@axiom-lattice/pg-stores 3.3.2 → 3.3.4

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/pg-stores@3.3.2 build /home/runner/work/agentic/agentic/packages/pg-stores
+> @axiom-lattice/pg-stores@3.3.4 build /home/runner/work/agentic/agentic/packages/pg-stores
 > tsup src/index.ts --format cjs,esm --dts --sourcemap
 
 CLI Building entry: src/index.ts
@@ -8,13 +8,13 @@
 CLI Target: es2020
 CJS Build start
 ESM Build start
-CJS dist/index.js     434.94 KB
-CJS dist/index.js.map 793.26 KB
-CJS ⚡️ Build success in 1008ms
-ESM dist/index.mjs     426.45 KB
-ESM dist/index.mjs.map 792.92 KB
-ESM ⚡️ Build success in 1070ms
+CJS dist/index.js     443.09 KB
+CJS dist/index.js.map 807.74 KB
+CJS ⚡️ Build success in 1017ms
+ESM dist/index.mjs     434.40 KB
+ESM dist/index.mjs.map 807.39 KB
+ESM ⚡️ Build success in 1084ms
 DTS Build start
-DTS ⚡️ Build success in 13458ms
-DTS dist/index.d.ts  91.36 KB
-DTS dist/index.d.mts 91.36 KB
+DTS ⚡️ Build success in 14116ms
+DTS dist/index.d.ts  93.36 KB
+DTS dist/index.d.mts 93.36 KB

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @axiom-lattice/pg-stores
 
+## 3.3.4
+
+### Patch Changes
+
+- Updated dependencies [aa2d760]
+- Updated dependencies [ad5a730]
+  - @axiom-lattice/core@6.4.0
+  - @axiom-lattice/protocols@4.8.0
+
+## 3.3.3
+
+### Patch Changes
+
+- Updated dependencies
+  - @axiom-lattice/core@6.3.3
+
 ## 3.3.2
 
 ### Patch Changes

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { Pool, PoolConfig, PoolClient } from 'pg';
 export { Pool, PoolConfig } from 'pg';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, PluginDeploymentStore, PluginDeployment, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
 export { AgentWebApp, AgentWebAppAppearance, AgentWebAppFeatures, AgentWebAppScope, AgentWebAppStatus, AgentWebAppStore, Assistant, AssistantStore, Binding, BindingRegistry, CapabilityBundle, CapabilityBundleStore, ChannelInstallation, ChannelInstallationStore, ConnectionEntry, ConnectionStore, CreateAgentWebAppInput, CreateAssistantRequest, CreateBindingInput, CreateCapabilityBundleInput, CreateChannelInstallationInput, CreateChannelInstallationRequest, CreateDatabaseConfigRequest, CreateEvalCaseRequest, CreateEvalProjectRequest, CreateEvalRunRequest, CreateEvalSuiteRequest, CreateMcpServerConfigRequest, CreateMenuItemInput, CreateMetricsServerConfigRequest, CreateProjectRequest, CreateRunStepRequest, CreateShareRequest, CreateSkillRequest, CreateTenantRequest, CreateThreadRequest, CreateUserRequest, CreateUserTenantLinkRequest, CreateWorkflowRunRequest, CreateWorkspaceRequest, DatabaseConfig, DatabaseConfigEntry, DatabaseConfigStore, DatabaseType, EvalCase, EvalProject, EvalProjectReport, EvalRun, EvalRunResult, EvalStore, EvalSuite, LarkChannelInstallationConfig, McpServerConfigEntry, McpServerConfigStore, MenuItem, MenuRegistry, MetricsServerConfig, MetricsServerConfigEntry, MetricsServerConfigStore, Project, ProjectStore, ResourceAddress, RunStep, ScheduleExecutionType, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ShareRecord, ShareResult, ShareVisibility, SharedResourceStore, Skill, SkillStore, StorageType, Tenant, TenantStatus, TenantStore, Thread, ThreadStore, UpdateAgentWebAppInput, UpdateCapabilityBundleInput, UpdateChannelInstallationRequest, UpdateDatabaseConfigRequest, UpdateMcpServerConfigRequest, UpdateMetricsServerConfigRequest, UpdateProjectRequest, UpdateRunStepRequest, UpdateTenantRequest, UpdateUserRequest, UpdateUserTenantLinkRequest, UpdateWorkflowRunRequest, UpdateWorkspaceRequest, User, UserStore, UserTenantLink, UserTenantLinkStore, UserTenantRole, WorkflowRun, WorkflowTrackingStore, Workspace, WorkspaceStore } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ClaimMessagesOptions, ThreadInfo } from '@axiom-lattice/core';
 export { AddMessageParams, PendingMessage, ThreadInfo } from '@axiom-lattice/core';
@@ -1916,6 +1916,25 @@ declare class PostgreSQLOutboxStore implements OutboxStore {
     private rowToEvent;
 }
 
