@axiom-lattice/pg-stores 2.0.10 → 3.0.0

package/dist/index.js

@@ -2460,6 +2460,24 @@ var dropProjectFolderPathColumn = {
   }
 };
 
+// src/migrations/add_project_kind_column.ts
+var addProjectKindColumn = {
+  version: 165,
+  name: "add_project_kind_column",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_projects
+      ADD COLUMN IF NOT EXISTS kind TEXT NOT NULL DEFAULT 'business'
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_projects
+      DROP COLUMN IF EXISTS kind
+    `);
+  }
+};
+
 // src/stores/PostgreSQLProjectStore.ts
 var PostgreSQLProjectStore = class {
   constructor(options) {
@@ -2482,6 +2500,7 @@ var PostgreSQLProjectStore = class {
     this.migrationManager.register(createProjectsTable);
     this.migrationManager.register(addProjectConfigColumn);
     this.migrationManager.register(dropProjectFolderPathColumn);
+    this.migrationManager.register(addProjectKindColumn);
     if (options.autoMigrate !== false) {
       this.initialize().catch((error) => {
         console.error("Failed to initialize PostgreSQLProjectStore:", error);
@@ -2527,6 +2546,7 @@ var PostgreSQLProjectStore = class {
       name: row.name,
       description: row.description || void 0,
       config: row.config || void 0,
+      kind: row.kind || "business",
       createdAt: row.created_at,
       updatedAt: row.updated_at
     };
@@ -2534,16 +2554,22 @@ var PostgreSQLProjectStore = class {
   /**
    * Get all projects for a specific workspace
    */
-  async getProjectsByWorkspace(tenantId, workspaceId) {
+  async getProjectsByWorkspace(tenantId, workspaceId, filter) {
     await this.ensureInitialized();
+    const conditions = ["tenant_id = $1", "workspace_id = $2"];
+    const values = [tenantId, workspaceId];
+    if (filter?.kind !== void 0) {
+      values.push(filter.kind);
+      conditions.push(`kind = $${values.length}`);
+    }
     const result = await this.pool.query(
       `
-      SELECT id, tenant_id, workspace_id, name, description, config, created_at, updated_at
+      SELECT id, tenant_id, workspace_id, name, description, config, kind, created_at, updated_at
       FROM lattice_projects
-      WHERE tenant_id = $1 AND workspace_id = $2
+      WHERE ${conditions.join(" AND ")}
       ORDER BY created_at DESC
     `,
-      [tenantId, workspaceId]
+      values
     );
     return result.rows.map(this.mapRowToProject);
   }
@@ -2554,7 +2580,7 @@ var PostgreSQLProjectStore = class {
     await this.ensureInitialized();
     const result = await this.pool.query(
       `
-      SELECT id, tenant_id, workspace_id, name, description, config, created_at, updated_at
+      SELECT id, tenant_id, workspace_id, name, description, config, kind, created_at, updated_at
       FROM lattice_projects
       WHERE id = $1 AND tenant_id = $2
     `,
@@ -2571,18 +2597,20 @@ var PostgreSQLProjectStore = class {
   async createProject(tenantId, workspaceId, id, data) {
     await this.ensureInitialized();
     const now = /* @__PURE__ */ new Date();
+    const kind = data.kind || "business";
     await this.pool.query(
       `
-      INSERT INTO lattice_projects (id, tenant_id, workspace_id, name, description, config, created_at, updated_at)
-      VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
+      INSERT INTO lattice_projects (id, tenant_id, workspace_id, name, description, config, kind, created_at, updated_at)
+      VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)
       ON CONFLICT (id, tenant_id) DO UPDATE SET
         workspace_id = EXCLUDED.workspace_id,
         name = EXCLUDED.name,
         description = EXCLUDED.description,
         config = EXCLUDED.config,
+        kind = EXCLUDED.kind,
