@iris-eval/mcp-server 0.3.0 → 0.4.0-rc.1

package/dist/preferences.d.ts

@@ -0,0 +1,129 @@
+import { z } from 'zod';
+declare const MomentFiltersSchema: z.ZodObject<{
+    agentName: z.ZodOptional<z.ZodString>;
+    verdict: z.ZodOptional<z.ZodEnum<["pass", "fail", "partial", "unevaluated"]>>;
+    significanceKind: z.ZodOptional<z.ZodEnum<["safety-violation", "cost-spike", "first-failure", "novel-pattern", "rule-collision", "normal-pass", "normal-fail"]>>;
+}, "strict", z.ZodTypeAny, {
+    verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+    agentName?: string | undefined;
+    significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+}, {
+    verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+    agentName?: string | undefined;
+    significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+}>;
+export declare const PreferencesSchema: z.ZodObject<{
+    autoLaunch: z.ZodDefault<z.ZodBoolean>;
+    firstSeen: z.ZodOptional<z.ZodString>;
+    dismissedBanners: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Theme override; "system" defers to prefers-color-scheme. v0.4. */
+    theme: z.ZodDefault<z.ZodEnum<["dark", "light", "system"]>>;
+    /** Last filter set used on /moments — applied on next visit when the URL has no filter params. v0.4. */
+    momentFilters: z.ZodDefault<z.ZodObject<{
+        agentName: z.ZodOptional<z.ZodString>;
+        verdict: z.ZodOptional<z.ZodEnum<["pass", "fail", "partial", "unevaluated"]>>;
+        significanceKind: z.ZodOptional<z.ZodEnum<["safety-violation", "cost-spike", "first-failure", "novel-pattern", "rule-collision", "normal-pass", "normal-fail"]>>;
+    }, "strict", z.ZodTypeAny, {
+        verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+        agentName?: string | undefined;
+        significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+    }, {
+        verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+        agentName?: string | undefined;
+        significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+    }>>;
+    /** Tour ids the user has completed or dismissed. v0.4. */
+    dismissedTours: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Decision Moments hidden from the timeline by user action. v0.4. */
+    archivedMoments: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Density mode for chrome (Design System v2.A). 'compact' default per R2.3. */
+    density: z.ZodDefault<z.ZodEnum<["compact", "comfortable"]>>;
+    /** Sidebar collapsed (icon-only at 64px) vs expanded (256px). Default expanded per R2.4. */
+    sidebarCollapsed: z.ZodDefault<z.ZodBoolean>;
+    /** ISO timestamp of last notifications-popover opened — drives unread badge. */
+    notificationsLastSeen: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    autoLaunch: z.ZodDefault<z.ZodBoolean>;
+    firstSeen: z.ZodOptional<z.ZodString>;
+    dismissedBanners: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Theme override; "system" defers to prefers-color-scheme. v0.4. */
+    theme: z.ZodDefault<z.ZodEnum<["dark", "light", "system"]>>;
+    /** Last filter set used on /moments — applied on next visit when the URL has no filter params. v0.4. */
+    momentFilters: z.ZodDefault<z.ZodObject<{
+        agentName: z.ZodOptional<z.ZodString>;
+        verdict: z.ZodOptional<z.ZodEnum<["pass", "fail", "partial", "unevaluated"]>>;
+        significanceKind: z.ZodOptional<z.ZodEnum<["safety-violation", "cost-spike", "first-failure", "novel-pattern", "rule-collision", "normal-pass", "normal-fail"]>>;
+    }, "strict", z.ZodTypeAny, {
+        verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+        agentName?: string | undefined;
+        significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+    }, {
+        verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+        agentName?: string | undefined;
