@dudousxd/nestjs-agent-store-drizzle 0.36.2 → 0.37.0

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import * as _dudousxd_nestjs_agent_core from '@dudousxd/nestjs-agent-core';
-import { MessageRole, ToolCallRequest, ToolResult, MessageAttachment, MessageUsage, AgentUiComponent, MessageFeedback, AgentHostContext, Actor, PageContext, RunStepTiming, QueuePause, ActionProposal, GenuiValidity, GenuiErrorCategory, CostSource, ToolKind, ToolCallStatus, ToolConfirmation, UsagePurpose, AgentStore, ThreadTurnReader, ThreadSettingsReader, ChatQueueStore, ActionProposalStore, ActionProposalWorkerStore, ActionProposalDiscoveryIndexStore, ActionProposalOutcomeStore, ActionProposalStoreOptions, ActionProposalSupersessionStore, CreateThreadInput, ThreadSummary, ThreadDetail, ThreadTurnQuery, ThreadTurnPage, ForkThreadOptions, ToolCallApprovalState, EnqueueMessageInput, QueuedMessage, QueuedMessagePatch, UpdateThreadInput, ThreadSettings, RecordRunStartInput, RecordRunEndInput, AppendMessageInput, StoredMessage, RecordToolCallInput, UpdateToolCallInput, ToolCallOutcome, RecordUsageInput, RecordGenuiCallInput, UsageTotals, CreateActionProposal, CreateActionProposalResult, ActionProposalScope, ActionProposalMutationResult, ListActionProposals, ActionProposalDecisionCommand, ClaimActionProposal, ExtendActionProposalLease, SettleActionProposal, ActionProposalOutcomeLease, AgentGovernanceQueries, AgentPricingStore, GovernanceRange, ModelSpendRow, FeatureSpendRow, TimestampRange, UsageBreakdownFilter, UsageBreakdownRow, ActorSpendRow, ThreadSpendRow, UsageTrendPoint, ToolCallActivityRow, ThreadActivityRow, RunMetrics, RunAgentBreakdownRow, RunErrorBreakdownRow, RunTrendPoint, RecentRunRow, PendingApprovalRow, ToolStatRow, GovernancePageQuery, ToolCallWhere, GovernancePage, ThreadWhere, RunWhere, ApprovalWhere, GovernanceRunDetail, GovernanceThreadDetailQuery, GovernanceThreadDetail, GenuiStats, MemoryProvider, ListMemoriesInput, MemoryRecord, ForgetMemoryInput, StoreMemoryInput, ModelPriceInput, CurrentModelPrice, StreamFrameTable, StreamFrameRow, SqlTokenStreamSink, SqlTokenStreamSinkOptions, ConfirmTokenStore, ConfirmTokenClaim, ChannelStore, PoppyStore, PoppyConversationRecord, PoppyConversationPatch, PoppyEventBody, StoredPoppyEvent, PoppyMessageReceipt, PoppyMessageClaim, PoppyConnectionStore, PoppyConnectionRecord, PoppyPendingConnect } from '@dudousxd/nestjs-agent-core';
+import { MessageRole, ToolCallRequest, ToolResult, MessageAttachment, MessageUsage, AgentUiComponent, MessageFeedback, AgentHostContext, Actor, PageContext, RunStepTiming, QueuePause, ActionProposal, GenuiValidity, GenuiErrorCategory, CostSource, ToolKind, ToolCallStatus, ToolConfirmation, UsagePurpose, AgentStore, ThreadTurnReader, ThreadSettingsReader, ChatQueueStore, ActionProposalStore, ActionProposalWorkerStore, ActionProposalDiscoveryIndexStore, ActionProposalOutcomeStore, ActionProposalStoreOptions, ActionProposalSupersessionStore, CreateThreadInput, ThreadSummary, ThreadDetail, ThreadTurnQuery, ThreadTurnPage, TenantRowFilter, ForkThreadOptions, ToolCallApprovalState, TenantTarget, EnqueueMessageInput, QueuedMessage, QueuedMessagePatch, UpdateThreadInput, ThreadSettings, RecordRunStartInput, RecordRunEndInput, AppendMessageInput, StoredMessage, RecordToolCallInput, UpdateToolCallInput, ToolCallOutcome, RecordUsageInput, RecordGenuiCallInput, UsageTotals, CreateActionProposal, CreateActionProposalResult, ActionProposalScope, ActionProposalMutationResult, ListActionProposals, ActionProposalDecisionCommand, ClaimActionProposal, ExtendActionProposalLease, SettleActionProposal, ActionProposalOutcomeLease, AgentGovernanceQueries, AgentPricingStore, GovernanceRange, ModelSpendRow, FeatureSpendRow, TimestampRange, UsageBreakdownFilter, UsageBreakdownRow, ActorSpendRow, ThreadSpendRow, UsageTrendPoint, ToolCallActivityRow, ThreadActivityRow, RunMetrics, RunAgentBreakdownRow, RunErrorBreakdownRow, RunTrendPoint, RecentRunRow, PendingApprovalRow, ToolStatRow, GovernancePageQuery, ToolCallWhere, GovernancePage, ThreadWhere, RunWhere, ApprovalWhere, GovernanceRunDetail, GovernanceThreadDetailQuery, GovernanceThreadDetail, GenuiStats, MemoryProvider, ListMemoriesInput, MemoryRecord, ForgetMemoryInput, StoreMemoryInput, ModelPriceInput, CurrentModelPrice, StreamFrameTable, StreamFrameRow, SqlTokenStreamSink, SqlTokenStreamSinkOptions, ConfirmTokenStore, ConfirmTokenClaim, ChannelStore, PoppyStore, PoppyConversationRecord, PoppyConversationPatch, PoppyEventBody, StoredPoppyEvent, PoppyMessageReceipt, PoppyMessageClaim, PoppyConnectionStore, PoppyConnectionRecord, PoppyPendingConnect } from '@dudousxd/nestjs-agent-core';
 export { ThreadTurnPage, ThreadTurnQuery } from '@dudousxd/nestjs-agent-core';
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
