@axiom-lattice/local-stores 3.1.6 → 3.1.8

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/local-stores@3.1.6 build /home/runner/work/agentic/agentic/packages/local-stores
+> @axiom-lattice/local-stores@3.1.8 build /home/runner/work/agentic/agentic/packages/local-stores
 > tsup src/index.ts --format cjs,esm --dts --sourcemap
 
 CLI Building entry: src/index.ts
@@ -8,13 +8,13 @@
 CLI Target: es2020
 CJS Build start
 ESM Build start
-CJS dist/index.js     216.48 KB
-CJS dist/index.js.map 392.76 KB
-CJS ⚡️ Build success in 583ms
-ESM dist/index.mjs     212.10 KB
-ESM dist/index.mjs.map 389.23 KB
-ESM ⚡️ Build success in 588ms
+CJS dist/index.js     221.77 KB
+CJS dist/index.js.map 401.85 KB
+CJS ⚡️ Build success in 495ms
+ESM dist/index.mjs     217.29 KB
+ESM dist/index.mjs.map 398.23 KB
+ESM ⚡️ Build success in 511ms
 DTS Build start
-DTS ⚡️ Build success in 18169ms
-DTS dist/index.d.ts  39.86 KB
-DTS dist/index.d.mts 39.86 KB
+DTS ⚡️ Build success in 17712ms
+DTS dist/index.d.ts  40.88 KB
+DTS dist/index.d.mts 40.88 KB

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @axiom-lattice/local-stores
 
+## 3.1.8
+
+### Patch Changes
+
+- a2a0615: feat: MCP server connection authentication — `McpServerConfig.headers` (http/sse, encrypted at rest) plumbed through stores, gateway connections, and the config form; env-variable editor for stdio; SSE deprecation hint in the form.
+- af3dff0: fix web app
+- Updated dependencies [a2a0615]
+- Updated dependencies [af3dff0]
+  - @axiom-lattice/protocols@4.2.0
+  - @axiom-lattice/core@4.2.8
+
+## 3.1.7
+
+### Patch Changes
+
+- 15d2469: fix issue
+- Updated dependencies [15d2469]
+  - @axiom-lattice/core@4.2.7
+  - @axiom-lattice/protocols@4.1.5
+
 ## 3.1.6
 
 ### Patch Changes

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { SqlJsStatic, Database } from 'sql.js';
 import { SqliteSaver } from '@langchain/langgraph-checkpoint-sqlite';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ThreadInfo } from '@axiom-lattice/core';
 
 /**
@@ -359,11 +359,34 @@ declare class LocalProjectRoomMessageStore implements ProjectRoomMessageStore {
         limit: number;
     }): Promise<ProjectRoomMessage[]>;
     findById(tenantId: string, id: string): Promise<ProjectRoomMessage | null>;
+    countAfter(input: {
+        tenantId: string;
+        roomId: string;
+        after: Date;
+        excludeAuthorUserId?: string;
+    }): Promise<number>;
     private insert;
     private byId;
     private byKey;
 }
 
+/** Persists per-user project room read markers in the local SQLite store. */
+declare class LocalProjectRoomReadStateStore implements ProjectRoomReadStateStore {
+    private readonly db;
+    /** Creates a store over a managed local database wrapper. */
+    constructor(db: DatabaseWrapper);
+    /** Returns the user's read marker for a room, or null when never reported. */
+    get(tenantId: string, roomId: string, userId: string): Promise<ProjectRoomReadState | null>;
+    /** Upserts the marker monotonically (an older report never regresses the horizon). */
+    markRead(input: {
+        tenantId: string;
+        roomId: string;
+        userId: string;
+        lastReadAt: Date;
+    }): Promise<ProjectRoomReadState>;
+    private byKey;
+}
+
 /**
  * Local SQLite implementation of UserStore.
  */
@@ -849,6 +872,7 @@ declare function createLocalStoreConfig(options?: LocalStoreConfigOptions): Prom
     projectMembership: LocalProjectMembershipStore;
     projectBotMembership: LocalProjectBotMembershipStore;
     projectRoomMessage: LocalProjectRoomMessageStore;
+    projectRoomReadState: LocalProjectRoomReadStateStore;
     user: LocalUserStore;
     tenant: LocalTenantStore;
     userTenantLink: LocalUserTenantLinkStore;
@@ -886,4 +910,4 @@ declare class InMemoryConversationStore implements IConversationStore {
     deleteConversation(conversationId: string): Promise<void>;
 }
 
