@axiom-lattice/local-stores 3.1.8 → 3.1.9

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/local-stores@3.1.8 build /home/runner/work/agentic/agentic/packages/local-stores
+> @axiom-lattice/local-stores@3.1.9 build /home/runner/work/agentic/agentic/packages/local-stores
 > tsup src/index.ts --format cjs,esm --dts --sourcemap
 
 CLI Building entry: src/index.ts
@@ -8,13 +8,13 @@
 CLI Target: es2020
 CJS Build start
 ESM Build start
-CJS dist/index.js     221.77 KB
-CJS dist/index.js.map 401.85 KB
-CJS ⚡️ Build success in 495ms
-ESM dist/index.mjs     217.29 KB
-ESM dist/index.mjs.map 398.23 KB
-ESM ⚡️ Build success in 511ms
+CJS dist/index.js     226.46 KB
+CJS dist/index.js.map 411.03 KB
+CJS ⚡️ Build success in 521ms
+ESM dist/index.mjs     221.93 KB
+ESM dist/index.mjs.map 407.36 KB
+ESM ⚡️ Build success in 525ms
 DTS Build start
-DTS ⚡️ Build success in 17712ms
-DTS dist/index.d.ts  40.88 KB
-DTS dist/index.d.mts 40.88 KB
+DTS ⚡️ Build success in 16277ms
+DTS dist/index.d.ts  41.48 KB
+DTS dist/index.d.mts 41.48 KB

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @axiom-lattice/local-stores
 
+## 3.1.9
+
+### Patch Changes
+
+- 20ec3c1: add webapp, mcps
+- Updated dependencies [20ec3c1]
+  - @axiom-lattice/core@4.2.9
+  - @axiom-lattice/protocols@4.2.1
+
 ## 3.1.8
 
 ### Patch Changes

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { SqlJsStatic, Database } from 'sql.js';
 import { SqliteSaver } from '@langchain/langgraph-checkpoint-sqlite';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ThreadInfo } from '@axiom-lattice/core';
 
 /**
@@ -643,11 +643,24 @@ declare class LocalA2AApiKeyStore implements A2AApiKeyStore {
     create(input: CreateA2AApiKeyInput): Promise<A2AApiKeyRecord>;
     disable(id: string): Promise<A2AApiKeyRecord>;
     enable(id: string): Promise<A2AApiKeyRecord>;
+    update(id: string, input: UpdateA2AApiKeyInput): Promise<A2AApiKeyRecord>;
     rotate(id: string): Promise<A2AApiKeyRecord>;
     delete(id: string): Promise<void>;
     loadIntoMap(): Promise<Map<string, A2AApiKeyEntry>>;
 }
 
+/**
+ * Local SQLite implementation of the Open audit store (append-only).
+ */
+
+/** SQLite-backed append-only audit store for the Open API surface. */
+declare class LocalOpenAuditStore implements OpenAuditStore {
+    private db;
+    constructor(db: DatabaseWrapper);
+    query(params: OpenAuditQuery): Promise<OpenAuditRecord[]>;
+    append(record: OpenAuditAppendInput): Promise<void>;
+}
+
 /**
  * Local SQLite implementation of IMessageQueueStore.
  */
@@ -885,6 +898,7 @@ declare function createLocalStoreConfig(options?: LocalStoreConfigOptions): Prom
     channelBinding: LocalChannelBindingStore;
     channelInstallation: LocalChannelInstallationStore;
     a2aApiKey: LocalA2AApiKeyStore;
+    openAudit: LocalOpenAuditStore;
     threadMessageQueue: LocalThreadMessageQueueStore;
     skill: LocalSkillStore;
     schedule: LocalScheduleStorage;
@@ -910,4 +924,4 @@ declare class InMemoryConversationStore implements IConversationStore {
     deleteConversation(conversationId: string): Promise<void>;
 }
 
-export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomReadStateStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };
+export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalOpenAuditStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomReadStateStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { SqlJsStatic, Database } from 'sql.js';
 import { SqliteSaver } from '@langchain/langgraph-checkpoint-sqlite';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, A2AApiKeyEntry, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, SkillStore, SkillStoreContext, Skill, CreateSkillRequest, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, IConversationStore, ConversationRecord, CreateConversationInput } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ThreadInfo } from '@axiom-lattice/core';
 