+        significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+    }>>;
+    /** Tour ids the user has completed or dismissed. v0.4. */
+    dismissedTours: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Decision Moments hidden from the timeline by user action. v0.4. */
+    archivedMoments: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Density mode for chrome (Design System v2.A). 'compact' default per R2.3. */
+    density: z.ZodDefault<z.ZodEnum<["compact", "comfortable"]>>;
+    /** Sidebar collapsed (icon-only at 64px) vs expanded (256px). Default expanded per R2.4. */
+    sidebarCollapsed: z.ZodDefault<z.ZodBoolean>;
+    /** ISO timestamp of last notifications-popover opened — drives unread badge. */
+    notificationsLastSeen: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    autoLaunch: z.ZodDefault<z.ZodBoolean>;
+    firstSeen: z.ZodOptional<z.ZodString>;
+    dismissedBanners: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Theme override; "system" defers to prefers-color-scheme. v0.4. */
+    theme: z.ZodDefault<z.ZodEnum<["dark", "light", "system"]>>;
+    /** Last filter set used on /moments — applied on next visit when the URL has no filter params. v0.4. */
+    momentFilters: z.ZodDefault<z.ZodObject<{
+        agentName: z.ZodOptional<z.ZodString>;
+        verdict: z.ZodOptional<z.ZodEnum<["pass", "fail", "partial", "unevaluated"]>>;
+        significanceKind: z.ZodOptional<z.ZodEnum<["safety-violation", "cost-spike", "first-failure", "novel-pattern", "rule-collision", "normal-pass", "normal-fail"]>>;
+    }, "strict", z.ZodTypeAny, {
+        verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+        agentName?: string | undefined;
+        significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+    }, {
+        verdict?: "pass" | "fail" | "partial" | "unevaluated" | undefined;
+        agentName?: string | undefined;
+        significanceKind?: "safety-violation" | "cost-spike" | "first-failure" | "novel-pattern" | "rule-collision" | "normal-pass" | "normal-fail" | undefined;
+    }>>;
+    /** Tour ids the user has completed or dismissed. v0.4. */
+    dismissedTours: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Decision Moments hidden from the timeline by user action. v0.4. */
+    archivedMoments: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Density mode for chrome (Design System v2.A). 'compact' default per R2.3. */
+    density: z.ZodDefault<z.ZodEnum<["compact", "comfortable"]>>;
+    /** Sidebar collapsed (icon-only at 64px) vs expanded (256px). Default expanded per R2.4. */
+    sidebarCollapsed: z.ZodDefault<z.ZodBoolean>;
+    /** ISO timestamp of last notifications-popover opened — drives unread badge. */
+    notificationsLastSeen: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type Preferences = z.infer<typeof PreferencesSchema>;
+export type MomentFilters = z.infer<typeof MomentFiltersSchema>;
+export interface PreferenceState {
+    /** True if `~/.iris/preferences.json` did not exist when iris-mcp started. */
+    isFirstRun: boolean;
+    /** Resolved preferences (defaulted + validated). */
+    preferences: Preferences;
+    /** Absolute path to the preferences file. */
+    path: string;
+}
+export declare function loadOrInitPreferences(customPath?: string): PreferenceState;
+export declare function shouldAutoLaunchDashboard(state: PreferenceState): boolean;
+export interface PreferenceStore {
+    readonly path: string;
+    /** Current preferences (always defaulted + validated). */
+    read(): Preferences;
+    /**
+     * Apply a partial update + persist atomically. Returns the merged result.
+     * Throws if the merge fails Zod validation (e.g., illegal verdict value).
+     */
+    patch(input: Partial<Preferences>): Preferences;
+}
+export declare function createPreferenceStore(customPath?: string): PreferenceStore;
+export {};

