@axiom-lattice/local-stores 3.1.21 → 3.1.23

package/dist/index.mjs

@@ -2420,8 +2420,328 @@ function encryptEnvInConfig(config) {
   return { config: configCopy, isEnvEncrypted };
 }
 
-// src/stores/LocalWorkflowTrackingStore.ts
+// src/stores/LocalModelProviderStore.ts
+import { encrypt as encrypt3, decrypt as decrypt3 } from "@axiom-lattice/core";
 var DDL12 = `
+CREATE TABLE IF NOT EXISTS lt_model_providers (
+  id TEXT NOT NULL,
+  tenant_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  display_name TEXT,
+  protocol TEXT NOT NULL,
+  api_style TEXT NOT NULL DEFAULT 'chat-completions',
+  llm_provider TEXT NOT NULL,
+  base_url TEXT NOT NULL,
+  api_key_enc TEXT,
+  api_key_hint TEXT,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  status TEXT NOT NULL DEFAULT 'unknown',
+  last_error TEXT,
+  last_discovered_at TEXT,
+  created_by TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (tenant_id, id)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_lt_model_providers_name
+  ON lt_model_providers(tenant_id, name);
+
+CREATE TABLE IF NOT EXISTS lt_model_provider_models (
+  id TEXT NOT NULL,
+  tenant_id TEXT NOT NULL,
+  provider_id TEXT NOT NULL,
+  model_id TEXT NOT NULL,
+  display_name TEXT,
+  owned_by TEXT,
+  upstream_created TEXT,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  stale INTEGER NOT NULL DEFAULT 0,
+  raw TEXT,
+  discovered_at TEXT NOT NULL,
+  PRIMARY KEY (tenant_id, provider_id, model_id)
+);
+CREATE INDEX IF NOT EXISTS idx_lt_model_provider_models_tenant
+  ON lt_model_provider_models(tenant_id, model_id);
+`;
+var LocalModelProviderStore = class {
+  constructor(db) {
+    this.db = db;
+    ensureTable(db, DDL12);
+    this.ensureColumn(
+      "lt_model_providers",
+      "api_style",
+      "api_style TEXT NOT NULL DEFAULT 'chat-completions'"
+    );
+    this.ensureColumn(
+      "lt_model_provider_models",
+      "stale",
+      "stale INTEGER NOT NULL DEFAULT 0"
+    );
+  }
+  /** Add a column if it does not exist (SQLite version compatible). */
+  ensureColumn(table, column, ddl2) {
+    const cols = this.db.prepare(`PRAGMA table_info(${table})`).all();
+    if (!cols.some((c) => c.name === column)) {
+      this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${ddl2}`);
+    }
+  }
+  async listProviders(tenantId) {
+    const rows2 = this.db.prepare(
+      `SELECT * FROM lt_model_providers WHERE tenant_id = ? ORDER BY created_at DESC`
+    ).all(tenantId);
+    return rows2.map((row) => mapRowToEntry4(row));
+  }
+  async getProviderById(tenantId, id) {
+    const row = this.db.prepare(
+      `SELECT * FROM lt_model_providers WHERE tenant_id = ? AND id = ?`
+    ).get(tenantId, id);
+    return row ? mapRowToEntry4(row) : null;
+  }
+  async getProviderByName(tenantId, name) {
+    const row = this.db.prepare(
+      `SELECT * FROM lt_model_providers WHERE tenant_id = ? AND name = ?`
+    ).get(tenantId, name);
+    return row ? mapRowToEntry4(row) : null;
+  }
+  async createProvider(tenantId, id, data) {
+    const now = nowISO();
+    this.db.prepare(
+      `INSERT INTO lt_model_providers (
+           id, tenant_id, name, display_name, protocol, api_style, llm_provider, base_url,
+           api_key_enc, api_key_hint, enabled, status, created_at, updated_at
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'unknown', ?, ?)
+         ON CONFLICT (tenant_id, id) DO UPDATE SET
+           name = excluded.name,
+           display_name = excluded.display_name,
+           protocol = excluded.protocol,
+           api_style = excluded.api_style,
+           llm_provider = excluded.llm_provider,
+           base_url = excluded.base_url,
+           api_key_enc = excluded.api_key_enc,
+           api_key_hint = excluded.api_key_hint,
+           enabled = excluded.enabled,
+           updated_at = excluded.updated_at`
+    ).run(
+      id,
+      tenantId,
+      data.name,
+      data.displayName || null,
+      data.protocol,
+      data.apiStyle ?? "chat-completions",