 /**
@@ -643,11 +643,24 @@ declare class LocalA2AApiKeyStore implements A2AApiKeyStore {
     create(input: CreateA2AApiKeyInput): Promise<A2AApiKeyRecord>;
     disable(id: string): Promise<A2AApiKeyRecord>;
     enable(id: string): Promise<A2AApiKeyRecord>;
+    update(id: string, input: UpdateA2AApiKeyInput): Promise<A2AApiKeyRecord>;
     rotate(id: string): Promise<A2AApiKeyRecord>;
     delete(id: string): Promise<void>;
     loadIntoMap(): Promise<Map<string, A2AApiKeyEntry>>;
 }
 
+/**
+ * Local SQLite implementation of the Open audit store (append-only).
+ */
+
+/** SQLite-backed append-only audit store for the Open API surface. */
+declare class LocalOpenAuditStore implements OpenAuditStore {
+    private db;
+    constructor(db: DatabaseWrapper);
+    query(params: OpenAuditQuery): Promise<OpenAuditRecord[]>;
+    append(record: OpenAuditAppendInput): Promise<void>;
+}
+
 /**
  * Local SQLite implementation of IMessageQueueStore.
  */
@@ -885,6 +898,7 @@ declare function createLocalStoreConfig(options?: LocalStoreConfigOptions): Prom
     channelBinding: LocalChannelBindingStore;
     channelInstallation: LocalChannelInstallationStore;
     a2aApiKey: LocalA2AApiKeyStore;
+    openAudit: LocalOpenAuditStore;
     threadMessageQueue: LocalThreadMessageQueueStore;
     skill: LocalSkillStore;
     schedule: LocalScheduleStorage;
@@ -910,4 +924,4 @@ declare class InMemoryConversationStore implements IConversationStore {
     deleteConversation(conversationId: string): Promise<void>;
 }
 
-export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomReadStateStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };
+export { DatabaseWrapper, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InMemoryConversationStore, LocalA2AApiKeyStore, LocalAssistantStore, LocalCapabilityBundleStore, LocalChannelBindingStore, LocalChannelInstallationStore, LocalConnectionStore, LocalDatabaseConfigStore, LocalEvalStore, LocalMcpServerConfigStore, LocalMetricsServerConfigStore, LocalOpenAuditStore, LocalProjectBotMembershipStore, LocalProjectMembershipStore, LocalProjectRoomMessageStore, LocalProjectRoomReadStateStore, LocalProjectRoomStore, LocalProjectStore, LocalScheduleStorage, LocalSkillStore, type LocalStoreConfigOptions, type LocalStoreOptions, LocalTaskStore, LocalTaskWorkItemStore, LocalTenantStore, LocalThreadMessageQueueStore, LocalThreadStore, LocalUserStore, LocalUserTenantLinkStore, LocalWorkflowTrackingStore, LocalWorkspaceStore, type Migration, MigrationManager, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, RunResult, StatementWrapper, closeDatabase, createLocalStoreConfig, ensureTable, getDatabase, initDatabase, nowISO, parseISO };