package/dist/preferences.js

@@ -0,0 +1,152 @@
+/*
+ * preferences — first-run + per-user dashboard preferences for iris-mcp.
+ *
+ * State lives at ~/.iris/preferences.json. The file is created on first
+ * dashboard launch with `autoLaunch: true` and `firstSeen` set to the
+ * current ISO timestamp.
+ *
+ * Subsequent runs read the file and respect the user's autoLaunch setting.
+ * The env var IRIS_NO_AUTO_LAUNCH=1 overrides preferences and disables
+ * auto-launch unconditionally (useful for CI, headless servers, container
+ * runs, and remote SSH sessions).
+ *
+ * The file format is intentionally small — additional preferences will be
+ * added as the dashboard grows; the schema validates known keys but
+ * tolerates unknown ones forward-compatibly.
+ *
+ * v0.4 expansions (B8.2): theme, momentFilters (last filter set used on
+ * /moments), dismissedTours, archivedMoments. These let the dashboard
+ * remember the user's last view across reloads + across iris-mcp restarts.
+ */
+import { mkdirSync, readFileSync, writeFileSync, existsSync, renameSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { z } from 'zod';
+const MomentFiltersSchema = z
+    .object({
+    agentName: z.string().max(200).optional(),
+    verdict: z.enum(['pass', 'fail', 'partial', 'unevaluated']).optional(),
+    significanceKind: z
+        .enum([
+        'safety-violation',
+        'cost-spike',
+        'first-failure',
+        'novel-pattern',
+        'rule-collision',
+        'normal-pass',
+        'normal-fail',
+    ])
+        .optional(),
+})
+    .strict();
+export const PreferencesSchema = z
+    .object({
+    autoLaunch: z.boolean().default(true),
+    firstSeen: z.string().datetime({ offset: true }).optional(),
+    dismissedBanners: z.array(z.string().max(80)).default([]),
+    /** Theme override; "system" defers to prefers-color-scheme. v0.4. */
+    theme: z.enum(['dark', 'light', 'system']).default('system'),
+    /** Last filter set used on /moments — applied on next visit when the URL has no filter params. v0.4. */
+    momentFilters: MomentFiltersSchema.default({}),
+    /** Tour ids the user has completed or dismissed. v0.4. */
+    dismissedTours: z.array(z.string().max(80)).default([]),
+    /** Decision Moments hidden from the timeline by user action. v0.4. */
+    archivedMoments: z.array(z.string().max(200)).default([]),
+    /** Density mode for chrome (Design System v2.A). 'compact' default per R2.3. */
+    density: z.enum(['compact', 'comfortable']).default('compact'),
+    /** Sidebar collapsed (icon-only at 64px) vs expanded (256px). Default expanded per R2.4. */
+    sidebarCollapsed: z.boolean().default(false),
+    /** ISO timestamp of last notifications-popover opened — drives unread badge. */
+    notificationsLastSeen: z.string().datetime({ offset: true }).optional(),
+})
+    .passthrough();
+function defaultPreferencesPath() {
+    return join(homedir(), '.iris', 'preferences.json');
+}
+function freshPreferences() {
+    return PreferencesSchema.parse({
+        autoLaunch: true,
+        firstSeen: new Date().toISOString(),
+        dismissedBanners: [],
+        theme: 'system',
+        momentFilters: {},
+        dismissedTours: [],
+        archivedMoments: [],
+    });
+}
+function writeAtomic(targetPath, contents) {
+    mkdirSync(dirname(targetPath), { recursive: true });
+    const tmp = `${targetPath}.tmp.${process.pid}`;
+    writeFileSync(tmp, contents, 'utf-8');
+    renameSync(tmp, targetPath);
+}
+export function loadOrInitPreferences(customPath) {
+    const path = customPath ?? defaultPreferencesPath();
+    if (!existsSync(path)) {
+        const fresh = freshPreferences();
+        try {
+            writeAtomic(path, JSON.stringify(fresh, null, 2));
+        }
+        catch {
+            // Filesystem may be read-only (containerized run); we still proceed
+            // with the defaults in memory but isFirstRun stays true so callers
+            // can decide whether to auto-launch anyway.
+        }
+        return { isFirstRun: true, preferences: fresh, path };
+    }
+    try {
+        const raw = readFileSync(path, 'utf-8');
+        const parsed = PreferencesSchema.safeParse(JSON.parse(raw));
+        if (parsed.success) {
+            return { isFirstRun: false, preferences: parsed.data, path };
+        }
+        // Malformed file — fall back to defaults but DON'T overwrite the
+        // existing file. The user may want to fix it manually.
+        return {
+            isFirstRun: false,
+            preferences: PreferencesSchema.parse({}),
+            path,
+        };
+    }
+    catch {
+        return {
+            isFirstRun: false,
+            preferences: PreferencesSchema.parse({}),
+            path,
+        };
+    }
+}
+export function shouldAutoLaunchDashboard(state) {
+    if (process.env.IRIS_NO_AUTO_LAUNCH === '1')
+        return false;
+    if (process.env.CI === 'true' || process.env.CI === '1')
+        return false;
+    return state.preferences.autoLaunch !== false;
+}
+export function createPreferenceStore(customPath) {
+    const path = customPath ?? defaultPreferencesPath();
+    let current = loadOrInitPreferences(path).preferences;
+    return {
+        path,
+        read() {
+            return current;
+        },
+        patch(input) {
+            const merged = { ...current, ...input };
+            // Re-parse so default coalescing + validation runs, and so passthrough
+            // forward-compat preserves any unknown keys present in the file.
+            const validated = PreferencesSchema.parse(merged);
+            try {
+                writeAtomic(path, JSON.stringify(validated, null, 2));
+            }
+            catch (err) {
+                // If persist fails (read-only fs, disk full), still update memory
+                // so the UI feels responsive — but rethrow so the API surfaces it.
+                current = validated;
+                throw err;
+            }
+            current = validated;
+            return validated;
+        },
+    };
+}

