether a route segment has the shape of a user hash. */
+export declare function isLakeboxUserHash(value: string): boolean;

package/lib/src/user.js

@@ -0,0 +1,76 @@
+/**
+ * Deterministic Lakebox user and service-port derivation.
+ *
+ * One FNV-1a hash of the authenticated identity is the only routing key. It
+ * selects the Linux account, UID, persistent home, AppKit route segment, and,
+ * with a service name, the loopback service port. Nothing here is persisted:
+ * every caller recomputes the same values, and collisions fail closed where
+ * they are observed.
+ *
+ * @module
+ */
+import { hash } from "@dbx-tools/shared-core";
+/** Platform account that owns the persistent volume and the SSH session. */
+export const LAKEBOX_AGENT_USER = "sandbox-agent";
+/** Persistent home mounted by the platform. Only this path survives a restart. */
+export const LAKEBOX_AGENT_HOME = `/home/${LAKEBOX_AGENT_USER}`;
+/** Root of package-owned persistent state. */
+export const LAKEBOX_STATE_ROOT = `${LAKEBOX_AGENT_HOME}/.dbx-tools`;
+/** Persistent backing directories for Lakebox user homes. */
+export const LAKEBOX_USERS_ROOT = `${LAKEBOX_STATE_ROOT}/users`;
+/** Shared read-only runtime binaries, such as the container bundle and ttyd. */
+export const LAKEBOX_RUNTIME_ROOT = `${LAKEBOX_STATE_ROOT}/runtime`;
+/** Per-boot runtime state root; reset with the root filesystem. */
+export const LAKEBOX_RUN_ROOT = "/run/lakebox";
+/** First derived Linux UID. The persistent idmapped volume stores UIDs below 65536. */
+export const LAKEBOX_UID_MIN = 20_000;
+/** Number of derivable UIDs. */
+export const LAKEBOX_UID_COUNT = 40_000;
+/** First derived service port. Platform listeners stay below this value. */
+export const LAKEBOX_PORT_MIN = 20_000;
+/** Number of derivable service ports; the kernel ephemeral range starts at 32768. */
+export const LAKEBOX_PORT_COUNT = 12_000;
+const USER_PREFIX = "lakebox-";
+const HASH_ALPHABET = "0123456789abcdefghijklmnopqrstuv";
+/** Normalizes an authenticated identity before hashing. */
+export function normalizeLakeboxIdentity(identity) {
+    const normalized = identity.trim().toLowerCase();
+    if (!normalized)
+        throw new Error("Lakebox users require an authenticated identity");
+    return normalized;
+}
+/**
+ * Derives the Lakebox account for one authenticated identity.
+ *
+ * @param routePrefix - AppKit root for user service routes.
+ */
+export function lakeboxUser(identity, routePrefix) {
+    const userHash = digestText("lakebox-user", normalizeLakeboxIdentity(identity));
+    const name = `${USER_PREFIX}${userHash}`;
+    return {
+        hash: userHash,
+        name,
+        uid: LAKEBOX_UID_MIN + (digestValue("lakebox-uid", userHash) % LAKEBOX_UID_COUNT),
+        home: `/home/${name}`,
+        routePrefix: `${routePrefix.replace(/\/+$/, "")}/${userHash}`,
+    };
+}
+/** Returns the persistent backing directory for a user hash. */
+export function lakeboxPersistentHome(userHash) {
+    return `${LAKEBOX_USERS_ROOT}/${userHash}`;
+}
+/** Derives the loopback port for one user's service. */
+export function lakeboxServicePort(userHash, serviceName) {
+    return (LAKEBOX_PORT_MIN + (digestValue("lakebox-port", userHash, serviceName) % LAKEBOX_PORT_COUNT));
+}
+/** Returns whether a route segment has the shape of a user hash. */
+export function isLakeboxUserHash(value) {
+    return /^[0-9a-v]{7}$/.test(value);
+}
+function digestText(...values) {
+    return hash.fnvHashWithOptions({ length: 7, alphabet: HASH_ALPHABET }, ...values);
+}
+function digestValue(...values) {
+    return Number.parseInt(digestText(...values), 32);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/src/workspace.d.ts

@@ -0,0 +1,43 @@
+import { MastraSandbox, type CommandResult, type ExecuteCommandOptions, type SandboxInfo, type SandboxStartOptions, type SandboxStartResult, type WorkspaceSandbox, type WorkspaceSandboxResolver } from "@mastra/core/workspace";
+import type { LakeboxRuntime } from "./runtime.ts";
+/** Options for the Lakebox-backed Mastra workspace sandbox. */
+export interface LakeboxWorkspaceSandboxOptions {
+    /** Optional display name presented by Mastra instead of Lakebox. */
+    displayName?: string;
+}
+/**
+ * Mastra workspace sandbox backed by the app Lakebox.
+ *
+ * Commands run as the requesting user's Lakebox account through the shared
+ * {@link LakeboxRuntime}, so identity, credential scrubbing, and transport
+ * policy match the AppKit plugin tools and routes.
+ */
+export declare class LakeboxWorkspaceSandbox extends MastraSandbox {
+    readonly id: string;
+    readonly name: string;
+    private readonly runtime;
+    private readonly identity;
+    readonly provider = "appkit-lakebox";
+    status: WorkspaceSandbox["status"];
+    constructor(id: string, name: string, runtime: LakeboxRuntime, identity: string);
+    /** Creates or starts the app Lakebox. */
+    start(options?: SandboxStartOptions): Promise<SandboxStartResult>;
+    /** Leaves the shared Lakebox running; its platform idle timeout stops it. */
+    stop(): Promise<void>;
+    /** Releases this handle without changing the shared Lakebox. */
+    destroy(): Promise<void>;
+    /** Mastra snapshot hook. Lakeboxes do not expose snapshot operations. */
+    snapshot(): Promise<void>;
+    /** Runs a command as the current user's Lakebox account. */
+    executeCommand(command: string, args?: string[], options?: ExecuteCommandOptions): Promise<CommandResult>;
+    /** Returns the current Lakebox status in Mastra's sandbox shape. */
+    getInfo(): Promise<SandboxInfo>;
+    /** Returns agent instructions for services, routes, and command execution. */
+    getInstructions(): string;
+}
+/**
+ * Creates a request-scoped Mastra workspace resolver for the app Lakebox.
+ *
+ * Resolution never creates compute; the first command or service does.
+ */
+export declare function lakeboxWorkspaceSandbox(runtime: LakeboxRuntime, options?: LakeboxWorkspaceSandboxOptions): WorkspaceSandboxResolver;