package/dist/index.js

@@ -44,6 +44,7 @@ __export(index_exports, {
   LocalEvalStore: () => LocalEvalStore,
   LocalMcpServerConfigStore: () => LocalMcpServerConfigStore,
   LocalMetricsServerConfigStore: () => LocalMetricsServerConfigStore,
+  LocalOpenAuditStore: () => LocalOpenAuditStore,
   LocalProjectBotMembershipStore: () => LocalProjectBotMembershipStore,
   LocalProjectMembershipStore: () => LocalProjectMembershipStore,
   LocalProjectRoomMessageStore: () => LocalProjectRoomMessageStore,
@@ -1460,6 +1461,22 @@ function mapRow4(row) {
     createdAt
   };
 }
+function mapRowsTolerant(rows2, scope) {
+  const messages = [];
+  for (const row of rows2) {
+    try {
+      messages.push(mapRow4(row));
+    } catch (error) {
+      console.warn("[ProjectRoomMessageStore] Skipping invalid message row", {
+        tenantId: scope.tenantId,
+        roomId: scope.roomId,
+        rowId: typeof row.id === "string" ? row.id : void 0,
+        reason: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  return messages;
+}
 var LocalProjectRoomMessageStore = class {
   constructor(db) {
     this.db = db;
@@ -1475,7 +1492,7 @@ var LocalProjectRoomMessageStore = class {
     if (input.before && !validDate(input.before.createdAt)) throw new RangeError("Project room message cursor date is invalid");
     const limit = Math.min(100, Math.max(1, Math.trunc(Number.isFinite(input.limit) ? input.limit : 1)));
     const rows2 = input.before ? this.db.prepare(`SELECT ${columns4} FROM lt_project_room_messages WHERE tenant_id = ? AND room_id = ? AND (created_at < ? OR (created_at = ? AND id < ?)) ORDER BY created_at DESC, id DESC LIMIT ?`).all(input.tenantId, input.roomId, input.before.createdAt.toISOString(), input.before.createdAt.toISOString(), input.before.id, limit) : this.db.prepare(`SELECT ${columns4} FROM lt_project_room_messages WHERE tenant_id = ? AND room_id = ? ORDER BY created_at DESC, id DESC LIMIT ?`).all(input.tenantId, input.roomId, limit);
-    return rows2.map(mapRow4);
+    return mapRowsTolerant(rows2, { tenantId: input.tenantId, roomId: input.roomId });
   }
   async findById(tenantId, id) {
     const row = this.byId(tenantId, id);
@@ -3875,6 +3892,7 @@ CREATE TABLE IF NOT EXISTS lt_a2a_api_keys (
   tenant_id TEXT NOT NULL,
   project_id TEXT,
   assistant_ids TEXT,
+  grants TEXT,
   label TEXT,
   enabled INTEGER NOT NULL DEFAULT 1,
   created_at TEXT NOT NULL,
@@ -3884,6 +3902,15 @@ CREATE TABLE IF NOT EXISTS lt_a2a_api_keys (
 function generateApiKey() {
   return `a2a_${(0, import_crypto3.randomUUID)().replace(/-/g, "")}`;
 }
+function parseGrants(raw) {
+  if (!raw) return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    return Array.isArray(parsed) ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function parseAssistantIds(raw) {
   if (!raw) return void 0;
   try {
@@ -3898,6 +3925,7 @@ var LocalA2AApiKeyStore = class {
     this.db = db;
     ensureTable(db, DDL16);
     this.ensureColumn("lt_a2a_api_keys", "assistant_ids", "assistant_ids TEXT");
+    this.ensureColumn("lt_a2a_api_keys", "grants", "grants TEXT");
     this.repairManagementIds();
   }
   /** Add a column if it does not exist (SQLite version compatible). */
@@ -3958,9 +3986,9 @@ var LocalA2AApiKeyStore = class {
     const key = generateApiKey();
     const now = nowISO();
     this.db.prepare(
-      `INSERT INTO lt_a2a_api_keys (id, key_value, tenant_id, project_id, assistant_ids, label, created_at, updated_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(id, (0, import_core3.encrypt)(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.label || null, now, now);
+      `INSERT INTO lt_a2a_api_keys (id, key_value, tenant_id, project_id, assistant_ids, grants, label, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(id, (0, import_core3.encrypt)(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.grants ? JSON.stringify(input.grants) : null, input.label || null, now, now);
     const record2 = {
       id,
       key,
@@ -3992,6 +4020,38 @@ var LocalA2AApiKeyStore = class {
     if (!row) throw new Error(`A2A API key not found: ${id}`);
     return mapRowToRecord(row);
   }
+  async update(id, input) {
+    const sets = [];
+    const values = [];
+    if (input.label !== void 0) {
+      sets.push("label = ?");
+      values.push(input.label || null);
+    }
+    if (input.projectId !== void 0) {
+      sets.push("project_id = ?");
+      values.push(input.projectId);
+    }
+    if (input.assistantIds !== void 0) {
+      sets.push("assistant_ids = ?");
+      values.push(input.assistantIds ? JSON.stringify(input.assistantIds) : null);
+    }
+    if (input.grants !== void 0) {
+      sets.push("grants = ?");
+      values.push(input.grants ? JSON.stringify(input.grants) : null);
+    }
+    if (sets.length === 0) {
+      const row2 = this.db.prepare("SELECT * FROM lt_a2a_api_keys WHERE id = ?").get(id);
+      if (!row2) throw new Error(`A2A API key not found: ${id}`);
+      return mapRowToRecord(row2);
+    }
+    sets.push("updated_at = ?");
+    values.push(nowISO());
+    values.push(id);
+    this.db.prepare(`UPDATE lt_a2a_api_keys SET ${sets.join(", ")} WHERE id = ?`).run(...values);
+    const row = this.db.prepare("SELECT * FROM lt_a2a_api_keys WHERE id = ?").get(id);
+    if (!row) throw new Error(`A2A API key not found: ${id}`);
+    return mapRowToRecord(row);
+  }
   async rotate(id) {
     const key = generateApiKey();
     const now = nowISO();
@@ -4040,6 +4100,7 @@ function mapRowToRecord(row) {
     tenantId: row.tenant_id,
     projectId: row.project_id,
     assistantIds: parseAssistantIds(row.assistant_ids),
+    grants: parseGrants(row.grants),
     label: row.label || void 0,
     enabled: row.enabled === 1,
     createdAt: parseISO(row.created_at),
@@ -4047,10 +4108,100 @@ function mapRowToRecord(row) {
   };
 }
 