package/dist/resources/dashboard-summary.js

@@ -1,6 +1,8 @@
+import { LOCAL_TENANT } from '../types/tenant.js';
 export function registerDashboardSummaryResource(server, storage) {
     server.resource('dashboard-summary', 'iris://dashboard/summary', { description: 'Dashboard summary with key metrics and trends' }, async () => {
-        const summary = await storage.getDashboardSummary();
+        // OSS single-tenant: summary scopes to the local user.
+        const summary = await storage.getDashboardSummary(LOCAL_TENANT);
         return {
             contents: [
                 {

package/dist/resources/trace-detail.js

@@ -1,7 +1,9 @@
+import { LOCAL_TENANT } from '../types/tenant.js';
 export function registerTraceDetailResource(server, storage) {
     server.resource('trace-detail', 'iris://traces/{trace_id}', { description: 'Full trace detail with spans and evaluation results' }, async (uri) => {
         const traceId = uri.pathname.split('/').pop();
-        const trace = await storage.getTrace(traceId);
+        // OSS single-tenant: MCP caller is the local user.
+        const trace = await storage.getTrace(LOCAL_TENANT, traceId);
         if (!trace) {
             return {
                 contents: [
@@ -13,8 +15,8 @@ export function registerTraceDetailResource(server, storage) {
                 ],
             };
         }
-        const spans = await storage.getSpansByTraceId(traceId);
-        const evals = await storage.getEvalsByTraceId(traceId);
+        const spans = await storage.getSpansByTraceId(LOCAL_TENANT, traceId);
+        const evals = await storage.getEvalsByTraceId(LOCAL_TENANT, traceId);
         return {
             contents: [
                 {

package/dist/server.d.ts

@@ -1,9 +1,11 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { IrisConfig } from './types/index.js';
 import type { IStorageAdapter } from './types/query.js';
+import type { CustomRuleStore } from './custom-rule-store.js';
 import { EvalEngine } from './eval/engine.js';
 export interface IrisServer {
     mcpServer: McpServer;
     evalEngine: EvalEngine;
+    customRuleStore: CustomRuleStore;
 }
-export declare function createIrisServer(config: IrisConfig, storage: IStorageAdapter): IrisServer;
+export declare function createIrisServer(config: IrisConfig, storage: IStorageAdapter, customRuleStore?: CustomRuleStore): IrisServer;