         updated_at = EXCLUDED.updated_at
     `,
-      [id, tenantId, workspaceId, data.name, data.description || null, data.config || null, now, now]
+      [id, tenantId, workspaceId, data.name, data.description || null, data.config || null, kind, now, now]
     );
     return {
       id,
@@ -2591,6 +2619,7 @@ var PostgreSQLProjectStore = class {
       name: data.name,
       description: data.description,
       config: data.config,
+      kind,
       createdAt: now,
       updatedAt: now
     };
@@ -2623,6 +2652,10 @@ var PostgreSQLProjectStore = class {
       updateFields.push(`config = $${paramIndex++}`);
       updateValues.push(updates.config || null);
     }
+    if (updates.kind !== void 0) {
+      updateFields.push(`kind = $${paramIndex++}`);
+      updateValues.push(updates.kind);
+    }
     if (updateFields.length === 0) {
       return existing;
     }
@@ -5853,6 +5886,24 @@ var createA2AApiKeysTable = {
   }
 };
 
+// src/migrations/add_a2a_key_assistant_ids.ts
+var addA2AKeyAssistantIds = {
+  version: 167,
+  name: "add_a2a_key_assistant_ids",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_a2a_api_keys
+        ADD COLUMN IF NOT EXISTS assistant_ids JSONB
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_a2a_api_keys
+        DROP COLUMN IF EXISTS assistant_ids
+    `);
+  }
+};
+
 // src/stores/PostgreSQLA2AApiKeyStore.ts
 var import_core5 = require("@axiom-lattice/core");
 var import_crypto2 = require("crypto");
@@ -5864,8 +5915,8 @@ function mapRowToRecord(row) {
     id: row.id,
     key: (0, import_core5.decrypt)(row.key_value),
     tenantId: row.tenant_id,
-    projectId: row.project_id || void 0,
-    workspaceId: row.workspace_id || void 0,
+    projectId: row.project_id,
+    assistantIds: row.assistant_ids ?? void 0,
     label: row.label || void 0,
     enabled: row.enabled,
     createdAt: row.created_at,
@@ -5888,6 +5939,7 @@ var PostgreSQLA2AApiKeyStore = class {
     })();
     this.migrationManager = new MigrationManager(this.pool);
     this.migrationManager.register(createA2AApiKeysTable);
+    this.migrationManager.register(addA2AKeyAssistantIds);
     if (options.autoMigrate !== false) {
       this.initialize().catch((error) => {
         console.error("Failed to initialize PostgreSQLA2AApiKeyStore:", error);
@@ -5926,6 +5978,14 @@ var PostgreSQLA2AApiKeyStore = class {
     }
     return null;
   }
+  async findById(id) {
+    await this.ensureInitialized();
+    const result = await this.pool.query(
+      `SELECT * FROM lattice_a2a_api_keys WHERE id = $1`,
+      [id]
+    );
+    return result.rows[0] ? mapRowToRecord(result.rows[0]) : null;
+  }
   async list(params) {
     await this.ensureInitialized();
     const limit = params.limit || 100;
@@ -5947,9 +6007,9 @@ var PostgreSQLA2AApiKeyStore = class {
     await this.ensureInitialized();
     const key = generateApiKey();
     const result = await this.pool.query(
-      `INSERT INTO lattice_a2a_api_keys (key_value, tenant_id, project_id, workspace_id, label)
+      `INSERT INTO lattice_a2a_api_keys (key_value, tenant_id, project_id, assistant_ids, label)
        VALUES ($1, $2, $3, $4, $5) RETURNING *`,
-      [(0, import_core5.encrypt)(key), input.tenantId, input.projectId || null, input.workspaceId || null, input.label || null]
+      [(0, import_core5.encrypt)(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.label || null]
     );
     const record = mapRowToRecord(result.rows[0]);
     record.key = key;
@@ -6000,8 +6060,8 @@ var PostgreSQLA2AApiKeyStore = class {
       map.set(key, {
         key,
         tenantId: row.tenant_id,
-        projectId: row.project_id || void 0,
-        workspaceId: row.workspace_id || void 0
