@agent-native/core 0.71.0 → 0.72.1

package/dist/audit/store.js

@@ -0,0 +1,219 @@
+/**
+ * SQL persistence for the framework audit log.
+ *
+ * Follows the same raw-SQL, provider-agnostic pattern as observability/store.ts
+ * and usage/store.ts — framework tables use `getDbExec()` + `intType()` rather
+ * than Drizzle ORM (which is for template-level schemas). One append-only table
+ * `agent_audit_log`; reads are scoped to the caller's identity in SQL (no
+ * shares table — audit rows are never individually shared).
+ */
+import { getDbExec, intType, retryOnDdlRace } from "../db/client.js";
+let _initPromise;
+export async function ensureAuditTables() {
+    if (!_initPromise) {
+        _initPromise = (async () => {
+            const client = getDbExec();
+            await retryOnDdlRace(() => client.execute(`
+        CREATE TABLE IF NOT EXISTS agent_audit_log (
+          id TEXT PRIMARY KEY,
+          created_at ${intType()} NOT NULL,
+          action TEXT NOT NULL,
+          caller TEXT NOT NULL,
+          actor_kind TEXT NOT NULL,
+          actor_email TEXT,
+          org_id TEXT,
+          thread_id TEXT,
+          turn_id TEXT,
+          target_type TEXT,
+          target_id TEXT,
+          status TEXT NOT NULL DEFAULT 'success',
+          summary TEXT,
+          input TEXT,
+          error_code TEXT,
+          owner_email TEXT,
+          visibility TEXT NOT NULL DEFAULT 'private'
+        )
+      `));
+            const indexes = [
+                `CREATE INDEX IF NOT EXISTS idx_audit_owner ON agent_audit_log (owner_email, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_audit_org ON agent_audit_log (org_id, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_audit_target ON agent_audit_log (target_type, target_id, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_audit_turn ON agent_audit_log (turn_id)`,
+                `CREATE INDEX IF NOT EXISTS idx_audit_actor ON agent_audit_log (actor_email, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_audit_created ON agent_audit_log (created_at)`,
+            ];
+            for (const sql of indexes) {
+                try {
+                    await client.execute(sql);
+                }
+                catch {
+                    // Index creation is best-effort; a racing boot may have created it.
+                }
+            }
+        })().catch((err) => {
+            // Allow a later call to retry if the first init failed.
+            _initPromise = undefined;
+            throw err;
+        });
+    }
+    return _initPromise;
+}
+export async function insertAuditEvent(event) {
+    await ensureAuditTables();
+    const client = getDbExec();
+    await client.execute({
+        sql: `INSERT INTO agent_audit_log
+      (id, created_at, action, caller, actor_kind, actor_email, org_id,
+       thread_id, turn_id, target_type, target_id, status, summary, input,
+       error_code, owner_email, visibility)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        args: [
+            event.id,
+            event.createdAt,
+            event.action,
+            event.caller,
+            event.actorKind,
+            event.actorEmail,
+            event.orgId,
+            event.threadId,
+            event.turnId,
+            event.targetType,
+            event.targetId,
+            event.status,
+            event.summary,
+            event.input,
+            event.errorCode,
+            event.ownerEmail,
+            event.visibility,
+        ],
+    });
+}
+function mapRow(row) {
+    return {
+        id: String(row.id),
+        createdAt: Number(row.created_at),
+        action: String(row.action),
+        caller: String(row.caller),
+        actorKind: row.actor_kind,
+        actorEmail: row.actor_email ?? null,
+        orgId: row.org_id ?? null,
+        threadId: row.thread_id ?? null,
+        turnId: row.turn_id ?? null,
+        targetType: row.target_type ?? null,
+        targetId: row.target_id ?? null,
+        status: row.status,
+        summary: row.summary ?? null,
+        input: row.input ?? null,
+        errorCode: row.error_code ?? null,
+        ownerEmail: row.owner_email ?? null,
+        visibility: (row.visibility ?? "private"),
+    };
+}
+/**
+ * Build the access-scoping WHERE fragment + args. A caller sees audit rows they
+ * own, plus org-visible rows in their org. With no identity, nothing matches —
+ * the audit log never leaks cross-tenant. Mirrors the core ownership clause of
+ * `accessFilter` (minus shares, which audit rows don't have).