+/** Persists tenant-scoped plugin deployments in PostgreSQL. */
+declare class PostgreSQLPluginDeploymentStore implements PluginDeploymentStore {
+    /** Creates a store using an externally managed shared pool. */
+    constructor(options: {
+        pool: Pool;
+    });
+    private readonly pool;
+    /** Lists every deployment for a tenant, ordered by plugin type. */
+    listByTenant(tenantId: string): Promise<PluginDeployment[]>;
+    /** Returns the deployment for a tenant + plugin type, or undefined. */
+    get(tenantId: string, pluginType: string): Promise<PluginDeployment | undefined>;
+    /** Upserts a deployment keyed by tenant + plugin type, preserving the original id and createdAt. */
+    upsert(deployment: PluginDeployment): Promise<PluginDeployment>;
+    /** Applies a partial update to mutable columns; returns undefined when no row exists. */
+    updateStatus(tenantId: string, pluginType: string, patch: Partial<Omit<PluginDeployment, "id" | "tenantId" | "pluginType">>): Promise<PluginDeployment | undefined>;
+    /** Deletes a deployment by tenant + plugin type; returns whether a row was removed. */
+    delete(tenantId: string, pluginType: string): Promise<boolean>;
+}
+
 declare function createPgStoreConfig(connectionString: string): Promise<{
     workspace: PostgreSQLWorkspaceStore;
     project: PostgreSQLProjectStore;
@@ -1952,6 +1971,7 @@ declare function createPgStoreConfig(connectionString: string): Promise<{
     userPushSubscription: PostgreSQLUserPushSubscriptionStore;
     lease: PostgreSQLLeaseStore;
     outbox: PostgreSQLOutboxStore;
+    pluginDeployment: PostgreSQLPluginDeploymentStore;
     vectorStoreProvider: PGVectorStoreProvider;
     checkpoint: PostgresSaver;
 }>;
@@ -2444,4 +2464,19 @@ declare const createProjectRoomTables: Migration;
 /** Adds per-user, per-room read markers for unread counts. */
 declare const createProjectRoomReadStates: Migration;
 