+      // Phase 1 pins the LLM provider (ADR-138 decision 7b)
+      "openai",
+      data.baseURL,
+      data.apiKey ? encrypt3(data.apiKey) : null,
+      data.apiKey ? data.apiKey.slice(-4) : null,
+      data.enabled === false ? 0 : 1,
+      now,
+      now
+    );
+    const created = await this.getProviderById(tenantId, id);
+    if (!created) {
+      throw new Error("Failed to create model provider");
+    }
+    return created;
+  }
+  async updateProvider(tenantId, id, updates) {
+    const existing = await this.getProviderById(tenantId, id);
+    if (!existing) {
+      return null;
+    }
+    const fields = [];
+    const values = [];
+    const set = (column, value) => {
+      fields.push(`${column} = ?`);
+      values.push(value);
+    };
+    if (updates.name !== void 0) set("name", updates.name);
+    if (updates.displayName !== void 0) {
+      set("display_name", updates.displayName || null);
+    }
+    if (updates.protocol !== void 0) set("protocol", updates.protocol);
+    if (updates.apiStyle !== void 0) set("api_style", updates.apiStyle);
+    if (updates.baseURL !== void 0) set("base_url", updates.baseURL);
+    if (updates.enabled !== void 0) set("enabled", updates.enabled ? 1 : 0);
+    if (updates.clearApiKey === true) {
+      set("api_key_enc", null);
+      set("api_key_hint", null);
+    } else if (updates.apiKey) {
+      set("api_key_enc", encrypt3(updates.apiKey));
+      set("api_key_hint", updates.apiKey.slice(-4));
+    }
+    if (fields.length === 0) {
+      return existing;
+    }
+    fields.push("updated_at = ?");
+    values.push(nowISO(), tenantId, id);
+    this.db.prepare(
+      `UPDATE lt_model_providers SET ${fields.join(", ")}
+         WHERE tenant_id = ? AND id = ?`
+    ).run(...values);
+    return this.getProviderById(tenantId, id);
+  }
+  async deleteProvider(tenantId, id) {
+    await this.deleteModelsByProvider(tenantId, id);
+    const result = this.db.prepare(`DELETE FROM lt_model_providers WHERE tenant_id = ? AND id = ?`).run(tenantId, id);
+    return result.changes > 0;
+  }
+  async markProviderStatus(tenantId, id, status, lastError, discoveredAt) {
+    this.db.prepare(
+      `UPDATE lt_model_providers
+         SET status = ?,
+             last_error = ?,
+             last_discovered_at = COALESCE(?, last_discovered_at),
+             updated_at = ?
+         WHERE tenant_id = ? AND id = ?`
+    ).run(
+      status,
+      status === "ok" ? null : lastError || null,
+      discoveredAt ? discoveredAt.toISOString() : null,
+      nowISO(),
+      tenantId,
+      id
+    );
+  }
+  async listModels(tenantId, providerId) {
+    const rows2 = providerId ? this.db.prepare(
+      `SELECT * FROM lt_model_provider_models
+             WHERE tenant_id = ? AND provider_id = ? ORDER BY model_id ASC`
+    ).all(tenantId, providerId) : this.db.prepare(
+      `SELECT * FROM lt_model_provider_models
+             WHERE tenant_id = ? ORDER BY model_id ASC`
+    ).all(tenantId);
+    return rows2.map((row) => mapRowToModel(row));
+  }
+  async getModel(tenantId, providerId, modelId) {
+    const row = this.db.prepare(
+      `SELECT * FROM lt_model_provider_models
+         WHERE tenant_id = ? AND provider_id = ? AND model_id = ?`
+    ).get(tenantId, providerId, modelId);
+    return row ? mapRowToModel(row) : null;
+  }
+  /**
+   * Replace a provider's model snapshot.
+   *
+   * Models the upstream no longer offers are deleted; survivors are upserted
+   * without touching `enabled`, so the tenant's enable/disable choice survives.
+   */
+  async replaceProviderModels(tenantId, providerId, models) {
+    const now = nowISO();
+    const deduped = /* @__PURE__ */ new Map();
+    for (const model of models) {
+      deduped.set(model.id, model);
+    }
+    const rows2 = [...deduped.values()];
+    if (rows2.length === 0) {
+      await this.deleteModelsByProvider(tenantId, providerId);
+      return [];
+    }
+    const current = new Map(
+      (await this.listModels(tenantId, providerId)).map((model) => [
