@axiom-lattice/pg-stores 2.0.10 → 3.0.1

package/dist/index.js

@@ -35,8 +35,9 @@ __export(index_exports, {
   MenuStore: () => MenuStore,
   MigrationManager: () => MigrationManager,
   PGVectorStoreProvider: () => PGVectorStoreProvider,
-  Pool: () => import_pg26.Pool,
+  Pool: () => import_pg27.Pool,
   PostgreSQLA2AApiKeyStore: () => PostgreSQLA2AApiKeyStore,
+  PostgreSQLAgentWebAppStore: () => PostgreSQLAgentWebAppStore,
   PostgreSQLAssistantStore: () => PostgreSQLAssistantStore,
   PostgreSQLChannelInstallationStore: () => PostgreSQLChannelInstallationStore,
   PostgreSQLCollectionStore: () => PostgreSQLCollectionStore,
@@ -74,6 +75,7 @@ __export(index_exports, {
   changeSkillPrimaryKey: () => changeSkillPrimaryKey,
   changeThreadPrimaryKey: () => changeThreadPrimaryKey,
   createA2AApiKeysTable: () => createA2AApiKeysTable,
+  createAgentWebAppsTable: () => createAgentWebAppsTable,
   createAssistantsTable: () => createAssistantsTable,
   createChannelBindingsTable: () => createChannelBindingsTable,
   createChannelIdentityMappingTables: () => createChannelIdentityMappingTables,
@@ -107,10 +109,10 @@ __export(index_exports, {
   safeParse: () => safeParse
 });
 module.exports = __toCommonJS(index_exports);
-var import_pg26 = require("pg");
+var import_pg27 = require("pg");
 
 // src/createPgStoreConfig.ts
-var import_pg23 = require("pg");
+var import_pg24 = require("pg");
 
 // src/migrations/migration.ts
 var MigrationManager = class {
@@ -2460,6 +2462,24 @@ var dropProjectFolderPathColumn = {
   }
 };
 
+// src/migrations/add_project_kind_column.ts
+var addProjectKindColumn = {
+  version: 165,
+  name: "add_project_kind_column",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_projects
+      ADD COLUMN IF NOT EXISTS kind TEXT NOT NULL DEFAULT 'business'
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_projects
+      DROP COLUMN IF EXISTS kind
+    `);
+  }
+};
+
 // src/stores/PostgreSQLProjectStore.ts
 var PostgreSQLProjectStore = class {
   constructor(options) {
@@ -2482,6 +2502,7 @@ var PostgreSQLProjectStore = class {
     this.migrationManager.register(createProjectsTable);
     this.migrationManager.register(addProjectConfigColumn);
     this.migrationManager.register(dropProjectFolderPathColumn);
+    this.migrationManager.register(addProjectKindColumn);
     if (options.autoMigrate !== false) {
       this.initialize().catch((error) => {
         console.error("Failed to initialize PostgreSQLProjectStore:", error);
@@ -2527,6 +2548,7 @@ var PostgreSQLProjectStore = class {
       name: row.name,
       description: row.description || void 0,
       config: row.config || void 0,
+      kind: row.kind || "business",
       createdAt: row.created_at,
       updatedAt: row.updated_at
     };
@@ -2534,16 +2556,22 @@ var PostgreSQLProjectStore = class {
   /**
    * Get all projects for a specific workspace
    */
-  async getProjectsByWorkspace(tenantId, workspaceId) {
+  async getProjectsByWorkspace(tenantId, workspaceId, filter) {
     await this.ensureInitialized();
+    const conditions = ["tenant_id = $1", "workspace_id = $2"];
+    const values = [tenantId, workspaceId];
+    if (filter?.kind !== void 0) {
+      values.push(filter.kind);
+      conditions.push(`kind = $${values.length}`);
+    }
     const result = await this.pool.query(
       `
-      SELECT id, tenant_id, workspace_id, name, description, config, created_at, updated_at
+      SELECT id, tenant_id, workspace_id, name, description, config, kind, created_at, updated_at
       FROM lattice_projects
-      WHERE tenant_id = $1 AND workspace_id = $2
+      WHERE ${conditions.join(" AND ")}
       ORDER BY created_at DESC
     `,
-      [tenantId, workspaceId]
+      values
     );
     return result.rows.map(this.mapRowToProject);
   }
@@ -2554,7 +2582,7 @@ var PostgreSQLProjectStore = class {
     await this.ensureInitialized();
     const result = await this.pool.query(
       `
-      SELECT id, tenant_id, workspace_id, name, description, config, created_at, updated_at
+      SELECT id, tenant_id, workspace_id, name, description, config, kind, created_at, updated_at
       FROM lattice_projects
       WHERE id = $1 AND tenant_id = $2
     `,
@@ -2571,18 +2599,20 @@ var PostgreSQLProjectStore = class {
   async createProject(tenantId, workspaceId, id, data) {
     await this.ensureInitialized();
     const now = /* @__PURE__ */ new Date();
+    const kind = data.kind || "business";
     await this.pool.query(
       `
-      INSERT INTO lattice_projects (id, tenant_id, workspace_id, name, description, config, created_at, updated_at)
-      VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
+      INSERT INTO lattice_projects (id, tenant_id, workspace_id, name, description, config, kind, created_at, updated_at)
+      VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)
       ON CONFLICT (id, tenant_id) DO UPDATE SET
         workspace_id = EXCLUDED.workspace_id,
         name = EXCLUDED.name,
         description = EXCLUDED.description,
         config = EXCLUDED.config,
+        kind = EXCLUDED.kind,
         updated_at = EXCLUDED.updated_at
     `,
-      [id, tenantId, workspaceId, data.name, data.description || null, data.config || null, now, now]
+      [id, tenantId, workspaceId, data.name, data.description || null, data.config || null, kind, now, now]
     );
     return {
       id,
@@ -2591,6 +2621,7 @@ var PostgreSQLProjectStore = class {
       name: data.name,
       description: data.description,
       config: data.config,
+      kind,
       createdAt: now,
       updatedAt: now
     };
@@ -2623,6 +2654,10 @@ var PostgreSQLProjectStore = class {
       updateFields.push(`config = $${paramIndex++}`);
       updateValues.push(updates.config || null);
     }
+    if (updates.kind !== void 0) {
+      updateFields.push(`kind = $${paramIndex++}`);
+      updateValues.push(updates.kind);
+    }
     if (updateFields.length === 0) {
       return existing;
     }
@@ -5853,6 +5888,24 @@ var createA2AApiKeysTable = {
   }
 };
 