-// src/stores/LocalThreadMessageQueueStore.ts
-var import_protocols4 = require("@axiom-lattice/protocols");
+// src/stores/LocalOpenAuditStore.ts
 var import_crypto4 = require("crypto");
 var DDL17 = `
+CREATE TABLE IF NOT EXISTS lt_open_audit (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL,
+  credential_id TEXT NOT NULL,
+  credential_kind TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  domain TEXT NOT NULL,
+  action TEXT NOT NULL,
+  args TEXT,
+  status TEXT NOT NULL,
+  error_code TEXT,
+  duration_ms INTEGER NOT NULL,
+  created_at TEXT NOT NULL
+);
+`;
+var LocalOpenAuditStore = class {
+  constructor(db) {
+    this.db = db;
+    ensureTable(db, DDL17);
+  }
+  async query(params) {
+    const clauses = ["tenant_id = ?"];
+    const values = [params.tenantId];
+    if (params.credentialId) {
+      clauses.push("credential_id = ?");
+      values.push(params.credentialId);
+    }
+    if (params.domain) {
+      clauses.push("domain = ?");
+      values.push(params.domain);
+    }
+    if (params.status) {
+      clauses.push("status = ?");
+      values.push(params.status);
+    }
+    if (params.from) {
+      clauses.push("created_at >= ?");
+      values.push(params.from);
+    }
+    if (params.to) {
+      clauses.push("created_at < ?");
+      values.push(params.to);
+    }
+    const limit = params.limit ?? 100;
+    const offset = params.offset ?? 0;
+    values.push(limit, offset);
+    const rows2 = this.db.prepare(
+      `SELECT * FROM lt_open_audit WHERE ${clauses.join(" AND ")}
+         ORDER BY created_at DESC LIMIT ? OFFSET ?`
+    ).all(...values);
+    return rows2.map((row) => ({
+      id: row.id,
+      tenantId: row.tenant_id,
+      credentialId: row.credential_id,
+      credentialKind: row.credential_kind,
+      projectId: row.project_id,
+      domain: row.domain,
+      action: row.action,
+      args: row.args ? JSON.parse(row.args) : void 0,
+      status: row.status,
+      errorCode: row.error_code ?? void 0,
+      durationMs: row.duration_ms,
+      createdAt: parseISO(row.created_at)
+    }));
+  }
+  async append(record2) {
+    this.db.prepare(
+      `INSERT INTO lt_open_audit
+          (id, tenant_id, credential_id, credential_kind, project_id, domain, action, args, status, error_code, duration_ms, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(
+      (0, import_crypto4.randomUUID)(),
+      record2.tenantId,
+      record2.credentialId,
+      record2.credentialKind,
+      record2.projectId,
+      record2.domain,
+      record2.action,
+      record2.args === void 0 ? null : JSON.stringify(record2.args),
+      record2.status,
+      record2.errorCode ?? null,
+      Math.max(0, Math.round(record2.durationMs)),
+      nowISO()
+    );
+  }
+};
+
+// src/stores/LocalThreadMessageQueueStore.ts
+var import_protocols4 = require("@axiom-lattice/protocols");
+var import_crypto5 = require("crypto");
+var DDL18 = `
 CREATE TABLE IF NOT EXISTS lt_thread_message_queue (
   id TEXT PRIMARY KEY,
   thread_id TEXT NOT NULL,
@@ -4076,7 +4227,7 @@ var LocalThreadMessageQueueStore = class {
   constructor(db) {
     this.capacityTail = Promise.resolve();
     this.db = db;
-    ensureTable(db, DDL17);
+    ensureTable(db, DDL18);
     const columns6 = db.prepare("PRAGMA table_info(lt_thread_message_queue)").all();
     const names = new Set(columns6.map(({ name }) => name));
     if (!names.has("trusted_run_context")) {
@@ -4089,7 +4240,7 @@ var LocalThreadMessageQueueStore = class {
   async addMessage(params) {
     const trusted = validateQueueTrust(params);
     const now = nowISO();
-    const id = params.id || (0, import_crypto4.randomUUID)();
+    const id = params.id || (0, import_crypto5.randomUUID)();
     const seqRow = this.db.prepare(
       `SELECT COALESCE(MAX(sequence_order), 0) + 1 as next_seq FROM lt_thread_message_queue WHERE thread_id = ?`
     ).get(params.threadId);
@@ -4132,7 +4283,7 @@ var LocalThreadMessageQueueStore = class {
         projectId: params.projectId
       };
       const filter = scopeClause(scope);
-      const id = params.id || (0, import_crypto4.randomUUID)();
+      const id = params.id || (0, import_crypto5.randomUUID)();
       const limit = maxSize === Infinity ? -1 : maxSize;
       const result = this.db.prepare(
         `INSERT INTO lt_thread_message_queue (id, thread_id, tenant_id, assistant_id, workspace_id, project_id, message_content, message_type, sequence_order, priority, command, custom_run_config, trusted_run_context, execution_mode, created_at)
@@ -4170,7 +4321,7 @@ var LocalThreadMessageQueueStore = class {
   async addMessageAtHead(params) {
     const trusted = validateQueueTrust(params);
     const now = nowISO();
-    const id = params.id || (0, import_crypto4.randomUUID)();
+    const id = params.id || (0, import_crypto5.randomUUID)();
     const seqRow = this.db.prepare(
       `SELECT COALESCE(MAX(sequence_order), 0) + 1 as next_seq FROM lt_thread_message_queue WHERE thread_id = ?`
     ).get(params.threadId);
@@ -4289,7 +4440,7 @@ function rowToMessage(row) {
 }
 