@@ -9771,6 +9771,8 @@ declare class DrizzleAgentStore implements AgentStore, ThreadTurnReader, ThreadS
      */
     private loadTurnWindow;
     listThreads(actorRef: string, limit?: number): Promise<ThreadSummary[]>;
+    listThreadsForTenant(actorRef: string, filter: TenantRowFilter, limit?: number): Promise<ThreadSummary[]>;
+    private listThreadsWhere;
     /**
      * The content of each thread's newest message ({@link messageOrderNewestFirst}), in a fixed two
      * reads for any number of threads: each thread's highest `seq`, then the rows holding it. Only a
@@ -9792,6 +9794,9 @@ declare class DrizzleAgentStore implements AgentStore, ThreadTurnReader, ThreadS
     rememberedApprovals(threadId: string): Promise<string[]>;
     toolCallInput(toolCallId: string): Promise<unknown>;
     toolCallApproval(toolCallId: string): Promise<ToolCallApprovalState | null>;
+    tenantOf(target: TenantTarget): Promise<{
+        tenantRef: string | null;
+    } | null>;
     ownerOfActiveStream(runId: string): Promise<string | null>;
     setTitle(threadId: string, title: string): Promise<void>;
     promoteThread(threadId: string): Promise<void>;
@@ -9903,6 +9908,15 @@ declare class DrizzleAgentStore implements AgentStore, ThreadTurnReader, ThreadS
         fromDay: string;
         toDay: string;
     }[]): Promise<UsageTotals[]>;
+    /**
+     * {@link usageWindows} over the tenant's rows (every actor's, or `actorRef`'s only), served by the
+     * `(tenant_ref, created_at)` index.
+     */
+    usageWindowsForTenant(tenantRef: string, ranges: readonly {
+        fromDay: string;
+        toDay: string;
+    }[], actorRef?: string): Promise<UsageTotals[]>;
+    private sumUsageWindows;
     private toSummary;
     private toStoredMessage;
 }
@@ -9978,11 +9992,26 @@ declare class DrizzleActionProposalStore implements ActionProposalStore, ActionP
  * `quotaToday`) so day-bucketing stays dialect-portable.
  */
 declare class DrizzleGovernanceQueries implements AgentGovernanceQueries {
+    private readonly source;
     private readonly pricingStore;
+    private readonly tenant?;
     private readonly db;
     private readonly dialect;
     private readonly t;
-    constructor(db: AgentDrizzleDb, pricingStore: AgentPricingStore);
+    /**
+     * `tenant`: the rows these queries may see (see {@link forTenant}); absent → every row. Threads by
+     * their `tenant_ref`; runs, messages, tool calls and generative-UI calls by their thread's; usage
+     * by its own `tenant_ref`.
+     */
+    constructor(source: AgentDrizzleDb, pricingStore: AgentPricingStore, tenant?: TenantRowFilter | undefined);
+    /** These queries narrowed to the rows `filter` may see — the console's tenant scope. */
+    forTenant(filter: TenantRowFilter): DrizzleGovernanceQueries;
+    /** The matching rule on a `tenant_ref` column; `undefined` (no condition) without a scope. */
+    private tenantOn;
+    /** Rows keyed by a thread id whose thread the scope may see; `undefined` without a scope. */
+    private threadIn;
+    /** Tool calls (by `message_id`) on a thread the scope may see; `undefined` without a scope. */
+    private toolCallIn;
     private loadPricing;
     /**
      * The usage rows in range, with only what the bucketers read: `requests` always (a recorded row

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _dudousxd_nestjs_agent_core from '@dudousxd/nestjs-agent-core';
-import { MessageRole, ToolCallRequest, ToolResult, MessageAttachment, MessageUsage, AgentUiComponent, MessageFeedback, AgentHostContext, Actor, PageContext, RunStepTiming, QueuePause, ActionProposal, GenuiValidity, GenuiErrorCategory, CostSource, ToolKind, ToolCallStatus, ToolConfirmation, UsagePurpose, AgentStore, ThreadTurnReader, ThreadSettingsReader, ChatQueueStore, ActionProposalStore, ActionProposalWorkerStore, ActionProposalDiscoveryIndexStore, ActionProposalOutcomeStore, ActionProposalStoreOptions, ActionProposalSupersessionStore, CreateThreadInput, ThreadSummary, ThreadDetail, ThreadTurnQuery, ThreadTurnPage, ForkThreadOptions, ToolCallApprovalState, EnqueueMessageInput, QueuedMessage, QueuedMessagePatch, UpdateThreadInput, ThreadSettings, RecordRunStartInput, RecordRunEndInput, AppendMessageInput, StoredMessage, RecordToolCallInput, UpdateToolCallInput, ToolCallOutcome, RecordUsageInput, RecordGenuiCallInput, UsageTotals, CreateActionProposal, CreateActionProposalResult, ActionProposalScope, ActionProposalMutationResult, ListActionProposals, ActionProposalDecisionCommand, ClaimActionProposal, ExtendActionProposalLease, SettleActionProposal, ActionProposalOutcomeLease, AgentGovernanceQueries, AgentPricingStore, GovernanceRange, ModelSpendRow, FeatureSpendRow, TimestampRange, UsageBreakdownFilter, UsageBreakdownRow, ActorSpendRow, ThreadSpendRow, UsageTrendPoint, ToolCallActivityRow, ThreadActivityRow, RunMetrics, RunAgentBreakdownRow, RunErrorBreakdownRow, RunTrendPoint, RecentRunRow, PendingApprovalRow, ToolStatRow, GovernancePageQuery, ToolCallWhere, GovernancePage, ThreadWhere, RunWhere, ApprovalWhere, GovernanceRunDetail, GovernanceThreadDetailQuery, GovernanceThreadDetail, GenuiStats, MemoryProvider, ListMemoriesInput, MemoryRecord, ForgetMemoryInput, StoreMemoryInput, ModelPriceInput, CurrentModelPrice, StreamFrameTable, StreamFrameRow, SqlTokenStreamSink, SqlTokenStreamSinkOptions, ConfirmTokenStore, ConfirmTokenClaim, ChannelStore, PoppyStore, PoppyConversationRecord, PoppyConversationPatch, PoppyEventBody, StoredPoppyEvent, PoppyMessageReceipt, PoppyMessageClaim, PoppyConnectionStore, PoppyConnectionRecord, PoppyPendingConnect } from '@dudousxd/nestjs-agent-core';
+import { MessageRole, ToolCallRequest, ToolResult, MessageAttachment, MessageUsage, AgentUiComponent, MessageFeedback, AgentHostContext, Actor, PageContext, RunStepTiming, QueuePause, ActionProposal, GenuiValidity, GenuiErrorCategory, CostSource, ToolKind, ToolCallStatus, ToolConfirmation, UsagePurpose, AgentStore, ThreadTurnReader, ThreadSettingsReader, ChatQueueStore, ActionProposalStore, ActionProposalWorkerStore, ActionProposalDiscoveryIndexStore, ActionProposalOutcomeStore, ActionProposalStoreOptions, ActionProposalSupersessionStore, CreateThreadInput, ThreadSummary, ThreadDetail, ThreadTurnQuery, ThreadTurnPage, TenantRowFilter, ForkThreadOptions, ToolCallApprovalState, TenantTarget, EnqueueMessageInput, QueuedMessage, QueuedMessagePatch, UpdateThreadInput, ThreadSettings, RecordRunStartInput, RecordRunEndInput, AppendMessageInput, StoredMessage, RecordToolCallInput, UpdateToolCallInput, ToolCallOutcome, RecordUsageInput, RecordGenuiCallInput, UsageTotals, CreateActionProposal, CreateActionProposalResult, ActionProposalScope, ActionProposalMutationResult, ListActionProposals, ActionProposalDecisionCommand, ClaimActionProposal, ExtendActionProposalLease, SettleActionProposal, ActionProposalOutcomeLease, AgentGovernanceQueries, AgentPricingStore, GovernanceRange, ModelSpendRow, FeatureSpendRow, TimestampRange, UsageBreakdownFilter, UsageBreakdownRow, ActorSpendRow, ThreadSpendRow, UsageTrendPoint, ToolCallActivityRow, ThreadActivityRow, RunMetrics, RunAgentBreakdownRow, RunErrorBreakdownRow, RunTrendPoint, RecentRunRow, PendingApprovalRow, ToolStatRow, GovernancePageQuery, ToolCallWhere, GovernancePage, ThreadWhere, RunWhere, ApprovalWhere, GovernanceRunDetail, GovernanceThreadDetailQuery, GovernanceThreadDetail, GenuiStats, MemoryProvider, ListMemoriesInput, MemoryRecord, ForgetMemoryInput, StoreMemoryInput, ModelPriceInput, CurrentModelPrice, StreamFrameTable, StreamFrameRow, SqlTokenStreamSink, SqlTokenStreamSinkOptions, ConfirmTokenStore, ConfirmTokenClaim, ChannelStore, PoppyStore, PoppyConversationRecord, PoppyConversationPatch, PoppyEventBody, StoredPoppyEvent, PoppyMessageReceipt, PoppyMessageClaim, PoppyConnectionStore, PoppyConnectionRecord, PoppyPendingConnect } from '@dudousxd/nestjs-agent-core';
 export { ThreadTurnPage, ThreadTurnQuery } from '@dudousxd/nestjs-agent-core';
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
@@ -9771,6 +9771,8 @@ declare class DrizzleAgentStore implements AgentStore, ThreadTurnReader, ThreadS
      */
     private loadTurnWindow;
     listThreads(actorRef: string, limit?: number): Promise<ThreadSummary[]>;
+    listThreadsForTenant(actorRef: string, filter: TenantRowFilter, limit?: number): Promise<ThreadSummary[]>;
+    private listThreadsWhere;
     /**
      * The content of each thread's newest message ({@link messageOrderNewestFirst}), in a fixed two
      * reads for any number of threads: each thread's highest `seq`, then the rows holding it. Only a
@@ -9792,6 +9794,9 @@ declare class DrizzleAgentStore implements AgentStore, ThreadTurnReader, ThreadS
     rememberedApprovals(threadId: string): Promise<string[]>;
     toolCallInput(toolCallId: string): Promise<unknown>;
     toolCallApproval(toolCallId: string): Promise<ToolCallApprovalState | null>;
+    tenantOf(target: TenantTarget): Promise<{
+        tenantRef: string | null;
+    } | null>;
     ownerOfActiveStream(runId: string): Promise<string | null>;
     setTitle(threadId: string, title: string): Promise<void>;
     promoteThread(threadId: string): Promise<void>;
@@ -9903,6 +9908,15 @@ declare class DrizzleAgentStore implements AgentStore, ThreadTurnReader, ThreadS
         fromDay: string;
         toDay: string;
     }[]): Promise<UsageTotals[]>;
+    /**
+     * {@link usageWindows} over the tenant's rows (every actor's, or `actorRef`'s only), served by the
+     * `(tenant_ref, created_at)` index.