+ */
+function scopeClause(scope) {
+    const clauses = [];
+    const args = [];
+    if (scope.userEmail) {
+        if (scope.orgId) {
+            // Constrain the owner's rows to the active org — plus legacy/solo rows
+            // that predate org-scoping (org_id IS NULL) — mirroring sharing's
+            // `ownerScopeFilter`, so switching orgs doesn't surface another org's
+            // trail.
+            clauses.push("(owner_email = ? AND (org_id = ? OR org_id IS NULL))");
+            args.push(scope.userEmail, scope.orgId);
+        }
+        else {
+            clauses.push("owner_email = ?");
+            args.push(scope.userEmail);
+        }
+    }
+    if (scope.orgId) {
+        clauses.push("(visibility = 'org' AND org_id = ?)");
+        args.push(scope.orgId);
+    }
+    if (clauses.length === 0)
+        return { sql: "1=0", args };
+    return { sql: `(${clauses.join(" OR ")})`, args };
+}
+const MAX_LIMIT = 500;
+const DEFAULT_LIMIT = 100;
+// Columns returned by the list surface — deliberately EXCLUDES `input` so a
+// timeline query never streams every event's (redacted) request body in bulk.
+// Fetch the full payload one event at a time via `getAuditEventById`.
+const LIST_COLUMNS = "id, created_at, action, caller, actor_kind, actor_email, org_id, " +
+    "thread_id, turn_id, target_type, target_id, status, summary, " +
+    "error_code, owner_email, visibility";
+export async function queryAuditEvents(scope, filters = {}) {
+    await ensureAuditTables();
+    if (!scope.userEmail && !scope.orgId)
+        return [];
+    const client = getDbExec();
+    const scoped = scopeClause(scope);
+    const where = [scoped.sql];
+    const args = [...scoped.args];
+    const push = (clause, value) => {
+        where.push(clause);
+        args.push(value);
+    };
+    if (filters.targetType)
+        push("target_type = ?", filters.targetType);
+    if (filters.targetId)
+        push("target_id = ?", filters.targetId);
+    if (filters.actorKind)
+        push("actor_kind = ?", filters.actorKind);
+    if (filters.actorEmail)
+        push("actor_email = ?", filters.actorEmail);
+    if (filters.status)
+        push("status = ?", filters.status);
+    if (filters.threadId)
+        push("thread_id = ?", filters.threadId);
+    if (filters.turnId)
+        push("turn_id = ?", filters.turnId);
+    if (filters.action)
+        push("action = ?", filters.action);
+    if (typeof filters.sinceMs === "number") {
+        push("created_at >= ?", Math.floor(filters.sinceMs));
+    }
+    const limit = Math.min(Math.max(1, Math.floor(filters.limit ?? DEFAULT_LIMIT)), MAX_LIMIT);
+    const result = await client.execute({
+        sql: `SELECT ${LIST_COLUMNS} FROM agent_audit_log
+          WHERE ${where.join(" AND ")}
+          ORDER BY created_at DESC
+          LIMIT ?`,
+        args: [...args, limit],
+    });
+    return (result.rows ?? []).map(mapRow);
+}
+export async function getAuditEventById(id, scope) {
+    await ensureAuditTables();
+    if (!scope.userEmail && !scope.orgId)
+        return null;
+    const client = getDbExec();
+    const scoped = scopeClause(scope);
+    const result = await client.execute({
+        sql: `SELECT * FROM agent_audit_log WHERE id = ? AND ${scoped.sql} LIMIT 1`,
+        args: [id, ...scoped.args],
+    });
+    const row = (result.rows ?? [])[0];
+    return row ? mapRow(row) : null;
+}
+/** Purge audit rows older than `cutoffMs`. Returns the deleted row count. */
+export async function deleteOldAuditEvents(cutoffMs) {
+    await ensureAuditTables();
+    const client = getDbExec();
+    const result = await client.execute({
+        sql: `DELETE FROM agent_audit_log WHERE created_at < ?`,
+        args: [Math.floor(cutoffMs)],
+    });
+    return Number(result.rowsAffected ?? 0);