-export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };
+export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomReadStateStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { SqlJsStatic, Database } from 'sql.js';
 import { SqliteSaver } from '@langchain/langgraph-checkpoint-sqlite';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ThreadInfo } from '@axiom-lattice/core';
 
 /**
@@ -359,11 +359,34 @@ declare class LocalProjectRoomMessageStore implements ProjectRoomMessageStore {
         limit: number;
     }): Promise<ProjectRoomMessage[]>;
     findById(tenantId: string, id: string): Promise<ProjectRoomMessage | null>;
+    countAfter(input: {
+        tenantId: string;
+        roomId: string;
+        after: Date;
+        excludeAuthorUserId?: string;
+    }): Promise<number>;
     private insert;
     private byId;
     private byKey;
 }
 
+/** Persists per-user project room read markers in the local SQLite store. */
+declare class LocalProjectRoomReadStateStore implements ProjectRoomReadStateStore {
+    private readonly db;
+    /** Creates a store over a managed local database wrapper. */
+    constructor(db: DatabaseWrapper);
+    /** Returns the user's read marker for a room, or null when never reported. */
+    get(tenantId: string, roomId: string, userId: string): Promise<ProjectRoomReadState | null>;
+    /** Upserts the marker monotonically (an older report never regresses the horizon). */
+    markRead(input: {
+        tenantId: string;
+        roomId: string;
+        userId: string;
+        lastReadAt: Date;
+    }): Promise<ProjectRoomReadState>;
+    private byKey;
+}
+
 /**
  * Local SQLite implementation of UserStore.
  */
@@ -849,6 +872,7 @@ declare function createLocalStoreConfig(options?: LocalStoreConfigOptions): Prom
     projectMembership: LocalProjectMembershipStore;
     projectBotMembership: LocalProjectBotMembershipStore;
     projectRoomMessage: LocalProjectRoomMessageStore;
+    projectRoomReadState: LocalProjectRoomReadStateStore;
     user: LocalUserStore;
     tenant: LocalTenantStore;
     userTenantLink: LocalUserTenantLinkStore;
@@ -886,4 +910,4 @@ declare class InMemoryConversationStore implements IConversationStore {
     deleteConversation(conversationId: string): Promise<void>;
 }
 
-export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };
+export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomReadStateStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };

