@axiom-lattice/local-stores 3.1.8 → 3.1.10

package/dist/index.mjs

@@ -1381,6 +1381,22 @@ function mapRow4(row) {
     createdAt
   };
 }
+function mapRowsTolerant(rows2, scope) {
+  const messages = [];
+  for (const row of rows2) {
+    try {
+      messages.push(mapRow4(row));
+    } catch (error) {
+      console.warn("[ProjectRoomMessageStore] Skipping invalid message row", {
+        tenantId: scope.tenantId,
+        roomId: scope.roomId,
+        rowId: typeof row.id === "string" ? row.id : void 0,
+        reason: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  return messages;
+}
 var LocalProjectRoomMessageStore = class {
   constructor(db) {
     this.db = db;
@@ -1396,7 +1412,7 @@ var LocalProjectRoomMessageStore = class {
     if (input.before && !validDate(input.before.createdAt)) throw new RangeError("Project room message cursor date is invalid");
     const limit = Math.min(100, Math.max(1, Math.trunc(Number.isFinite(input.limit) ? input.limit : 1)));
     const rows2 = input.before ? this.db.prepare(`SELECT ${columns4} FROM lt_project_room_messages WHERE tenant_id = ? AND room_id = ? AND (created_at < ? OR (created_at = ? AND id < ?)) ORDER BY created_at DESC, id DESC LIMIT ?`).all(input.tenantId, input.roomId, input.before.createdAt.toISOString(), input.before.createdAt.toISOString(), input.before.id, limit) : this.db.prepare(`SELECT ${columns4} FROM lt_project_room_messages WHERE tenant_id = ? AND room_id = ? ORDER BY created_at DESC, id DESC LIMIT ?`).all(input.tenantId, input.roomId, limit);
-    return rows2.map(mapRow4);
+    return mapRowsTolerant(rows2, { tenantId: input.tenantId, roomId: input.roomId });
   }
   async findById(tenantId, id) {
     const row = this.byId(tenantId, id);
@@ -3800,6 +3816,7 @@ CREATE TABLE IF NOT EXISTS lt_a2a_api_keys (
   tenant_id TEXT NOT NULL,
   project_id TEXT,
   assistant_ids TEXT,
+  grants TEXT,
   label TEXT,
   enabled INTEGER NOT NULL DEFAULT 1,
   created_at TEXT NOT NULL,
@@ -3809,6 +3826,15 @@ CREATE TABLE IF NOT EXISTS lt_a2a_api_keys (
 function generateApiKey() {
   return `a2a_${randomUUID3().replace(/-/g, "")}`;
 }
+function parseGrants(raw) {
+  if (!raw) return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    return Array.isArray(parsed) ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function parseAssistantIds(raw) {
   if (!raw) return void 0;
   try {
@@ -3823,6 +3849,7 @@ var LocalA2AApiKeyStore = class {
     this.db = db;
     ensureTable(db, DDL16);
     this.ensureColumn("lt_a2a_api_keys", "assistant_ids", "assistant_ids TEXT");
+    this.ensureColumn("lt_a2a_api_keys", "grants", "grants TEXT");
     this.repairManagementIds();
   }
   /** Add a column if it does not exist (SQLite version compatible). */
@@ -3883,9 +3910,9 @@ var LocalA2AApiKeyStore = class {
     const key = generateApiKey();
     const now = nowISO();
     this.db.prepare(
-      `INSERT INTO lt_a2a_api_keys (id, key_value, tenant_id, project_id, assistant_ids, label, created_at, updated_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(id, encrypt3(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.label || null, now, now);
+      `INSERT INTO lt_a2a_api_keys (id, key_value, tenant_id, project_id, assistant_ids, grants, label, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(id, encrypt3(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.grants ? JSON.stringify(input.grants) : null, input.label || null, now, now);
     const record2 = {
       id,
       key,
@@ -3917,6 +3944,38 @@ var LocalA2AApiKeyStore = class {
     if (!row) throw new Error(`A2A API key not found: ${id}`);
     return mapRowToRecord(row);
   }
+  async update(id, input) {
+    const sets = [];
+    const values = [];
+    if (input.label !== void 0) {
+      sets.push("label = ?");
+      values.push(input.label || null);
+    }
+    if (input.projectId !== void 0) {
+      sets.push("project_id = ?");
+      values.push(input.projectId);
+    }
+    if (input.assistantIds !== void 0) {
+      sets.push("assistant_ids = ?");
+      values.push(input.assistantIds ? JSON.stringify(input.assistantIds) : null);
+    }
+    if (input.grants !== void 0) {
+      sets.push("grants = ?");
+      values.push(input.grants ? JSON.stringify(input.grants) : null);
+    }
+    if (sets.length === 0) {
+      const row2 = this.db.prepare("SELECT * FROM lt_a2a_api_keys WHERE id = ?").get(id);
+      if (!row2) throw new Error(`A2A API key not found: ${id}`);
+      return mapRowToRecord(row2);
+    }
+    sets.push("updated_at = ?");
+    values.push(nowISO());
+    values.push(id);
+    this.db.prepare(`UPDATE lt_a2a_api_keys SET ${sets.join(", ")} WHERE id = ?`).run(...values);
+    const row = this.db.prepare("SELECT * FROM lt_a2a_api_keys WHERE id = ?").get(id);
+    if (!row) throw new Error(`A2A API key not found: ${id}`);
+    return mapRowToRecord(row);
+  }
   async rotate(id) {
     const key = generateApiKey();
     const now = nowISO();
@@ -3965,6 +4024,7 @@ function mapRowToRecord(row) {
     tenantId: row.tenant_id,
     projectId: row.project_id,
     assistantIds: parseAssistantIds(row.assistant_ids),
+    grants: parseGrants(row.grants),
     label: row.label || void 0,
     enabled: row.enabled === 1,
     createdAt: parseISO(row.created_at),
@@ -3972,13 +4032,103 @@ function mapRowToRecord(row) {
   };
 }
 
