@axiom-lattice/pg-stores 5.1.2 → 5.2.1

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @axiom-lattice/pg-stores@5.1.2 build /home/runner/work/agentic/agentic/packages/pg-stores
+> @axiom-lattice/pg-stores@5.2.1 build /home/runner/work/agentic/agentic/packages/pg-stores
 > tsup src/index.ts --format cjs,esm --dts --sourcemap
 
 CLI Building entry: src/index.ts
@@ -8,13 +8,13 @@
 CLI Target: es2020
 CJS Build start
 ESM Build start
-CJS dist/index.js     569.35 KB
-CJS dist/index.js.map 1.01 MB
-CJS ⚡️ Build success in 1291ms
-ESM dist/index.mjs     558.27 KB
-ESM dist/index.mjs.map 1.01 MB
-ESM ⚡️ Build success in 1389ms
+CJS dist/index.js     585.57 KB
+CJS dist/index.js.map 1.04 MB
+CJS ⚡️ Build success in 896ms
+ESM dist/index.mjs     574.26 KB
+ESM dist/index.mjs.map 1.04 MB
+ESM ⚡️ Build success in 900ms
 DTS Build start
-DTS ⚡️ Build success in 15231ms
-DTS dist/index.d.ts  120.00 KB
-DTS dist/index.d.mts 120.00 KB
+DTS ⚡️ Build success in 10253ms
+DTS dist/index.d.ts  123.99 KB
+DTS dist/index.d.mts 123.99 KB

package/CHANGELOG.md

@@ -1,5 +1,107 @@
 # @axiom-lattice/pg-stores
 
+## 5.2.1
+
+### Patch Changes
+
+- b928a17: Follow up the Wiz remediation with `pnpm audit`: bump the pinned transitive
+  dependencies to the advisories published after the scan (shell-quote 1.11 —
+  critical command injection — fastify 5.12.6, @fastify/busboy 3.2.2,
+  @hono/node-server 2.1.3, brace-expansion 1.1.21/2.1.7/5.0.12,
+  body-parser 1.20.9/2.4.0, decode-uri-component 0.5.1, fast-uri 3.1.9/4.2.3,
+  glob 10.5/11.1/14.0.4, langsmith 0.12, picomatch 2.3.2/4.0.4,
+  protobufjs 7.6.5/8.8.1, source-map-js 1.2.2, undici 7.30.1, sanitize-html
+  2.18.1, tar 7.5.22, tmp 0.2.7, vite 6.4.5, yaml 2.9.1, ajv 6.14/8.18,
+  mysql2 3.23.1, uuid 11.1, and others). Overrides are scoped per major line
+  where different majors are both required, and none pins below a declaring
+  package's range. Further zero-out pass: echarts 5.5 → 6.1 in react-sdk,
+  katex 0.19.1 (the patched range starts at 0.18.2), glob 14.0.4 for every
+  affected major line (10/11/13/14; glob 7 is outside the advisory range),
+  minimatch 11.0.8 for every vulnerable line, rimraf 4/5 → 6.1.4 (drops the
+  glob 9 dependency), ibm-cloud-sdk-core 5.9.4 (pulls file-type 21.3.4), and
+  fast-xml-parser 5.12.0. The client-sdk build moves from tsup 6.7 to 8.5,
+  clearing the last GHSA-3mv9-4h5g-vhg3 finding. Drop the unused `xlsx`
+  dependency from `apps/web`, which has no patched npm release.
+
+  Overrides only apply to this monorepo, so also raise the published packages'
+  own dependency ranges to patched versions, otherwise downstream consumers
+  (fina_demo) resolve the old lower bounds when they reinstall: fastify
+  ^5.12.6 (gateway, microsandbox-service, opensandbox-gateway), react-router
+  ^7.18.2, vite ^6.4.5, mysql2 ^3.23.1 (core), and uuid ^11.1.1 (core, gateway,
+  pg-stores, react-sdk, and the cli-a2a peer range).
+
+- Updated dependencies [b928a17]
+  - @axiom-lattice/core@12.3.1
+
+## 5.2.0
+
+### Minor Changes
+
+- 2554b78: Add personal-assistant-scoped MCP server configs in their own data domain.
+  Configs live in a dedicated `lattice_personal_mcp_server_configs` /
+  `lt_personal_mcp_configs` table (PG v220) keyed by
+  `(tenantId, ownerAssistantId, key)`, so tenant listings, tenant export/import,
+  startup restore, and older replicas never read them. A new
+  `/api/personal-mcp-servers` route family resolves the caller's personal
+  assistant server-side (no client-supplied assistant id) and returns 404 on
+  replicas that predate it rather than falling back to tenant CRUD.
+
+  Personal MCP tools register into a per-assistant tool bucket and are mounted
+  automatically only for the owning assistant, with personal keys shadowing the
+  same tenant key and tenant tools still available as fallback. Connections are
+  established lazily on the first assistant build, bounded by a sync budget, and
+  cross-replica invalidation rides a separate `personal-mcp-config-changed`
+  outbox topic that older replicas ignore. Deleting a personal assistant or an
+  assistant purges its personal MCP configs and runtime.
+
+  The MCP drawer now takes an `apiBasePath`, and the personal assistant page
+  opens it against the personal routes. Tool selection is reconciled onto the
+  live tool list so servers that rename tools each session no longer lose the
+  saved selection; the tools endpoint returns the reconciled `selectedTools`, and
+  the tools modal gains select-all/deselect-all controls.
+
+- 1a4f8fa: Add an append-only platform audit foundation. Admin Center platform mutations are
+  captured with the real human initiator, source, route, target tenant, redacted
+  request/response, status, and duration. The audit store is available in InMemory, Local
+  SQLite, and PostgreSQL, with `GET /api/platform/audit` and client SDK methods.
+- 9107769: Add role-inherited Platform Ops Agent write tools and high-risk playbooks.
+  Owners and admins can create/update/delete platform users, grant roles, manage
+  invitations/invite links/tenants/members, configure OIDC providers, resolve SSO
+  claims, patch settings, and update branding; auditors stay read-only, owner-role
+  changes require an owner, and the hidden `__platform__` tenant is protected.
+  Every write is audited with the human initiator and the Ops Agent
+  thread/tool executor. High-risk operations raise a HITL `confirm` interrupt and execute only after
+  the user approves them. The old private Ops thread/message/SSE routes,
+  `platformOpsConfirmation` store/service, PG v220 migration, confirm/cancel
+  routes, and custom `OpsAgentPanel`/`OpsToolCard` were removed; only
+  `/api/platform/ops/config` remains. The Admin Center Ops page now reuses the
+  standard `LatticeChat`/AgentRun stack (including the embedded chat sidebar for
+  New Thread and History). Platform scope only opens the standard chat route
+  families for the fixed `platform-ops` assistant after re-checking the live
+  platform role (including the legacy Admin Center `/api/users`, `/api/tenants`,
+  and `/api/oidc-providers` routes). Ops threads/runs use a fixed internal **sandbox** workspace/project (with filesystem middleware) inside the hidden
+  platform tenant, preserving normal workspace/project thread isolation. The
+  signed console session is the tenant authority, not a client-supplied header. A real-Gateway Playwright spec covers the
+  platform Ops chat, HITL confirm/resume, and the resulting playbook audit row.
+  Ops gains a read-only `ops_list_audit` tool with filters and bounded pagination.
+  List tools accept bounded `limit` values, and writes share a per-user
+  `platform.ops.write` rate limit (60/minute) that returns
+  `PLATFORM_OPS_RATE_LIMITED` and records the refusal in the audit log. Tool
+  failures now consistently use `{ success:false, error:{ code, message } }`.
+
+### Patch Changes
+
+- Updated dependencies [e5dd58b]
+- Updated dependencies [b3a3428]
+- Updated dependencies [2554b78]
+- Updated dependencies [1a4f8fa]
+- Updated dependencies [cb411cc]
+- Updated dependencies [a43e635]
+- Updated dependencies [9107769]
+- Updated dependencies [c9b8df8]
+  - @axiom-lattice/protocols@7.3.0
+  - @axiom-lattice/core@12.3.0
+
 ## 5.1.2
 