-export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addProjectConfigColumn, addScheduleTenantId, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createPGVectorStoreProvider, createPgStoreConfig, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };
+/** Creates the durable plugin-deployment table. */
+declare const createPluginDeployments: Migration;
+/**
+ * Drops the now-unused `auth_token` column introduced by
+ * {@link createPluginDeployments}.
+ *
+ * Resident plugin hosts no longer receive a per-deployment bearer token; the
+ * sandbox service key plus loopback transport replace it. This is a separate
+ * migration (rather than editing v189 in place) because migration identity is
+ * the name: databases that already applied the released v189 keep its
+ * `auth_token NOT NULL` column, so the token removal must be applied as a new
+ * forward migration.
+ */
+declare const dropPluginDeploymentAuthToken: Migration;
+
+export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLPluginDeploymentStore, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addProjectConfigColumn, addScheduleTenantId, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createPGVectorStoreProvider, createPgStoreConfig, createPluginDeployments, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, dropPluginDeploymentAuthToken, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { Pool, PoolConfig, PoolClient } from 'pg';
 export { Pool, PoolConfig } from 'pg';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, PluginDeploymentStore, PluginDeployment, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
 export { AgentWebApp, AgentWebAppAppearance, AgentWebAppFeatures, AgentWebAppScope, AgentWebAppStatus, AgentWebAppStore, Assistant, AssistantStore, Binding, BindingRegistry, CapabilityBundle, CapabilityBundleStore, ChannelInstallation, ChannelInstallationStore, ConnectionEntry, ConnectionStore, CreateAgentWebAppInput, CreateAssistantRequest, CreateBindingInput, CreateCapabilityBundleInput, CreateChannelInstallationInput, CreateChannelInstallationRequest, CreateDatabaseConfigRequest, CreateEvalCaseRequest, CreateEvalProjectRequest, CreateEvalRunRequest, CreateEvalSuiteRequest, CreateMcpServerConfigRequest, CreateMenuItemInput, CreateMetricsServerConfigRequest, CreateProjectRequest, CreateRunStepRequest, CreateShareRequest, CreateSkillRequest, CreateTenantRequest, CreateThreadRequest, CreateUserRequest, CreateUserTenantLinkRequest, CreateWorkflowRunRequest, CreateWorkspaceRequest, DatabaseConfig, DatabaseConfigEntry, DatabaseConfigStore, DatabaseType, EvalCase, EvalProject, EvalProjectReport, EvalRun, EvalRunResult, EvalStore, EvalSuite, LarkChannelInstallationConfig, McpServerConfigEntry, McpServerConfigStore, MenuItem, MenuRegistry, MetricsServerConfig, MetricsServerConfigEntry, MetricsServerConfigStore, Project, ProjectStore, ResourceAddress, RunStep, ScheduleExecutionType, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ShareRecord, ShareResult, ShareVisibility, SharedResourceStore, Skill, SkillStore, StorageType, Tenant, TenantStatus, TenantStore, Thread, ThreadStore, UpdateAgentWebAppInput, UpdateCapabilityBundleInput, UpdateChannelInstallationRequest, UpdateDatabaseConfigRequest, UpdateMcpServerConfigRequest, UpdateMetricsServerConfigRequest, UpdateProjectRequest, UpdateRunStepRequest, UpdateTenantRequest, UpdateUserRequest, UpdateUserTenantLinkRequest, UpdateWorkflowRunRequest, UpdateWorkspaceRequest, User, UserStore, UserTenantLink, UserTenantLinkStore, UserTenantRole, WorkflowRun, WorkflowTrackingStore, Workspace, WorkspaceStore } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ClaimMessagesOptions, ThreadInfo } from '@axiom-lattice/core';
 export { AddMessageParams, PendingMessage, ThreadInfo } from '@axiom-lattice/core';
@@ -1916,6 +1916,25 @@ declare class PostgreSQLOutboxStore implements OutboxStore {
     private rowToEvent;
 }
 
+/** Persists tenant-scoped plugin deployments in PostgreSQL. */
+declare class PostgreSQLPluginDeploymentStore implements PluginDeploymentStore {
+    /** Creates a store using an externally managed shared pool. */
+    constructor(options: {
+        pool: Pool;
+    });
+    private readonly pool;
+    /** Lists every deployment for a tenant, ordered by plugin type. */
+    listByTenant(tenantId: string): Promise<PluginDeployment[]>;
+    /** Returns the deployment for a tenant + plugin type, or undefined. */
+    get(tenantId: string, pluginType: string): Promise<PluginDeployment | undefined>;
+    /** Upserts a deployment keyed by tenant + plugin type, preserving the original id and createdAt. */
+    upsert(deployment: PluginDeployment): Promise<PluginDeployment>;
+    /** Applies a partial update to mutable columns; returns undefined when no row exists. */
+    updateStatus(tenantId: string, pluginType: string, patch: Partial<Omit<PluginDeployment, "id" | "tenantId" | "pluginType">>): Promise<PluginDeployment | undefined>;
+    /** Deletes a deployment by tenant + plugin type; returns whether a row was removed. */
+    delete(tenantId: string, pluginType: string): Promise<boolean>;
+}
+
 declare function createPgStoreConfig(connectionString: string): Promise<{
     workspace: PostgreSQLWorkspaceStore;
     project: PostgreSQLProjectStore;
@@ -1952,6 +1971,7 @@ declare function createPgStoreConfig(connectionString: string): Promise<{
     userPushSubscription: PostgreSQLUserPushSubscriptionStore;
     lease: PostgreSQLLeaseStore;
     outbox: PostgreSQLOutboxStore;
+    pluginDeployment: PostgreSQLPluginDeploymentStore;
     vectorStoreProvider: PGVectorStoreProvider;
     checkpoint: PostgresSaver;
 }>;
@@ -2444,4 +2464,19 @@ declare const createProjectRoomTables: Migration;
 /** Adds per-user, per-room read markers for unread counts. */
 declare const createProjectRoomReadStates: Migration;
 
