@axiom-lattice/local-stores 3.2.1 → 3.2.3

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/local-stores@3.2.1 build /home/runner/work/agentic/agentic/packages/local-stores
+> @axiom-lattice/local-stores@3.2.3 build /home/runner/work/agentic/agentic/packages/local-stores
 > tsup src/index.ts --format cjs,esm --dts --sourcemap
 
 CLI Building entry: src/index.ts
@@ -8,13 +8,13 @@
 CLI Target: es2020
 CJS Build start
 ESM Build start
-ESM dist/index.mjs     237.70 KB
-ESM dist/index.mjs.map 436.10 KB
-ESM ⚡️ Build success in 659ms
-CJS dist/index.js     242.32 KB
-CJS dist/index.js.map 439.84 KB
-CJS ⚡️ Build success in 696ms
+ESM dist/index.mjs     239.07 KB
+ESM dist/index.mjs.map 438.65 KB
+ESM ⚡️ Build success in 857ms
+CJS dist/index.js     243.72 KB
+CJS dist/index.js.map 442.40 KB
+CJS ⚡️ Build success in 859ms
 DTS Build start
-DTS ⚡️ Build success in 14399ms
-DTS dist/index.d.ts  44.67 KB
-DTS dist/index.d.mts 44.67 KB
+DTS ⚡️ Build success in 12595ms
+DTS dist/index.d.ts  44.69 KB
+DTS dist/index.d.mts 44.69 KB

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @axiom-lattice/local-stores
 
+## 3.2.3
+
+### Patch Changes
+
+- Updated dependencies
+  - @axiom-lattice/core@6.3.3
+
+## 3.2.2
+
+### Patch Changes
+
+- bb2614f: Chating composer height, plugin connection-secret encryption, and manage_task compact cards.
+
+  - react-sdk: keep the Chating composer input from collapsing after a run. In slot mode (Chating always passes an array `slotConfig`) the Sender input is a `contentEditable` whose height comes from `autoSize`; without a `minRows` the empty editor lost its placeholder-driven line box once streaming ended and collapsed to zero height on some platforms (e.g. Windows Chrome), leaving the input unreachable while the footer stayed visible. Pass `autoSize={{ minRows: 1, maxRows: 8 }}` like `ProjectRoomComposer`.
+  - protocols/core: add `ConnectionEntry.secretFields`, plus `connectionSecretFields` / `encryptConfigFields` / `decryptConfigFields`.
+  - local-stores/pg-stores: encrypt the declared secret fields on save and decrypt on read, so the API and runtime consumers always receive real values. Existing plaintext rows read unchanged and convert on their next save (PG migration v188).
+  - gateway: plugin builder self-test discovery + secret redaction.
+  - core: `manage_task` `add_activity` now returns the target task alongside the activity (`{ success, data, task }`), so UIs can show which task an activity was written to.
+  - react-sdk: every `manage_task` action renders a compact chip in the chat stream and reveals its full card on hover. Fixes `get` and `add_activity`, which previously rendered no UI at all.
+
+- Updated dependencies [bb2614f]
+  - @axiom-lattice/protocols@4.7.1
+  - @axiom-lattice/core@6.3.2
+
 ## 3.2.1
 
 ### Patch Changes

package/dist/index.d.mts

@@ -467,6 +467,7 @@ declare class LocalDatabaseConfigStore implements DatabaseConfigStore {
 declare class LocalConnectionStore implements ConnectionStore {
     private db;
     constructor(db: DatabaseWrapper);
+    private ensureColumn;
     listByTenant(tenantId: string): Promise<ConnectionEntry[]>;
     listByType(tenantId: string, type: string): Promise<ConnectionEntry[]>;
     getByKey(tenantId: string, type: string, key: string): Promise<ConnectionEntry | null>;

package/dist/index.d.ts

@@ -467,6 +467,7 @@ declare class LocalDatabaseConfigStore implements DatabaseConfigStore {
 declare class LocalConnectionStore implements ConnectionStore {
     private db;
     constructor(db: DatabaseWrapper);
+    private ensureColumn;
     listByTenant(tenantId: string): Promise<ConnectionEntry[]>;
     listByType(tenantId: string, type: string): Promise<ConnectionEntry[]>;
     getByKey(tenantId: string, type: string, key: string): Promise<ConnectionEntry | null>;