package/dist/index.js

@@ -47,6 +47,7 @@ __export(index_exports, {
   LocalProjectBotMembershipStore: () => LocalProjectBotMembershipStore,
   LocalProjectMembershipStore: () => LocalProjectMembershipStore,
   LocalProjectRoomMessageStore: () => LocalProjectRoomMessageStore,
+  LocalProjectRoomReadStateStore: () => LocalProjectRoomReadStateStore,
   LocalProjectRoomStore: () => LocalProjectRoomStore,
   LocalProjectStore: () => LocalProjectStore,
   LocalScheduleStorage: () => LocalScheduleStorage,
@@ -886,12 +887,20 @@ CREATE UNIQUE INDEX IF NOT EXISTS uq_lt_project_room_messages_idempotency
   ON lt_project_room_messages (tenant_id, room_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
 CREATE INDEX IF NOT EXISTS idx_lt_project_room_messages_room_created
   ON lt_project_room_messages (tenant_id, room_id, created_at DESC, id DESC);
+CREATE TABLE IF NOT EXISTS lt_project_room_read_states (
+  tenant_id TEXT NOT NULL, room_id TEXT NOT NULL, user_id TEXT NOT NULL,
+  last_read_at TEXT NOT NULL, updated_at TEXT NOT NULL,
+  PRIMARY KEY (tenant_id, room_id, user_id)
+);
+CREATE INDEX IF NOT EXISTS idx_lt_project_room_read_states_user
+  ON lt_project_room_read_states (tenant_id, user_id);
 `;
 var tableColumns = {
   lt_project_rooms: ["id", "tenant_id", "workspace_id", "project_id", "type", "name", "created_at", "updated_at"],
   lt_project_memberships: ["id", "tenant_id", "project_id", "user_id", "role", "status", "joined_at", "updated_at"],
   lt_project_bot_memberships: ["id", "tenant_id", "workspace_id", "project_id", "room_id", "assistant_id", "role", "title", "responsibility", "mention_name", "status", "room_thread_id", "joined_at", "updated_at"],
-  lt_project_room_messages: ["id", "tenant_id", "workspace_id", "project_id", "room_id", "author", "content", "mentions", "reply_to_message_id", "source", "source_id", "idempotency_key", "created_at"]
+  lt_project_room_messages: ["id", "tenant_id", "workspace_id", "project_id", "room_id", "author", "content", "mentions", "reply_to_message_id", "source", "source_id", "idempotency_key", "created_at"],
+  lt_project_room_read_states: ["tenant_id", "room_id", "user_id", "last_read_at", "updated_at"]
 };
 var indexes = {
   idx_lt_project_memberships_project: { table: "lt_project_memberships", columns: ["tenant_id", "project_id"], unique: false, partial: false },
@@ -900,13 +909,15 @@ var indexes = {
   idx_lt_project_bot_memberships_project: { table: "lt_project_bot_memberships", columns: ["tenant_id", "project_id"], unique: false, partial: false },
   idx_lt_project_bot_memberships_room: { table: "lt_project_bot_memberships", columns: ["tenant_id", "room_id"], unique: false, partial: false },
   uq_lt_project_room_messages_idempotency: { table: "lt_project_room_messages", columns: ["tenant_id", "room_id", "idempotency_key"], unique: true, partial: true, sql: ["idempotency_key is not null"] },
-  idx_lt_project_room_messages_room_created: { table: "lt_project_room_messages", columns: ["tenant_id", "room_id", "created_at", "id"], unique: false, partial: false, sql: ["created_at desc", "id desc"] }
+  idx_lt_project_room_messages_room_created: { table: "lt_project_room_messages", columns: ["tenant_id", "room_id", "created_at", "id"], unique: false, partial: false, sql: ["created_at desc", "id desc"] },
+  idx_lt_project_room_read_states_user: { table: "lt_project_room_read_states", columns: ["tenant_id", "user_id"], unique: false, partial: false }
 };
 var uniqueConstraints = {
   lt_project_rooms: [["tenant_id", "id"], ["tenant_id", "project_id", "type"]],
   lt_project_memberships: [["tenant_id", "id"], ["tenant_id", "project_id", "user_id"]],
   lt_project_bot_memberships: [["tenant_id", "id"], ["tenant_id", "project_id", "assistant_id"]],
-  lt_project_room_messages: [["tenant_id", "id"]]
+  lt_project_room_messages: [["tenant_id", "id"]],
+  lt_project_room_read_states: [["tenant_id", "room_id", "user_id"]]
 };
 var checkConstraints = {
   lt_project_rooms: [{ name: "type", fragment: "type='main'" }],
@@ -918,7 +929,8 @@ var checkConstraints = {
     { name: "role", fragment: "role in ('coordinator','specialist')" },
     { name: "status", fragment: "status in ('active','paused','removed')" }
   ],
-  lt_project_room_messages: [{ name: "source", fragment: "source in ('user','agent','task','routine','system')" }]
+  lt_project_room_messages: [{ name: "source", fragment: "source in ('user','agent','task','routine','system')" }],
+  lt_project_room_read_states: []
 };
 function rows(db, sql) {
   const result = db.getRawDb().exec(sql);
@@ -990,10 +1002,10 @@ function validateProjectRoomSchema(db) {
   }
   for (const [name, expected] of Object.entries(indexes)) {
     const listed = rows(db, `PRAGMA index_list(${expected.table})`).find((index) => index.name === name);
-    const columns5 = rows(db, `PRAGMA index_info(${name})`).map((column) => column.name);
+    const columns6 = rows(db, `PRAGMA index_info(${name})`).map((column) => column.name);
     const definition = rows(db, `SELECT sql FROM sqlite_master WHERE type = 'index' AND name = '${name}'`)[0]?.sql;
     const normalized = typeof definition === "string" ? definition.toLowerCase().replace(/\s+/g, " ") : "";
-    if (!listed || listed.unique !== Number(expected.unique) || listed.partial !== Number(expected.partial) || columns5.join(",") !== expected.columns.join(",") || expected.sql?.some((fragment) => !normalized.includes(fragment))) {
+    if (!listed || listed.unique !== Number(expected.unique) || listed.partial !== Number(expected.partial) || columns6.join(",") !== expected.columns.join(",") || expected.sql?.some((fragment) => !normalized.includes(fragment))) {
       throw new Error(`Invalid project room schema: index '${name}' is incompatible`);
     }
   }
@@ -1006,6 +1018,30 @@ function ensureProjectRoomSchema(db) {
   const applied = hasMigrationTable ? rows(db, `SELECT name, version FROM lattice_schema_migrations WHERE store_name = 'project_room' AND name = '${migrationName}'`)[0] : void 0;
   if (applied) {
     if (applied.version !== 1) throw new Error(`Invalid project room schema migration version: ${String(applied.version)}`);
+    const hasReadStates = rows(db, "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'lt_project_room_read_states'").length > 0;
+    if (!hasReadStates) {
+      raw.exec("BEGIN IMMEDIATE");
+      try {
+        raw.exec(`CREATE TABLE IF NOT EXISTS lt_project_room_read_states (
+          tenant_id TEXT NOT NULL, room_id TEXT NOT NULL, user_id TEXT NOT NULL,
+          last_read_at TEXT NOT NULL, updated_at TEXT NOT NULL,
+          PRIMARY KEY (tenant_id, room_id, user_id)
+        ); CREATE INDEX IF NOT EXISTS idx_lt_project_room_read_states_user
+          ON lt_project_room_read_states (tenant_id, user_id);`);
+        raw.run(
+          "INSERT INTO lattice_schema_migrations (store_name, name, version, applied_at) VALUES (?, ?, ?, ?)",
+          ["project_room", "create_project_room_read_states", 2, (/* @__PURE__ */ new Date()).toISOString()]
+        );
+        raw.exec("COMMIT");
+        db.save();
+      } catch (error) {
+        try {
+          raw.exec("ROLLBACK");
+        } catch {
+        }
+        throw error;
+      }
+    }
     validateProjectRoomSchema(db);
     marked[schemaMarker] = true;
     return;
@@ -1445,6 +1481,18 @@ var LocalProjectRoomMessageStore = class {
     const row = this.byId(tenantId, id);
     return row ? mapRow4(row) : null;
   }
+  async countAfter(input) {
+    if (!validDate(input.after)) throw new RangeError("Project room message count horizon date is invalid");
+    const rows2 = this.db.prepare(
+      `SELECT author FROM lt_project_room_messages
+       WHERE tenant_id = ? AND room_id = ? AND created_at > ?`
+    ).all(input.tenantId, input.roomId, input.after.toISOString());
+    return rows2.filter((row) => {
+      if (input.excludeAuthorUserId === void 0) return true;
+      const parsed = parseJson(row.author);
+      return !(record(parsed) && parsed.type === "human" && parsed.userId === input.excludeAuthorUserId);
+    }).length;
+  }
   insert(input, idempotent) {
     return transaction(this.db, () => {
       if (idempotent && input.idempotencyKey) {
@@ -1475,6 +1523,50 @@ var LocalProjectRoomMessageStore = class {
   }
 };
 