+}
+/** Test-only: reset the cached init promise so a fresh DB re-creates tables. */
+export function __resetAuditInitForTests() {
+    _initPromise = undefined;
+}
+//# sourceMappingURL=store.js.map

package/dist/audit/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/audit/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOrE,IAAI,YAAuC,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAE3B,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC;;;uBAGA,OAAO,EAAE;;;;;;;;;;;;;;;;;OAiBzB,CAAC,CACD,CAAC;YAEF,MAAM,OAAO,GAAG;gBACd,yFAAyF;gBACzF,kFAAkF;gBAClF,qGAAqG;gBACrG,wEAAwE;gBACxE,yFAAyF;gBACzF,8EAA8E;aAC/E,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,wDAAwD;YACxD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAiB;IACtD,MAAM,iBAAiB,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;;iEAIwD;QAC7D,IAAI,EAAE;YACJ,KAAK,CAAC,EAAE;YACR,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,UAAU;SACjB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ;IACtB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACnC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QACzB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAC/B,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACnC,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;QACxB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QACjC,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACnC,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAoB;KAC7D,CAAC;AACJ,CAAC;AAOD;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAqB;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,uEAAuE;YACvE,kEAAkE;YAClE,sEAAsE;YACtE,SAAS;YACT,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,YAAY,GAChB,mEAAmE;IACnE,+DAA+D;IAC/D,qCAAqC,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAqB,EACrB,UAA6B,EAAE;IAE/B,MAAM,iBAAiB,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,KAAU,EAAE,EAAE;QAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,OAAO,CAAC,UAAU;QAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,QAAQ;QAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,SAAS;QAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,UAAU;QAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ;QAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,EACvD,SAAS,CACV,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,YAAY;kBACb,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;;kBAEnB;QACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,KAAqB;IAErB,MAAM,iBAAiB,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,kDAAkD,MAAM,CAAC,GAAG,UAAU;QAC3E,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,iBAAiB,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,kDAAkD;QACvD,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;KAC7B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,wBAAwB;IACtC,YAAY,GAAG,SAAS,CAAC;AAC3B,CAAC","sourcesContent":["/**\n * SQL persistence for the framework audit log.\n *\n * Follows the same raw-SQL, provider-agnostic pattern as observability/store.ts\n * and usage/store.ts — framework tables use `getDbExec()` + `intType()` rather\n * than Drizzle ORM (which is for template-level schemas). One append-only table\n * `agent_audit_log`; reads are scoped to the caller's identity in SQL (no\n * shares table — audit rows are never individually shared).\n */\nimport { getDbExec, intType, retryOnDdlRace } from \"../db/client.js\";\nimport type {\n  AuditEvent,\n  AuditQueryFilters,\n  AuditVisibility,\n} from \"./types.