+        projectId: row.project_id,
+        assistantIds: row.assistant_ids ?? void 0
       });
     }
     return map;
@@ -6723,6 +6783,49 @@ var taskMigrations = [
 
 // src/stores/PostgreSQLTaskStore.ts
 var import_uuid3 = require("uuid");
+function nextUpdatedAtSql(column = "updated_at") {
+  return `to_char(
+    date_trunc('milliseconds', GREATEST(
+      clock_timestamp(),
+      CASE
+        WHEN ${canonicalTimestampValidationSql(column)}
+          THEN ${column}::timestamptz + interval '1 millisecond'
+        ELSE clock_timestamp()
+      END
+    ))
+      AT TIME ZONE 'UTC',
+    'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'
+  )`;
+}
+function canonicalTimestampValidationSql(column, allowMaximum = false) {
+  const year = `substring(${column} FROM 1 FOR 4)::integer`;
+  const month = `substring(${column} FROM 6 FOR 2)::integer`;
+  const day = `substring(${column} FROM 9 FOR 2)::integer`;
+  return `CASE
+    WHEN ${column} ~ '^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}[.][0-9]{3}Z$' THEN
+      ${allowMaximum ? "" : `${column} <> '9999-12-31T23:59:59.999Z' AND`}
+      ${year} BETWEEN 1 AND 9999
+      AND ${month} BETWEEN 1 AND 12
+      AND ${day} BETWEEN 1 AND CASE
+        WHEN ${month} = 2 THEN CASE
+          WHEN (${year} % 400 = 0) OR (${year} % 4 = 0 AND ${year} % 100 <> 0) THEN 29
+          ELSE 28
+        END
+        WHEN ${month} IN (4, 6, 9, 11) THEN 30
+        ELSE 31
+      END
+      AND substring(${column} FROM 12 FOR 2)::integer BETWEEN 0 AND 23
+      AND substring(${column} FROM 15 FOR 2)::integer BETWEEN 0 AND 59
+      AND substring(${column} FROM 18 FOR 2)::integer BETWEEN 0 AND 59
+    ELSE FALSE
+  END`;
+}
+function canonicalTimestampSnapshotSql(column, parameter, allowMaximum = false) {
+  return `CASE WHEN ${canonicalTimestampValidationSql(column, allowMaximum)}
+    THEN ${column}::timestamptz = ${parameter}::timestamptz
+    ELSE FALSE
+  END`;
+}
 function parseTaskFiles(raw) {
   if (!raw) return void 0;
   try {
@@ -6808,7 +6911,7 @@ var PostgreSQLTaskStore = class {
   }
   async create(params) {
     await this.ensureInitialized();
-    const id = (0, import_uuid3.v4)();
+    const id = params.id ?? (0, import_uuid3.v4)();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     await this.pool.query(
       `INSERT INTO lattice_tasks (id, tenant_id, owner_type, owner_id, title, description, status, priority, due_date, metadata, parent_id, source_id, context, require_review, dependencies, result, failure_reason, workspace_id, project_id, files, created_at, updated_at)
@@ -6952,7 +7055,7 @@ var PostgreSQLTaskStore = class {
     }
     if (updates.context !== void 0) {
       setClauses.push(`context = $${paramIndex++}`);
-      params.push(JSON.stringify(updates.context));
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
     }
     if (updates.ownerType !== void 0) {
       setClauses.push(`owner_type = $${paramIndex++}`);
@@ -6989,14 +7092,403 @@ var PostgreSQLTaskStore = class {
     if (setClauses.length === 0) {
       return existing;
     }
-    setClauses.push(`updated_at = $${paramIndex++}`);
-    params.push((/* @__PURE__ */ new Date()).toISOString());
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
     params.push(tenantId, id);
-    await this.pool.query(
-      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${paramIndex++} AND id = $${paramIndex++}`,
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${paramIndex++} AND id = $${paramIndex++} AND updated_at <> '9999-12-31T23:59:59.999Z' RETURNING *`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /**
+   * Atomically update a task unless its current status is blocked.