-export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addProjectConfigColumn, addScheduleTenantId, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createPGVectorStoreProvider, createPgStoreConfig, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };
+/** Creates the durable plugin-deployment table. */
+declare const createPluginDeployments: Migration;
+/**
+ * Drops the now-unused `auth_token` column introduced by
+ * {@link createPluginDeployments}.
+ *
+ * Resident plugin hosts no longer receive a per-deployment bearer token; the
+ * sandbox service key plus loopback transport replace it. This is a separate
+ * migration (rather than editing v189 in place) because migration identity is
+ * the name: databases that already applied the released v189 keep its
+ * `auth_token NOT NULL` column, so the token removal must be applied as a new
+ * forward migration.
+ */
+declare const dropPluginDeploymentAuthToken: Migration;
+
+export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLPluginDeploymentStore, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addProjectConfigColumn, addScheduleTenantId, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createPGVectorStoreProvider, createPgStoreConfig, createPluginDeployments, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, dropPluginDeploymentAuthToken, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };

package/dist/index.js

@@ -51,6 +51,7 @@ __export(index_exports, {
   PostgreSQLMetricsServerConfigStore: () => PostgreSQLMetricsServerConfigStore,
   PostgreSQLModelProviderStore: () => PostgreSQLModelProviderStore,
   PostgreSQLOpenAuditStore: () => PostgreSQLOpenAuditStore,
+  PostgreSQLPluginDeploymentStore: () => PostgreSQLPluginDeploymentStore,
   PostgreSQLProjectBotMembershipStore: () => PostgreSQLProjectBotMembershipStore,
   PostgreSQLProjectMembershipStore: () => PostgreSQLProjectMembershipStore,
   PostgreSQLProjectRoomMessageStore: () => PostgreSQLProjectRoomMessageStore,
@@ -108,6 +109,7 @@ __export(index_exports, {
   createMetricsConfigsTable: () => createMetricsConfigsTable,
   createPGVectorStoreProvider: () => createPGVectorStoreProvider,
   createPgStoreConfig: () => createPgStoreConfig,
+  createPluginDeployments: () => createPluginDeployments,
   createProjectRoomReadStates: () => createProjectRoomReadStates,
   createProjectRoomTables: () => createProjectRoomTables,
   createProjectsTable: () => createProjectsTable,
@@ -120,6 +122,7 @@ __export(index_exports, {
   createUsersTable: () => createUsersTable,
   createWorkflowTrackingTables: () => createWorkflowTrackingTables,
   createWorkspacesTable: () => createWorkspacesTable,
+  dropPluginDeploymentAuthToken: () => dropPluginDeploymentAuthToken,
   enforceUniqueEvalProjectName: () => enforceUniqueEvalProjectName,
   evalMigrations: () => evalMigrations,
   mapRowToRunStep: () => mapRowToRunStep,
@@ -7964,11 +7967,11 @@ var PostgreSQLTaskStore = class {
       params.push(filter.ownerId);
     }
     if (filter.status) {
-      const statuses = filter.status.split(",").map((s) => s.trim()).filter(Boolean);
-      const placeholders = statuses.map((_, i) => `$${paramIndex + i}`).join(", ");
+      const statuses2 = filter.status.split(",").map((s) => s.trim()).filter(Boolean);
+      const placeholders = statuses2.map((_, i) => `$${paramIndex + i}`).join(", ");
       conditions.push(`status IN (${placeholders})`);
-      params.push(...statuses);
-      paramIndex += statuses.length;
+      params.push(...statuses2);
+      paramIndex += statuses2.length;
     }
     if (filter.priority) {
       conditions.push(`priority = $${paramIndex++}`);
@@ -10271,6 +10274,60 @@ var createOutboxTable = {
   }
 };
 