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\nexport async function ensureAuditTables(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n\n      await retryOnDdlRace(() =>\n        client.execute(`\n        CREATE TABLE IF NOT EXISTS agent_audit_log (\n          id TEXT PRIMARY KEY,\n          created_at ${intType()} NOT NULL,\n          action TEXT NOT NULL,\n          caller TEXT NOT NULL,\n          actor_kind TEXT NOT NULL,\n          actor_email TEXT,\n          org_id TEXT,\n          thread_id TEXT,\n          turn_id TEXT,\n          target_type TEXT,\n          target_id TEXT,\n          status TEXT NOT NULL DEFAULT 'success',\n          summary TEXT,\n          input TEXT,\n          error_code TEXT,\n          owner_email TEXT,\n          visibility TEXT NOT NULL DEFAULT 'private'\n        )\n      `),\n      );\n\n      const indexes = [\n        `CREATE INDEX IF NOT EXISTS idx_audit_owner ON agent_audit_log (owner_email, created_at)`,\n        `CREATE INDEX IF NOT EXISTS idx_audit_org ON agent_audit_log (org_id, created_at)`,\n        `CREATE INDEX IF NOT EXISTS idx_audit_target ON agent_audit_log (target_type, target_id, created_at)`,\n        `CREATE INDEX IF NOT EXISTS idx_audit_turn ON agent_audit_log (turn_id)`,\n        `CREATE INDEX IF NOT EXISTS idx_audit_actor ON agent_audit_log (actor_email, created_at)`,\n        `CREATE INDEX IF NOT EXISTS idx_audit_created ON agent_audit_log (created_at)`,\n      ];\n      for (const sql of indexes) {\n        try {\n          await client.execute(sql);\n        } catch {\n          // Index creation is best-effort; a racing boot may have created it.\n        }\n      }\n    })().catch((err) => {\n      // Allow a later call to retry if the first init failed.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nexport async function insertAuditEvent(event: AuditEvent): Promise<void> {\n  await ensureAuditTables();\n  const client = getDbExec();\n  await client.execute({\n    sql: `INSERT INTO agent_audit_log\n      (id, created_at, action, caller, actor_kind, actor_email, org_id,\n       thread_id, turn_id, target_type, target_id, status, summary, input,\n       error_code, owner_email, visibility)\n      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      event.id,\n      event.createdAt,\n      event.action,\n      event.caller,\n      event.actorKind,\n      event.actorEmail,\n      event.orgId,\n      event.threadId,\n      event.turnId,\n      event.targetType,\n      event.targetId,\n      event.status,\n      event.summary,\n      event.input,\n      event.errorCode,\n      event.ownerEmail,\n      event.visibility,\n    ],\n  });\n}\n\nfunction mapRow(row: any): AuditEvent {\n  return {\n    id: String(row.id),\n    createdAt: Number(row.created_at),\n    action: String(row.action),\n    caller: String(row.caller),\n    actorKind: row.actor_kind,\n    actorEmail: row.actor_email ?? null,\n    orgId: row.org_id ?? null,\n    threadId: row.thread_id ?? null,\n    turnId: row.turn_id ?? null,\n    targetType: row.target_type ?? null,\n    targetId: row.target_id ?? null,\n    status: row.status,\n    summary: row.summary ?? null,\n    input: row.input ?? null,\n    errorCode: row.error_code ?? null,\n    ownerEmail: row.owner_email ?? null,\n    visibility: (row.visibility ?? \"private\") as AuditVisibility,\n  };\n}\n\nexport interface AuditReadScope {\n  userEmail?: string;\n  orgId?: string | null;\n}\n\n/**\n * Build the access-scoping WHERE fragment + args. A caller sees audit rows they\n * own, plus org-visible rows in their org. With no identity, nothing matches —\n * the audit log never leaks cross-tenant. Mirrors the core ownership clause of\n * `accessFilter` (minus shares, which audit rows don't have).\n */\nfunction scopeClause(scope: AuditReadScope): { sql: string; args: any[] } {\n  const clauses: string[] = [];\n  const args: any[] = [];\n  if (scope.userEmail) {\n    if (scope.orgId) {\n      // Constrain the owner's rows to the active org — plus legacy/solo rows\n      // that predate org-scoping (org_id IS NULL) — mirroring sharing's\n      // `ownerScopeFilter`, so switching orgs doesn't surface another org's\n      // trail.