 ### Patch Changes

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import { Pool, PoolConfig, PoolClient } from 'pg';
 export { Pool, PoolConfig } from 'pg';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, UserExternalIdentityStore, UserExternalIdentity, OidcProviderConfigStore, OidcProviderConfig, CreateOidcProviderConfigInput, UpdateOidcProviderConfigInput, PlatformMemberStore, PlatformMember, PlatformInvitationStore, PlatformInvitation, OidcIdentityClaimStore, OidcIdentityClaimStatus, OidcIdentityClaim, CreateOidcIdentityClaimInput, UpdateOidcIdentityClaimInput, OidcIdentityClaimApproval, InviteLinkStore, InviteLink, CreateInviteLinkInput, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CreateShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, PluginDeploymentStore, PluginDeployment, PlatformSettingsStore, PlatformSettingsRecord, PlatformSettingsDocument, ChannelReplyJobStore, CreateChannelReplyJobInput, ChannelReplyJob, CheckpointStorage, CheckpointMaintenance, ThreadCheckpointStorage, StoreProtocol, StorePutInput, StoreItem, StoreSearchInput, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, PersonalMcpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, PersonalMcpServerConfigEntry, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, UserExternalIdentityStore, UserExternalIdentity, OidcProviderConfigStore, OidcProviderConfig, CreateOidcProviderConfigInput, UpdateOidcProviderConfigInput, PlatformMemberStore, PlatformMember, PlatformInvitationStore, PlatformInvitation, OidcIdentityClaimStore, OidcIdentityClaimStatus, OidcIdentityClaim, CreateOidcIdentityClaimInput, UpdateOidcIdentityClaimInput, OidcIdentityClaimApproval, InviteLinkStore, InviteLink, CreateInviteLinkInput, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CreateShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, PluginDeploymentStore, PluginDeployment, PlatformSettingsStore, PlatformSettingsRecord, PlatformSettingsDocument, PlatformAuditStore, PlatformAuditAppendInput, PlatformAuditRecord, PlatformAuditQuery, ChannelReplyJobStore, CreateChannelReplyJobInput, ChannelReplyJob, CheckpointStorage, CheckpointMaintenance, ThreadCheckpointStorage, StoreProtocol, StorePutInput, StoreItem, StoreSearchInput, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
 export { AgentWebApp, AgentWebAppAppearance, AgentWebAppFeatures, AgentWebAppScope, AgentWebAppStatus, AgentWebAppStore, Assistant, AssistantStore, Binding, BindingRegistry, CapabilityBundle, CapabilityBundleStore, ChannelInstallation, ChannelInstallationStore, ConnectionEntry, ConnectionStore, CreateAgentWebAppInput, CreateAssistantRequest, CreateBindingInput, CreateCapabilityBundleInput, CreateChannelInstallationInput, CreateChannelInstallationRequest, CreateDatabaseConfigRequest, CreateEvalCaseRequest, CreateEvalProjectRequest, CreateEvalRunRequest, CreateEvalSuiteRequest, CreateMcpServerConfigRequest, CreateMenuItemInput, CreateMetricsServerConfigRequest, CreateProjectRequest, CreateRunStepRequest, CreateShareRequest, CreateSkillRequest, CreateTenantRequest, CreateThreadRequest, CreateUserRequest, CreateUserTenantLinkRequest, CreateWorkflowRunRequest, CreateWorkspaceRequest, DatabaseConfig, DatabaseConfigEntry, DatabaseConfigStore, DatabaseType, EvalCase, EvalProject, EvalProjectReport, EvalRun, EvalRunResult, EvalStore, EvalSuite, LarkChannelInstallationConfig, McpServerConfigEntry, McpServerConfigStore, MenuItem, MenuRegistry, MetricsServerConfig, MetricsServerConfigEntry, MetricsServerConfigStore, Project, ProjectStore, ResourceAddress, RunStep, ScheduleExecutionType, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ShareRecord, ShareResult, ShareVisibility, SharedResourceStore, Skill, SkillStore, StorageType, Tenant, TenantStatus, TenantStore, Thread, ThreadStore, UpdateAgentWebAppInput, UpdateCapabilityBundleInput, UpdateChannelInstallationRequest, UpdateDatabaseConfigRequest, UpdateMcpServerConfigRequest, UpdateMetricsServerConfigRequest, UpdateProjectRequest, UpdateRunStepRequest, UpdateTenantRequest, UpdateUserRequest, UpdateUserTenantLinkRequest, UpdateWorkflowRunRequest, UpdateWorkspaceRequest, User, UserStore, UserTenantLink, UserTenantLinkStore, UserTenantRole, WorkflowRun, WorkflowTrackingStore, Workspace, WorkspaceStore } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ClaimMessagesOptions, ThreadInfo, IAgentRunLedger, BeginAgentRunInput, AgentRunRecord, CreatePendingAgentRunInput, ListPendingRunsOptions, ClaimAgentRunInput, DeleteAgentRunExpected, AgentRunStatus, RollbackFailureResult, AgentRunRollbackResult, AgentRunExpiredOutcome, SettleExpiredRunOptions, AgentRunCounts, AgentRunSource, ReapedAgentRun } from '@axiom-lattice/core';
 export { AddMessageParams, PendingMessage, ThreadInfo } from '@axiom-lattice/core';
@@ -415,7 +415,7 @@ interface PostgreSQLMcpServerConfigStoreOptions {
  * - Automatic env encryption/decryption
  * - Unique constraint on (tenant_id, key)
  */
-declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore {
+declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore, PersonalMcpServerConfigStore {
     private pool;
     private migrationManager;
     private initialized;
@@ -459,6 +459,44 @@ declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore {
      * Check if configuration exists
      */
     hasConfig(tenantId: string, id: string): Promise<boolean>;
+    /**
+     * Get all personal MCP server configurations owned by one assistant.
+     */
+    getAllConfigsForAssistant(tenantId: string, ownerAssistantId: string): Promise<PersonalMcpServerConfigEntry[]>;
+    /**
+     * Get every personal MCP server configuration across tenants.
+     *
+     * Operations/tests only; startup restoration must not call this.
+     */
+    getAllPersonalConfigsWithoutTenant(): Promise<PersonalMcpServerConfigEntry[]>;
+    /**
+     * Get one personal MCP server configuration by id.
+     */
+    getConfigByIdForAssistant(tenantId: string, ownerAssistantId: string, id: string): Promise<PersonalMcpServerConfigEntry | null>;
+    /**
+     * Get one personal MCP server configuration by business key.
+     */
+    getConfigByKeyForAssistant(tenantId: string, ownerAssistantId: string, key: string): Promise<PersonalMcpServerConfigEntry | null>;
+    /**
+     * Create a personal MCP server configuration.
+     */
+    createConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string, data: CreateMcpServerConfigRequest): Promise<PersonalMcpServerConfigEntry>;
+    /**
+     * Update a personal MCP server configuration.
+     */
+    updateConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string, updates: Partial<UpdateMcpServerConfigRequest>): Promise<PersonalMcpServerConfigEntry | null>;
+    /**
+     * Delete one personal MCP server configuration by id.
+     */
+    deleteConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string): Promise<boolean>;
+    /**
+     * Delete every personal MCP server configuration owned by one assistant.
+     */
+    deleteConfigsForAssistant(tenantId: string, ownerAssistantId: string): Promise<number>;
+    /**
+     * Check whether a personal MCP server configuration exists.
+     */
+    hasConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string): Promise<boolean>;
     /**
      * Dispose resources and close the connection pool
      */
@@ -472,6 +510,10 @@ declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore {
      * Automatically decrypts env values if present
      */
     private mapRowToEntry;
+    /**
+     * Map a personal table row, tagging the owning assistant.
+     */
+    private mapPersonalRowToEntry;
     /**
      * Encrypt env values in config before storing
      */
@@ -2231,6 +2273,36 @@ declare class PostgreSQLPlatformSettingsStore implements PlatformSettingsStore {
     save(document: PlatformSettingsDocument, expectedVersion: number, updatedBy?: string): Promise<PlatformSettingsRecord>;
 }
 