+        model.modelId,
+        model.enabled
+      ])
+    );
+    const placeholders = rows2.map(() => "?").join(", ");
+    this.db.prepare(
+      `DELETE FROM lt_model_provider_models
+         WHERE tenant_id = ? AND provider_id = ? AND model_id NOT IN (${placeholders})`
+    ).run(tenantId, providerId, ...rows2.map((model) => model.id));
+    for (const model of rows2) {
+      this.db.prepare(
+        `INSERT INTO lt_model_provider_models (
+             id, tenant_id, provider_id, model_id, display_name, owned_by,
+             upstream_created, raw, enabled, stale, discovered_at
+           ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+           ON CONFLICT (tenant_id, provider_id, model_id) DO UPDATE SET
+             display_name = excluded.display_name,
+             owned_by = excluded.owned_by,
+             upstream_created = excluded.upstream_created,
+             raw = excluded.raw,
+             enabled = excluded.enabled,
+             stale = excluded.stale,
+             discovered_at = excluded.discovered_at`
+      ).run(
+        `${providerId}:${model.id}`,
+        tenantId,
+        providerId,
+        model.id,
+        model.displayName || null,
+        model.ownedBy || null,
+        model.createdAt || null,
+        model.raw === void 0 ? null : JSON.stringify(model.raw),
+        model.enabled ?? current.get(model.id) ?? true ? 1 : 0,
+        model.stale ? 1 : 0,
+        now
+      );
+    }
+    return rows2.map((model) => model.id);
+  }
+  async setModelEnabled(tenantId, providerId, modelId, enabled) {
+    const result = this.db.prepare(
+      `UPDATE lt_model_provider_models SET enabled = ?
+         WHERE tenant_id = ? AND provider_id = ? AND model_id = ?`
+    ).run(enabled ? 1 : 0, tenantId, providerId, modelId);
+    if (result.changes === 0) {
+      return null;
+    }
+    return this.getModel(tenantId, providerId, modelId);
+  }
+  async deleteModelsByProvider(tenantId, providerId) {
+    const result = this.db.prepare(
+      `DELETE FROM lt_model_provider_models
+         WHERE tenant_id = ? AND provider_id = ?`
+    ).run(tenantId, providerId);
+    return result.changes;
+  }
+};
+function mapRowToEntry4(row) {
+  let apiKey;
+  if (row.api_key_enc) {
+    try {
+      apiKey = decrypt3(row.api_key_enc);
+    } catch (error) {
+      console.error("Failed to decrypt model provider API key:", error);
+      throw new Error("Failed to decrypt model provider API key");
+    }
+  }
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    name: row.name,
+    displayName: row.display_name || void 0,
+    protocol: row.protocol,
+    apiStyle: row.api_style,
+    llmProvider: row.llm_provider,
+    baseURL: row.base_url,
+    apiKey,
+    apiKeyHint: row.api_key_hint || void 0,
+    enabled: row.enabled === 1,
+    status: row.status,
+    lastError: row.last_error || void 0,
+    lastDiscoveredAt: row.last_discovered_at ? parseISO(row.last_discovered_at) : void 0,
+    createdBy: row.created_by || void 0,
+    createdAt: parseISO(row.created_at),
+    updatedAt: parseISO(row.updated_at)
+  };
+}
+function mapRowToModel(row) {
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    providerId: row.provider_id,
+    modelId: row.model_id,
+    displayName: row.display_name || void 0,
+    ownedBy: row.owned_by || void 0,
+    upstreamCreatedAt: row.upstream_created ? parseISO(row.upstream_created) : void 0,
+    enabled: row.enabled === 1,
+    stale: row.stale === 1,
+    discoveredAt: parseISO(row.discovered_at)
+  };
+}
+
+// src/stores/LocalWorkflowTrackingStore.ts
+var DDL13 = `
 CREATE TABLE IF NOT EXISTS lt_workflow_runs (
   id TEXT PRIMARY KEY,
   tenant_id TEXT NOT NULL,
@@ -2470,7 +2790,7 @@ ALTER TABLE lt_workflow_steps ADD COLUMN IF NOT EXISTS thread_id TEXT;
 var LocalWorkflowTrackingStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL12);
+    ensureTable(db, DDL13);
   }
   async createWorkflowRun(request) {
     const now = nowISO();
@@ -2761,7 +3081,7 @@ function mapRowToStep(row) {
 