+// src/stores/LocalProjectRoomReadStateStore.ts
+var columns5 = "tenant_id, room_id, user_id, last_read_at, updated_at";
+function mapRow5(row) {
+  const lastReadAt = new Date(row.last_read_at);
+  const updatedAt = new Date(row.updated_at);
+  if (Number.isNaN(lastReadAt.getTime()) || Number.isNaN(updatedAt.getTime())) throw new Error("Invalid project room read state row");
+  return { tenantId: row.tenant_id, roomId: row.room_id, userId: row.user_id, lastReadAt, updatedAt };
+}
+var LocalProjectRoomReadStateStore = class {
+  /** Creates a store over a managed local database wrapper. */
+  constructor(db) {
+    this.db = db;
+    ensureProjectRoomSchema(db);
+  }
+  /** Returns the user's read marker for a room, or null when never reported. */
+  async get(tenantId, roomId, userId) {
+    const row = this.byKey(tenantId, roomId, userId);
+    return row ? mapRow5(row) : null;
+  }
+  /** Upserts the marker monotonically (an older report never regresses the horizon). */
+  async markRead(input) {
+    if (!validDate(input.lastReadAt)) throw new RangeError("Project room read state lastReadAt is invalid");
+    return transaction(this.db, () => {
+      const existing = this.byKey(input.tenantId, input.roomId, input.userId);
+      const lastReadAt = existing !== void 0 && new Date(existing.last_read_at).getTime() > input.lastReadAt.getTime() ? new Date(existing.last_read_at) : input.lastReadAt;
+      write(
+        this.db,
+        `INSERT INTO lt_project_room_read_states (${columns5})
+         VALUES (?, ?, ?, ?, ?)
+         ON CONFLICT (tenant_id, room_id, user_id) DO UPDATE
+           SET last_read_at = excluded.last_read_at, updated_at = excluded.updated_at`,
+        [input.tenantId, input.roomId, input.userId, lastReadAt.toISOString(), timestamp()]
+      );
+      const row = this.byKey(input.tenantId, input.roomId, input.userId);
+      return mapRow5(row);
+    });
+  }
+  byKey(tenantId, roomId, userId) {
+    return this.db.prepare(
+      `SELECT ${columns5} FROM lt_project_room_read_states WHERE tenant_id = ? AND room_id = ? AND user_id = ?`
+    ).get(tenantId, roomId, userId);
+  }
+};
+
 // src/stores/LocalUserStore.ts
 var DDL5 = `
 CREATE TABLE IF NOT EXISTS lt_users (
@@ -2302,6 +2394,18 @@ function mapRowToEntry3(row) {
       throw new Error("Failed to decrypt MCP server configuration");
     }
   }
+  if (config.headers && row.is_env_encrypted) {
+    try {
+      const decryptedHeaders = {};
+      for (const [key, value] of Object.entries(config.headers)) {
+        decryptedHeaders[key] = (0, import_core2.decrypt)(value);
+      }
+      config.headers = decryptedHeaders;
+    } catch (error) {
+      console.error("Failed to decrypt MCP server headers:", error);
+      throw new Error("Failed to decrypt MCP server configuration");
+    }
+  }
   return {
     id: row.id,
     tenantId: row.tenant_id,
@@ -2327,6 +2431,14 @@ function encryptEnvInConfig(config) {
     configCopy.env = encryptedEnv;
     isEnvEncrypted = true;
   }
+  if (configCopy.headers && Object.keys(configCopy.headers).length > 0) {
+    const encryptedHeaders = {};
+    for (const [key, value] of Object.entries(configCopy.headers)) {
+      encryptedHeaders[key] = (0, import_core2.encrypt)(value);
+    }
+    configCopy.headers = encryptedHeaders;
+    isEnvEncrypted = true;
+  }
   return { config: configCopy, isEnvEncrypted };
 }
 