+     */
+    usageWindowsForTenant(tenantRef: string, ranges: readonly {
+        fromDay: string;
+        toDay: string;
+    }[], actorRef?: string): Promise<UsageTotals[]>;
+    private sumUsageWindows;
     private toSummary;
     private toStoredMessage;
 }
@@ -9978,11 +9992,26 @@ declare class DrizzleActionProposalStore implements ActionProposalStore, ActionP
  * `quotaToday`) so day-bucketing stays dialect-portable.
  */
 declare class DrizzleGovernanceQueries implements AgentGovernanceQueries {
+    private readonly source;
     private readonly pricingStore;
+    private readonly tenant?;
     private readonly db;
     private readonly dialect;
     private readonly t;
-    constructor(db: AgentDrizzleDb, pricingStore: AgentPricingStore);
+    /**
+     * `tenant`: the rows these queries may see (see {@link forTenant}); absent → every row. Threads by
+     * their `tenant_ref`; runs, messages, tool calls and generative-UI calls by their thread's; usage
+     * by its own `tenant_ref`.
+     */
+    constructor(source: AgentDrizzleDb, pricingStore: AgentPricingStore, tenant?: TenantRowFilter | undefined);
+    /** These queries narrowed to the rows `filter` may see — the console's tenant scope. */
+    forTenant(filter: TenantRowFilter): DrizzleGovernanceQueries;
+    /** The matching rule on a `tenant_ref` column; `undefined` (no condition) without a scope. */
+    private tenantOn;
+    /** Rows keyed by a thread id whose thread the scope may see; `undefined` without a scope. */
+    private threadIn;
+    /** Tool calls (by `message_id`) on a thread the scope may see; `undefined` without a scope. */
+    private toolCallIn;
     private loadPricing;
     /**
      * The usage rows in range, with only what the bucketers read: `requests` always (a recorded row

package/dist/index.js

@@ -220,7 +220,9 @@ var agentTokenUsage = sqliteTable("agent_token_usage", {
   index("agent_token_usage_actor_created_idx").on(table.actorRef, table.createdAt),
   index("agent_token_usage_created_idx").on(table.createdAt),
   index("agent_token_usage_thread_idx").on(table.threadId),
-  index("agent_token_usage_feature_created_idx").on(table.feature, table.createdAt)
+  index("agent_token_usage_feature_created_idx").on(table.feature, table.createdAt),
+  // `quota.per: 'tenant' | 'actor-in-tenant'` sums a tenant's window.
+  index("agent_token_usage_tenant_created_idx").on(table.tenantRef, table.createdAt)
 ]);
 var agentGenuiCall = sqliteTable("agent_genui_call", {
   id: text("id").primaryKey(),
@@ -693,7 +695,9 @@ var agentTokenUsage2 = mysqlTable("agent_token_usage", {
   index2("agent_token_usage_actor_created_idx").on(table.actorRef, table.createdAt),
   index2("agent_token_usage_created_idx").on(table.createdAt),
   index2("agent_token_usage_thread_idx").on(table.threadId),
-  index2("agent_token_usage_feature_created_idx").on(table.feature, table.createdAt)
+  index2("agent_token_usage_feature_created_idx").on(table.feature, table.createdAt),
+  // `quota.per: 'tenant' | 'actor-in-tenant'` sums a tenant's window.
+  index2("agent_token_usage_tenant_created_idx").on(table.tenantRef, table.createdAt)
 ]);
 var agentGenuiCall2 = mysqlTable("agent_genui_call", {
   id: key("id").primaryKey(),
@@ -1180,7 +1184,9 @@ var agentTokenUsage3 = pgTable("agent_token_usage", {
   index3("agent_token_usage_actor_created_idx").on(table.actorRef, table.createdAt),
   index3("agent_token_usage_created_idx").on(table.createdAt),
   index3("agent_token_usage_thread_idx").on(table.threadId),
-  index3("agent_token_usage_feature_created_idx").on(table.feature, table.createdAt)
+  index3("agent_token_usage_feature_created_idx").on(table.feature, table.createdAt),
+  // `quota.per: 'tenant' | 'actor-in-tenant'` sums a tenant's window.