+// src/stores/LocalOpenAuditStore.ts
+import { randomUUID as randomUUID4 } from "crypto";
+var DDL17 = `
+CREATE TABLE IF NOT EXISTS lt_open_audit (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  credential_id TEXT NOT NULL,
+  credential_kind TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  domain TEXT NOT NULL,
+  action TEXT NOT NULL,
+  args TEXT,
+  status TEXT NOT NULL,
+  error_code TEXT,
+  duration_ms INTEGER NOT NULL,
+  created_at TEXT NOT NULL
+);
+`;
+var LocalOpenAuditStore = class {
+  constructor(db) {
+    this.db = db;
+    ensureTable(db, DDL17);
+  }
+  async query(params) {
+    const clauses = ["tenant_id = ?"];
+    const values = [params.tenantId];
+    if (params.credentialId) {
+      clauses.push("credential_id = ?");
+      values.push(params.credentialId);
+    }
+    if (params.domain) {
+      clauses.push("domain = ?");
+      values.push(params.domain);
+    }
+    if (params.status) {
+      clauses.push("status = ?");
+      values.push(params.status);
+    }
+    if (params.from) {
+      clauses.push("created_at >= ?");
+      values.push(params.from);
+    }
+    if (params.to) {
+      clauses.push("created_at < ?");
+      values.push(params.to);
+    }
+    const limit = params.limit ?? 100;
+    const offset = params.offset ?? 0;
+    values.push(limit, offset);
+    const rows2 = this.db.prepare(
+      `SELECT * FROM lt_open_audit WHERE ${clauses.join(" AND ")}
+         ORDER BY created_at DESC LIMIT ? OFFSET ?`
+    ).all(...values);
+    return rows2.map((row) => ({
+      id: row.id,
+      tenantId: row.tenant_id,
+      credentialId: row.credential_id,
+      credentialKind: row.credential_kind,
+      projectId: row.project_id,
+      domain: row.domain,
+      action: row.action,
+      args: row.args ? JSON.parse(row.args) : void 0,
+      status: row.status,
+      errorCode: row.error_code ?? void 0,
+      durationMs: row.duration_ms,
+      createdAt: parseISO(row.created_at)
+    }));
+  }
+  async append(record2) {
+    this.db.prepare(
+      `INSERT INTO lt_open_audit
+          (id, tenant_id, credential_id, credential_kind, project_id, domain, action, args, status, error_code, duration_ms, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(
+      randomUUID4(),
+      record2.tenantId,
+      record2.credentialId,
+      record2.credentialKind,
+      record2.projectId,
+      record2.domain,
+      record2.action,
+      record2.args === void 0 ? null : JSON.stringify(record2.args),
+      record2.status,
+      record2.errorCode ?? null,
+      Math.max(0, Math.round(record2.durationMs)),
+      nowISO()
+    );
+  }
+};
+
 // src/stores/LocalThreadMessageQueueStore.ts
 import {
   parseQueuedExecutionMode,
   parseTrustedRunContext
 } from "@axiom-lattice/protocols";
-import { randomUUID as randomUUID4 } from "crypto";
-var DDL17 = `
+import { randomUUID as randomUUID5 } from "crypto";
+var DDL18 = `
 CREATE TABLE IF NOT EXISTS lt_thread_message_queue (
   id TEXT PRIMARY KEY,
   thread_id TEXT NOT NULL,
@@ -4004,7 +4154,7 @@ var LocalThreadMessageQueueStore = class {
   constructor(db) {
     this.capacityTail = Promise.resolve();
     this.db = db;
-    ensureTable(db, DDL17);
+    ensureTable(db, DDL18);
     const columns6 = db.prepare("PRAGMA table_info(lt_thread_message_queue)").all();
     const names = new Set(columns6.map(({ name }) => name));
     if (!names.has("trusted_run_context")) {
@@ -4017,7 +4167,7 @@ var LocalThreadMessageQueueStore = class {
   async addMessage(params) {
     const trusted = validateQueueTrust(params);
     const now = nowISO();
-    const id = params.id || randomUUID4();
+    const id = params.id || randomUUID5();
     const seqRow = this.db.prepare(
       `SELECT COALESCE(MAX(sequence_order), 0) + 1 as next_seq FROM lt_thread_message_queue WHERE thread_id = ?`
     ).get(params.threadId);
@@ -4060,7 +4210,7 @@ var LocalThreadMessageQueueStore = class {
         projectId: params.projectId
       };
       const filter = scopeClause(scope);
-      const id = params.id || randomUUID4();
+      const id = params.id || randomUUID5();
       const limit = maxSize === Infinity ? -1 : maxSize;
       const result = this.db.prepare(
         `INSERT INTO lt_thread_message_queue (id, thread_id, tenant_id, assistant_id, workspace_id, project_id, message_content, message_type, sequence_order, priority, command, custom_run_config, trusted_run_context, execution_mode, created_at)
@@ -4098,7 +4248,7 @@ var LocalThreadMessageQueueStore = class {
   async addMessageAtHead(params) {
     const trusted = validateQueueTrust(params);
     const now = nowISO();
-    const id = params.id || randomUUID4();
+    const id = params.id || randomUUID5();
     const seqRow = this.db.prepare(
       `SELECT COALESCE(MAX(sequence_order), 0) + 1 as next_seq FROM lt_thread_message_queue WHERE thread_id = ?`
     ).get(params.threadId);
@@ -4217,7 +4367,7 @@ function rowToMessage(row) {
 }
 
