@axiom-lattice/pg-stores 3.1.5 → 3.1.8

package/dist/index.mjs

@@ -2016,6 +2016,18 @@ var PostgreSQLMcpServerConfigStore = class {
         throw new Error("Failed to decrypt MCP server configuration");
       }
     }
+    if (config.headers && row.is_env_encrypted) {
+      try {
+        const decryptedHeaders = {};
+        for (const [key, value] of Object.entries(config.headers)) {
+          decryptedHeaders[key] = decrypt3(value);
+        }
+        config.headers = decryptedHeaders;
+      } catch (error) {
+        console.error("Failed to decrypt MCP server headers:", error);
+        throw new Error("Failed to decrypt MCP server configuration");
+      }
+    }
     return {
       id: row.id,
       tenantId: row.tenant_id,
@@ -2044,6 +2056,14 @@ var PostgreSQLMcpServerConfigStore = class {
       configCopy.env = encryptedEnv;
       isEnvEncrypted = true;
     }
+    if (configCopy.headers && Object.keys(configCopy.headers).length > 0) {
+      const encryptedHeaders = {};
+      for (const [key, value] of Object.entries(configCopy.headers)) {
+        encryptedHeaders[key] = encrypt3(value);
+      }
+      configCopy.headers = encryptedHeaders;
+      isEnvEncrypted = true;
+    }
     return { config: configCopy, isEnvEncrypted };
   }
 };
@@ -6320,6 +6340,22 @@ var createAgentWebAppsTable = {
   }
 };
 