+// src/migrations/add_a2a_key_assistant_ids.ts
+var addA2AKeyAssistantIds = {
+  version: 167,
+  name: "add_a2a_key_assistant_ids",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_a2a_api_keys
+        ADD COLUMN IF NOT EXISTS assistant_ids JSONB
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_a2a_api_keys
+        DROP COLUMN IF EXISTS assistant_ids
+    `);
+  }
+};
+
 // src/stores/PostgreSQLA2AApiKeyStore.ts
 var import_core5 = require("@axiom-lattice/core");
 var import_crypto2 = require("crypto");
@@ -5864,8 +5917,8 @@ function mapRowToRecord(row) {
     id: row.id,
     key: (0, import_core5.decrypt)(row.key_value),
     tenantId: row.tenant_id,
-    projectId: row.project_id || void 0,
-    workspaceId: row.workspace_id || void 0,
+    projectId: row.project_id,
+    assistantIds: row.assistant_ids ?? void 0,
     label: row.label || void 0,
     enabled: row.enabled,
     createdAt: row.created_at,
@@ -5888,6 +5941,7 @@ var PostgreSQLA2AApiKeyStore = class {
     })();
     this.migrationManager = new MigrationManager(this.pool);
     this.migrationManager.register(createA2AApiKeysTable);
+    this.migrationManager.register(addA2AKeyAssistantIds);
     if (options.autoMigrate !== false) {
       this.initialize().catch((error) => {
         console.error("Failed to initialize PostgreSQLA2AApiKeyStore:", error);
@@ -5926,6 +5980,14 @@ var PostgreSQLA2AApiKeyStore = class {
     }
     return null;
   }
+  async findById(id) {
+    await this.ensureInitialized();
+    const result = await this.pool.query(
+      `SELECT * FROM lattice_a2a_api_keys WHERE id = $1`,
+      [id]
+    );
+    return result.rows[0] ? mapRowToRecord(result.rows[0]) : null;
+  }
   async list(params) {
     await this.ensureInitialized();
     const limit = params.limit || 100;
@@ -5947,9 +6009,9 @@ var PostgreSQLA2AApiKeyStore = class {
     await this.ensureInitialized();
     const key = generateApiKey();
     const result = await this.pool.query(
-      `INSERT INTO lattice_a2a_api_keys (key_value, tenant_id, project_id, workspace_id, label)
+      `INSERT INTO lattice_a2a_api_keys (key_value, tenant_id, project_id, assistant_ids, label)
        VALUES ($1, $2, $3, $4, $5) RETURNING *`,
-      [(0, import_core5.encrypt)(key), input.tenantId, input.projectId || null, input.workspaceId || null, input.label || null]
+      [(0, import_core5.encrypt)(key), input.tenantId, input.projectId, input.assistantIds ? JSON.stringify(input.assistantIds) : null, input.label || null]
     );
     const record = mapRowToRecord(result.rows[0]);
     record.key = key;
@@ -6000,16 +6062,240 @@ var PostgreSQLA2AApiKeyStore = class {
       map.set(key, {
         key,
         tenantId: row.tenant_id,
-        projectId: row.project_id || void 0,
-        workspaceId: row.workspace_id || void 0
+        projectId: row.project_id,
+        assistantIds: row.assistant_ids ?? void 0
       });
     }
     return map;
   }
 };
 