+  index3("agent_token_usage_tenant_created_idx").on(table.tenantRef, table.createdAt)
 ]);
 var agentGenuiCall3 = pgTable("agent_genui_call", {
   id: text2("id").primaryKey(),
@@ -2524,7 +2530,15 @@ var DrizzleAgentStore = class {
     return rows.reverse().map((row) => this.toStoredMessage(row));
   }
   async listThreads(actorRef, limit = 50) {
-    const threads = await this.db.select().from(this.t.agentThread).where(and2(eq2(this.t.agentThread.actorRef, actorRef), eq2(this.t.agentThread.transient, false), isNull2(this.t.agentThread.deletedAt))).orderBy(desc(this.t.agentThread.updatedAt)).limit(limit);
+    return this.listThreadsWhere(actorRef, void 0, limit);
+  }
+  async listThreadsForTenant(actorRef, filter, limit = 50) {
+    const column = this.t.agentThread.tenantRef;
+    const visible = filter.tenant === void 0 ? isNull2(column) : filter.nulls ? or2(eq2(column, filter.tenant), isNull2(column)) : eq2(column, filter.tenant);
+    return this.listThreadsWhere(actorRef, visible, limit);
+  }
+  async listThreadsWhere(actorRef, tenant, limit) {
+    const threads = await this.db.select().from(this.t.agentThread).where(and2(eq2(this.t.agentThread.actorRef, actorRef), eq2(this.t.agentThread.transient, false), isNull2(this.t.agentThread.deletedAt), tenant)).orderBy(desc(this.t.agentThread.updatedAt)).limit(limit);
     const previews = await this.lastMessageContents(threads.map((thread) => thread.id));
     return threads.map((thread) => this.toSummary(thread, previews.get(thread.id)));
   }
@@ -2718,6 +2732,23 @@ var DrizzleAgentStore = class {
       expiresAt: row.expiresAt?.toISOString() ?? null
     };
   }
+  async tenantOf(target) {
+    const thread = this.t.agentThread;
+    if ("toolCallId" in target) {
+      const [row2] = await this.db.select({
+        tenantRef: thread.tenantRef
+      }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq2(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(thread, eq2(this.t.agentMessage.threadId, thread.id)).where(eq2(this.t.agentToolCall.id, target.toolCallId));
+      return row2 === void 0 ? null : {
+        tenantRef: row2.tenantRef ?? null
+      };
+    }
+    const [row] = await this.db.select({
+      tenantRef: thread.tenantRef
+    }).from(thread).where(and2("threadId" in target ? eq2(thread.id, target.threadId) : eq2(thread.activeStreamId, target.runId), isNull2(thread.deletedAt)));
+    return row === void 0 ? null : {
+      tenantRef: row.tenantRef ?? null
+    };
+  }
   async ownerOfActiveStream(runId) {
     const [thread] = await this.db.select({
       actorRef: this.t.agentThread.actorRef
@@ -3313,6 +3344,17 @@ var DrizzleAgentStore = class {
   * it, and no usage row crosses the wire.
   */
   async usageWindows(actorRef, ranges) {
+    return this.sumUsageWindows(eq2(this.t.agentTokenUsage.actorRef, actorRef), ranges);
+  }
+  /**
+  * {@link usageWindows} over the tenant's rows (every actor's, or `actorRef`'s only), served by the
+  * `(tenant_ref, created_at)` index.
+  */
+  async usageWindowsForTenant(tenantRef, ranges, actorRef) {
+    const usage = this.t.agentTokenUsage;
+    return this.sumUsageWindows(and2(eq2(usage.tenantRef, tenantRef), actorRef !== void 0 ? eq2(usage.actorRef, actorRef) : void 0), ranges);
+  }
+  async sumUsageWindows(owner, ranges) {
     if (ranges.length === 0) {
       return [];
     }
@@ -3330,7 +3372,7 @@ var DrizzleAgentStore = class {
     });
     const from = new Date(Math.min(...bounds.map(({ start }) => start.getTime())));
     const to = new Date(Math.max(...bounds.map(({ end }) => end.getTime())));
-    const [row] = await this.db.select(columns).from(usage).where(and2(eq2(usage.actorRef, actorRef), within(from, to), eq2(usage.countsTowardsQuota, true)));
+    const [row] = await this.db.select(columns).from(usage).where(and2(owner, within(from, to), eq2(usage.countsTowardsQuota, true)));
     return bounds.map((_, index4) => ({
       usedTokens: Number(row?.[`tokens${index4}`] ?? 0),
       costUsd: Number(row?.[`cost${index4}`] ?? 0),
@@ -3442,7 +3484,7 @@ __name(toQueuedMessage, "toQueuedMessage");
 
 // src/drizzle-governance-queries.ts
 import { bucketByActor, bucketByFeature, bucketByModel, bucketByThread, bucketUsageBreakdown, bucketUsageTrend, dayBoundsUtc, rollupThreadUsage, summarizeGenuiCalls, truncateDetailContent, usageRangeBounds } from "@dudousxd/nestjs-agent-core";
-import { and as and3, asc as asc3, count, desc as desc2, eq as eq3, gte as gte2, inArray as inArray2, isNull as isNull3, like, lt, lte as lte3, sql as sql4, sum } from "drizzle-orm";
+import { and as and3, asc as asc3, count, desc as desc2, eq as eq3, gte as gte2, inArray as inArray2, isNull as isNull3, like, lt, lte as lte3, or as or3, sql as sql4, sum } from "drizzle-orm";
 var UNCLASSIFIED_ERROR_CODE = "unknown";
 var DEFAULT_AGENT_BUCKET = "(default)";
 var TOOL_CALL_STATUSES = [
@@ -3624,19 +3666,55 @@ function percentileMs(sortedDurationsMs, p) {
   return sortedDurationsMs[offset] ?? null;
 }
 __name(percentileMs, "percentileMs");
-var DrizzleGovernanceQueries = class {
+var DrizzleGovernanceQueries = class _DrizzleGovernanceQueries {
   static {
     __name(this, "DrizzleGovernanceQueries");
   }
+  source;
   pricingStore;
+  tenant;
   db;
   dialect;
   t;
-  constructor(db, pricingStore) {
+  /**
+  * `tenant`: the rows these queries may see (see {@link forTenant}); absent → every row. Threads by
+  * their `tenant_ref`; runs, messages, tool calls and generative-UI calls by their thread's; usage
+  * by its own `tenant_ref`.