package/dist/server.js

@@ -2,13 +2,19 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { EvalEngine } from './eval/engine.js';
 import { registerAllTools } from './tools/index.js';
 import { registerAllResources } from './resources/index.js';
-export function createIrisServer(config, storage) {
+import { createCustomRuleStore } from './custom-rule-store.js';
+export function createIrisServer(config, storage, customRuleStore) {
     const mcpServer = new McpServer({
         name: config.server.name,
         version: config.server.version,
     });
     const evalEngine = new EvalEngine(config.eval.defaultThreshold, config.eval.ruleThresholds);
-    registerAllTools(mcpServer, storage, evalEngine);
+    // Caller can inject a shared rule store (e.g. index.ts passes the
+    // same instance the HTTP dashboard uses, so a rule deployed via MCP
+    // is immediately visible in the dashboard without a restart). If
+    // none provided, create a fresh one loading from the default path.
+    const ruleStore = customRuleStore ?? createCustomRuleStore();
+    registerAllTools(mcpServer, storage, evalEngine, ruleStore);
     registerAllResources(mcpServer, storage);
-    return { mcpServer, evalEngine };
+    return { mcpServer, evalEngine, customRuleStore: ruleStore };
 }

package/dist/storage/migrations/004-tenant-id.d.ts

@@ -0,0 +1,3 @@
+import type Database from 'better-sqlite3';
+export declare const id = "004-tenant-id";
+export declare function up(db: Database.Database): void;

package/dist/storage/migrations/004-tenant-id.js

@@ -0,0 +1,40 @@
+export const id = '004-tenant-id';
+/*
+ * Migration 004 — tenant scaffolding.
+ *
+ * Adds `tenant_id TEXT NOT NULL DEFAULT 'local'` to every data table.
+ * Existing rows are backfilled to 'local' by the default. New rows
+ * (v0.4+) MUST supply a tenant_id via the storage adapter — the default
+ * only exists so the existing-row backfill is automatic.
+ *
+ * Design notes (threat model §5.1 + §5.2):
+ *   - Not NULL. Never allow a row without a tenant.
+ *   - DEFAULT 'local'. Backfill is automatic; existing OSS installs
+ *     continue working with zero user action.
+ *   - Composite indexes put tenant_id first so per-tenant queries use
+ *     the leading index column. Existing single-column indexes stay
+ *     for non-tenant lookups (e.g., trace_id by primary key is still
+ *     fast).
+ *
+ * Forward compatibility: when Cloud goes live, the storage backend
+ * swaps from SQLite to Postgres. The tenant_id column + index
+ * conventions translate 1:1.
+ */
+export function up(db) {
+    db.exec(`
+    -- traces
+    ALTER TABLE traces ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'local';
+    CREATE INDEX IF NOT EXISTS idx_traces_tenant_timestamp ON traces(tenant_id, timestamp);
+    CREATE INDEX IF NOT EXISTS idx_traces_tenant_agent ON traces(tenant_id, agent_name);
+
+    -- spans
+    ALTER TABLE spans ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'local';
+    CREATE INDEX IF NOT EXISTS idx_spans_tenant_trace ON spans(tenant_id, trace_id);
+
+    -- eval_results
+    ALTER TABLE eval_results ADD COLUMN tenant_id TEXT NOT NULL DEFAULT 'local';
+    CREATE INDEX IF NOT EXISTS idx_eval_results_tenant_created ON eval_results(tenant_id, created_at);
+    CREATE INDEX IF NOT EXISTS idx_eval_results_tenant_trace ON eval_results(tenant_id, trace_id);
+    CREATE INDEX IF NOT EXISTS idx_eval_results_tenant_type ON eval_results(tenant_id, eval_type);
+  `);
+}

package/dist/storage/migrations/index.js

@@ -1,7 +1,8 @@
 import * as migration001 from './001-initial-schema.js';
 import * as migration002 from './002-eval-skip-fields.js';
 import * as migration003 from './003-eval-passed-index.js';
-const migrations = [migration001, migration002, migration003];
+import * as migration004 from './004-tenant-id.js';
+const migrations = [migration001, migration002, migration003, migration004];
 export function runMigrations(db) {
     db.exec(`
     CREATE TABLE IF NOT EXISTS _iris_migrations (