+/**
+ * PostgreSQL implementation of {@link PlatformAuditStore}.
+ *
+ * Persists platform-level audit records in the append-only
+ * `lattice_platform_audit` table. Records are returned newest-first by
+ * `createdAt` descending, then `id` descending.
+ */
+declare class PostgreSQLPlatformAuditStore implements PlatformAuditStore {
+    private readonly options;
+    constructor(options: {
+        pool: Pool;
+    });
+    private get pool();
+    /** Appends a record, assigning a fresh id and creation timestamp. */
+    append(record: PlatformAuditAppendInput): Promise<PlatformAuditRecord>;
+    /** Returns a record by id, or null when it does not exist. */
+    get(id: string): Promise<PlatformAuditRecord | null>;
+    /**
+     * Returns matching records newest-first.
+     *
+     * `initiatorUserId` only matches human initiators. `from` is inclusive and
+     * `to` is exclusive after both are normalized to instants; invalid or empty
+     * boundaries are ignored. Records are ordered by `createdAt` descending,
+     * then by `id` descending. Results are paginated with a default limit of 100;
+     * non-finite `offset`/`limit` fall back to defaults, finite values are
+     * truncated to integers, and negatives are clamped to 0.
+     */
+    query(params: PlatformAuditQuery): Promise<PlatformAuditRecord[]>;
+}
+
 /** Options accepted by {@link PostgreSQLChannelReplyJobStore}. */
 interface PostgreSQLChannelReplyJobStoreOptions {
     /** Externally managed pool. When supplied, migrations are not run here. */
@@ -2437,6 +2509,7 @@ declare function createPgStoreConfig(connectionString: string): Promise<{
     oidcIdentityClaim: PostgreSQLOidcIdentityClaimStore;
     inviteLink: PostgreSQLInviteLinkStore;
     platformSettings: PostgreSQLPlatformSettingsStore;
+    platformAudit: PostgreSQLPlatformAuditStore;
     channelBinding: ChannelBindingStore;
     channelInstallation: PostgreSQLChannelInstallationStore;
     thread: PostgreSQLThreadStore;
@@ -2656,6 +2729,9 @@ declare const addOidcIdentityClaimInviteFields: Migration;
 /** Creates the single-row durable platform settings table. */
 declare const createPlatformSettingsTable: Migration;
 
+/** Creates the append-only platform-level audit log table. */
+declare const createPlatformAuditTable: Migration;
+
 /**
  * Thread table migrations
  */
@@ -2794,6 +2870,14 @@ declare const createMetricsConfigsTable: Migration;
  * Migration: Create MCP server configs table
  */
 declare const createMcpServerConfigsTable: Migration;
+/**
+ * Migration: create the personal MCP server config table.
+ *
+ * Personal configs are deliberately stored outside
+ * `lattice_mcp_server_configs` so tenant-only code paths (and older replicas
+ * during a rolling upgrade) can never read or register them.
+ */
+declare const createPersonalMcpServerConfigsTable: Migration;
 
 /**
  * Workspace table migrations
@@ -3049,4 +3133,4 @@ declare const createChannelReplyJobsTable: Migration;
  */
 declare const createStoreItemsTable: Migration;
 