 // src/stores/LocalEvalStore.ts
 import { randomUUID } from "crypto";
-var DDL13 = `
+var DDL14 = `
 CREATE TABLE IF NOT EXISTS lt_eval_projects (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -2871,7 +3191,7 @@ function parseOptionalJson(val) {
 var LocalEvalStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL13);
+    ensureTable(db, DDL14);
     this.ensureColumn("lt_eval_runs", "interrupted_cases", "interrupted_cases INTEGER NOT NULL DEFAULT 0");
     this.ensureColumn("lt_eval_run_results", "interrupted", "interrupted INTEGER NOT NULL DEFAULT 0");
     this.ensureColumn("lt_eval_cases", "interrupt_policy", "interrupt_policy TEXT");
@@ -3504,7 +3824,7 @@ function mapConflict(row) {
 }
 
 // src/stores/LocalChannelBindingStore.ts
-var DDL14 = `
+var DDL15 = `
 CREATE TABLE IF NOT EXISTS lt_channel_bindings (
   id TEXT PRIMARY KEY,
   channel TEXT NOT NULL,
@@ -3526,7 +3846,7 @@ CREATE TABLE IF NOT EXISTS lt_channel_bindings (
 var LocalChannelBindingStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL14);
+    ensureTable(db, DDL15);
     ensureChannelBindingSubjectIndex(db);
   }
   async findById(tenantId, id) {
@@ -3706,7 +4026,7 @@ function mapRowToBinding(row) {
 }
 
 // src/stores/LocalChannelInstallationStore.ts
-var DDL15 = `
+var DDL16 = `
 CREATE TABLE IF NOT EXISTS lt_channel_installations (
   id TEXT PRIMARY KEY,
   tenant_id TEXT NOT NULL,
@@ -3724,7 +4044,7 @@ CREATE INDEX IF NOT EXISTS idx_lt_ci_tenant ON lt_channel_installations(tenant_i
 var LocalChannelInstallationStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL15);
+    ensureTable(db, DDL16);
   }
   async getInstallationById(installationId) {
     const row = this.db.prepare(
@@ -3848,9 +4168,9 @@ function mapRow6(row) {
 }
 
 // src/stores/LocalA2AApiKeyStore.ts
-import { encrypt as encrypt3, decrypt as decrypt3 } from "@axiom-lattice/core";
+import { encrypt as encrypt4, decrypt as decrypt4 } from "@axiom-lattice/core";
 import { randomUUID as randomUUID3 } from "crypto";
-var DDL16 = `
+var DDL17 = `
 CREATE TABLE IF NOT EXISTS lt_a2a_api_keys (
   id TEXT PRIMARY KEY,
   key_value TEXT NOT NULL,
@@ -3888,7 +4208,7 @@ function parseAssistantIds(raw) {
 var LocalA2AApiKeyStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL16);
+    ensureTable(db, DDL17);
     this.ensureColumn("lt_a2a_api_keys", "assistant_ids", "assistant_ids TEXT");
     this.ensureColumn("lt_a2a_api_keys", "grants", "grants TEXT");
     this.repairManagementIds();
@@ -3919,7 +4239,7 @@ var LocalA2AApiKeyStore = class {
     ).all();
     for (const row of rows2) {
       try {
-        if (decrypt3(row.key_value) === key) return mapRowToRecord(row);
+        if (decrypt4(row.key_value) === key) return mapRowToRecord(row);
       } catch {
       }
     }
@@ -3953,7 +4273,7 @@ var LocalA2AApiKeyStore = class {
     this.db.prepare(
       `INSERT INTO lt_a2a_api_keys (id, key_value, tenant_id, project_id, assistant_ids, grants, label, created_at, updated_at)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(id, encrypt3(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.grants ? JSON.stringify(input.grants) : null, input.label || null, now, now);
+    ).run(id, encrypt4(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.grants ? JSON.stringify(input.grants) : null, input.label || null, now, now);
     const record2 = {
       id,
       key,
@@ -4022,7 +4342,7 @@ var LocalA2AApiKeyStore = class {
     const now = nowISO();
     this.db.prepare(
       `UPDATE lt_a2a_api_keys SET key_value = ?, updated_at = ? WHERE id = ?`
-    ).run(encrypt3(key), now, id);
+    ).run(encrypt4(key), now, id);
     const row = this.db.prepare(`SELECT * FROM lt_a2a_api_keys WHERE id = ?`).get(id);
     if (!row) throw new Error(`A2A API key not found: ${id}`);
     const record2 = mapRowToRecord(row);
@@ -4039,7 +4359,7 @@ var LocalA2AApiKeyStore = class {
     const map2 = /* @__PURE__ */ new Map();
     for (const row of rows2) {
       try {
-        const key = decrypt3(row.key_value);
+        const key = decrypt4(row.key_value);
         map2.set(key, {
           key,
           tenantId: row.tenant_id,
@@ -4055,7 +4375,7 @@ var LocalA2AApiKeyStore = class {
 function mapRowToRecord(row) {
   let key = "";
   try {
-    key = decrypt3(row.key_value);
+    key = decrypt4(row.key_value);
   } catch {
     key = row.key_value;
   }
@@ -4075,7 +4395,7 @@ function mapRowToRecord(row) {
 