\n      clauses.push(\"(owner_email = ? AND (org_id = ? OR org_id IS NULL))\");\n      args.push(scope.userEmail, scope.orgId);\n    } else {\n      clauses.push(\"owner_email = ?\");\n      args.push(scope.userEmail);\n    }\n  }\n  if (scope.orgId) {\n    clauses.push(\"(visibility = 'org' AND org_id = ?)\");\n    args.push(scope.orgId);\n  }\n  if (clauses.length === 0) return { sql: \"1=0\", args };\n  return { sql: `(${clauses.join(\" OR \")})`, args };\n}\n\nconst MAX_LIMIT = 500;\nconst DEFAULT_LIMIT = 100;\n\n// Columns returned by the list surface — deliberately EXCLUDES `input` so a\n// timeline query never streams every event's (redacted) request body in bulk.\n// Fetch the full payload one event at a time via `getAuditEventById`.\nconst LIST_COLUMNS =\n  \"id, created_at, action, caller, actor_kind, actor_email, org_id, \" +\n  \"thread_id, turn_id, target_type, target_id, status, summary, \" +\n  \"error_code, owner_email, visibility\";\n\nexport async function queryAuditEvents(\n  scope: AuditReadScope,\n  filters: AuditQueryFilters = {},\n): Promise<AuditEvent[]> {\n  await ensureAuditTables();\n  if (!scope.userEmail && !scope.orgId) return [];\n  const client = getDbExec();\n\n  const scoped = scopeClause(scope);\n  const where: string[] = [scoped.sql];\n  const args: any[] = [...scoped.args];\n\n  const push = (clause: string, value: any) => {\n    where.push(clause);\n    args.push(value);\n  };\n  if (filters.targetType) push(\"target_type = ?\", filters.targetType);\n  if (filters.targetId) push(\"target_id = ?\", filters.targetId);\n  if (filters.actorKind) push(\"actor_kind = ?\", filters.actorKind);\n  if (filters.actorEmail) push(\"actor_email = ?\", filters.actorEmail);\n  if (filters.status) push(\"status = ?\", filters.status);\n  if (filters.threadId) push(\"thread_id = ?\", filters.threadId);\n  if (filters.turnId) push(\"turn_id = ?\", filters.turnId);\n  if (filters.action) push(\"action = ?\", filters.action);\n  if (typeof filters.sinceMs === \"number\") {\n    push(\"created_at >= ?\", Math.floor(filters.sinceMs));\n  }\n\n  const limit = Math.min(\n    Math.max(1, Math.floor(filters.limit ?? DEFAULT_LIMIT)),\n    MAX_LIMIT,\n  );\n\n  const result = await client.execute({\n    sql: `SELECT ${LIST_COLUMNS} FROM agent_audit_log\n          WHERE ${where.join(\" AND \")}\n          ORDER BY created_at DESC\n          LIMIT ?`,\n    args: [...args, limit],\n  });\n  return (result.rows ?? []).map(mapRow);\n}\n\nexport async function getAuditEventById(\n  id: string,\n  scope: AuditReadScope,\n): Promise<AuditEvent | null> {\n  await ensureAuditTables();\n  if (!scope.userEmail && !scope.orgId) return null;\n  const client = getDbExec();\n  const scoped = scopeClause(scope);\n  const result = await client.execute({\n    sql: `SELECT * FROM agent_audit_log WHERE id = ? AND ${scoped.sql} LIMIT 1`,\n    args: [id, ...scoped.args],\n  });\n  const row = (result.rows ?? [])[0];\n  return row ? mapRow(row) : null;\n}\n\n/** Purge audit rows older than `cutoffMs`. Returns the deleted row count. */\nexport async function deleteOldAuditEvents(cutoffMs: number): Promise<number> {\n  await ensureAuditTables();\n  const client = getDbExec();\n  const result = await client.execute({\n    sql: `DELETE FROM agent_audit_log WHERE created_at < ?`,\n    args: [Math.floor(cutoffMs)],\n  });\n  return Number(result.rowsAffected ?? 0);\n}\n\n/** Test-only: reset the cached init promise so a fresh DB re-creates tables. */\nexport function __resetAuditInitForTests(): void {\n  _initPromise = undefined;\n}\n"]}

package/dist/audit/types.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Types for the framework audit log.