+   *
+   * @param tenantId Tenant identifier.
+   * @param id Task identifier.
+   * @param updates Partial task data to update.
+   * @param blockedStatuses Current statuses that prevent the update.
+   * @returns The updated task, or `null` when missing or blocked.
+   */
+  async updateIfStatusNotIn(tenantId, id, updates, blockedStatuses) {
+    await this.ensureInitialized();
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    params.push(tenantId, id);
+    const blockedClause = blockedStatuses.length > 0 ? ` AND status <> ALL($${paramIndex}::text[])` : "";
+    if (blockedStatuses.length > 0) params.push(blockedStatuses);
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${tenantParam} AND id = $${idParam} AND updated_at <> '9999-12-31T23:59:59.999Z'${blockedClause} RETURNING *`,
       params
     );
-    return this.getById(tenantId, id);
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /** Atomically update a task only when its current status is expected. */
+  async updateIfStatusIn(tenantId, id, updates, expectedStatuses) {
+    await this.ensureInitialized();
+    if (expectedStatuses.length === 0) return null;
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    const statusesParam = paramIndex++;
+    params.push(tenantId, id, expectedStatuses);
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${tenantParam} AND id = $${idParam} AND updated_at <> '9999-12-31T23:59:59.999Z' AND status = ANY($${statusesParam}::text[]) RETURNING *`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /** Atomically update a task only when status and updatedAt match a read snapshot. */
+  async updateIfStatusAndUpdatedAt(tenantId, id, updates, expectedStatuses, expectedUpdatedAt) {
+    await this.ensureInitialized();
+    if (expectedStatuses.length === 0) return null;
+    const expectedIso = new Date(expectedUpdatedAt).toISOString();
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    const statusesParam = paramIndex++;
+    const updatedAtParam = paramIndex++;
+    params.push(tenantId, id, expectedStatuses, expectedIso);
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${tenantParam} AND id = $${idParam} AND status = ANY($${statusesParam}::text[]) AND ${canonicalTimestampSnapshotSql("updated_at", `$${updatedAtParam}`)} RETURNING *`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /** Atomically update a child only when both child and parent snapshots match. */
+  async updateIfStatusUpdatedAtAndParentUpdatedAt(tenantId, id, updates, expectedStatuses, expectedUpdatedAt, parentId, expectedParentUpdatedAt) {
+    await this.ensureInitialized();
+    if (expectedStatuses.length === 0) return null;
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql("child.updated_at")}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    const statusesParam = paramIndex++;
+    const updatedAtParam = paramIndex++;
+    const parentIdParam = paramIndex++;
+    const parentUpdatedAtParam = paramIndex++;
+    params.push(
+      tenantId,
+      id,
+      expectedStatuses,
+      new Date(expectedUpdatedAt).toISOString(),
+      parentId,
+      new Date(expectedParentUpdatedAt).toISOString()
+    );
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks AS child SET ${setClauses.join(", ")}
+       WHERE child.tenant_id = $${tenantParam} AND child.id = $${idParam}
+         AND child.status = ANY($${statusesParam}::text[])
+         AND ${canonicalTimestampSnapshotSql("child.updated_at", `$${updatedAtParam}`)}
+         AND EXISTS (
+           SELECT 1 FROM lattice_tasks AS parent
+           WHERE parent.tenant_id = child.tenant_id
+             AND parent.id = $${parentIdParam}
+             AND ${canonicalTimestampSnapshotSql("parent.updated_at", `$${parentUpdatedAtParam}`, true)}
+         )
+       RETURNING child.*`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
   }