package/dist/index.js

@@ -2074,6 +2074,7 @@ function encryptPasswordInConfig(config) {
 
 // src/stores/LocalConnectionStore.ts
 var import_uuid = require("uuid");
+var import_core2 = require("@axiom-lattice/core");
 var DDL9 = `
 CREATE TABLE IF NOT EXISTS connection_configs (
   id TEXT NOT NULL,
@@ -2083,6 +2084,7 @@ CREATE TABLE IF NOT EXISTS connection_configs (
   name TEXT NOT NULL,
   description TEXT,
   config TEXT NOT NULL,
+  secret_fields TEXT,
   created_at TEXT NOT NULL,
   updated_at TEXT NOT NULL,
   PRIMARY KEY (tenant_id, id),
@@ -2090,10 +2092,28 @@ CREATE TABLE IF NOT EXISTS connection_configs (
 );
 CREATE INDEX IF NOT EXISTS idx_conn_type ON connection_configs(tenant_id, type);
 `;
+function parseSecretFields(raw) {
+  if (!raw) return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    if (Array.isArray(parsed) && parsed.every((v) => typeof v === "string") && parsed.length > 0) {
+      return parsed;
+    }
+  } catch {
+  }
+  return void 0;
+}
 var LocalConnectionStore = class {
   constructor(db) {
     this.db = db;
     ensureTable(db, DDL9);
+    this.ensureColumn("connection_configs", "secret_fields", "secret_fields TEXT");
+  }
+  ensureColumn(table, column, ddl2) {
+    const cols = this.db.prepare(`PRAGMA table_info(${table})`).all();
+    if (!cols.some((c) => c.name === column)) {
+      this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${ddl2}`);
+    }
   }
   async listByTenant(tenantId) {
     const rows2 = this.db.prepare(
@@ -2116,11 +2136,23 @@ var LocalConnectionStore = class {
   async create(entry) {
     const id = (0, import_uuid.v4)();
     const now = nowISO();
+    const secretFields = entry.secretFields?.length ? entry.secretFields : void 0;
     this.db.prepare(
-      `INSERT INTO connection_configs (id, tenant_id, type, key, name, description, config, created_at, updated_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(id, entry.tenantId, entry.type, entry.key, entry.name, entry.description || null, JSON.stringify(entry.config), now, now);
-    return { id, ...entry, createdAt: now, updatedAt: now };
+      `INSERT INTO connection_configs (id, tenant_id, type, key, name, description, config, secret_fields, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(
+      id,
+      entry.tenantId,
+      entry.type,
+      entry.key,
+      entry.name,
+      entry.description || null,
+      JSON.stringify((0, import_core2.encryptConfigFields)(entry.config, secretFields)),
+      secretFields ? JSON.stringify(secretFields) : null,
+      now,
+      now
+    );
+    return { id, ...entry, secretFields, createdAt: now, updatedAt: now };
   }
   async update(tenantId, type, key, updates) {
     const existing = await this.getByKey(tenantId, type, key);
@@ -2136,8 +2168,11 @@ var LocalConnectionStore = class {
       values.push(updates.description || null);
     }
     if (updates.config !== void 0) {
+      const secretFields = updates.secretFields?.length ? updates.secretFields : existing.secretFields?.length ? existing.secretFields : void 0;
       setClauses.push("config = ?");
-      values.push(JSON.stringify(updates.config));
+      values.push(JSON.stringify((0, import_core2.encryptConfigFields)(updates.config, secretFields)));
+      setClauses.push("secret_fields = ?");
+      values.push(secretFields ? JSON.stringify(secretFields) : null);
     }
     if (setClauses.length === 0) return existing;
     const now = nowISO();
@@ -2156,6 +2191,8 @@ var LocalConnectionStore = class {
     return result.changes > 0;
   }
   mapRow(row) {
+    const secretFields = parseSecretFields(row.secret_fields);
+    const storedConfig = JSON.parse(row.config);
     return {
       id: row.id,
       tenantId: row.tenant_id,
@@ -2163,7 +2200,8 @@ var LocalConnectionStore = class {
       key: row.key,
       name: row.name,
       description: row.description || void 0,
-      config: JSON.parse(row.config),
+      config: (0, import_core2.decryptConfigFields)(storedConfig, secretFields),
+      secretFields,
       createdAt: row.created_at,
       updatedAt: row.updated_at
     };
@@ -2295,7 +2333,7 @@ function mapRowToEntry2(row) {
 }
 
 // src/stores/LocalMcpServerConfigStore.ts
-var import_core2 = require("@axiom-lattice/core");
+var import_core3 = require("@axiom-lattice/core");
 var DDL11 = `
 CREATE TABLE IF NOT EXISTS lt_mcp_configs (
   id TEXT NOT NULL,
@@ -2445,7 +2483,7 @@ function mapRowToEntry3(row) {
     try {
       const decryptedEnv = {};
       for (const [key, value] of Object.entries(config.env)) {
-        decryptedEnv[key] = (0, import_core2.decrypt)(value);
+        decryptedEnv[key] = (0, import_core3.decrypt)(value);
       }
       config.env = decryptedEnv;
     } catch (error) {
@@ -2457,7 +2495,7 @@ function mapRowToEntry3(row) {
     try {
       const decryptedHeaders = {};
       for (const [key, value] of Object.entries(config.headers)) {
-        decryptedHeaders[key] = (0, import_core2.decrypt)(value);
+        decryptedHeaders[key] = (0, import_core3.decrypt)(value);
       }
       config.headers = decryptedHeaders;
     } catch (error) {
@@ -2485,7 +2523,7 @@ function encryptEnvInConfig(config) {
   if (configCopy.env && Object.keys(configCopy.env).length > 0) {
     const encryptedEnv = {};
     for (const [key, value] of Object.entries(configCopy.env)) {
-      encryptedEnv[key] = (0, import_core2.encrypt)(value);
+      encryptedEnv[key] = (0, import_core3.encrypt)(value);
     }
     configCopy.env = encryptedEnv;
     isEnvEncrypted = true;
@@ -2493,7 +2531,7 @@ function encryptEnvInConfig(config) {
   if (configCopy.headers && Object.keys(configCopy.headers).length > 0) {
     const encryptedHeaders = {};
     for (const [key, value] of Object.entries(configCopy.headers)) {
-      encryptedHeaders[key] = (0, import_core2.encrypt)(value);
+      encryptedHeaders[key] = (0, import_core3.encrypt)(value);
     }
     configCopy.headers = encryptedHeaders;
     isEnvEncrypted = true;
@@ -2502,7 +2540,7 @@ function encryptEnvInConfig(config) {
 }
 