-export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, CheckpointBaseNotFoundError, CheckpointTargetNotEmptyError, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InvalidFileShareAddressError, InvalidMcpAppShareAddressError, InvalidMcpAppShareVisibilityError, InvalidUserExternalIdentityRowError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentRunLedger, type PostgreSQLAgentRunLedgerOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLChannelReplyJobStore, type PostgreSQLChannelReplyJobStoreOptions, PostgreSQLCheckpointStorage, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLInviteLinkStore, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOidcIdentityClaimStore, PostgreSQLOidcProviderConfigStore, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLPlatformInvitationStore, PostgreSQLPlatformMemberStore, PostgreSQLPlatformSettingsStore, PostgreSQLPluginDeploymentStore, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLStore, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserExternalIdentityStore, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addCancelRequestedToEvalRuns, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addOidcIdentityClaimInviteFields, addProjectConfigColumn, addScheduleTenantId, addShareKind, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadExpiresAt, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentRunLedgerTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createChannelReplyJobsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createInviteLinksTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createOidcIdentityClaimsTable, createOidcProviderConfigsTable, createPGVectorStoreProvider, createPgStoreConfig, createPlatformInvitationsTable, createPlatformMembersTable, createPlatformSettingsTable, createPluginDeployments, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createStoreItemsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUserEmailLowerUniqueIndex, createUserExternalIdentityTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, dropPluginDeploymentAuthToken, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };
+export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, CheckpointBaseNotFoundError, CheckpointTargetNotEmptyError, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InvalidFileShareAddressError, InvalidMcpAppShareAddressError, InvalidMcpAppShareVisibilityError, InvalidUserExternalIdentityRowError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentRunLedger, type PostgreSQLAgentRunLedgerOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLChannelReplyJobStore, type PostgreSQLChannelReplyJobStoreOptions, PostgreSQLCheckpointStorage, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLInviteLinkStore, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOidcIdentityClaimStore, PostgreSQLOidcProviderConfigStore, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLPlatformAuditStore, PostgreSQLPlatformInvitationStore, PostgreSQLPlatformMemberStore, PostgreSQLPlatformSettingsStore, PostgreSQLPluginDeploymentStore, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLStore, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserExternalIdentityStore, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addCancelRequestedToEvalRuns, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addOidcIdentityClaimInviteFields, addProjectConfigColumn, addScheduleTenantId, addShareKind, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadExpiresAt, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentRunLedgerTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createChannelReplyJobsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createInviteLinksTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createOidcIdentityClaimsTable, createOidcProviderConfigsTable, createPGVectorStoreProvider, createPersonalMcpServerConfigsTable, createPgStoreConfig, createPlatformAuditTable, createPlatformInvitationsTable, createPlatformMembersTable, createPlatformSettingsTable, createPluginDeployments, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createStoreItemsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUserEmailLowerUniqueIndex, createUserExternalIdentityTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, dropPluginDeploymentAuthToken, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { Pool, PoolConfig, PoolClient } from 'pg';
 export { Pool, PoolConfig } from 'pg';
-import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, UserExternalIdentityStore, UserExternalIdentity, OidcProviderConfigStore, OidcProviderConfig, CreateOidcProviderConfigInput, UpdateOidcProviderConfigInput, PlatformMemberStore, PlatformMember, PlatformInvitationStore, PlatformInvitation, OidcIdentityClaimStore, OidcIdentityClaimStatus, OidcIdentityClaim, CreateOidcIdentityClaimInput, UpdateOidcIdentityClaimInput, OidcIdentityClaimApproval, InviteLinkStore, InviteLink, CreateInviteLinkInput, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CreateShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, PluginDeploymentStore, PluginDeployment, PlatformSettingsStore, PlatformSettingsRecord, PlatformSettingsDocument, ChannelReplyJobStore, CreateChannelReplyJobInput, ChannelReplyJob, CheckpointStorage, CheckpointMaintenance, ThreadCheckpointStorage, StoreProtocol, StorePutInput, StoreItem, StoreSearchInput, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