+// src/migrations/plugin_deployment_migration.ts
+var createPluginDeployments = {
+  version: 189,
+  name: "create_plugin_deployments",
+  up: async (client) => {
+    await client.query(`
+      CREATE TABLE IF NOT EXISTS lattice_plugin_deployments (
+        id VARCHAR(255) PRIMARY KEY,
+        tenant_id VARCHAR(255) NOT NULL,
+        plugin_type VARCHAR(255) NOT NULL,
+        plugin_version VARCHAR(255) NOT NULL,
+        mode VARCHAR(16) NOT NULL,
+        status VARCHAR(32) NOT NULL,
+        provider VARCHAR(64) NOT NULL,
+        sandbox_name VARCHAR(255) NOT NULL,
+        port INTEGER NOT NULL,
+        endpoint TEXT,
+        image_ref TEXT,
+        auth_token TEXT NOT NULL,
+        idle_timeout_ms INTEGER NOT NULL,
+        last_health_at TIMESTAMPTZ,
+        last_error TEXT,
+        created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        UNIQUE (tenant_id, plugin_type)
+      )
+    `);
+    await client.query(`
+      CREATE INDEX IF NOT EXISTS idx_lattice_plugin_deployments_tenant
+      ON lattice_plugin_deployments (tenant_id)
+    `);
+  },
+  down: async (client) => {
+    await client.query("DROP INDEX IF EXISTS idx_lattice_plugin_deployments_tenant");
+    await client.query("DROP TABLE IF EXISTS lattice_plugin_deployments");
+  }
+};
+var dropPluginDeploymentAuthToken = {
+  version: 190,
+  name: "drop_plugin_deployment_auth_token",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_plugin_deployments
+      DROP COLUMN IF EXISTS auth_token
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_plugin_deployments
+      ADD COLUMN IF NOT EXISTS auth_token TEXT NOT NULL DEFAULT ''
+    `);
+  }
+};
+
 // src/migrations/model_provider_migrations.ts
 var createModelProvidersTable = {
   version: 181,
@@ -12054,6 +12111,145 @@ var PostgreSQLOutboxStore = class {
   }
 };
 