 // src/stores/LocalOpenAuditStore.ts
 import { randomUUID as randomUUID4 } from "crypto";
-var DDL17 = `
+var DDL18 = `
 CREATE TABLE IF NOT EXISTS lt_open_audit (
   id TEXT PRIMARY KEY,
   tenant_id TEXT NOT NULL,
@@ -4094,7 +4414,7 @@ CREATE TABLE IF NOT EXISTS lt_open_audit (
 var LocalOpenAuditStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL17);
+    ensureTable(db, DDL18);
   }
   async query(params) {
     const clauses = ["tenant_id = ?"];
@@ -4169,7 +4489,7 @@ import {
   parseTrustedRunContext
 } from "@axiom-lattice/protocols";
 import { randomUUID as randomUUID5 } from "crypto";
-var DDL18 = `
+var DDL19 = `
 CREATE TABLE IF NOT EXISTS lt_thread_message_queue (
   id TEXT PRIMARY KEY,
   thread_id TEXT NOT NULL,
@@ -4195,7 +4515,7 @@ var LocalThreadMessageQueueStore = class {
   constructor(db) {
     this.capacityTail = Promise.resolve();
     this.db = db;
-    ensureTable(db, DDL18);
+    ensureTable(db, DDL19);
     const columns6 = db.prepare("PRAGMA table_info(lt_thread_message_queue)").all();
     const names = new Set(columns6.map(({ name }) => name));
     if (!names.has("trusted_run_context")) {
@@ -4408,7 +4728,7 @@ function rowToMessage(row) {
 }
 
 // src/stores/LocalSkillStore.ts
-var DDL19 = `
+var DDL20 = `
 CREATE TABLE IF NOT EXISTS lt_skills (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -4427,7 +4747,7 @@ CREATE TABLE IF NOT EXISTS lt_skills (
 var LocalSkillStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL19);
+    ensureTable(db, DDL20);
   }
   async getAllSkills(tenantId, _context) {
     const rows2 = this.db.prepare(
@@ -4577,7 +4897,7 @@ function mapRowToSkill(row) {
 }
 