-// src/stores/PostgreSQLScheduleStorage.ts
+// src/stores/PostgreSQLAgentWebAppStore.ts
+var import_crypto3 = require("crypto");
 var import_pg17 = require("pg");
+
+// src/migrations/agent_web_apps_migration.ts
+var createAgentWebAppsTable = {
+  version: 169,
+  name: "create_agent_web_apps_table",
+  up: async (client) => {
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS lattice_agent_web_apps (
+        id VARCHAR(255) PRIMARY KEY,
+        tenant_id VARCHAR(255) NOT NULL,
+        assistant_id VARCHAR(255) NOT NULL,
+        name VARCHAR(255) NOT NULL,
+        description TEXT,
+        status VARCHAR(32) NOT NULL DEFAULT 'draft'
+          CONSTRAINT chk_lattice_agent_web_apps_status CHECK (status IN ('draft', 'active', 'disabled')),
+        integration JSONB NOT NULL,
+        scope JSONB NOT NULL,
+        features JSONB NOT NULL,
+        appearance JSONB NOT NULL DEFAULT '{}'::jsonb,
+        created_at TIMESTAMPTZ NOT NULL DEFAULT date_trunc('milliseconds', NOW()),
+        updated_at TIMESTAMPTZ NOT NULL DEFAULT date_trunc('milliseconds', NOW())
+      )
+    `);
+    await client.query(`
+      CREATE INDEX IF NOT EXISTS idx_lattice_agent_web_apps_tenant_assistant
+      ON lattice_agent_web_apps(tenant_id, assistant_id)
+    `);
+  },
+  down: async (client) => {
+    await client.query(
+      "DROP INDEX IF EXISTS idx_lattice_agent_web_apps_tenant_assistant"
+    );
+    await client.query("DROP TABLE IF EXISTS lattice_agent_web_apps");
+  }
+};
+
+// src/stores/PostgreSQLAgentWebAppStore.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isIntegration(value) {
+  return isRecord(value) && value.type === "react_sdk";
+}
+function isScope(value) {
+  return isRecord(value) && typeof value.defaultProjectId === "string" && isStringArray(value.allowedProjectIds) && (value.defaultModelKey === void 0 || typeof value.defaultModelKey === "string") && (value.allowedModelKeys === void 0 || isStringArray(value.allowedModelKeys));
+}
+function isFeatures(value) {
+  return isRecord(value) && typeof value.projectSelector === "boolean" && typeof value.modelSelector === "boolean" && typeof value.threadManagement === "boolean" && typeof value.attachments === "boolean" && typeof value.hitl === "boolean" && typeof value.genUI === "boolean";
+}
+function isAppearance(value) {
+  return isRecord(value) && (value.title === void 0 || typeof value.title === "string") && (value.welcomeMessage === void 0 || typeof value.welcomeMessage === "string") && (value.primaryColor === void 0 || typeof value.primaryColor === "string");
+}
+function isStatus(value) {
+  return value === "draft" || value === "active" || value === "disabled";
+}
+function mapRow(row) {
+  if (!isStatus(row.status) || !isIntegration(row.integration) || !isScope(row.scope) || !isFeatures(row.features) || !isAppearance(row.appearance)) {
+    throw new Error(`Invalid agent web app row: ${row.id}`);
+  }
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    assistantId: row.assistant_id,
+    name: row.name,
+    description: row.description ?? void 0,
+    status: row.status,
+    integration: row.integration,
+    scope: row.scope,
+    features: row.features,
+    appearance: row.appearance,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+var PostgreSQLAgentWebAppStore = class {
+  constructor(options) {
+    this.initialized = false;
+    this.ownsPool = true;
+    this.initPromise = null;
+    if (options.pool) {
+      this.pool = options.pool;
+      this.ownsPool = false;
+      this.initialized = true;
+      return;
+    }
+    this.pool = typeof options.poolConfig === "string" ? new import_pg17.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg17.Pool(options.poolConfig) : (() => {
+      throw new Error("Either pool or poolConfig must be provided");
+    })();
+    this.migrationManager = new MigrationManager(this.pool);
+    this.migrationManager.register(createAgentWebAppsTable);
+    if (options.autoMigrate !== false) {
+      this.startInitialization();
+    }
+  }
+  async initialize() {
+    if (this.initialized) return;
+    if (this.initPromise) return this.initPromise;
+    return this.startInitialization();
+  }
+  startInitialization() {
+    this.initPromise = this.migrationManager.migrate().then(() => {
+      this.initialized = true;
+    });
+    void this.initPromise.catch(() => void 0);
+    return this.initPromise;
+  }
+  async dispose() {
+    if (this.ownsPool) await this.pool.end();
+  }
+  async ensureInitialized() {
+    if (!this.initialized) await this.initialize();
+  }
+  async list(tenantId, assistantId) {
+    await this.ensureInitialized();
+    const result = assistantId === void 0 ? await this.pool.query(
+      `SELECT * FROM lattice_agent_web_apps
+         WHERE tenant_id = $1
+         ORDER BY created_at DESC, id DESC`,
+      [tenantId]
+    ) : await this.pool.query(
+      `SELECT * FROM lattice_agent_web_apps
+         WHERE tenant_id = $1 AND assistant_id = $2
+         ORDER BY created_at DESC, id DESC`,
+      [tenantId, assistantId]
+    );
+    return result.rows.map(mapRow);
+  }
+  async getById(tenantId, webAppId) {
+    await this.ensureInitialized();
+    const result = await this.pool.query(
+      `SELECT * FROM lattice_agent_web_apps
+       WHERE tenant_id = $1 AND id = $2`,
+      [tenantId, webAppId]
+    );
+    return result.rows[0] ? mapRow(result.rows[0]) : null;
+  }
+  async findById(webAppId) {
+    await this.ensureInitialized();
+    const result = await this.pool.query(
+      `SELECT * FROM lattice_agent_web_apps
+       WHERE id = $1`,
+      [webAppId]
+    );
+    return result.rows[0] ? mapRow(result.rows[0]) : null;
+  }
+  async create(tenantId, input) {
+    await this.ensureInitialized();
+    const id = `webapp_${(0, import_crypto3.randomUUID)().replace(/-/g, "")}`;
+    const result = await this.pool.query(
+      `INSERT INTO lattice_agent_web_apps
+       (id, tenant_id, assistant_id, name, description, status, integration, scope, features, appearance)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8::jsonb, $9::jsonb, $10::jsonb)
+       RETURNING *`,
+      [
+        id,
+        tenantId,
+        input.assistantId,
+        input.name,
+        input.description ?? null,
+        "draft",
+        JSON.stringify(input.integration),
+        JSON.stringify(input.scope),
+        JSON.stringify(input.features),
+        JSON.stringify(input.appearance)
+      ]
+    );
+    return mapRow(result.rows[0]);
+  }
+  async update(tenantId, webAppId, patch, options) {
+    await this.ensureInitialized();
+    const assignments = [];
+    const values = [];
+    const add = (column, value) => {
+      values.push(value);
+      assignments.push(`${column} = $${values.length}`);
+    };
+    if (patch.name !== void 0) add("name", patch.name);
+    if (Object.prototype.hasOwnProperty.call(patch, "description")) {
+      add("description", patch.description ?? null);
+    }
+    if (patch.scope !== void 0) {
+      add("scope", JSON.stringify(patch.scope));
+    }
+    if (patch.features !== void 0) {
+      add("features", JSON.stringify(patch.features));
+    }
+    if (patch.appearance !== void 0) {
+      add("appearance", JSON.stringify(patch.appearance));
+    }
+    if (patch.status !== void 0) add("status", patch.status);
+    if (assignments.length === 0) return this.getById(tenantId, webAppId);
+    values.push(tenantId, webAppId);
+    const tenantParam = values.length - 1;
+    const idParam = values.length;
+    const expectedUpdatedAtClause = options?.expectedUpdatedAt ? ` AND date_trunc('milliseconds', updated_at) = $${values.push(options.expectedUpdatedAt)}` : "";
+    const result = await this.pool.query(
+      `UPDATE lattice_agent_web_apps
+       SET ${assignments.join(", ")}, updated_at = GREATEST(
+         date_trunc('milliseconds', clock_timestamp()),
+         updated_at + interval '1 millisecond'
+       )
+       WHERE tenant_id = $${tenantParam} AND id = $${idParam}${expectedUpdatedAtClause}
+       RETURNING *`,
+      values
+    );
+    return result.rows[0] ? mapRow(result.rows[0]) : null;
+  }
+  async delete(tenantId, webAppId) {
+    await this.ensureInitialized();
+    const result = await this.pool.query(
+      `DELETE FROM lattice_agent_web_apps
+       WHERE tenant_id = $1 AND id = $2`,
+      [tenantId, webAppId]
+    );
+    return result.rowCount === 1;
+  }
+};
+
+// src/stores/PostgreSQLScheduleStorage.ts
+var import_pg18 = require("pg");
 var import_protocols = require("@axiom-lattice/protocols");
 
