@axiom-lattice/pg-stores 4.0.5 → 4.1.0

package/dist/index.mjs

@@ -9242,7 +9242,106 @@ var createSharedResourcesTable = {
   }
 };
 
+// src/migrations/add_share_open_grants.ts
+var addShareOpenGrants = {
+  version: 180,
+  name: "add_share_open_grants",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        ADD COLUMN IF NOT EXISTS open_grants JSONB
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        DROP COLUMN IF EXISTS open_grants
+    `);
+  }
+};
+
+// src/migrations/add_share_kind.ts
+var addShareKind = {
+  version: 208,
+  name: "add_share_kind",
+  up: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        ADD COLUMN IF NOT EXISTS kind VARCHAR(16) NOT NULL DEFAULT 'file'
+    `);
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        DROP CONSTRAINT IF EXISTS lattice_shared_resources_kind_check
+    `);
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        ADD CONSTRAINT lattice_shared_resources_kind_check
+        CHECK (kind IN ('file', 'mcpApp'))
+    `);
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        DROP CONSTRAINT IF EXISTS lattice_shared_resources_mcp_app_visibility_check
+    `);
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        ADD CONSTRAINT lattice_shared_resources_mcp_app_visibility_check
+        CHECK (kind <> 'mcpApp' OR visibility IN ('public', 'password'))
+    `);
+  },
+  down: async (client) => {
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        DROP CONSTRAINT IF EXISTS lattice_shared_resources_mcp_app_visibility_check
+    `);
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        DROP CONSTRAINT IF EXISTS lattice_shared_resources_kind_check
+    `);
+    await client.query(`
+      ALTER TABLE lattice_shared_resources
+        DROP COLUMN IF EXISTS kind
+    `);
+  }
+};
+
 // src/stores/PostgresSharedResourceStore.ts
+var InvalidMcpAppShareAddressError = class extends Error {
+  /**
+   * @param token - Share token owning the invalid address.
+   */
+  constructor(token) {
+    super(`Share ${token} has an invalid MCP App address`);
+    /** Machine-readable failure code. */
+    this.code = "INVALID_MCP_APP_SHARE_ADDRESS";
+    this.name = "InvalidMcpAppShareAddressError";
+  }
+};
+var InvalidMcpAppShareVisibilityError = class extends Error {
+  /**
+   * @param token - Share token owning the invalid visibility.
+   * @param visibility - Visibility value found in the row.
+   */
+  constructor(token, visibility) {
+    super(
+      `Share ${token} has unsupported MCP App visibility: ${visibility}`
+    );
+    /** Machine-readable failure code. */
+    this.code = "INVALID_MCP_APP_SHARE_VISIBILITY";
+    this.name = "InvalidMcpAppShareVisibilityError";
+    this.visibility = visibility;
+  }
+};
+var InvalidFileShareAddressError = class extends Error {
+  /**
+   * @param token - Share token owning the invalid address.
+   */
+  constructor(token) {
+    super(`Share ${token} has an invalid file address`);
+    /** Machine-readable failure code. */
+    this.code = "INVALID_FILE_SHARE_ADDRESS";
+    this.name = "InvalidFileShareAddressError";
+  }
+};
 var PostgresSharedResourceStore = class {
   constructor(options) {
     this.initialized = false;
@@ -9259,6 +9358,8 @@ var PostgresSharedResourceStore = class {
     })();