+// src/stores/PostgreSQLPluginDeploymentStore.ts
+var columns5 = "id, tenant_id, plugin_type, plugin_version, mode, status, provider, sandbox_name, port, endpoint, image_ref, idle_timeout_ms, last_health_at, last_error, created_at, updated_at";
+var statuses = [
+  "requested",
+  "provisioning",
+  "running",
+  "paused",
+  "stopping",
+  "stopped",
+  "failed"
+];
+function isStatus4(value) {
+  return typeof value === "string" && statuses.includes(value);
+}
+function mapRow8(row) {
+  if (typeof row.id !== "string" || typeof row.tenant_id !== "string" || typeof row.plugin_type !== "string" || typeof row.plugin_version !== "string" || row.mode !== "onDemand" && row.mode !== "alwaysOn" || !isStatus4(row.status) || typeof row.provider !== "string" || typeof row.sandbox_name !== "string" || typeof row.port !== "number" || typeof row.idle_timeout_ms !== "number" || !(row.created_at instanceof Date) || Number.isNaN(row.created_at.getTime()) || !(row.updated_at instanceof Date) || Number.isNaN(row.updated_at.getTime())) {
+    throw new Error("Invalid plugin deployment row");
+  }
+  return {
+    id: row.id,
+    tenantId: row.tenant_id,
+    pluginType: row.plugin_type,
+    pluginVersion: row.plugin_version,
+    mode: row.mode,
+    status: row.status,
+    provider: row.provider,
+    sandboxName: row.sandbox_name,
+    port: row.port,
+    ...typeof row.endpoint === "string" ? { endpoint: row.endpoint } : {},
+    ...typeof row.image_ref === "string" ? { imageRef: row.image_ref } : {},
+    idleTimeoutMs: row.idle_timeout_ms,
+    ...row.last_health_at instanceof Date && !Number.isNaN(row.last_health_at.getTime()) ? { lastHealthAt: row.last_health_at.toISOString() } : {},
+    ...typeof row.last_error === "string" ? { lastError: row.last_error } : {},
+    createdAt: row.created_at.toISOString(),
+    updatedAt: row.updated_at.toISOString()
+  };
+}
+var PostgreSQLPluginDeploymentStore = class {
+  /** Creates a store using an externally managed shared pool. */
+  constructor(options) {
+    this.pool = options.pool;
+  }
+  /** Lists every deployment for a tenant, ordered by plugin type. */
+  async listByTenant(tenantId) {
+    const result = await this.pool.query(
+      `SELECT ${columns5} FROM lattice_plugin_deployments WHERE tenant_id = $1 ORDER BY plugin_type`,
+      [tenantId]
+    );
+    return result.rows.map(mapRow8);
+  }
+  /** Returns the deployment for a tenant + plugin type, or undefined. */
+  async get(tenantId, pluginType) {
+    const result = await this.pool.query(
+      `SELECT ${columns5} FROM lattice_plugin_deployments WHERE tenant_id = $1 AND plugin_type = $2`,
+      [tenantId, pluginType]
+    );
+    return result.rows[0] ? mapRow8(result.rows[0]) : void 0;
+  }
+  /** Upserts a deployment keyed by tenant + plugin type, preserving the original id and createdAt. */
+  async upsert(deployment) {
+    const result = await this.pool.query(
+      `INSERT INTO lattice_plugin_deployments (${columns5})
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14, $15, $16)
+       ON CONFLICT (tenant_id, plugin_type) DO UPDATE SET
+         plugin_version = EXCLUDED.plugin_version,
+         mode = EXCLUDED.mode,
+         status = EXCLUDED.status,
+         provider = EXCLUDED.provider,
+         sandbox_name = EXCLUDED.sandbox_name,
+         port = EXCLUDED.port,
+         endpoint = EXCLUDED.endpoint,
+         image_ref = EXCLUDED.image_ref,
+         idle_timeout_ms = EXCLUDED.idle_timeout_ms,
+         last_health_at = EXCLUDED.last_health_at,
+         last_error = EXCLUDED.last_error,
+         updated_at = NOW()
+       RETURNING ${columns5}`,
+      [
+        deployment.id,
+        deployment.tenantId,
+        deployment.pluginType,
+        deployment.pluginVersion,
+        deployment.mode,
+        deployment.status,
+        deployment.provider,
+        deployment.sandboxName,
+        deployment.port,
+        deployment.endpoint ?? null,
+        deployment.imageRef ?? null,
+        deployment.idleTimeoutMs,
+        deployment.lastHealthAt ? new Date(deployment.lastHealthAt) : null,