 // src/stores/LocalSkillStore.ts
-var DDL18 = `
+var DDL19 = `
 CREATE TABLE IF NOT EXISTS lt_skills (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -4236,7 +4386,7 @@ CREATE TABLE IF NOT EXISTS lt_skills (
 var LocalSkillStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL18);
+    ensureTable(db, DDL19);
   }
   async getAllSkills(tenantId, _context) {
     const rows2 = this.db.prepare(
@@ -4386,7 +4536,7 @@ function mapRowToSkill(row) {
 }
 
 // src/stores/LocalScheduleStorage.ts
-var DDL19 = `
+var DDL20 = `
 CREATE TABLE IF NOT EXISTS lt_scheduled_tasks (
   task_id TEXT PRIMARY KEY,
   task_type TEXT NOT NULL,
@@ -4419,7 +4569,7 @@ CREATE INDEX IF NOT EXISTS idx_lt_st_tenant ON lt_scheduled_tasks(tenant_id);
 var LocalScheduleStorage = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL19);
+    ensureTable(db, DDL20);
   }
   async save(task) {
     this.db.prepare(
@@ -4713,7 +4863,7 @@ function mapRowToTask(row) {
 }
 
 // src/stores/LocalTaskStore.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 var MAX_CANONICAL_TASK_TIME = "9999-12-31T23:59:59.999Z";
 var TASK_STATUSES = /* @__PURE__ */ new Set([
   "pending",
@@ -4729,7 +4879,7 @@ var NEXT_UPDATED_AT_SQL = `updated_at = CASE
     THEN strftime('%Y-%m-%dT%H:%M:%fZ', updated_at, '+0.001 seconds')
   ELSE ?
 END`;
-var DDL20 = `
+var DDL21 = `
 CREATE TABLE IF NOT EXISTS lt_tasks (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -4802,7 +4952,7 @@ function assertPage(limit, offset = 0) {
 var LocalTaskStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL20);
+    ensureTable(db, DDL21);
     this.ensureColumn("lt_tasks", "require_review", "require_review INTEGER DEFAULT 0");
     this.ensureColumn("lt_tasks", "dependencies", "dependencies TEXT");
     this.ensureColumn("lt_tasks", "result", "result TEXT");
@@ -4819,7 +4969,7 @@ var LocalTaskStore = class {
     }
   }
   async create(params) {
-    const id = params.id ?? randomUUID5();
+    const id = params.id ?? randomUUID6();
     const now = nowISO();
     this.db.prepare(
       `INSERT INTO lt_tasks (id, tenant_id, owner_type, owner_id, title, description, status, priority, due_date, metadata, parent_id, source_id, context, require_review, dependencies, result, failure_reason, workspace_id, project_id, files, created_at, updated_at)
@@ -5479,7 +5629,7 @@ var PROJECT_LIFECYCLE_ACTIONS = /* @__PURE__ */ new Set([
   "cancelled",
   "reassigned"
 ]);
-var DDL21 = `
+var DDL22 = `
 CREATE TABLE IF NOT EXISTS lt_task_work_items (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -5553,7 +5703,7 @@ function assertLifecyclePage(query) {
 var LocalTaskWorkItemStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL21);
+    ensureTable(db, DDL22);
     this.ensureColumn("lt_task_work_items", "workspace_id", "workspace_id TEXT");
     this.ensureColumn("lt_task_work_items", "project_id", "project_id TEXT");
     this.ensureColumn("lt_task_work_items", "event_key", "event_key TEXT");
@@ -5749,8 +5899,8 @@ var LocalTaskWorkItemStore = class {
 };
 
