@axiom-lattice/pg-stores 3.1.5 → 3.1.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/pg-stores",
-  "version": "3.1.5",
+  "version": "3.1.6",
   "description": "PG stores implementation for Axiom Lattice framework",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -25,8 +25,8 @@
     "@langchain/core": "1.1.30",
     "pg": "^8.16.3",
     "uuid": "^9.0.1",
-    "@axiom-lattice/core": "4.2.5",
-    "@axiom-lattice/protocols": "4.1.3"
+    "@axiom-lattice/core": "4.2.6",
+    "@axiom-lattice/protocols": "4.1.4"
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",

package/src/__tests__/PostgreSQLAgentWebAppStore.migrations.test.ts

@@ -45,8 +45,9 @@ describe("PostgreSQLAgentWebAppStore standalone migrations", () => {
 
     await store.initialize();
 
-    expect(recordedMigrationNames).toEqual(["create_agent_web_apps_table"]);
+    expect(recordedMigrationNames).toEqual(["create_agent_web_apps_table", "add_agent_web_apps_identity"]);
     expect(clientSql.some((sql) => sql.includes("CREATE TABLE IF NOT EXISTS lattice_agent_web_apps"))).toBe(true);
+    expect(clientSql.some((sql) => sql.includes("ADD COLUMN IF NOT EXISTS identity"))).toBe(true);
     expect(clientSql.some((sql) => sql.includes("status VARCHAR(32) NOT NULL DEFAULT 'draft'"))).toBe(true);
     expect(clientSql.some((sql) => sql.includes(
       "CONSTRAINT chk_lattice_agent_web_apps_status CHECK (status IN ('draft', 'active', 'disabled'))",

package/src/__tests__/PostgreSQLAgentWebAppStore.test.ts

@@ -76,6 +76,7 @@ describe("PostgreSQLAgentWebAppStore", () => {
       JSON.stringify(input.scope),
       JSON.stringify(input.features),
       JSON.stringify(input.appearance),
+      null,
     ]);
     expect(result).toEqual({
       id: "webapp_123",

package/src/createPgStoreConfig.ts

@@ -80,6 +80,7 @@ import {
   addProjectLifecycleEventIndex,
 } from "./migrations/task_work_items_migration";
 import { createAgentWebAppsTable } from "./migrations/agent_web_apps_migration";
+import { addAgentWebAppsIdentity } from "./migrations/add_agent_web_apps_identity_migration";
 import { createCapabilityBundlesTable } from "./migrations/capability_bundle_migration";
 import { createProjectRoomTables } from "./migrations/project_room_migration";
 import { PostgreSQLCapabilityBundleStore } from "./stores/PostgreSQLCapabilityBundleStore";
@@ -153,6 +154,7 @@ export async function createPgStoreConfig(connectionString: string) {
   mm.register(createProjectRoomTables);        // v172
   mm.register(addTrustedRunContextColumn);      // v173
   mm.register(addProjectLifecycleEventIndex);   // v175
+  mm.register(addAgentWebAppsIdentity);         // v176
 
   await mm.migrate();
 

package/src/migrations/add_agent_web_apps_identity_migration.ts

@@ -0,0 +1,18 @@
+import type { PoolClient } from "pg";
+
+import type { Migration } from "./migration";
+
+export const addAgentWebAppsIdentity: Migration = {
+  version: 176,
+  name: "add_agent_web_apps_identity",
+  up: async (client: PoolClient) => {
+    await client.query(
+      "ALTER TABLE lattice_agent_web_apps ADD COLUMN IF NOT EXISTS identity JSONB",
+    );
+  },
+  down: async (client: PoolClient) => {
+    await client.query(
+      "ALTER TABLE lattice_agent_web_apps DROP COLUMN IF EXISTS identity",
+    );
+  },
+};

package/src/stores/PostgreSQLAgentWebAppStore.ts

@@ -14,6 +14,7 @@ import { Pool } from "pg";
 import type { PoolConfig } from "pg";
 
 import { createAgentWebAppsTable } from "../migrations/agent_web_apps_migration";
+import { addAgentWebAppsIdentity } from "../migrations/add_agent_web_apps_identity_migration";
 import { MigrationManager } from "../migrations/migration";
 