+import { ThreadStore, Thread, CreateThreadRequest, AssistantStore, Assistant, CreateAssistantRequest, DatabaseConfigStore, DatabaseConfigEntry, CreateDatabaseConfigRequest, UpdateDatabaseConfigRequest, ConnectionStore, ConnectionEntry, MetricsServerConfigStore, MetricsServerConfigEntry, CreateMetricsServerConfigRequest, UpdateMetricsServerConfigRequest, McpServerConfigStore, PersonalMcpServerConfigStore, McpServerConfigEntry, CreateMcpServerConfigRequest, UpdateMcpServerConfigRequest, PersonalMcpServerConfigEntry, WorkspaceStore, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, ProjectStore, ProjectFilter, Project, CreateProjectRequest, UpdateProjectRequest, UpdateProjectCapabilityBundlesResult, UserStore, User, CreateUserRequest, UpdateUserRequest, TenantStore, Tenant, CreateTenantRequest, UpdateTenantRequest, UserTenantLinkStore, UserTenantLink, CreateUserTenantLinkRequest, UpdateUserTenantLinkRequest, UserExternalIdentityStore, UserExternalIdentity, OidcProviderConfigStore, OidcProviderConfig, CreateOidcProviderConfigInput, UpdateOidcProviderConfigInput, PlatformMemberStore, PlatformMember, PlatformInvitationStore, PlatformInvitation, OidcIdentityClaimStore, OidcIdentityClaimStatus, OidcIdentityClaim, CreateOidcIdentityClaimInput, UpdateOidcIdentityClaimInput, OidcIdentityClaimApproval, InviteLinkStore, InviteLink, CreateInviteLinkInput, WorkflowTrackingStore, CreateWorkflowRunRequest, WorkflowRun, UpdateWorkflowRunRequest, QueryWorkflowRunsOptions, QueryWorkflowRunsResult, CreateRunStepRequest, RunStep, UpdateRunStepRequest, StepType, EvalStore, EvalProject, CreateEvalProjectRequest, EvalSuite, CreateEvalSuiteRequest, EvalCase, CreateEvalCaseRequest, EvalRun, CreateEvalRunRequest, EvalRunResult, EvalProjectReport, BindingRegistry, Binding, CreateBindingInput, BindingMutablePatch, BindingListParams, ChannelInstallationStore, ChannelInstallation, ChannelInstallationType, CreateChannelInstallationInput, UpdateChannelInstallationRequest, A2AApiKeyStore, A2AApiKeyRecord, CreateA2AApiKeyInput, UpdateA2AApiKeyInput, A2AApiKeyEntry, OpenAuditStore, OpenAuditQuery, OpenAuditRecord, OpenAuditAppendInput, AgentWebAppStore, AgentWebApp, CreateAgentWebAppInput, AgentWebAppStorePatch, AgentWebAppUpdateOptions, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ScheduleExecutionType, TaskStore, CreateTaskRequest, TaskItem, TaskListFilter, TaskDependentListQuery, UpdateTaskRequest, TaskMutationSnapshot, TaskWorkItemStore, CreateWorkItemRequest, TaskWorkItem, CreateWorkItemIfAbsentRequest, TaskWorkItemListFilter, ProjectLifecycleEventQuery, MenuRegistry, MenuItem, CreateMenuItemInput, UpdateMenuItemInput, SharedResourceStore, ShareRecord, CreateShareRecord, CollectionStore, Collection, CreateCollectionRequest, UpdateCollectionRequest, VectorStoreProvider, VectorStoreCreateParams, CapabilityBundleStore, CapabilityBundle, InternalCreateCapabilityBundleInput, InternalUpdateCapabilityBundleInput, CapabilityBundleDeleteResult, ProjectRoomStore, ProjectRoom, ProjectMembershipStore, ProjectMembership, ProjectHumanRole, ProjectMembershipMutationResult, ProjectBotMembershipStore, ProjectBotMembership, ProjectRoomMessageStore, ProjectRoomMessage, ProjectRoomReadStateStore, ProjectRoomReadState, UserPushSubscriptionStore, UserPushSubscription, ModelProviderStore, ModelProviderEntry, CreateModelProviderRequest, UpdateModelProviderRequest, ModelProviderStatus, ModelProviderModelEntry, ProviderModelInput, LeaseStore, LeaseRecord, OutboxStore, OutboxEvent, PluginDeploymentStore, PluginDeployment, PlatformSettingsStore, PlatformSettingsRecord, PlatformSettingsDocument, PlatformAuditStore, PlatformAuditAppendInput, PlatformAuditRecord, PlatformAuditQuery, ChannelReplyJobStore, CreateChannelReplyJobInput, ChannelReplyJob, CheckpointStorage, CheckpointMaintenance, ThreadCheckpointStorage, StoreProtocol, StorePutInput, StoreItem, StoreSearchInput, SkillStore, Skill, CreateSkillRequest } from '@axiom-lattice/protocols';