 // src/stores/LocalCapabilityBundleStore.ts
-import { randomUUID as randomUUID6 } from "crypto";
-var DDL22 = `CREATE TABLE IF NOT EXISTS lt_capability_bundles (id TEXT NOT NULL, tenant_id TEXT NOT NULL, bundle_key TEXT NOT NULL, name TEXT NOT NULL, description TEXT, capabilities TEXT NOT NULL DEFAULT '[]', created_at TEXT NOT NULL, updated_at TEXT NOT NULL, PRIMARY KEY (tenant_id, id), UNIQUE (tenant_id, bundle_key)); CREATE INDEX IF NOT EXISTS idx_lt_capability_bundles_tenant ON lt_capability_bundles(tenant_id);`;
+import { randomUUID as randomUUID7 } from "crypto";
+var DDL23 = `CREATE TABLE IF NOT EXISTS lt_capability_bundles (id TEXT NOT NULL, tenant_id TEXT NOT NULL, bundle_key TEXT NOT NULL, name TEXT NOT NULL, description TEXT, capabilities TEXT NOT NULL DEFAULT '[]', created_at TEXT NOT NULL, updated_at TEXT NOT NULL, PRIMARY KEY (tenant_id, id), UNIQUE (tenant_id, bundle_key)); CREATE INDEX IF NOT EXISTS idx_lt_capability_bundles_tenant ON lt_capability_bundles(tenant_id);`;
 var duplicateMessage = "Capability bundle key already exists for tenant";
 function map(row) {
   return { id: row.id, tenantId: row.tenant_id, key: row.bundle_key, name: row.name, description: row.description ?? void 0, capabilities: JSON.parse(row.capabilities), createdAt: parseISO(row.created_at).toISOString(), updatedAt: parseISO(row.updated_at).toISOString() };
@@ -5771,7 +5921,7 @@ var LocalCapabilityBundleStore = class {
    */
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL22);
+    ensureTable(db, DDL23);
   }
   async listByTenant(tenantId) {
     return this.db.prepare("SELECT * FROM lt_capability_bundles WHERE tenant_id = ? ORDER BY created_at").all(tenantId).map(map);
@@ -5788,7 +5938,7 @@ var LocalCapabilityBundleStore = class {
   }
   async create(tenantId, input) {
     const now = nextTimestamp();
-    const id = randomUUID6();
+    const id = randomUUID7();
     try {
       this.db.prepare("INSERT INTO lt_capability_bundles (id, tenant_id, bundle_key, name, description, capabilities, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(id, tenantId, input.key, input.name, input.description ?? null, JSON.stringify(input.capabilities), now, now);
     } catch (error) {
@@ -5870,6 +6020,7 @@ async function createLocalStoreConfig(options = {}) {
     channelBinding: new LocalChannelBindingStore(db),
     channelInstallation: new LocalChannelInstallationStore(db),
     a2aApiKey: new LocalA2AApiKeyStore(db),
+    openAudit: new LocalOpenAuditStore(db),
     threadMessageQueue: new LocalThreadMessageQueueStore(db),
     skill: new LocalSkillStore(db),
     schedule: new LocalScheduleStorage(db),
@@ -5931,6 +6082,7 @@ export {
   LocalEvalStore,
   LocalMcpServerConfigStore,
   LocalMetricsServerConfigStore,
+  LocalOpenAuditStore,
   LocalProjectBotMembershipStore,
   LocalProjectMembershipStore,
   LocalProjectRoomMessageStore,