+        deployment.lastError ?? null,
+        new Date(deployment.createdAt),
+        new Date(deployment.updatedAt)
+      ]
+    );
+    return mapRow8(result.rows[0]);
+  }
+  /** Applies a partial update to mutable columns; returns undefined when no row exists. */
+  async updateStatus(tenantId, pluginType, patch) {
+    const assignments = [];
+    const params = [];
+    const assign = (column, value) => {
+      params.push(value);
+      assignments.push(`${column} = $${params.length}`);
+    };
+    if (patch.status !== void 0) assign("status", patch.status);
+    if (patch.mode !== void 0) assign("mode", patch.mode);
+    if (patch.endpoint !== void 0) assign("endpoint", patch.endpoint);
+    if (patch.imageRef !== void 0) assign("image_ref", patch.imageRef);
+    if (patch.idleTimeoutMs !== void 0) assign("idle_timeout_ms", patch.idleTimeoutMs);
+    if (patch.lastHealthAt !== void 0) assign("last_health_at", new Date(patch.lastHealthAt));
+    if (patch.lastError !== void 0) assign("last_error", patch.lastError);
+    if (patch.pluginVersion !== void 0) assign("plugin_version", patch.pluginVersion);
+    if (patch.provider !== void 0) assign("provider", patch.provider);
+    if (patch.sandboxName !== void 0) assign("sandbox_name", patch.sandboxName);
+    if (patch.port !== void 0) assign("port", patch.port);
+    assignments.push("updated_at = NOW()");
+    params.push(tenantId, pluginType);
+    const tenantParam = params.length - 1;
+    const pluginParam = params.length;
+    const result = await this.pool.query(
+      `UPDATE lattice_plugin_deployments SET ${assignments.join(", ")}
+       WHERE tenant_id = $${tenantParam} AND plugin_type = $${pluginParam}
+       RETURNING ${columns5}`,
+      params
+    );
+    return result.rows[0] ? mapRow8(result.rows[0]) : void 0;
+  }
+  /** Deletes a deployment by tenant + plugin type; returns whether a row was removed. */
+  async delete(tenantId, pluginType) {
+    const result = await this.pool.query(
+      `DELETE FROM lattice_plugin_deployments WHERE tenant_id = $1 AND plugin_type = $2`,
+      [tenantId, pluginType]
+    );
+    return (result.rowCount ?? 0) > 0;
+  }
+};
+
 // src/createPgStoreConfig.ts
 async function createPgStoreConfig(connectionString) {
   const pool = new import_pg30.Pool({ connectionString });
@@ -12126,6 +12322,8 @@ async function createPgStoreConfig(connectionString) {
   mm.register(createDistributedLeases);
   mm.register(createOutboxTable);
   mm.register(addConnectionSecretFields);
+  mm.register(createPluginDeployments);
+  mm.register(dropPluginDeploymentAuthToken);
   await mm.migrate();
   const checkpoint = import_langgraph_checkpoint_postgres.PostgresSaver.fromConnString(connectionString);
   checkpoint.setup().catch((err) => {
@@ -12169,6 +12367,7 @@ async function createPgStoreConfig(connectionString) {
     userPushSubscription: new PostgreSQLUserPushSubscriptionStore(opts),
     lease: new PostgreSQLLeaseStore(opts),
     outbox: new PostgreSQLOutboxStore(opts),
+    pluginDeployment: new PostgreSQLPluginDeploymentStore(opts),
     vectorStoreProvider: new PGVectorStoreProvider(pool, connectionString),
     checkpoint
   };
@@ -12744,6 +12943,7 @@ function mapRowToChannelIdentityMapping(row) {
   PostgreSQLMetricsServerConfigStore,
   PostgreSQLModelProviderStore,
   PostgreSQLOpenAuditStore,
+  PostgreSQLPluginDeploymentStore,
   PostgreSQLProjectBotMembershipStore,
   PostgreSQLProjectMembershipStore,
   PostgreSQLProjectRoomMessageStore,
@@ -12801,6 +13001,7 @@ function mapRowToChannelIdentityMapping(row) {
   createMetricsConfigsTable,
   createPGVectorStoreProvider,
   createPgStoreConfig,
+  createPluginDeployments,
   createProjectRoomReadStates,
   createProjectRoomTables,
   createProjectsTable,
@@ -12813,6 +13014,7 @@ function mapRowToChannelIdentityMapping(row) {
   createUsersTable,
   createWorkflowTrackingTables,
   createWorkspacesTable,
+  dropPluginDeploymentAuthToken,
   enforceUniqueEvalProjectName,
   evalMigrations,
   mapRowToRunStep,