 // src/migrations/schedule_migrations.ts
@@ -6184,9 +6470,9 @@ var PostgreSQLScheduleStorage = class {
       return;
     }
     if (typeof options.poolConfig === "string") {
-      this.pool = new import_pg17.Pool({ connectionString: options.poolConfig });
+      this.pool = new import_pg18.Pool({ connectionString: options.poolConfig });
     } else if (options.poolConfig) {
-      this.pool = new import_pg17.Pool(options.poolConfig);
+      this.pool = new import_pg18.Pool(options.poolConfig);
     } else {
       throw new Error("Either pool or poolConfig must be provided");
     }
@@ -6624,7 +6910,7 @@ var PostgreSQLScheduleStorage = class {
 };
 
 // src/stores/PostgreSQLTaskStore.ts
-var import_pg18 = require("pg");
+var import_pg19 = require("pg");
 
 // src/migrations/task_migration.ts
 var createTasksTable = {
@@ -6723,6 +7009,49 @@ var taskMigrations = [
 
 // src/stores/PostgreSQLTaskStore.ts
 var import_uuid3 = require("uuid");
+function nextUpdatedAtSql(column = "updated_at") {
+  return `to_char(
+    date_trunc('milliseconds', GREATEST(
+      clock_timestamp(),
+      CASE
+        WHEN ${canonicalTimestampValidationSql(column)}
+          THEN ${column}::timestamptz + interval '1 millisecond'
+        ELSE clock_timestamp()
+      END
+    ))
+      AT TIME ZONE 'UTC',
+    'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'
+  )`;
+}
+function canonicalTimestampValidationSql(column, allowMaximum = false) {
+  const year = `substring(${column} FROM 1 FOR 4)::integer`;
+  const month = `substring(${column} FROM 6 FOR 2)::integer`;
+  const day = `substring(${column} FROM 9 FOR 2)::integer`;
+  return `CASE
+    WHEN ${column} ~ '^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}[.][0-9]{3}Z$' THEN
+      ${allowMaximum ? "" : `${column} <> '9999-12-31T23:59:59.999Z' AND`}
+      ${year} BETWEEN 1 AND 9999
+      AND ${month} BETWEEN 1 AND 12
+      AND ${day} BETWEEN 1 AND CASE
+        WHEN ${month} = 2 THEN CASE
+          WHEN (${year} % 400 = 0) OR (${year} % 4 = 0 AND ${year} % 100 <> 0) THEN 29
+          ELSE 28
+        END
+        WHEN ${month} IN (4, 6, 9, 11) THEN 30
+        ELSE 31
+      END
+      AND substring(${column} FROM 12 FOR 2)::integer BETWEEN 0 AND 23
+      AND substring(${column} FROM 15 FOR 2)::integer BETWEEN 0 AND 59
+      AND substring(${column} FROM 18 FOR 2)::integer BETWEEN 0 AND 59
+    ELSE FALSE
+  END`;
+}
+function canonicalTimestampSnapshotSql(column, parameter, allowMaximum = false) {
+  return `CASE WHEN ${canonicalTimestampValidationSql(column, allowMaximum)}
+    THEN ${column}::timestamptz = ${parameter}::timestamptz
+    ELSE FALSE
+  END`;
+}
 function parseTaskFiles(raw) {
   if (!raw) return void 0;
   try {
@@ -6771,9 +7100,9 @@ var PostgreSQLTaskStore = class {
       return;
     }
     if (typeof options.poolConfig === "string") {
-      this.pool = new import_pg18.Pool({ connectionString: options.poolConfig });
+      this.pool = new import_pg19.Pool({ connectionString: options.poolConfig });
     } else if (options.poolConfig) {
-      this.pool = new import_pg18.Pool(options.poolConfig);
+      this.pool = new import_pg19.Pool(options.poolConfig);
     } else {
       throw new Error("Either pool or poolConfig must be provided");
     }
@@ -6808,7 +7137,7 @@ var PostgreSQLTaskStore = class {
   }
   async create(params) {
     await this.ensureInitialized();
-    const id = (0, import_uuid3.v4)();
+    const id = params.id ?? (0, import_uuid3.v4)();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     await this.pool.query(
       `INSERT INTO lattice_tasks (id, tenant_id, owner_type, owner_id, title, description, status, priority, due_date, metadata, parent_id, source_id, context, require_review, dependencies, result, failure_reason, workspace_id, project_id, files, created_at, updated_at)
@@ -6952,7 +7281,7 @@ var PostgreSQLTaskStore = class {
     }
     if (updates.context !== void 0) {
       setClauses.push(`context = $${paramIndex++}`);
-      params.push(JSON.stringify(updates.context));
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
     }
     if (updates.ownerType !== void 0) {
       setClauses.push(`owner_type = $${paramIndex++}`);
@@ -6989,103 +7318,537 @@ var PostgreSQLTaskStore = class {
     if (setClauses.length === 0) {
       return existing;
     }
-    setClauses.push(`updated_at = $${paramIndex++}`);
-    params.push((/* @__PURE__ */ new Date()).toISOString());
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
     params.push(tenantId, id);
-    await this.pool.query(
-      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${paramIndex++} AND id = $${paramIndex++}`,
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${paramIndex++} AND id = $${paramIndex++} AND updated_at <> '9999-12-31T23:59:59.999Z' RETURNING *`,
       params
     );
-    return this.getById(tenantId, id);
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
   }
-  async delete(tenantId, id) {
+  /**
+   * Atomically update a task unless its current status is blocked.
+   *
+   * @param tenantId Tenant identifier.
+   * @param id Task identifier.
+   * @param updates Partial task data to update.
+   * @param blockedStatuses Current statuses that prevent the update.
+   * @returns The updated task, or `null` when missing or blocked.
+   */
+  async updateIfStatusNotIn(tenantId, id, updates, blockedStatuses) {
     await this.ensureInitialized();
-    const result = await this.pool.query(
-      `DELETE FROM lattice_tasks WHERE tenant_id = $1 AND id = $2`,
-      [tenantId, id]
-    );
-    return (result.rowCount ?? 0) > 0;
-  }
-  async dispose() {
-    if (this.ownsPool && this.pool) {
-      await this.pool.end();
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
     }
-  }
-  async ensureInitialized() {
-    if (!this.initialized) {
-      await this.initialize();
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
     }
-  }
-};
-
-// src/stores/PostgreSQLTaskWorkItemStore.ts
-var import_uuid4 = require("uuid");
-var PostgreSQLTaskWorkItemStore = class {
-  constructor(pool) {
-    this.pool = pool;
-  }
-  async create(params) {
-    const id = (0, import_uuid4.v4)();
-    const result = await this.pool.query(
-      `INSERT INTO lattice_task_work_items