 export interface PostgreSQLAgentWebAppStoreOptions {
@@ -33,6 +34,7 @@ type AgentWebAppRow = {
   scope: unknown;
   features: unknown;
   appearance: unknown;
+  identity: unknown;
   created_at: Date;
   updated_at: Date;
 };
@@ -64,7 +66,8 @@ function isFeatures(value: unknown): value is AgentWebAppFeatures {
     && typeof value.threadManagement === "boolean"
     && typeof value.attachments === "boolean"
     && typeof value.hitl === "boolean"
-    && typeof value.genUI === "boolean";
+    && typeof value.genUI === "boolean"
+    && (value.files === undefined || typeof value.files === "boolean");
 }
 
 function isAppearance(value: unknown): value is AgentWebAppAppearance {
@@ -74,6 +77,18 @@ function isAppearance(value: unknown): value is AgentWebAppAppearance {
     && (value.primaryColor === undefined || typeof value.primaryColor === "string");
 }
 
+function isIdentity(value: unknown): boolean {
+  if (value === null || value === undefined) return true;
+  if (!isRecord(value)) return false;
+  const policyOk = value.policy === "unverified" || value.policy === "verified" || value.policy === "both";
+  const issuersOk = Array.isArray(value.issuers)
+    && value.issuers.every((issuer) => isRecord(issuer)
+      && typeof issuer.iss === "string"
+      && typeof issuer.aud === "string"
+      && (issuer.alg === "HS256" || issuer.alg === "RS256"));
+  return policyOk && issuersOk;
+}
+
 function isStatus(value: unknown): value is AgentWebAppStatus {
   return value === "draft" || value === "active" || value === "disabled";
 }
@@ -85,6 +100,7 @@ function mapRow(row: AgentWebAppRow): AgentWebApp {
     || !isScope(row.scope)
     || !isFeatures(row.features)
     || !isAppearance(row.appearance)
+    || !isIdentity(row.identity)
   ) {
     throw new Error(`Invalid agent web app row: ${row.id}`);
   }
@@ -100,6 +116,7 @@ function mapRow(row: AgentWebAppRow): AgentWebApp {
     scope: row.scope,
     features: row.features,
     appearance: row.appearance,
+    identity: row.identity === null ? undefined : (row.identity as AgentWebApp["identity"]),
     createdAt: row.created_at,
     updatedAt: row.updated_at,
   };
@@ -128,6 +145,7 @@ export class PostgreSQLAgentWebAppStore implements AgentWebAppStore {
 
     this.migrationManager = new MigrationManager(this.pool);
     this.migrationManager.register(createAgentWebAppsTable);
+    this.migrationManager.register(addAgentWebAppsIdentity);
 
     if (options.autoMigrate !== false) {
       this.startInitialization();
@@ -200,8 +218,8 @@ export class PostgreSQLAgentWebAppStore implements AgentWebAppStore {
     const id = `webapp_${randomUUID().replace(/-/g, "")}`;
     const result = await this.pool.query<AgentWebAppRow>(
       `INSERT INTO lattice_agent_web_apps
-       (id, tenant_id, assistant_id, name, description, status, integration, scope, features, appearance)
-       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8::jsonb, $9::jsonb, $10::jsonb)
+       (id, tenant_id, assistant_id, name, description, status, integration, scope, features, appearance, identity)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8::jsonb, $9::jsonb, $10::jsonb, $11::jsonb)
        RETURNING *`,
       [
         id,
@@ -214,6 +232,7 @@ export class PostgreSQLAgentWebAppStore implements AgentWebAppStore {
         JSON.stringify(input.scope),
         JSON.stringify(input.features),
         JSON.stringify(input.appearance),
+        input.identity ? JSON.stringify(input.identity) : null,
       ],
     );
     return mapRow(result.rows[0]);
@@ -246,6 +265,9 @@ export class PostgreSQLAgentWebAppStore implements AgentWebAppStore {
     if (patch.appearance !== undefined) {
       add("appearance", JSON.stringify(patch.appearance));
     }
+    if (patch.identity !== undefined) {
+      add("identity", JSON.stringify(patch.identity));
+    }
     if (patch.status !== undefined) add("status", patch.status);
 
     if (assignments.length === 0) return this.getById(tenantId, webAppId);