@@ -3636,7 +3748,7 @@ var LocalChannelInstallationStore = class {
     const row = this.db.prepare(
       `SELECT * FROM lt_channel_installations WHERE id = ?`
     ).get(installationId);
-    return row ? mapRow5(row) : null;
+    return row ? mapRow6(row) : null;
   }
   async getInstallationsByTenant(tenantId, channel) {
     let rows2;
@@ -3649,7 +3761,7 @@ var LocalChannelInstallationStore = class {
         `SELECT * FROM lt_channel_installations WHERE tenant_id = ? ORDER BY created_at DESC`
       ).all(tenantId);
     }
-    return rows2.map(mapRow5);
+    return rows2.map(mapRow6);
   }
   async getAllInstallations(channel) {
     let rows2;
@@ -3662,7 +3774,7 @@ var LocalChannelInstallationStore = class {
         `SELECT * FROM lt_channel_installations ORDER BY created_at DESC`
       ).all();
     }
-    return rows2.map(mapRow5);
+    return rows2.map(mapRow6);
   }
   async createInstallation(tenantId, installationId, data) {
     const now = nowISO();
@@ -3738,7 +3850,7 @@ var LocalChannelInstallationStore = class {
     return result.changes > 0;
   }
 };
-function mapRow5(row) {
+function mapRow6(row) {
   return {
     id: row.id,
     tenantId: row.tenant_id,
@@ -3965,8 +4077,8 @@ var LocalThreadMessageQueueStore = class {
     this.capacityTail = Promise.resolve();
     this.db = db;
     ensureTable(db, DDL17);
-    const columns5 = db.prepare("PRAGMA table_info(lt_thread_message_queue)").all();
-    const names = new Set(columns5.map(({ name }) => name));
+    const columns6 = db.prepare("PRAGMA table_info(lt_thread_message_queue)").all();
+    const names = new Set(columns6.map(({ name }) => name));
     if (!names.has("trusted_run_context")) {
       db.run("ALTER TABLE lt_thread_message_queue ADD COLUMN trusted_run_context TEXT");
     }
@@ -5817,6 +5929,7 @@ async function createLocalStoreConfig(options = {}) {
     projectMembership: new LocalProjectMembershipStore(db),
     projectBotMembership: new LocalProjectBotMembershipStore(db),
     projectRoomMessage: new LocalProjectRoomMessageStore(db),
+    projectRoomReadState: new LocalProjectRoomReadStateStore(db),
     user: new LocalUserStore(db),
     tenant: new LocalTenantStore(db),
     userTenantLink: new LocalUserTenantLinkStore(db),
@@ -5894,6 +6007,7 @@ var InMemoryConversationStore = class {
   LocalProjectBotMembershipStore,
   LocalProjectMembershipStore,
   LocalProjectRoomMessageStore,
+  LocalProjectRoomReadStateStore,
   LocalProjectRoomStore,
   LocalProjectStore,
   LocalScheduleStorage,