 // src/stores/LocalModelProviderStore.ts
-var import_core3 = require("@axiom-lattice/core");
+var import_core4 = require("@axiom-lattice/core");
 var DDL12 = `
 CREATE TABLE IF NOT EXISTS lt_model_providers (
   id TEXT NOT NULL,
@@ -2612,7 +2650,7 @@ var LocalModelProviderStore = class {
       // Phase 1 pins the LLM provider (ADR-138 decision 7b)
       "openai",
       data.baseURL,
-      data.apiKey ? (0, import_core3.encrypt)(data.apiKey) : null,
+      data.apiKey ? (0, import_core4.encrypt)(data.apiKey) : null,
       data.apiKey ? data.apiKey.slice(-4) : null,
       data.enabled === false ? 0 : 1,
       now,
@@ -2647,7 +2685,7 @@ var LocalModelProviderStore = class {
       set("api_key_enc", null);
       set("api_key_hint", null);
     } else if (updates.apiKey) {
-      set("api_key_enc", (0, import_core3.encrypt)(updates.apiKey));
+      set("api_key_enc", (0, import_core4.encrypt)(updates.apiKey));
       set("api_key_hint", updates.apiKey.slice(-4));
     }
     if (fields.length === 0) {
@@ -2780,7 +2818,7 @@ function mapRowToEntry4(row) {
   let apiKey;
   if (row.api_key_enc) {
     try {
-      apiKey = (0, import_core3.decrypt)(row.api_key_enc);
+      apiKey = (0, import_core4.decrypt)(row.api_key_enc);
     } catch (error) {
       console.error("Failed to decrypt model provider API key:", error);
       throw new Error("Failed to decrypt model provider API key");
@@ -4245,7 +4283,7 @@ function mapRow6(row) {
 }
 
 // src/stores/LocalA2AApiKeyStore.ts
-var import_core4 = require("@axiom-lattice/core");
+var import_core5 = require("@axiom-lattice/core");
 var import_crypto3 = require("crypto");
 var DDL17 = `
 CREATE TABLE IF NOT EXISTS lt_a2a_api_keys (
@@ -4316,7 +4354,7 @@ var LocalA2AApiKeyStore = class {
     ).all();
     for (const row of rows2) {
       try {
-        if ((0, import_core4.decrypt)(row.key_value) === key) return mapRowToRecord(row);
+        if ((0, import_core5.decrypt)(row.key_value) === key) return mapRowToRecord(row);
       } catch {
       }
     }
@@ -4350,7 +4388,7 @@ var LocalA2AApiKeyStore = class {
     this.db.prepare(
       `INSERT INTO lt_a2a_api_keys (id, key_value, tenant_id, project_id, assistant_ids, grants, label, created_at, updated_at)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(id, (0, import_core4.encrypt)(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.grants ? JSON.stringify(input.grants) : null, input.label || null, now, now);
+    ).run(id, (0, import_core5.encrypt)(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.grants ? JSON.stringify(input.grants) : null, input.label || null, now, now);
     const record2 = {
       id,
       key,
@@ -4419,7 +4457,7 @@ var LocalA2AApiKeyStore = class {
     const now = nowISO();
     this.db.prepare(
       `UPDATE lt_a2a_api_keys SET key_value = ?, updated_at = ? WHERE id = ?`
-    ).run((0, import_core4.encrypt)(key), now, id);
+    ).run((0, import_core5.encrypt)(key), now, id);
     const row = this.db.prepare(`SELECT * FROM lt_a2a_api_keys WHERE id = ?`).get(id);
     if (!row) throw new Error(`A2A API key not found: ${id}`);
     const record2 = mapRowToRecord(row);
@@ -4436,7 +4474,7 @@ var LocalA2AApiKeyStore = class {
     const map2 = /* @__PURE__ */ new Map();
     for (const row of rows2) {
       try {
-        const key = (0, import_core4.decrypt)(row.key_value);
+        const key = (0, import_core5.decrypt)(row.key_value);
         map2.set(key, {
           key,
           tenantId: row.tenant_id,
@@ -4452,7 +4490,7 @@ var LocalA2AApiKeyStore = class {
 function mapRowToRecord(row) {
   let key = "";
   try {
-    key = (0, import_core4.decrypt)(row.key_value);
+    key = (0, import_core5.decrypt)(row.key_value);
   } catch {
     key = row.key_value;
   }