-        (id, tenant_id, task_id, action, actor, thread_id, summary, detail, attempt, workspace_id, project_id)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
-       RETURNING *`,
-      [
-        id,
-        params.tenantId,
-        params.taskId,
-        params.action,
-        params.actor,
-        params.threadId || null,
-        params.summary || null,
-        params.detail ? JSON.stringify(params.detail) : null,
-        params.attempt || null,
-        params.workspaceId || null,
-        params.projectId || null
-      ]
-    );
-    return this.rowToItem(result.rows[0]);
-  }
-  async list(filter) {
-    let query = `SELECT * FROM lattice_task_work_items WHERE tenant_id = $1 AND task_id = $2`;
-    const params = [filter.tenantId, filter.taskId];
-    if (filter.action) {
-      query += ` AND action = $${params.length + 1}`;
-      params.push(filter.action);
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
     }
-    query += ` ORDER BY created_at ASC`;
-    if (filter.limit) {
-      query += ` LIMIT $${params.length + 1}`;
-      params.push(filter.limit);
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
     }
-    if (filter.offset) {
-      query += ` OFFSET $${params.length + 1}`;
-      params.push(filter.offset);
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
     }
-    const result = await this.pool.query(query, params);
-    return result.rows.map((row) => this.rowToItem(row));
-  }
-  rowToItem(row) {
-    return {
-      id: row.id,
-      taskId: row.task_id,
-      tenantId: row.tenant_id,
-      action: row.action,
-      actor: row.actor,
-      threadId: row.thread_id,
-      summary: row.summary,
-      detail: row.detail,
-      attempt: row.attempt,
-      workspaceId: row.workspace_id,
-      projectId: row.project_id,
-      createdAt: new Date(row.created_at)
-    };
-  }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    params.push(tenantId, id);
+    const blockedClause = blockedStatuses.length > 0 ? ` AND status <> ALL($${paramIndex}::text[])` : "";
+    if (blockedStatuses.length > 0) params.push(blockedStatuses);
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${tenantParam} AND id = $${idParam} AND updated_at <> '9999-12-31T23:59:59.999Z'${blockedClause} RETURNING *`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /** Atomically update a task only when its current status is expected. */
+  async updateIfStatusIn(tenantId, id, updates, expectedStatuses) {
+    await this.ensureInitialized();
+    if (expectedStatuses.length === 0) return null;
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    const statusesParam = paramIndex++;
+    params.push(tenantId, id, expectedStatuses);
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${tenantParam} AND id = $${idParam} AND updated_at <> '9999-12-31T23:59:59.999Z' AND status = ANY($${statusesParam}::text[]) RETURNING *`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /** Atomically update a task only when status and updatedAt match a read snapshot. */
+  async updateIfStatusAndUpdatedAt(tenantId, id, updates, expectedStatuses, expectedUpdatedAt) {
+    await this.ensureInitialized();
+    if (expectedStatuses.length === 0) return null;
+    const expectedIso = new Date(expectedUpdatedAt).toISOString();
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql()}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    const statusesParam = paramIndex++;
+    const updatedAtParam = paramIndex++;
+    params.push(tenantId, id, expectedStatuses, expectedIso);
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks SET ${setClauses.join(", ")} WHERE tenant_id = $${tenantParam} AND id = $${idParam} AND status = ANY($${statusesParam}::text[]) AND ${canonicalTimestampSnapshotSql("updated_at", `$${updatedAtParam}`)} RETURNING *`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  /** Atomically update a child only when both child and parent snapshots match. */
+  async updateIfStatusUpdatedAtAndParentUpdatedAt(tenantId, id, updates, expectedStatuses, expectedUpdatedAt, parentId, expectedParentUpdatedAt) {
+    await this.ensureInitialized();
+    if (expectedStatuses.length === 0) return null;
+    const setClauses = [];
+    const params = [];
+    let paramIndex = 1;
+    if (updates.title !== void 0) {
+      setClauses.push(`title = $${paramIndex++}`);
+      params.push(updates.title);
+    }
+    if (updates.description !== void 0) {
+      setClauses.push(`description = $${paramIndex++}`);
+      params.push(updates.description);
+    }
+    if (updates.status !== void 0) {
+      setClauses.push(`status = $${paramIndex++}`);
+      params.push(updates.status);
+    }
+    if (updates.priority !== void 0) {
+      setClauses.push(`priority = $${paramIndex++}`);
+      params.push(updates.priority);
+    }
+    if (updates.dueDate !== void 0) {
+      setClauses.push(`due_date = $${paramIndex++}`);
+      params.push(updates.dueDate);
+    }
+    if (updates.metadata !== void 0) {
+      setClauses.push(`metadata = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.metadata));
+    }
+    if (updates.files !== void 0) {
+      setClauses.push(`files = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.files));
+    }
+    if (updates.parentId !== void 0) {
+      setClauses.push(`parent_id = $${paramIndex++}`);
+      params.push(updates.parentId);
+    }
+    if (updates.sourceId !== void 0) {
+      setClauses.push(`source_id = $${paramIndex++}`);
+      params.push(updates.sourceId);
+    }
+    if (updates.context !== void 0) {
+      setClauses.push(`context = $${paramIndex++}`);
+      params.push(updates.context === null ? null : JSON.stringify(updates.context));
+    }
+    if (updates.ownerType !== void 0) {
+      setClauses.push(`owner_type = $${paramIndex++}`);
+      params.push(updates.ownerType);
+    }
+    if (updates.ownerId !== void 0) {
+      setClauses.push(`owner_id = $${paramIndex++}`);
+      params.push(updates.ownerId);
+    }
+    if (updates.requireReview !== void 0) {
+      setClauses.push(`require_review = $${paramIndex++}`);
+      params.push(updates.requireReview);
+    }
+    if (updates.dependencies !== void 0) {
+      setClauses.push(`dependencies = $${paramIndex++}`);