 // src/stores/LocalSkillStore.ts
-var DDL18 = `
+var DDL19 = `
 CREATE TABLE IF NOT EXISTS lt_skills (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -4308,7 +4459,7 @@ CREATE TABLE IF NOT EXISTS lt_skills (
 var LocalSkillStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL18);
+    ensureTable(db, DDL19);
   }
   async getAllSkills(tenantId, _context) {
     const rows2 = this.db.prepare(
@@ -4458,7 +4609,7 @@ function mapRowToSkill(row) {
 }
 
 // src/stores/LocalScheduleStorage.ts
-var DDL19 = `
+var DDL20 = `
 CREATE TABLE IF NOT EXISTS lt_scheduled_tasks (
   task_id TEXT PRIMARY KEY,
   task_type TEXT NOT NULL,
@@ -4491,7 +4642,7 @@ CREATE INDEX IF NOT EXISTS idx_lt_st_tenant ON lt_scheduled_tasks(tenant_id);
 var LocalScheduleStorage = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL19);
+    ensureTable(db, DDL20);
   }
   async save(task) {
     this.db.prepare(
@@ -4785,7 +4936,7 @@ function mapRowToTask(row) {
 }
 
 // src/stores/LocalTaskStore.ts
-var import_crypto5 = require("crypto");
+var import_crypto6 = require("crypto");
 var MAX_CANONICAL_TASK_TIME = "9999-12-31T23:59:59.999Z";
 var TASK_STATUSES = /* @__PURE__ */ new Set([
   "pending",
@@ -4801,7 +4952,7 @@ var NEXT_UPDATED_AT_SQL = `updated_at = CASE
     THEN strftime('%Y-%m-%dT%H:%M:%fZ', updated_at, '+0.001 seconds')
   ELSE ?
 END`;
-var DDL20 = `
+var DDL21 = `
 CREATE TABLE IF NOT EXISTS lt_tasks (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -4874,7 +5025,7 @@ function assertPage(limit, offset = 0) {
 var LocalTaskStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL20);
+    ensureTable(db, DDL21);
     this.ensureColumn("lt_tasks", "require_review", "require_review INTEGER DEFAULT 0");
     this.ensureColumn("lt_tasks", "dependencies", "dependencies TEXT");
     this.ensureColumn("lt_tasks", "result", "result TEXT");
@@ -4891,7 +5042,7 @@ var LocalTaskStore = class {
     }
   }
   async create(params) {
-    const id = params.id ?? (0, import_crypto5.randomUUID)();
+    const id = params.id ?? (0, import_crypto6.randomUUID)();
     const now = nowISO();
     this.db.prepare(
       `INSERT INTO lt_tasks (id, tenant_id, owner_type, owner_id, title, description, status, priority, due_date, metadata, parent_id, source_id, context, require_review, dependencies, result, failure_reason, workspace_id, project_id, files, created_at, updated_at)
@@ -5551,7 +5702,7 @@ var PROJECT_LIFECYCLE_ACTIONS = /* @__PURE__ */ new Set([
   "cancelled",
   "reassigned"
 ]);
-var DDL21 = `
+var DDL22 = `
 CREATE TABLE IF NOT EXISTS lt_task_work_items (
   id TEXT NOT NULL,
   tenant_id TEXT NOT NULL,
@@ -5625,7 +5776,7 @@ function assertLifecyclePage(query) {
 var LocalTaskWorkItemStore = class {
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL21);
+    ensureTable(db, DDL22);
     this.ensureColumn("lt_task_work_items", "workspace_id", "workspace_id TEXT");
     this.ensureColumn("lt_task_work_items", "project_id", "project_id TEXT");
     this.ensureColumn("lt_task_work_items", "event_key", "event_key TEXT");
@@ -5821,8 +5972,8 @@ var LocalTaskWorkItemStore = class {
 };
 