 export { AgentWebApp, AgentWebAppAppearance, AgentWebAppFeatures, AgentWebAppScope, AgentWebAppStatus, AgentWebAppStore, Assistant, AssistantStore, Binding, BindingRegistry, CapabilityBundle, CapabilityBundleStore, ChannelInstallation, ChannelInstallationStore, ConnectionEntry, ConnectionStore, CreateAgentWebAppInput, CreateAssistantRequest, CreateBindingInput, CreateCapabilityBundleInput, CreateChannelInstallationInput, CreateChannelInstallationRequest, CreateDatabaseConfigRequest, CreateEvalCaseRequest, CreateEvalProjectRequest, CreateEvalRunRequest, CreateEvalSuiteRequest, CreateMcpServerConfigRequest, CreateMenuItemInput, CreateMetricsServerConfigRequest, CreateProjectRequest, CreateRunStepRequest, CreateShareRequest, CreateSkillRequest, CreateTenantRequest, CreateThreadRequest, CreateUserRequest, CreateUserTenantLinkRequest, CreateWorkflowRunRequest, CreateWorkspaceRequest, DatabaseConfig, DatabaseConfigEntry, DatabaseConfigStore, DatabaseType, EvalCase, EvalProject, EvalProjectReport, EvalRun, EvalRunResult, EvalStore, EvalSuite, LarkChannelInstallationConfig, McpServerConfigEntry, McpServerConfigStore, MenuItem, MenuRegistry, MetricsServerConfig, MetricsServerConfigEntry, MetricsServerConfigStore, Project, ProjectStore, ResourceAddress, RunStep, ScheduleExecutionType, ScheduleStorage, ScheduledTaskDefinition, ScheduledTaskStatus, ShareRecord, ShareResult, ShareVisibility, SharedResourceStore, Skill, SkillStore, StorageType, Tenant, TenantStatus, TenantStore, Thread, ThreadStore, UpdateAgentWebAppInput, UpdateCapabilityBundleInput, UpdateChannelInstallationRequest, UpdateDatabaseConfigRequest, UpdateMcpServerConfigRequest, UpdateMetricsServerConfigRequest, UpdateProjectRequest, UpdateRunStepRequest, UpdateTenantRequest, UpdateUserRequest, UpdateUserTenantLinkRequest, UpdateWorkflowRunRequest, UpdateWorkspaceRequest, User, UserStore, UserTenantLink, UserTenantLinkStore, UserTenantRole, WorkflowRun, WorkflowTrackingStore, Workspace, WorkspaceStore } from '@axiom-lattice/protocols';
 import { IMessageQueueStore, AddMessageParams, PendingMessage, QueueScope, ClaimMessagesOptions, ThreadInfo, IAgentRunLedger, BeginAgentRunInput, AgentRunRecord, CreatePendingAgentRunInput, ListPendingRunsOptions, ClaimAgentRunInput, DeleteAgentRunExpected, AgentRunStatus, RollbackFailureResult, AgentRunRollbackResult, AgentRunExpiredOutcome, SettleExpiredRunOptions, AgentRunCounts, AgentRunSource, ReapedAgentRun } from '@axiom-lattice/core';
 export { AddMessageParams, PendingMessage, ThreadInfo } from '@axiom-lattice/core';
@@ -415,7 +415,7 @@ interface PostgreSQLMcpServerConfigStoreOptions {
  * - Automatic env encryption/decryption
  * - Unique constraint on (tenant_id, key)
  */
-declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore {
+declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore, PersonalMcpServerConfigStore {
     private pool;
     private migrationManager;
     private initialized;
@@ -459,6 +459,44 @@ declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore {
      * Check if configuration exists
      */
     hasConfig(tenantId: string, id: string): Promise<boolean>;
+    /**
+     * Get all personal MCP server configurations owned by one assistant.
+     */
+    getAllConfigsForAssistant(tenantId: string, ownerAssistantId: string): Promise<PersonalMcpServerConfigEntry[]>;
+    /**
+     * Get every personal MCP server configuration across tenants.
+     *
+     * Operations/tests only; startup restoration must not call this.
+     */
+    getAllPersonalConfigsWithoutTenant(): Promise<PersonalMcpServerConfigEntry[]>;
+    /**
+     * Get one personal MCP server configuration by id.
+     */
+    getConfigByIdForAssistant(tenantId: string, ownerAssistantId: string, id: string): Promise<PersonalMcpServerConfigEntry | null>;
+    /**
+     * Get one personal MCP server configuration by business key.
+     */
+    getConfigByKeyForAssistant(tenantId: string, ownerAssistantId: string, key: string): Promise<PersonalMcpServerConfigEntry | null>;
+    /**
+     * Create a personal MCP server configuration.
+     */
+    createConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string, data: CreateMcpServerConfigRequest): Promise<PersonalMcpServerConfigEntry>;
+    /**
+     * Update a personal MCP server configuration.
+     */
+    updateConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string, updates: Partial<UpdateMcpServerConfigRequest>): Promise<PersonalMcpServerConfigEntry | null>;
+    /**
+     * Delete one personal MCP server configuration by id.
+     */
+    deleteConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string): Promise<boolean>;
+    /**
+     * Delete every personal MCP server configuration owned by one assistant.
+     */
+    deleteConfigsForAssistant(tenantId: string, ownerAssistantId: string): Promise<number>;
+    /**
+     * Check whether a personal MCP server configuration exists.
+     */
+    hasConfigForAssistant(tenantId: string, ownerAssistantId: string, id: string): Promise<boolean>;
     /**
      * Dispose resources and close the connection pool
      */
@@ -472,6 +510,10 @@ declare class PostgreSQLMcpServerConfigStore implements McpServerConfigStore {
      * Automatically decrypts env values if present
      */
     private mapRowToEntry;
+    /**
+     * Map a personal table row, tagging the owning assistant.
+     */
+    private mapPersonalRowToEntry;
     /**
      * Encrypt env values in config before storing
      */
@@ -2231,6 +2273,36 @@ declare class PostgreSQLPlatformSettingsStore implements PlatformSettingsStore {
     save(document: PlatformSettingsDocument, expectedVersion: number, updatedBy?: string): Promise<PlatformSettingsRecord>;
 }
 