+      params.push(JSON.stringify(updates.dependencies));
+    }
+    if (updates.result !== void 0) {
+      setClauses.push(`result = $${paramIndex++}`);
+      params.push(updates.result);
+    }
+    if (updates.failureReason !== void 0) {
+      setClauses.push(`failure_reason = $${paramIndex++}`);
+      params.push(updates.failureReason);
+    }
+    if (updates.workspaceId !== void 0) {
+      setClauses.push(`workspace_id = $${paramIndex++}`);
+      params.push(updates.workspaceId);
+    }
+    if (updates.projectId !== void 0) {
+      setClauses.push(`project_id = $${paramIndex++}`);
+      params.push(updates.projectId);
+    }
+    setClauses.push(`updated_at = ${nextUpdatedAtSql("child.updated_at")}`);
+    const tenantParam = paramIndex++;
+    const idParam = paramIndex++;
+    const statusesParam = paramIndex++;
+    const updatedAtParam = paramIndex++;
+    const parentIdParam = paramIndex++;
+    const parentUpdatedAtParam = paramIndex++;
+    params.push(
+      tenantId,
+      id,
+      expectedStatuses,
+      new Date(expectedUpdatedAt).toISOString(),
+      parentId,
+      new Date(expectedParentUpdatedAt).toISOString()
+    );
+    const result = await this.pool.query(
+      `UPDATE lattice_tasks AS child SET ${setClauses.join(", ")}
+       WHERE child.tenant_id = $${tenantParam} AND child.id = $${idParam}
+         AND child.status = ANY($${statusesParam}::text[])
+         AND ${canonicalTimestampSnapshotSql("child.updated_at", `$${updatedAtParam}`)}
+         AND EXISTS (
+           SELECT 1 FROM lattice_tasks AS parent
+           WHERE parent.tenant_id = child.tenant_id
+             AND parent.id = $${parentIdParam}
+             AND ${canonicalTimestampSnapshotSql("parent.updated_at", `$${parentUpdatedAtParam}`, true)}
+         )
+       RETURNING child.*`,
+      params
+    );
+    return result.rows[0] ? mapRowToTask(result.rows[0]) : null;
+  }
+  async delete(tenantId, id) {
+    await this.ensureInitialized();
+    const result = await this.pool.query(
+      `DELETE FROM lattice_tasks WHERE tenant_id = $1 AND id = $2`,
+      [tenantId, id]
+    );
+    return (result.rowCount ?? 0) > 0;
+  }
+  async dispose() {
+    if (this.ownsPool && this.pool) {
+      await this.pool.end();
+    }
+  }
+  async ensureInitialized() {
+    if (!this.initialized) {
+      await this.initialize();
+    }
+  }
+};
+
+// src/stores/PostgreSQLTaskWorkItemStore.ts
+var import_uuid4 = require("uuid");
+var PostgreSQLTaskWorkItemStore = class {
+  constructor(pool) {
+    this.pool = pool;
+  }
+  async create(params) {
+    const id = (0, import_uuid4.v4)();
+    const result = await this.pool.query(
+      `INSERT INTO lattice_task_work_items
+        (id, tenant_id, task_id, action, actor, thread_id, summary, detail, attempt, workspace_id, project_id)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
+       RETURNING *`,
+      [
+        id,
+        params.tenantId,
+        params.taskId,
+        params.action,
+        params.actor,
+        params.threadId || null,
+        params.summary || null,
+        params.detail ? JSON.stringify(params.detail) : null,
+        params.attempt || null,
+        params.workspaceId || null,
+        params.projectId || null
+      ]
+    );
+    return this.rowToItem(result.rows[0]);
+  }
+  /** Find an event by its tenant- and task-scoped key without pagination. */
+  async findByEventKey(tenantId, taskId, eventKey) {
+    const result = await this.pool.query(
+      `SELECT * FROM lattice_task_work_items
+       WHERE tenant_id = $1 AND task_id = $2 AND event_key = $3`,
+      [tenantId, taskId, eventKey]
+    );
+    return result.rows[0] ? this.rowToItem(result.rows[0]) : null;
+  }
+  /** Atomically return an existing event or create it once. */
+  async createIfAbsentByEventKey(params) {
+    const result = await this.pool.query(
+      `INSERT INTO lattice_task_work_items
+        (id, tenant_id, task_id, action, actor, thread_id, summary, detail, attempt, workspace_id, project_id, event_key)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)
+       ON CONFLICT (tenant_id, task_id, event_key) WHERE event_key IS NOT NULL
+       DO UPDATE SET event_key = EXCLUDED.event_key
+       RETURNING *`,
+      [
+        (0, import_uuid4.v4)(),
+        params.tenantId,
+        params.taskId,
+        params.action,
+        params.actor,
+        params.threadId || null,
+        params.summary || null,
+        params.detail ? JSON.stringify(params.detail) : null,
+        params.attempt ?? null,
+        params.workspaceId || null,
+        params.projectId || null,
+        params.eventKey
+      ]
+    );
+    return this.rowToItem(result.rows[0]);
+  }
+  async list(filter) {
+    let query = `SELECT * FROM lattice_task_work_items WHERE tenant_id = $1 AND task_id = $2`;
+    const params = [filter.tenantId, filter.taskId];
+    if (filter.action) {
+      query += ` AND action = $${params.length + 1}`;
+      params.push(filter.action);
+    }
+    if (filter.workspaceId) {
+      query += ` AND workspace_id = $${params.length + 1}`;
+      params.push(filter.workspaceId);
+    }
+    if (filter.projectId) {
+      query += ` AND project_id = $${params.length + 1}`;
+      params.push(filter.projectId);
+    }
+    const order = filter.order === "desc" ? "DESC" : "ASC";
+    query += ` ORDER BY created_at ${order}, id ${order}`;
+    if (filter.limit) {
+      query += ` LIMIT $${params.length + 1}`;
+      params.push(filter.limit);
+    }
+    if (filter.offset) {
+      query += ` OFFSET $${params.length + 1}`;
+      params.push(filter.offset);
+    }
+    const result = await this.pool.query(query, params);
+    return result.rows.map((row) => this.rowToItem(row));
+  }
+  rowToItem(row) {
+    return {
+      id: row.id,
+      taskId: row.task_id,
+      tenantId: row.tenant_id,
+      action: row.action,
+      actor: row.actor,
+      threadId: row.thread_id,
+      summary: row.summary,
+      detail: row.detail,
+      attempt: row.attempt,
+      workspaceId: row.workspace_id,
+      projectId: row.project_id,
+      eventKey: row.event_key == null ? void 0 : row.event_key,
+      createdAt: new Date(row.created_at)
+    };
+  }
 };
 