   async delete(tenantId, id) {
     await this.ensureInitialized();
@@ -7047,6 +7539,41 @@ var PostgreSQLTaskWorkItemStore = class {
     );
     return this.rowToItem(result.rows[0]);
   }
+  /** Find an event by its tenant- and task-scoped key without pagination. */
+  async findByEventKey(tenantId, taskId, eventKey) {
+    const result = await this.pool.query(
+      `SELECT * FROM lattice_task_work_items
+       WHERE tenant_id = $1 AND task_id = $2 AND event_key = $3`,
+      [tenantId, taskId, eventKey]
+    );
+    return result.rows[0] ? this.rowToItem(result.rows[0]) : null;
+  }
+  /** Atomically return an existing event or create it once. */
+  async createIfAbsentByEventKey(params) {
+    const result = await this.pool.query(
+      `INSERT INTO lattice_task_work_items
+        (id, tenant_id, task_id, action, actor, thread_id, summary, detail, attempt, workspace_id, project_id, event_key)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)
+       ON CONFLICT (tenant_id, task_id, event_key) WHERE event_key IS NOT NULL
+       DO UPDATE SET event_key = EXCLUDED.event_key
+       RETURNING *`,
+      [
+        (0, import_uuid4.v4)(),
+        params.tenantId,
+        params.taskId,
+        params.action,
+        params.actor,
+        params.threadId || null,
+        params.summary || null,
+        params.detail ? JSON.stringify(params.detail) : null,
+        params.attempt ?? null,
+        params.workspaceId || null,
+        params.projectId || null,
+        params.eventKey
+      ]
+    );
+    return this.rowToItem(result.rows[0]);
+  }
   async list(filter) {
     let query = `SELECT * FROM lattice_task_work_items WHERE tenant_id = $1 AND task_id = $2`;
     const params = [filter.tenantId, filter.taskId];
@@ -7054,7 +7581,16 @@ var PostgreSQLTaskWorkItemStore = class {
       query += ` AND action = $${params.length + 1}`;
       params.push(filter.action);
     }
-    query += ` ORDER BY created_at ASC`;
+    if (filter.workspaceId) {
+      query += ` AND workspace_id = $${params.length + 1}`;
+      params.push(filter.workspaceId);
+    }
+    if (filter.projectId) {
+      query += ` AND project_id = $${params.length + 1}`;
+      params.push(filter.projectId);
+    }
+    const order = filter.order === "desc" ? "DESC" : "ASC";
+    query += ` ORDER BY created_at ${order}, id ${order}`;
     if (filter.limit) {
       query += ` LIMIT $${params.length + 1}`;
       params.push(filter.limit);
@@ -7079,6 +7615,7 @@ var PostgreSQLTaskWorkItemStore = class {
       attempt: row.attempt,
       workspaceId: row.workspace_id,
       projectId: row.project_id,
+      eventKey: row.event_key == null ? void 0 : row.event_key,
       createdAt: new Date(row.created_at)
     };
   }
@@ -8078,6 +8615,20 @@ var addWorkItemProjectFieldsMigration = {
     `);
   }
 };
+var addTaskWorkItemEventKeyMigration = {
+  version: 168,
+  name: "add_task_work_item_event_key",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_task_work_items
+        ADD COLUMN IF NOT EXISTS event_key TEXT
+    `);
+    await client.query(`
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_task_work_items_event_key
+        ON lattice_task_work_items (tenant_id, task_id, event_key) WHERE event_key IS NOT NULL
+    `);
+  }
+};
 
 // src/createPgStoreConfig.ts
 async function createPgStoreConfig(connectionString) {
@@ -8132,6 +8683,9 @@ async function createPgStoreConfig(connectionString) {
   mm.register(addWorkItemProjectFieldsMigration);
   mm.register(createConnectionConfigsTable);
   mm.register(addWorkflowRunsTenantStatusUpdatedIndex);
+  mm.register(addProjectKindColumn);
+  mm.register(addA2AKeyAssistantIds);
+  mm.register(addTaskWorkItemEventKeyMigration);
   await mm.migrate();
   const checkpoint = import_langgraph_checkpoint_postgres.PostgresSaver.fromConnString(connectionString);
   checkpoint.setup().catch((err) => {