+/**
+ * PostgreSQL implementation of {@link PlatformAuditStore}.
+ *
+ * Persists platform-level audit records in the append-only
+ * `lattice_platform_audit` table. Records are returned newest-first by
+ * `createdAt` descending, then `id` descending.
+ */
+declare class PostgreSQLPlatformAuditStore implements PlatformAuditStore {
+    private readonly options;
+    constructor(options: {
+        pool: Pool;
+    });
+    private get pool();
+    /** Appends a record, assigning a fresh id and creation timestamp. */
+    append(record: PlatformAuditAppendInput): Promise<PlatformAuditRecord>;
+    /** Returns a record by id, or null when it does not exist. */
+    get(id: string): Promise<PlatformAuditRecord | null>;
+    /**
+     * Returns matching records newest-first.
+     *
+     * `initiatorUserId` only matches human initiators. `from` is inclusive and
+     * `to` is exclusive after both are normalized to instants; invalid or empty
+     * boundaries are ignored. Records are ordered by `createdAt` descending,
+     * then by `id` descending. Results are paginated with a default limit of 100;
+     * non-finite `offset`/`limit` fall back to defaults, finite values are
+     * truncated to integers, and negatives are clamped to 0.
+     */
+    query(params: PlatformAuditQuery): Promise<PlatformAuditRecord[]>;
+}
+
 /** Options accepted by {@link PostgreSQLChannelReplyJobStore}. */
 interface PostgreSQLChannelReplyJobStoreOptions {
     /** Externally managed pool. When supplied, migrations are not run here. */
@@ -2437,6 +2509,7 @@ declare function createPgStoreConfig(connectionString: string): Promise<{
     oidcIdentityClaim: PostgreSQLOidcIdentityClaimStore;
     inviteLink: PostgreSQLInviteLinkStore;
     platformSettings: PostgreSQLPlatformSettingsStore;
+    platformAudit: PostgreSQLPlatformAuditStore;
     channelBinding: ChannelBindingStore;
     channelInstallation: PostgreSQLChannelInstallationStore;
     thread: PostgreSQLThreadStore;
@@ -2656,6 +2729,9 @@ declare const addOidcIdentityClaimInviteFields: Migration;
 /** Creates the single-row durable platform settings table. */
 declare const createPlatformSettingsTable: Migration;
 