 // src/stores/LocalScheduleStorage.ts
-var DDL20 = `
+var DDL21 = `
 CREATE TABLE IF NOT EXISTS lt_scheduled_tasks (
   task_id TEXT PRIMARY KEY,
   task_type TEXT NOT NULL,
@@ -4610,7 +4930,7 @@ CREATE INDEX IF NOT EXISTS idx_lt_st_tenant ON lt_scheduled_tasks(tenant_id);
 var LocalScheduleStorage = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL20);
+    ensureTable(db, DDL21);
   }
   async save(task) {
     this.db.prepare(
@@ -4921,7 +5241,7 @@ var NEXT_UPDATED_AT_SQL = `updated_at = CASE
     THEN strftime('%Y-%m-%dT%H:%M:%fZ', updated_at, '+0.001 seconds')
   ELSE ?
 END`;
-var DDL21 = `
+var DDL22 = `
 CREATE TABLE IF NOT EXISTS lt_tasks (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -4994,7 +5314,7 @@ function assertPage(limit, offset = 0) {
 var LocalTaskStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL21);
+    ensureTable(db, DDL22);
     this.ensureColumn("lt_tasks", "require_review", "require_review INTEGER DEFAULT 0");
     this.ensureColumn("lt_tasks", "dependencies", "dependencies TEXT");
     this.ensureColumn("lt_tasks", "result", "result TEXT");
@@ -5674,7 +5994,7 @@ var PROJECT_LIFECYCLE_ACTIONS = /* @__PURE__ */ new Set([
   "cancelled",
   "reassigned"
 ]);
-var DDL22 = `
+var DDL23 = `
 CREATE TABLE IF NOT EXISTS lt_task_work_items (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -5748,7 +6068,7 @@ function assertLifecyclePage(query) {
 var LocalTaskWorkItemStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL22);
+    ensureTable(db, DDL23);
     this.ensureColumn("lt_task_work_items", "workspace_id", "workspace_id TEXT");
     this.ensureColumn("lt_task_work_items", "project_id", "project_id TEXT");
     this.ensureColumn("lt_task_work_items", "event_key", "event_key TEXT");
@@ -5945,7 +6265,7 @@ var LocalTaskWorkItemStore = class {
 
 // src/stores/LocalCapabilityBundleStore.ts
 import { randomUUID as randomUUID7 } from "crypto";
-var DDL23 = `CREATE TABLE IF NOT EXISTS lt_capability_bundles (id TEXT NOT NULL, tenant_id TEXT NOT NULL, bundle_key TEXT NOT NULL, name TEXT NOT NULL, description TEXT, capabilities TEXT NOT NULL DEFAULT '[]', created_at TEXT NOT NULL, updated_at TEXT NOT NULL, PRIMARY KEY (tenant_id, id), UNIQUE (tenant_id, bundle_key)); CREATE INDEX IF NOT EXISTS idx_lt_capability_bundles_tenant ON lt_capability_bundles(tenant_id);`;
+var DDL24 = `CREATE TABLE IF NOT EXISTS lt_capability_bundles (id TEXT NOT NULL, tenant_id TEXT NOT NULL, bundle_key TEXT NOT NULL, name TEXT NOT NULL, description TEXT, capabilities TEXT NOT NULL DEFAULT '[]', created_at TEXT NOT NULL, updated_at TEXT NOT NULL, PRIMARY KEY (tenant_id, id), UNIQUE (tenant_id, bundle_key)); CREATE INDEX IF NOT EXISTS idx_lt_capability_bundles_tenant ON lt_capability_bundles(tenant_id);`;
 var duplicateMessage = "Capability bundle key already exists for tenant";
 function map(row) {
   return { id: row.id, tenantId: row.tenant_id, key: row.bundle_key, name: row.name, description: row.description ?? void 0, capabilities: JSON.parse(row.capabilities), createdAt: parseISO(row.created_at).toISOString(), updatedAt: parseISO(row.updated_at).toISOString() };
@@ -5966,7 +6286,7 @@ var LocalCapabilityBundleStore = class {
    */
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL23);
+    ensureTable(db, DDL24);
   }
   async listByTenant(tenantId) {
     return this.db.prepare("SELECT * FROM lt_capability_bundles WHERE tenant_id = ? ORDER BY created_at").all(tenantId).map(map);
@@ -6056,6 +6376,7 @@ async function createLocalStoreConfig(options = {}) {
     connection: new LocalConnectionStore(db),
     metrics: new LocalMetricsServerConfigStore(db),
     mcp: new LocalMcpServerConfigStore(db),
+    modelProvider: new LocalModelProviderStore(db),
     workflowTracking: new LocalWorkflowTrackingStore(db),
     eval: new LocalEvalStore(db),
     channelBinding: new LocalChannelBindingStore(db),
@@ -6123,6 +6444,7 @@ export {
   LocalEvalStore,
   LocalMcpServerConfigStore,
   LocalMetricsServerConfigStore,
+  LocalModelProviderStore,
   LocalOpenAuditStore,
   LocalProjectBotMembershipStore,
   LocalProjectMembershipStore,