     this.migrationManager = new MigrationManager(this.pool);
     this.migrationManager.register(createSharedResourcesTable);
+    this.migrationManager.register(addShareOpenGrants);
+    this.migrationManager.register(addShareKind);
     if (options.autoMigrate !== false) {
       this.initialize().catch((error) => {
         console.error(
@@ -9300,13 +9401,14 @@ var PostgresSharedResourceStore = class {
     await this.ensureInitialized();
     const { rows } = await this.pool.query(
       `INSERT INTO lattice_shared_resources
-       (token, address, title, created_by, tenant_id, workspace_id, project_id,
+       (token, kind, address, title, created_by, tenant_id, workspace_id, project_id,
         assistant_id, vm_isolation, visibility, password_hash,
         expires_at, max_access, open_grants, revoked)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16)
        RETURNING *`,
       [
         record.token,
+        record.kind ?? "file",
         JSON.stringify(record.address),
         record.title,
         record.createdBy,
@@ -9395,15 +9497,9 @@ var PostgresSharedResourceStore = class {
     }
   }
   _mapRow(row) {
-    let address;
-    if (typeof row.address === "string") {
-      address = JSON.parse(row.address);
-    } else {
-      address = row.address;
-    }
-    return {
+    const address = parseShareAddress(row.address);
+    const base = {
       token: row.token,
-      address,
       title: row.title,
       createdBy: row.created_by,
       tenantId: row.tenant_id,
@@ -9411,7 +9507,6 @@ var PostgresSharedResourceStore = class {
       projectId: row.project_id,
       assistantId: row.assistant_id,
       vmIsolation: row.vm_isolation,
-      visibility: row.visibility,
       passwordHash: row.password_hash,
       expiresAt: row.expires_at ? new Date(row.expires_at) : null,
       maxAccess: row.max_access,
@@ -9421,8 +9516,52 @@ var PostgresSharedResourceStore = class {
       createdAt: new Date(row.created_at),
       version: row.version ?? 1
     };
+    if (row.kind === "mcpApp") {
+      if (!isRecord3(address) || address.kind !== "mcpApp") {
+        throw new InvalidMcpAppShareAddressError(row.token);
+      }
+      const app = address.app;
+      if (!isMcpAppShareApp(app)) {
+        throw new InvalidMcpAppShareAddressError(row.token);
+      }
+      if (row.visibility !== "public" && row.visibility !== "password") {
+        throw new InvalidMcpAppShareVisibilityError(row.token, row.visibility);
+      }
+      return {
+        ...base,
+        kind: "mcpApp",
+        address: { kind: "mcpApp", app },
+        visibility: row.visibility
+      };
+    }
+    if (!isRecord3(address) || typeof address.volume !== "string" || typeof address.resourcePath !== "string") {
+      throw new InvalidFileShareAddressError(row.token);
+    }
+    return {
+      ...base,
+      kind: "file",
+      address: {
+        volume: address.volume,
+        resourcePath: address.resourcePath
+      },
+      visibility: row.visibility
+    };
   }
 };
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isMcpAppShareApp(value) {
+  return isRecord3(value) && (value.kind === "plugin" || value.kind === "mcp");
+}
+function parseShareAddress(raw) {
+  if (typeof raw !== "string") return raw;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
 