+  */
+  constructor(source, pricingStore, tenant) {
+    this.source = source;
     this.pricingStore = pricingStore;
-    this.dialect = agentDialectOf(db);
+    this.tenant = tenant;
+    this.dialect = agentDialectOf(source);
     this.t = agentTablesFor(this.dialect);
-    this.db = asBuilder(db);
+    this.db = asBuilder(source);
+  }
+  /** These queries narrowed to the rows `filter` may see — the console's tenant scope. */
+  forTenant(filter) {
+    return new _DrizzleGovernanceQueries(this.source, this.pricingStore, filter);
+  }
+  /** The matching rule on a `tenant_ref` column; `undefined` (no condition) without a scope. */
+  tenantOn(column) {
+    const filter = this.tenant;
+    if (filter === void 0) return void 0;
+    if (filter.tenant === void 0) return isNull3(column);
+    return filter.nulls ? or3(eq3(column, filter.tenant), isNull3(column)) : eq3(column, filter.tenant);
+  }
+  /** Rows keyed by a thread id whose thread the scope may see; `undefined` without a scope. */
+  threadIn(threadId) {
+    const visible = this.tenantOn(this.t.agentThread.tenantRef);
+    if (visible === void 0) return void 0;
+    return inArray2(threadId, this.db.select({
+      id: this.t.agentThread.id
+    }).from(this.t.agentThread).where(visible));
+  }
+  /** Tool calls (by `message_id`) on a thread the scope may see; `undefined` without a scope. */
+  toolCallIn(messageId) {
+    const visible = this.threadIn(this.t.agentMessage.threadId);
+    if (visible === void 0) return void 0;
+    return inArray2(messageId, this.db.select({
+      id: this.t.agentMessage.id
+    }).from(this.t.agentMessage).where(visible));
   }
   async loadPricing() {
     const prices = await this.pricingStore.listCurrentPrices();
@@ -3677,7 +3755,7 @@ var DrizzleGovernanceQueries = class {
         audioSeconds: usage.audioSeconds,
         characters: usage.characters
       } : {}
-    }).from(usage).where(and3(gte2(this.t.agentTokenUsage.createdAt, start), lt(this.t.agentTokenUsage.createdAt, end)));
+    }).from(usage).where(and3(gte2(this.t.agentTokenUsage.createdAt, start), lt(this.t.agentTokenUsage.createdAt, end), this.tenantOn(usage.tenantRef)));
     return rows.map(toUsageInput);
   }
   async spendByModel(range) {
@@ -3742,7 +3820,7 @@ var DrizzleGovernanceQueries = class {
       threadId: this.t.agentMessage.threadId,
       createdAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).orderBy(desc2(this.t.agentToolCall.createdAt), desc2(this.t.agentToolCall.id)).limit(limit);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(this.threadIn(this.t.agentMessage.threadId)).orderBy(desc2(this.t.agentToolCall.createdAt), desc2(this.t.agentToolCall.id)).limit(limit);
     return rows.map((row) => ({
       toolCallId: row.toolCallId,
       toolName: row.toolName,
@@ -3809,7 +3887,7 @@ var DrizzleGovernanceQueries = class {
     });
   }
   async recentThreads(limit) {
-    const threads = await this.db.select().from(this.t.agentThread).where(isNull3(this.t.agentThread.deletedAt)).orderBy(desc2(this.t.agentThread.updatedAt), desc2(this.t.agentThread.id)).limit(limit);
+    const threads = await this.db.select().from(this.t.agentThread).where(and3(isNull3(this.t.agentThread.deletedAt), this.tenantOn(this.t.agentThread.tenantRef))).orderBy(desc2(this.t.agentThread.updatedAt), desc2(this.t.agentThread.id)).limit(limit);
     return this.toThreadActivityRows(threads);
   }
   /** The range's runs, with only the columns the rollups read. */
@@ -3824,7 +3902,7 @@ var DrizzleGovernanceQueries = class {
       ttftMs: run.ttftMs,
       parentRunId: run.parentRunId,
       startedAt: run.startedAt
-    }).from(run).where(and3(gte2(run.startedAt, start), lte3(run.startedAt, end)));
+    }).from(run).where(and3(gte2(run.startedAt, start), lte3(run.startedAt, end), this.threadIn(run.threadId)));
   }
   async runMetrics(range) {
     const runs = await this.runsInRange(range);
@@ -3890,7 +3968,7 @@ var DrizzleGovernanceQueries = class {
     const { start, end } = dayBoundsUtc(range);
     const runs = await this.db.select({
       errorCode: this.t.agentRun.errorCode
-    }).from(this.t.agentRun).where(and3(gte2(this.t.agentRun.startedAt, start), lte3(this.t.agentRun.startedAt, end), eq3(this.t.agentRun.status, "failed")));
+    }).from(this.t.agentRun).where(and3(gte2(this.t.agentRun.startedAt, start), lte3(this.t.agentRun.startedAt, end), eq3(this.t.agentRun.status, "failed"), this.threadIn(this.t.agentRun.threadId)));
     const byError = /* @__PURE__ */ new Map();
     for (const run of runs) {
       const errorCode = run.errorCode ?? UNCLASSIFIED_ERROR_CODE;
@@ -3930,7 +4008,7 @@ var DrizzleGovernanceQueries = class {
     return result;
   }
   async recentRuns(limit) {
-    const runs = await this.db.select().from(this.t.agentRun).orderBy(desc2(this.t.agentRun.startedAt), desc2(this.t.agentRun.id)).limit(limit);
+    const runs = await this.db.select().from(this.t.agentRun).where(this.threadIn(this.t.agentRun.threadId)).orderBy(desc2(this.t.agentRun.startedAt), desc2(this.t.agentRun.id)).limit(limit);
     return runs.map(toRecentRunRow);
   }
   /**
@@ -3949,7 +4027,7 @@ var DrizzleGovernanceQueries = class {
       agentName: this.t.agentMessage.agentName,
       requestedAt: this.t.agentToolCall.createdAt,
       runId: this.t.agentToolCall.runId
-    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq3(this.t.agentMessage.threadId, this.t.agentThread.id)).where(eq3(this.t.agentToolCall.status, "pending_approval")).orderBy(this.t.agentToolCall.createdAt, this.t.agentToolCall.id).limit(limit);
+    }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq3(this.t.agentMessage.threadId, this.t.agentThread.id)).where(and3(eq3(this.t.agentToolCall.status, "pending_approval"), this.tenantOn(this.t.agentThread.tenantRef))).orderBy(this.t.agentToolCall.createdAt, this.t.agentToolCall.id).limit(limit);
     return rows.map((row) => ({
       toolCallId: row.toolCallId,
       toolName: row.toolName,
@@ -3976,7 +4054,7 @@ var DrizzleGovernanceQueries = class {
       toolType: this.t.agentToolCall.toolType,
       status: this.t.agentToolCall.status,
       executionMs: this.t.agentToolCall.executionMs
-    }).from(this.t.agentToolCall).where(and3(gte2(this.t.agentToolCall.createdAt, start), lte3(this.t.agentToolCall.createdAt, end)));
+    }).from(this.t.agentToolCall).where(and3(gte2(this.t.agentToolCall.createdAt, start), lte3(this.t.agentToolCall.createdAt, end), this.toolCallIn(this.t.agentToolCall.messageId)));