 // src/stores/MenuStore.ts
-var import_pg19 = require("pg");
+var import_pg20 = require("pg");
 
 // src/migrations/menu_items_migration.ts
 var createMenuItemsTable = {
@@ -7162,7 +7925,7 @@ var MenuStore = class {
       this.initialized = true;
       return;
     }
-    this.pool = typeof options.poolConfig === "string" ? new import_pg19.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg19.Pool(options.poolConfig) : (() => {
+    this.pool = typeof options.poolConfig === "string" ? new import_pg20.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg20.Pool(options.poolConfig) : (() => {
       throw new Error("Either pool or poolConfig must be provided");
     })();
     this.migrationManager = new MigrationManager(this.pool);
@@ -7317,7 +8080,7 @@ var MenuStore = class {
 };
 
 // src/stores/PostgresSharedResourceStore.ts
-var import_pg20 = require("pg");
+var import_pg21 = require("pg");
 
 // src/migrations/shared_resources_migration.ts
 var createSharedResourcesTable = {
@@ -7371,7 +8134,7 @@ var PostgresSharedResourceStore = class {
       this.initialized = true;
       return;
     }
-    this.pool = typeof options.poolConfig === "string" ? new import_pg20.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg20.Pool(options.poolConfig) : (() => {
+    this.pool = typeof options.poolConfig === "string" ? new import_pg21.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg21.Pool(options.poolConfig) : (() => {
       throw new Error("Either pool or poolConfig must be provided");
     })();
     this.migrationManager = new MigrationManager(this.pool);
@@ -7540,7 +8303,7 @@ var PostgresSharedResourceStore = class {
 };
 
 // src/stores/PostgreSQLCollectionStore.ts
-var import_pg21 = require("pg");
+var import_pg22 = require("pg");
 var PostgreSQLCollectionStore = class {
   constructor(options) {
     this.initialized = false;
@@ -7553,9 +8316,9 @@ var PostgreSQLCollectionStore = class {
       return;
     }
     if (typeof options.poolConfig === "string") {
-      this.pool = new import_pg21.Pool({ connectionString: options.poolConfig });
+      this.pool = new import_pg22.Pool({ connectionString: options.poolConfig });
     } else if (options.poolConfig) {
-      this.pool = new import_pg21.Pool(options.poolConfig);
+      this.pool = new import_pg22.Pool(options.poolConfig);
     } else {
       throw new Error("Either pool or poolConfig must be provided");
     }
@@ -7670,7 +8433,7 @@ var PostgreSQLCollectionStore = class {
 var import_langgraph_checkpoint_postgres = require("@langchain/langgraph-checkpoint-postgres");
 