 // src/stores/LocalCapabilityBundleStore.ts
-var import_crypto6 = require("crypto");
-var DDL22 = `CREATE TABLE IF NOT EXISTS lt_capability_bundles (id TEXT NOT NULL, tenant_id TEXT NOT NULL, bundle_key TEXT NOT NULL, name TEXT NOT NULL, description TEXT, capabilities TEXT NOT NULL DEFAULT '[]', created_at TEXT NOT NULL, updated_at TEXT NOT NULL, PRIMARY KEY (tenant_id, id), UNIQUE (tenant_id, bundle_key)); CREATE INDEX IF NOT EXISTS idx_lt_capability_bundles_tenant ON lt_capability_bundles(tenant_id);`;
+var import_crypto7 = require("crypto");
+var DDL23 = `CREATE TABLE IF NOT EXISTS lt_capability_bundles (id TEXT NOT NULL, tenant_id TEXT NOT NULL, bundle_key TEXT NOT NULL, name TEXT NOT NULL, description TEXT, capabilities TEXT NOT NULL DEFAULT '[]', created_at TEXT NOT NULL, updated_at TEXT NOT NULL, PRIMARY KEY (tenant_id, id), UNIQUE (tenant_id, bundle_key)); CREATE INDEX IF NOT EXISTS idx_lt_capability_bundles_tenant ON lt_capability_bundles(tenant_id);`;
 var duplicateMessage = "Capability bundle key already exists for tenant";
 function map(row) {
   return { id: row.id, tenantId: row.tenant_id, key: row.bundle_key, name: row.name, description: row.description ?? void 0, capabilities: JSON.parse(row.capabilities), createdAt: parseISO(row.created_at).toISOString(), updatedAt: parseISO(row.updated_at).toISOString() };
@@ -5843,7 +5994,7 @@ var LocalCapabilityBundleStore = class {
    */
   constructor(db) {
     this.db = db;
-    ensureTable(db, DDL22);
+    ensureTable(db, DDL23);
   }
   async listByTenant(tenantId) {
     return this.db.prepare("SELECT * FROM lt_capability_bundles WHERE tenant_id = ? ORDER BY created_at").all(tenantId).map(map);
@@ -5860,7 +6011,7 @@ var LocalCapabilityBundleStore = class {
   }
   async create(tenantId, input) {
     const now = nextTimestamp();
-    const id = (0, import_crypto6.randomUUID)();
+    const id = (0, import_crypto7.randomUUID)();
     try {
       this.db.prepare("INSERT INTO lt_capability_bundles (id, tenant_id, bundle_key, name, description, capabilities, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(id, tenantId, input.key, input.name, input.description ?? null, JSON.stringify(input.capabilities), now, now);
     } catch (error) {
@@ -5942,6 +6093,7 @@ async function createLocalStoreConfig(options = {}) {
     channelBinding: new LocalChannelBindingStore(db),
     channelInstallation: new LocalChannelInstallationStore(db),
     a2aApiKey: new LocalA2AApiKeyStore(db),
+    openAudit: new LocalOpenAuditStore(db),
     threadMessageQueue: new LocalThreadMessageQueueStore(db),
     skill: new LocalSkillStore(db),
     schedule: new LocalScheduleStorage(db),
@@ -6004,6 +6156,7 @@ var InMemoryConversationStore = class {
   LocalEvalStore,
   LocalMcpServerConfigStore,
   LocalMetricsServerConfigStore,
+  LocalOpenAuditStore,
   LocalProjectBotMembershipStore,
   LocalProjectMembershipStore,
   LocalProjectRoomMessageStore,