+// src/migrations/add_agent_web_apps_identity_migration.ts
+var addAgentWebAppsIdentity = {
+  version: 176,
+  name: "add_agent_web_apps_identity",
+  up: async (client) => {
+    await client.query(
+      "ALTER TABLE lattice_agent_web_apps ADD COLUMN IF NOT EXISTS identity JSONB"
+    );
+  },
+  down: async (client) => {
+    await client.query(
+      "ALTER TABLE lattice_agent_web_apps DROP COLUMN IF EXISTS identity"
+    );
+  }
+};
+
 // src/stores/PostgreSQLAgentWebAppStore.ts
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -6334,16 +6370,23 @@ function isScope(value) {
   return isRecord(value) && typeof value.defaultProjectId === "string" && isStringArray(value.allowedProjectIds) && (value.defaultModelKey === void 0 || typeof value.defaultModelKey === "string") && (value.allowedModelKeys === void 0 || isStringArray(value.allowedModelKeys));
 }
 function isFeatures(value) {
-  return isRecord(value) && typeof value.projectSelector === "boolean" && typeof value.modelSelector === "boolean" && typeof value.threadManagement === "boolean" && typeof value.attachments === "boolean" && typeof value.hitl === "boolean" && typeof value.genUI === "boolean";
+  return isRecord(value) && typeof value.projectSelector === "boolean" && typeof value.modelSelector === "boolean" && typeof value.threadManagement === "boolean" && typeof value.attachments === "boolean" && typeof value.hitl === "boolean" && typeof value.genUI === "boolean" && (value.files === void 0 || typeof value.files === "boolean");
 }
 function isAppearance(value) {
   return isRecord(value) && (value.title === void 0 || typeof value.title === "string") && (value.welcomeMessage === void 0 || typeof value.welcomeMessage === "string") && (value.primaryColor === void 0 || typeof value.primaryColor === "string");
 }
+function isIdentity(value) {
+  if (value === null || value === void 0) return true;
+  if (!isRecord(value)) return false;
+  const policyOk = value.policy === "unverified" || value.policy === "verified" || value.policy === "both";
+  const issuersOk = Array.isArray(value.issuers) && value.issuers.every((issuer) => isRecord(issuer) && typeof issuer.iss === "string" && typeof issuer.aud === "string" && (issuer.alg === "HS256" || issuer.alg === "RS256"));
+  return policyOk && issuersOk;
+}
 function isStatus(value) {
   return value === "draft" || value === "active" || value === "disabled";
 }
 function mapRow(row) {
-  if (!isStatus(row.status) || !isIntegration(row.integration) || !isScope(row.scope) || !isFeatures(row.features) || !isAppearance(row.appearance)) {
+  if (!isStatus(row.status) || !isIntegration(row.integration) || !isScope(row.scope) || !isFeatures(row.features) || !isAppearance(row.appearance) || !isIdentity(row.identity)) {
     throw new Error(`Invalid agent web app row: ${row.id}`);
   }
   return {
@@ -6357,6 +6400,7 @@ function mapRow(row) {
     scope: row.scope,
     features: row.features,
     appearance: row.appearance,
+    identity: row.identity === null ? void 0 : row.identity,
     createdAt: row.created_at,
     updatedAt: row.updated_at
   };
@@ -6377,6 +6421,7 @@ var PostgreSQLAgentWebAppStore = class {
     })();
     this.migrationManager = new MigrationManager(this.pool);
     this.migrationManager.register(createAgentWebAppsTable);
+    this.migrationManager.register(addAgentWebAppsIdentity);
     if (options.autoMigrate !== false) {
       this.startInitialization();
     }
@@ -6437,8 +6482,8 @@ var PostgreSQLAgentWebAppStore = class {
     const id = `webapp_${randomUUID2().replace(/-/g, "")}`;
     const result = await this.pool.query(
       `INSERT INTO lattice_agent_web_apps
-       (id, tenant_id, assistant_id, name, description, status, integration, scope, features, appearance)
-       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8::jsonb, $9::jsonb, $10::jsonb)
+       (id, tenant_id, assistant_id, name, description, status, integration, scope, features, appearance, identity)
+       VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8::jsonb, $9::jsonb, $10::jsonb, $11::jsonb)
        RETURNING *`,
       [
         id,
@@ -6450,7 +6495,8 @@ var PostgreSQLAgentWebAppStore = class {
         JSON.stringify(input.integration),
         JSON.stringify(input.scope),
         JSON.stringify(input.features),
-        JSON.stringify(input.appearance)
+        JSON.stringify(input.appearance),
+        input.identity ? JSON.stringify(input.identity) : null
       ]
     );
     return mapRow(result.rows[0]);
@@ -6476,6 +6522,9 @@ var PostgreSQLAgentWebAppStore = class {
     if (patch.appearance !== void 0) {
       add("appearance", JSON.stringify(patch.appearance));
     }
+    if (patch.identity !== void 0) {
+      add("identity", JSON.stringify(patch.identity));
+    }
     if (patch.status !== void 0) add("status", patch.status);
     if (assignments.length === 0) return this.getById(tenantId, webAppId);
     values.push(tenantId, webAppId);
@@ -9557,6 +9606,30 @@ var createProjectRoomTables = {
     await client.query("DROP TABLE IF EXISTS lattice_project_rooms");
   }
 };
+var createProjectRoomReadStates = {
+  version: 177,
+  name: "create_project_room_read_states",
+  up: async (client) => {
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS lattice_project_room_read_states (
+        tenant_id VARCHAR(255) NOT NULL,
+        room_id VARCHAR(255) NOT NULL,
+        user_id VARCHAR(255) NOT NULL,
+        last_read_at TIMESTAMPTZ NOT NULL,
+        updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        PRIMARY KEY (tenant_id, room_id, user_id)
+      )
+    `);
+    await client.query(`
+      CREATE INDEX IF NOT EXISTS idx_lattice_project_room_read_states_user
+      ON lattice_project_room_read_states (tenant_id, user_id)
+    `);
+  },
+  down: async (client) => {
+    await client.query("DROP INDEX IF EXISTS idx_lattice_project_room_read_states_user");
+    await client.query("DROP TABLE IF EXISTS lattice_project_room_read_states");
+  }
+};
 
 // src/stores/PostgreSQLCapabilityBundleStore.ts
 import { randomUUID as randomUUID3 } from "crypto";
@@ -10344,6 +10417,19 @@ var PostgreSQLProjectRoomMessageStore = class {
     );
     return result.rows[0] ? mapRow5(result.rows[0]) : null;
   }
+  /** Counts messages created strictly after a horizon, optionally excluding one human author. */
+  async countAfter(input) {
+    if (!(input.after instanceof Date) || Number.isNaN(input.after.getTime())) {
+      throw new RangeError("Project room message count horizon date is invalid");
+    }
+    const result = await this.pool.query(
+      `SELECT COUNT(*)::int AS count FROM lattice_project_room_messages
+       WHERE tenant_id = $1 AND room_id = $2 AND created_at > $3
+         AND ($4::text IS NULL OR author->>'type' <> 'human' OR author->>'userId' <> $4)`,
+      [input.tenantId, input.roomId, input.after, input.excludeAuthorUserId ?? null]
+    );
+    return result.rows[0]?.count ?? 0;
+  }
   parameters(input) {
     return [
       input.id,
@@ -10362,6 +10448,45 @@ var PostgreSQLProjectRoomMessageStore = class {
   }
 };
 