 // src/PGVectorStoreProvider.ts
-var import_pg22 = require("pg");
+var import_pg23 = require("pg");
 var import_pgvector = require("@langchain/community/vectorstores/pgvector");
 var import_documents = require("@langchain/core/documents");
 var import_core6 = require("@axiom-lattice/core");
@@ -7744,7 +8507,7 @@ var PGVectorStoreProvider = class {
   }
 };
 function createPGVectorStoreProvider(connectionString) {
-  const pool = new import_pg22.Pool({ connectionString });
+  const pool = new import_pg23.Pool({ connectionString });
   return {
     provider: new PGVectorStoreProvider(pool, connectionString),
     pool
@@ -8078,10 +8841,24 @@ var addWorkItemProjectFieldsMigration = {
     `);
   }
 };
+var addTaskWorkItemEventKeyMigration = {
+  version: 168,
+  name: "add_task_work_item_event_key",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_task_work_items
+        ADD COLUMN IF NOT EXISTS event_key TEXT
+    `);
+    await client.query(`
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_task_work_items_event_key
+        ON lattice_task_work_items (tenant_id, task_id, event_key) WHERE event_key IS NOT NULL
+    `);
+  }
+};
 
 // src/createPgStoreConfig.ts
 async function createPgStoreConfig(connectionString) {
-  const pool = new import_pg23.Pool({ connectionString });
+  const pool = new import_pg24.Pool({ connectionString });
   const mm = new MigrationManager(pool);
   mm.register(createThreadsTable);
   mm.register(createScheduledTasksTable);
@@ -8132,6 +8909,10 @@ async function createPgStoreConfig(connectionString) {
   mm.register(addWorkItemProjectFieldsMigration);
   mm.register(createConnectionConfigsTable);
   mm.register(addWorkflowRunsTenantStatusUpdatedIndex);
+  mm.register(addProjectKindColumn);
+  mm.register(addA2AKeyAssistantIds);
+  mm.register(addTaskWorkItemEventKeyMigration);
+  mm.register(createAgentWebAppsTable);
   await mm.migrate();
   const checkpoint = import_langgraph_checkpoint_postgres.PostgresSaver.fromConnString(connectionString);
   checkpoint.setup().catch((err) => {
@@ -8159,6 +8940,7 @@ async function createPgStoreConfig(connectionString) {
     task: new PostgreSQLTaskStore(opts),
     taskWorkItem: taskWorkItemStore,
     a2aApiKey: new PostgreSQLA2AApiKeyStore(opts),
+    agentWebApp: new PostgreSQLAgentWebAppStore(opts),
     schedule: new PostgreSQLScheduleStorage(opts),
     menu: new MenuStore(opts),
     sharedResource: new PostgresSharedResourceStore(opts),
@@ -8169,7 +8951,7 @@ async function createPgStoreConfig(connectionString) {
 }
 
 // src/stores/PostgreSQLSkillStore.ts
-var import_pg24 = require("pg");
+var import_pg25 = require("pg");
 var PostgreSQLSkillStore = class {
   constructor(options) {
     this.initialized = false;
@@ -8182,9 +8964,9 @@ var PostgreSQLSkillStore = class {
       return;
     }
     if (typeof options.poolConfig === "string") {
-      this.pool = new import_pg24.Pool({ connectionString: options.poolConfig });
+      this.pool = new import_pg25.Pool({ connectionString: options.poolConfig });
     } else if (options.poolConfig) {
-      this.pool = new import_pg24.Pool(options.poolConfig);
+      this.pool = new import_pg25.Pool(options.poolConfig);
     } else {
       throw new Error("Either pool or poolConfig must be provided");
     }
@@ -8485,7 +9267,7 @@ var PostgreSQLSkillStore = class {
 };
 
 // src/stores/ChannelIdentityMappingStore.ts
-var import_pg25 = require("pg");
+var import_pg26 = require("pg");
 var ChannelIdentityMappingStore = class {
   constructor(options) {
     this.initialized = false;
@@ -8497,7 +9279,7 @@ var ChannelIdentityMappingStore = class {
       this.initialized = true;
       return;
     }
-    this.pool = typeof options.poolConfig === "string" ? new import_pg25.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg25.Pool(options.poolConfig) : (() => {
+    this.pool = typeof options.poolConfig === "string" ? new import_pg26.Pool({ connectionString: options.poolConfig }) : options.poolConfig ? new import_pg26.Pool(options.poolConfig) : (() => {
       throw new Error("Either pool or poolConfig must be provided");
     })();
     this.migrationManager = new MigrationManager(this.pool);
@@ -8724,6 +9506,7 @@ function mapRowToChannelIdentityMapping(row) {
   PGVectorStoreProvider,
   Pool,
   PostgreSQLA2AApiKeyStore,
+  PostgreSQLAgentWebAppStore,
   PostgreSQLAssistantStore,
   PostgreSQLChannelInstallationStore,
   PostgreSQLCollectionStore,
@@ -8761,6 +9544,7 @@ function mapRowToChannelIdentityMapping(row) {
   changeSkillPrimaryKey,
   changeThreadPrimaryKey,
   createA2AApiKeysTable,
+  createAgentWebAppsTable,
   createAssistantsTable,
   createChannelBindingsTable,
   createChannelIdentityMappingTables,