     const byTool = /* @__PURE__ */ new Map();
     for (const call of calls) {
       const key2 = `${call.toolName} ${call.toolType}`;
@@ -4026,7 +4104,7 @@ var DrizzleGovernanceQueries = class {
     if (filters?.toolType !== void 0 && !isToolKind(filters.toolType)) {
       return emptyPage(query);
     }
-    const whereClause = and3(filters?.toolName !== void 0 ? eq3(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.toolType !== void 0 && isToolKind(filters.toolType) ? eq3(this.t.agentToolCall.toolType, filters.toolType) : void 0, filters?.status !== void 0 && isToolCallStatus(filters.status) ? eq3(this.t.agentToolCall.status, filters.status) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentMessage.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(filters?.toolName !== void 0 ? eq3(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.toolType !== void 0 && isToolKind(filters.toolType) ? eq3(this.t.agentToolCall.toolType, filters.toolType) : void 0, filters?.status !== void 0 && isToolCallStatus(filters.status) ? eq3(this.t.agentToolCall.status, filters.status) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentMessage.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0, this.threadIn(this.t.agentMessage.threadId));
     const [totalRow] = await this.db.select({
       value: count()
     }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).where(whereClause);
@@ -4062,7 +4140,7 @@ var DrizzleGovernanceQueries = class {
   */
   async threadsPage(query) {
     const filters = query.where;
-    const whereClause = and3(isNull3(this.t.agentThread.deletedAt), filters?.actorRef !== void 0 ? eq3(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.title !== void 0 ? like(sql4`lower(${this.t.agentThread.title})`, `%${filters.title.toLowerCase()}%`) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentThread.updatedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentThread.updatedAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(isNull3(this.t.agentThread.deletedAt), filters?.actorRef !== void 0 ? eq3(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.title !== void 0 ? like(sql4`lower(${this.t.agentThread.title})`, `%${filters.title.toLowerCase()}%`) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentThread.updatedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentThread.updatedAt, dayEndUtc(filters.toDay)) : void 0, this.tenantOn(this.t.agentThread.tenantRef));
     const [totalRow] = await this.db.select({
       value: count()
     }).from(this.t.agentThread).where(whereClause);
@@ -4084,7 +4162,7 @@ var DrizzleGovernanceQueries = class {
     if (filters?.status !== void 0 && !isRunStatus(filters.status)) {
       return emptyPage(query);
     }
-    const whereClause = and3(filters?.agentName !== void 0 ? eq3(this.t.agentRun.agentName, filters.agentName) : void 0, filters?.status !== void 0 && isRunStatus(filters.status) ? eq3(this.t.agentRun.status, filters.status) : void 0, filters?.errorCode !== void 0 ? eq3(this.t.agentRun.errorCode, filters.errorCode) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentRun.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentRun.startedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentRun.startedAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(filters?.agentName !== void 0 ? eq3(this.t.agentRun.agentName, filters.agentName) : void 0, filters?.status !== void 0 && isRunStatus(filters.status) ? eq3(this.t.agentRun.status, filters.status) : void 0, filters?.errorCode !== void 0 ? eq3(this.t.agentRun.errorCode, filters.errorCode) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentRun.threadId, filters.threadId) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentRun.startedAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentRun.startedAt, dayEndUtc(filters.toDay)) : void 0, this.threadIn(this.t.agentRun.threadId));
     const [totalRow] = await this.db.select({
       value: count()
     }).from(this.t.agentRun).where(whereClause);
@@ -4108,7 +4186,7 @@ var DrizzleGovernanceQueries = class {
   */
   async approvalsPage(query) {
     const filters = query.where;
-    const whereClause = and3(eq3(this.t.agentToolCall.status, "pending_approval"), filters?.toolName !== void 0 ? eq3(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentThread.id, filters.threadId) : void 0, filters?.actorRef !== void 0 ? eq3(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.agentName !== void 0 ? eq3(this.t.agentMessage.agentName, filters.agentName) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0);
+    const whereClause = and3(eq3(this.t.agentToolCall.status, "pending_approval"), filters?.toolName !== void 0 ? eq3(this.t.agentToolCall.toolName, filters.toolName) : void 0, filters?.threadId !== void 0 ? eq3(this.t.agentThread.id, filters.threadId) : void 0, filters?.actorRef !== void 0 ? eq3(this.t.agentThread.actorRef, filters.actorRef) : void 0, filters?.agentName !== void 0 ? eq3(this.t.agentMessage.agentName, filters.agentName) : void 0, filters?.fromDay !== void 0 ? gte2(this.t.agentToolCall.createdAt, dayStartUtc(filters.fromDay)) : void 0, filters?.toDay !== void 0 ? lte3(this.t.agentToolCall.createdAt, dayEndUtc(filters.toDay)) : void 0, this.tenantOn(this.t.agentThread.tenantRef));
     const [totalRow] = await this.db.select({
       value: count()
     }).from(this.t.agentToolCall).innerJoin(this.t.agentMessage, eq3(this.t.agentToolCall.messageId, this.t.agentMessage.id)).innerJoin(this.t.agentThread, eq3(this.t.agentMessage.threadId, this.t.agentThread.id)).where(whereClause);
@@ -4149,7 +4227,7 @@ var DrizzleGovernanceQueries = class {
     const [row] = await this.db.select({
       run: this.t.agentRun,
       thread: this.t.agentThread
-    }).from(this.t.agentRun).innerJoin(this.t.agentThread, eq3(this.t.agentRun.threadId, this.t.agentThread.id)).where(eq3(this.t.agentRun.id, runId)).limit(1);
+    }).from(this.t.agentRun).innerJoin(this.t.agentThread, eq3(this.t.agentRun.threadId, this.t.agentThread.id)).where(and3(eq3(this.t.agentRun.id, runId), this.tenantOn(this.t.agentThread.tenantRef))).limit(1);
     if (row === void 0) {
       return null;
     }
@@ -4173,7 +4251,7 @@ var DrizzleGovernanceQueries = class {
   * message. Soft-deleted threads are returned with `deleted: true`; an audit still needs them.