+/** Creates the append-only platform-level audit log table. */
+declare const createPlatformAuditTable: Migration;
+
 /**
  * Thread table migrations
  */
@@ -2794,6 +2870,14 @@ declare const createMetricsConfigsTable: Migration;
  * Migration: Create MCP server configs table
  */
 declare const createMcpServerConfigsTable: Migration;
+/**
+ * Migration: create the personal MCP server config table.
+ *
+ * Personal configs are deliberately stored outside
+ * `lattice_mcp_server_configs` so tenant-only code paths (and older replicas
+ * during a rolling upgrade) can never read or register them.
+ */
+declare const createPersonalMcpServerConfigsTable: Migration;
 
 /**
  * Workspace table migrations
@@ -3049,4 +3133,4 @@ declare const createChannelReplyJobsTable: Migration;
  */
 declare const createStoreItemsTable: Migration;
 
-export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, CheckpointBaseNotFoundError, CheckpointTargetNotEmptyError, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InvalidFileShareAddressError, InvalidMcpAppShareAddressError, InvalidMcpAppShareVisibilityError, InvalidUserExternalIdentityRowError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentRunLedger, type PostgreSQLAgentRunLedgerOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLChannelReplyJobStore, type PostgreSQLChannelReplyJobStoreOptions, PostgreSQLCheckpointStorage, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLInviteLinkStore, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOidcIdentityClaimStore, PostgreSQLOidcProviderConfigStore, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLPlatformInvitationStore, PostgreSQLPlatformMemberStore, PostgreSQLPlatformSettingsStore, PostgreSQLPluginDeploymentStore, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLStore, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserExternalIdentityStore, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addCancelRequestedToEvalRuns, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addOidcIdentityClaimInviteFields, addProjectConfigColumn, addScheduleTenantId, addShareKind, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadExpiresAt, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentRunLedgerTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createChannelReplyJobsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createInviteLinksTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createOidcIdentityClaimsTable, createOidcProviderConfigsTable, createPGVectorStoreProvider, createPgStoreConfig, createPlatformInvitationsTable, createPlatformMembersTable, createPlatformSettingsTable, createPluginDeployments, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createStoreItemsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUserEmailLowerUniqueIndex, createUserExternalIdentityTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, dropPluginDeploymentAuthToken, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };
+export { ChannelBindingStore, type ChannelBindingStoreOptions, type ChannelIdentityMapping, ChannelIdentityMappingStore, type ChannelIdentityMappingStoreOptions, CheckpointBaseNotFoundError, CheckpointTargetNotEmptyError, type CreateChannelIdentityMappingInput, DuplicateProjectMembershipError, DuplicateProjectRoomMessageIdempotencyKeyError, InvalidFileShareAddressError, InvalidMcpAppShareAddressError, InvalidMcpAppShareVisibilityError, InvalidUserExternalIdentityRowError, MenuStore, type MenuStoreOptions, type Migration, MigrationManager, PGVectorStoreProvider, PostgreSQLA2AApiKeyStore, type PostgreSQLA2AApiKeyStoreOptions, PostgreSQLAgentRunLedger, type PostgreSQLAgentRunLedgerOptions, PostgreSQLAgentWebAppStore, type PostgreSQLAgentWebAppStoreOptions, PostgreSQLAssistantStore, type PostgreSQLAssistantStoreOptions, PostgreSQLCapabilityBundleStore, type PostgreSQLCapabilityBundleStoreOptions, PostgreSQLChannelInstallationStore, type PostgreSQLChannelInstallationStoreOptions, PostgreSQLChannelReplyJobStore, type PostgreSQLChannelReplyJobStoreOptions, PostgreSQLCheckpointStorage, PostgreSQLCollectionStore, type PostgreSQLCollectionStoreOptions, PostgreSQLConnectionStore, PostgreSQLDatabaseConfigStore, type PostgreSQLDatabaseConfigStoreOptions, PostgreSQLEvalStore, type PostgreSQLEvalStoreOptions, PostgreSQLInviteLinkStore, PostgreSQLMcpServerConfigStore, type PostgreSQLMcpServerConfigStoreOptions, PostgreSQLMetricsServerConfigStore, type PostgreSQLMetricsServerConfigStoreOptions, PostgreSQLModelProviderStore, type PostgreSQLModelProviderStoreOptions, PostgreSQLOidcIdentityClaimStore, PostgreSQLOidcProviderConfigStore, PostgreSQLOpenAuditStore, type PostgreSQLOpenAuditStoreOptions, PostgreSQLPlatformAuditStore, PostgreSQLPlatformInvitationStore, PostgreSQLPlatformMemberStore, PostgreSQLPlatformSettingsStore, PostgreSQLPluginDeploymentStore, PostgreSQLProjectBotMembershipStore, PostgreSQLProjectMembershipStore, PostgreSQLProjectRoomMessageStore, PostgreSQLProjectRoomReadStateStore, PostgreSQLProjectRoomStore, PostgreSQLProjectStore, type PostgreSQLProjectStoreOptions, PostgreSQLScheduleStorage, type PostgreSQLScheduleStorageOptions, PostgreSQLSkillStore, type PostgreSQLSkillStoreOptions, PostgreSQLStore, PostgreSQLTaskWorkItemStore, type PostgreSQLTaskWorkItemStoreOptions, PostgreSQLTenantStore, type PostgreSQLTenantStoreOptions, type PostgreSQLThreadMessageQueueStoreOptions, PostgreSQLThreadStore, type PostgreSQLThreadStoreOptions, PostgreSQLUserExternalIdentityStore, PostgreSQLUserStore, type PostgreSQLUserStoreOptions, PostgreSQLUserTenantLinkStore, type PostgreSQLUserTenantLinkStoreOptions, PostgreSQLWorkflowTrackingStore, type PostgreSQLWorkflowTrackingStoreOptions, PostgreSQLWorkspaceStore, type PostgreSQLWorkspaceStoreOptions, PostgresSharedResourceStore, type PostgresSharedResourceStoreOptions, ProjectBotMembershipIdConflictError, ProjectMembershipIdConflictError, ProjectRoomMessageIdConflictError, ThreadMessageQueueStore, addAssistantTenantId, addCancelRequestedToEvalRuns, addEnvToEvalRuns, addFileContentType, addHoldoutToEvalRuns, addInterruptColumnsToEval, addInterruptPolicyToEvalCases, addMcpAppContentType, addOidcIdentityClaimInviteFields, addProjectConfigColumn, addScheduleTenantId, addShareKind, addSkillTenantId, addStepThreadId, addTaskIdToEvalRuns, addThreadExpiresAt, addThreadTenantId, addWorkflowRunsTenantStatusUpdatedIndex, alterChannelInstallationsTable, changeAssistantPrimaryKey, changeSkillPrimaryKey, changeThreadPrimaryKey, createA2AApiKeysTable, createAgentRunLedgerTable, createAgentWebAppsTable, createAssistantsTable, createCapabilityBundlesTable, createChannelBindingsTable, createChannelIdentityMappingTables, createChannelInstallationsTable, createChannelReplyJobsTable, createCollectionsTable, createDatabaseConfigsTable, createEvalCasesTable, createEvalProjectsTable, createEvalRunResultsTable, createEvalRunsTable, createEvalSuitesTable, createInviteLinksTable, createMcpServerConfigsTable, createMenuItemsTable, createMetricsConfigsTable, createOidcIdentityClaimsTable, createOidcProviderConfigsTable, createPGVectorStoreProvider, createPersonalMcpServerConfigsTable, createPgStoreConfig, createPlatformAuditTable, createPlatformInvitationsTable, createPlatformMembersTable, createPlatformSettingsTable, createPluginDeployments, createProjectRoomReadStates, createProjectRoomTables, createProjectsTable, createScheduledTasksTable, createSharedResourcesTable, createSkillsTable, createStoreItemsTable, createTenantsTable, createThreadMessageQueueTable, createThreadsTable, createUserEmailLowerUniqueIndex, createUserExternalIdentityTable, createUsersTable, createWorkflowTrackingTables, createWorkspacesTable, dropPluginDeploymentAuthToken, enforceUniqueEvalProjectName, evalMigrations, mapRowToRunStep, mapRowToWorkflowRun, safeParse };