package/dist/storage/sqlite-adapter.d.ts

@@ -1,19 +1,20 @@
 import type { IStorageAdapter, DashboardSummary, TraceQueryOptions, TraceQueryResult, EvalStatsPeriod, EvalStats, EvalStatsTrendBucket, EvalStatsRuleBreakdown, EvalStatsFailure } from '../types/query.js';
 import type { Trace, Span } from '../types/trace.js';
 import type { EvalResult } from '../types/eval.js';
+import type { TenantId } from '../types/tenant.js';
 export declare class SqliteAdapter implements IStorageAdapter {
     private db;
     constructor(dbPath: string);
     initialize(): Promise<void>;
     close(): Promise<void>;
-    insertTrace(trace: Trace): Promise<void>;
-    getTrace(traceId: string): Promise<Trace | null>;
-    queryTraces(options: TraceQueryOptions): Promise<TraceQueryResult>;
-    insertSpan(span: Span): Promise<void>;
-    getSpansByTraceId(traceId: string): Promise<Span[]>;
-    insertEvalResult(result: EvalResult): Promise<void>;
-    getEvalsByTraceId(traceId: string): Promise<EvalResult[]>;
-    queryEvalResults(options: {
+    insertTrace(tenantId: TenantId, trace: Trace): Promise<void>;
+    getTrace(tenantId: TenantId, traceId: string): Promise<Trace | null>;
+    queryTraces(tenantId: TenantId, options: TraceQueryOptions): Promise<TraceQueryResult>;
+    insertSpan(tenantId: TenantId, span: Span): Promise<void>;
+    getSpansByTraceId(tenantId: TenantId, traceId: string): Promise<Span[]>;
+    insertEvalResult(tenantId: TenantId, result: EvalResult): Promise<void>;
+    getEvalsByTraceId(tenantId: TenantId, traceId: string): Promise<EvalResult[]>;
+    queryEvalResults(tenantId: TenantId, options: {
         eval_type?: string;
         passed?: boolean;
         since?: string;
@@ -24,14 +25,15 @@ export declare class SqliteAdapter implements IStorageAdapter {
         results: EvalResult[];
         total: number;
     }>;
-    getDashboardSummary(sinceHours?: number): Promise<DashboardSummary>;
+    getDashboardSummary(tenantId: TenantId, sinceHours?: number): Promise<DashboardSummary>;
     private periodToSince;
-    getEvalStats(period: EvalStatsPeriod): Promise<EvalStats>;
-    getEvalStatsTrend(period: EvalStatsPeriod): Promise<EvalStatsTrendBucket[]>;
-    getEvalStatsRules(period: EvalStatsPeriod): Promise<EvalStatsRuleBreakdown[]>;
-    getEvalStatsFailures(period: EvalStatsPeriod, limit: number): Promise<EvalStatsFailure[]>;
-    deleteTracesOlderThan(days: number): Promise<number>;
-    getDistinctValues(column: string): Promise<string[]>;
+    getEvalStats(tenantId: TenantId, period: EvalStatsPeriod): Promise<EvalStats>;
+    getEvalStatsTrend(tenantId: TenantId, period: EvalStatsPeriod): Promise<EvalStatsTrendBucket[]>;
+    getEvalStatsRules(tenantId: TenantId, period: EvalStatsPeriod): Promise<EvalStatsRuleBreakdown[]>;
+    getEvalStatsFailures(tenantId: TenantId, period: EvalStatsPeriod, limit: number): Promise<EvalStatsFailure[]>;
+    deleteTracesOlderThan(tenantId: TenantId, days: number): Promise<number>;
+    deleteTrace(tenantId: TenantId, traceId: string): Promise<boolean>;
+    getDistinctValues(tenantId: TenantId, column: string): Promise<string[]>;
     private rowToTrace;
     private rowToSpan;
     private rowToEvalResult;