+// src/stores/PostgreSQLProjectRoomReadStateStore.ts
+function mapRow6(row) {
+  if (typeof row.tenant_id !== "string" || typeof row.room_id !== "string" || typeof row.user_id !== "string" || !(row.last_read_at instanceof Date) || Number.isNaN(row.last_read_at.getTime()) || !(row.updated_at instanceof Date) || Number.isNaN(row.updated_at.getTime())) {
+    throw new Error("Invalid project room read state row");
+  }
+  return { tenantId: row.tenant_id, roomId: row.room_id, userId: row.user_id, lastReadAt: row.last_read_at, updatedAt: row.updated_at };
+}
+var PostgreSQLProjectRoomReadStateStore = class {
+  /** Creates a store using an externally managed shared pool. */
+  constructor(options) {
+    this.pool = options.pool;
+  }
+  /** Returns the user's read marker for a room, or null when never reported. */
+  async get(tenantId, roomId, userId) {
+    const result = await this.pool.query(
+      `SELECT tenant_id, room_id, user_id, last_read_at, updated_at
+       FROM lattice_project_room_read_states WHERE tenant_id = $1 AND room_id = $2 AND user_id = $3`,
+      [tenantId, roomId, userId]
+    );
+    return result.rows[0] ? mapRow6(result.rows[0]) : null;
+  }
+  /** Upserts the marker monotonically using GREATEST so older reports never regress it. */
+  async markRead(input) {
+    if (!(input.lastReadAt instanceof Date) || Number.isNaN(input.lastReadAt.getTime())) {
+      throw new RangeError("Project room read state lastReadAt is invalid");
+    }
+    const result = await this.pool.query(
+      `INSERT INTO lattice_project_room_read_states (tenant_id, room_id, user_id, last_read_at, updated_at)
+       VALUES ($1, $2, $3, $4, NOW())
+       ON CONFLICT (tenant_id, room_id, user_id) DO UPDATE
+         SET last_read_at = GREATEST(lattice_project_room_read_states.last_read_at, EXCLUDED.last_read_at),
+             updated_at = NOW()
+       RETURNING tenant_id, room_id, user_id, last_read_at, updated_at`,
+      [input.tenantId, input.roomId, input.userId, input.lastReadAt]
+    );
+    return mapRow6(result.rows[0]);
+  }
+};
+
 // src/createPgStoreConfig.ts
 async function createPgStoreConfig(connectionString) {
   const pool = new Pool26({ connectionString });
@@ -10424,6 +10549,8 @@ async function createPgStoreConfig(connectionString) {
   mm.register(createProjectRoomTables);
   mm.register(addTrustedRunContextColumn);
   mm.register(addProjectLifecycleEventIndex);
+  mm.register(addAgentWebAppsIdentity);
+  mm.register(createProjectRoomReadStates);
   await mm.migrate();
   const checkpoint = PostgresSaver.fromConnString(connectionString);
   checkpoint.setup().catch((err) => {
@@ -10461,6 +10588,7 @@ async function createPgStoreConfig(connectionString) {
     projectMembership: new PostgreSQLProjectMembershipStore(opts),
     projectBotMembership: new PostgreSQLProjectBotMembershipStore(opts),
     projectRoomMessage: new PostgreSQLProjectRoomMessageStore(opts),
+    projectRoomReadState: new PostgreSQLProjectRoomReadStateStore(opts),
     vectorStoreProvider: new PGVectorStoreProvider(pool, connectionString),
     checkpoint
   };
@@ -11036,6 +11164,7 @@ export {
   PostgreSQLProjectBotMembershipStore,
   PostgreSQLProjectMembershipStore,
   PostgreSQLProjectRoomMessageStore,
+  PostgreSQLProjectRoomReadStateStore,
   PostgreSQLProjectRoomStore,
   PostgreSQLProjectStore,
   PostgreSQLScheduleStorage,
@@ -11088,6 +11217,7 @@ export {
   createMetricsConfigsTable,
   createPGVectorStoreProvider,
   createPgStoreConfig,
+  createProjectRoomReadStates,
   createProjectRoomTables,
   createProjectsTable,
   createScheduledTasksTable,