   */
   async threadDetail(query) {
-    const [thread] = await this.db.select().from(this.t.agentThread).where(eq3(this.t.agentThread.id, query.threadId)).limit(1);
+    const [thread] = await this.db.select().from(this.t.agentThread).where(and3(eq3(this.t.agentThread.id, query.threadId), this.tenantOn(this.t.agentThread.tenantRef))).limit(1);
     if (thread === void 0) {
       return null;
     }
@@ -4225,7 +4303,7 @@ var DrizzleGovernanceQueries = class {
   async genuiStats(range) {
     const { start, end } = dayBoundsUtc(range);
     const table = this.t.agentGenuiCall;
-    const rows = await this.db.select().from(table).where(and3(gte2(table.createdAt, start.getTime()), lte3(table.createdAt, end.getTime())));
+    const rows = await this.db.select().from(table).where(and3(gte2(table.createdAt, start.getTime()), lte3(table.createdAt, end.getTime()), this.threadIn(table.threadId)));
     return summarizeGenuiCalls(rows.map(toGenuiCallRow));
   }
   /** Tool-call counts for a set of messages in ONE grouped query — the detail view's no-N+1 guarantee. */
@@ -4616,7 +4694,7 @@ var DrizzleChannelStore = class {
 
 // src/drizzle-poppy-store.ts
 import { newEventId } from "@dudousxd/nestjs-agent-core";
-import { and as and8, desc as desc3, eq as eq9, gt as gt4, isNull as isNull4, lt as lt4, lte as lte5, or as or3 } from "drizzle-orm";
+import { and as and8, desc as desc3, eq as eq9, gt as gt4, isNull as isNull4, lt as lt4, lte as lte5, or as or4 } from "drizzle-orm";
 var MAX_APPEND_ATTEMPTS = 50;
 var sleep = /* @__PURE__ */ __name((ms) => new Promise((resolve) => setTimeout(resolve, ms)), "sleep");
 var nullable = /* @__PURE__ */ __name((value) => value == null ? null : String(value), "nullable");
@@ -4846,7 +4924,7 @@ var DrizzlePoppyStore = class {
     const taken = await affectedRows(this.dialect, this.db.update(table).set({
       readerHolder: holder,
       readerUntil: now + ttlMs
-    }).where(and8(eq9(table.id, conversationId), or3(isNull4(table.readerHolder), eq9(table.readerHolder, holder), lte5(table.readerUntil, now)))), table.id);
+    }).where(and8(eq9(table.id, conversationId), or4(isNull4(table.readerHolder), eq9(table.readerHolder, holder), lte5(table.readerUntil, now)))), table.id);
     if (taken === 1) return true;
     if (this.dialect !== "mysql") return false;
     const [row] = await this.db.select({
@@ -4995,7 +5073,7 @@ __name(toConnection, "toConnection");
 // src/drizzle-rag-ingestion-log.ts
 import { subscribe, unsubscribe } from "diagnostics_channel";
 import { Injectable, Logger } from "@nestjs/common";
-import { and as and10, asc as asc6, count as count2, desc as desc4, eq as eq11, gt as gt5, lt as lt5, or as or4 } from "drizzle-orm";
+import { and as and10, asc as asc6, count as count2, desc as desc4, eq as eq11, gt as gt5, lt as lt5, or as or5 } from "drizzle-orm";
 function _ts_decorate(decorators, target, key2, desc5) {
   var c = arguments.length, r = c < 3 ? target : desc5 === null ? desc5 = Object.getOwnPropertyDescriptor(target, key2) : desc5, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
@@ -5249,7 +5327,7 @@ var DrizzleRagIngestionLog = class _DrizzleRagIngestionLog {
     if (cursor === void 0) {
       return base;
     }
-    return and10(base, or4(lt5(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), and10(eq11(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), gt5(this.t.ragIngestionLog.documentId, cursor.documentId))));
+    return and10(base, or5(lt5(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), and10(eq11(this.t.ragIngestionLog.updatedAt, cursor.updatedAt), gt5(this.t.ragIngestionLog.documentId, cursor.documentId))));
   }
   /**
   * Upsert one outcome. Keyed by document id so the row always reflects the *current* state — a