 // src/stores/PostgreSQLCollectionStore.ts
 import { Pool as Pool24 } from "pg";
@@ -9939,24 +10078,6 @@ var reencryptLegacyConnectionSecrets = {
   }
 };
 
-// src/migrations/add_share_open_grants.ts
-var addShareOpenGrants = {
-  version: 180,
-  name: "add_share_open_grants",
-  up: async (client) => {
-    await client.query(`
-      ALTER TABLE lattice_shared_resources
-        ADD COLUMN IF NOT EXISTS open_grants JSONB
-    `);
-  },
-  down: async (client) => {
-    await client.query(`
-      ALTER TABLE lattice_shared_resources
-        DROP COLUMN IF EXISTS open_grants
-    `);
-  }
-};
-
 // src/migrations/collection_migrations.ts
 var createCollectionsTable = {
   version: 137,
@@ -11456,14 +11577,14 @@ var DuplicateProjectRoomMessageIdempotencyKeyError = class extends Error {
     this.name = "DuplicateProjectRoomMessageIdempotencyKeyError";
   }
 };
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasOnlyKeys(value, keys) {
   return Object.keys(value).every((key) => keys.includes(key));
 }
 function mapAuthor(value) {
-  if (!isRecord3(value) || typeof value.type !== "string") return void 0;
+  if (!isRecord4(value) || typeof value.type !== "string") return void 0;
   if (value.type === "human" && hasOnlyKeys(value, ["type", "userId"]) && typeof value.userId === "string") return { type: "human", userId: value.userId };
   if (value.type === "bot" && hasOnlyKeys(value, ["type", "membershipId", "assistantId"]) && typeof value.membershipId === "string" && typeof value.assistantId === "string") {
     return { type: "bot", membershipId: value.membershipId, assistantId: value.assistantId };
@@ -11472,7 +11593,7 @@ function mapAuthor(value) {
   return void 0;
 }
 function mapMention(value) {
-  if (!isRecord3(value) || typeof value.type !== "string") return void 0;
+  if (!isRecord4(value) || typeof value.type !== "string") return void 0;
   if (value.type === "bot" && hasOnlyKeys(value, ["type", "membershipId"]) && typeof value.membershipId === "string") {
     return { type: "bot", membershipId: value.membershipId };
   }
@@ -11484,7 +11605,7 @@ function isSource(value) {
 }
 function mapRow5(row) {
   const author = mapAuthor(row.author);
-  const content = isRecord3(row.content) && row.content.type === "text" && typeof row.content.text === "string" && hasOnlyKeys(row.content, ["type", "text"]) ? { type: "text", text: row.content.text } : void 0;
+  const content = isRecord4(row.content) && row.content.type === "text" && typeof row.content.text === "string" && hasOnlyKeys(row.content, ["type", "text"]) ? { type: "text", text: row.content.text } : void 0;
   const mentions = Array.isArray(row.mentions) ? row.mentions.map(mapMention) : void 0;
   if (typeof row.id !== "string" || typeof row.tenant_id !== "string" || typeof row.workspace_id !== "string" || typeof row.project_id !== "string" || typeof row.room_id !== "string" || !author || !content || !mentions || mentions.some((mention) => mention === void 0) || row.reply_to_message_id !== null && typeof row.reply_to_message_id !== "string" || !isSource(row.source) || row.source_id !== null && typeof row.source_id !== "string" || row.idempotency_key !== null && typeof row.idempotency_key !== "string" || !(row.created_at instanceof Date) || Number.isNaN(row.created_at.getTime())) {
     throw new Error("Invalid project room message row");
@@ -13922,7 +14043,7 @@ async function rollbackQuietly(client) {
 function isUniqueViolation3(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "23505";
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function checkpointKey(checkpointNs, checkpointId) {
@@ -13935,17 +14056,17 @@ function checkpointRecord(value) {
   if (typeof value === "string") {
     try {
       const parsed = JSON.parse(value);
-      return isRecord4(parsed) ? parsed : void 0;
+      return isRecord5(parsed) ? parsed : void 0;
     } catch {
       return void 0;
     }
   }
-  return isRecord4(value) ? value : void 0;
+  return isRecord5(value) ? value : void 0;
 }
 function channelVersions(value) {
   const checkpoint = checkpointRecord(value);
   const versions = checkpoint?.channel_versions;
-  return isRecord4(versions) ? versions : void 0;
+  return isRecord5(versions) ? versions : void 0;
 }
 var DELETE_CHUNK_SIZE = 100;
 function chunk(items, size) {
@@ -14598,6 +14719,7 @@ async function createPgStoreConfig(connectionString) {
   mm.register(createAgentRunProjectTaskMigration);
   mm.register(agentRunProjectTaskRunningIndexMigration);
   mm.register(addModelProviderKindDefault);
+  mm.register(addShareKind);
   await mm.migrate();
   const checkpoint = PostgresSaver.fromConnString(connectionString);
   checkpoint.setup().catch((err) => {
@@ -15205,6 +15327,9 @@ export {
   CheckpointTargetNotEmptyError,
   DuplicateProjectMembershipError,
   DuplicateProjectRoomMessageIdempotencyKeyError,
+  InvalidFileShareAddressError,
+  InvalidMcpAppShareAddressError,
+  InvalidMcpAppShareVisibilityError,
   MenuStore,
   MigrationManager,
   PGVectorStoreProvider,
@@ -15257,6 +15382,7 @@ export {
   addMcpAppContentType,
   addProjectConfigColumn,
   addScheduleTenantId,
+  addShareKind,
   addSkillTenantId,
   addStepThreadId,
   addTaskIdToEvalRuns,