+ *
+ * The audit log is a durable, complete, access-scoped, append-only record of
+ * *who mutated what app data, when, from where, and — when it was the agent —
+ * in which run*. It is deliberately distinct from observability (sampled
+ * agent-run telemetry) and tracking (fire-and-forget product analytics): audit
+ * rows are complete, locally queryable, and scoped to the data they describe.
+ *
+ * Capture happens automatically at the action-execution seam (`defineAction`):
+ * every mutating action records an audit event after it runs. Read-only (GET /
+ * `readOnly`) actions are skipped unless they opt in via `audit.onRead`.
+ */
+/** Outcome of an audited action call. */
+export type AuditStatus = "success" | "error" | "denied";
+/**
+ * Who performed the mutation.
+ * - `agent` — the in-app assistant / sub-agents / A2A (caller `"tool"`).
+ * - `human` — a person via the UI, HTTP, CLI, or an external MCP client.
+ * - `system` — no resolved identity (background jobs, schedules).
+ */
+export type AuditActorKind = "agent" | "human" | "system";
+export type AuditVisibility = "private" | "org" | "public";
+/**
+ * The resource an action mutated, plus the ownership used to scope who can
+ * read the resulting audit event. Returned by an action's `audit.target`.
+ *
+ * `ownerEmail` / `orgId` / `visibility` default to the actor's identity when
+ * omitted, which is correct for the common case where a user mutates their own
+ * data. Provide them explicitly when a user edits a resource owned by someone
+ * else so the *owner* sees the change in their audit trail.
+ */
+export interface AuditTarget {
+    type?: string;
+    id?: string;
+    ownerEmail?: string | null;
+    orgId?: string | null;
+    visibility?: AuditVisibility;
+}
+/** Metadata about the call, passed to `audit.target` / `audit.summary`. */
+export interface AuditCallMeta {
+    status: AuditStatus;
+    caller: string;
+    userEmail?: string;
+    orgId?: string | null;
+}
+/**
+ * Per-action audit configuration, set on `defineAction({ audit })`.
+ *
+ * Audit is **default-on for mutating actions** — you only need this object to
+ * *tune* capture (declare the target, customize the summary) or to opt a
+ * read-only action in / a noisy action out.
+ */
+export interface ActionAuditConfig {
+    /**
+     * Force audit on (`true`) or off (`false`). Overrides every default,
+     * including the read-only skip and the high-frequency denylist. When
+     * omitted, mutating actions are audited and read-only actions are not.
+     */
+    enabled?: boolean;
+    /**
+     * Audit this action even though it is read-only (GET). Use for sensitive
+     * reads worth recording — secret access, bulk export. Ignored when
+     * `enabled` is set explicitly.
+     */
+    onRead?: boolean;
+    /** Capture the (redacted) call arguments. Default `true`. */
+    recordInputs?: boolean;
+    /** Resolve the mutated resource + its ownership for scoped reads. */
+    target?: (args: any, result: unknown, meta: AuditCallMeta) => AuditTarget | null | undefined;
+    /** Build a short human-readable summary line for the event. */
+    summary?: (args: any, result: unknown, meta: AuditCallMeta) => string;
+}
+/** A persisted audit event. */
+export interface AuditEvent {
+    id: string;
+    createdAt: number;
+    /** Action name (the registry key, e.g. `delete-recording`). */
+    action: string;
+    /** Invocation surface: tool | frontend | http | cli | mcp | a2a. */
+    caller: string;
+    actorKind: AuditActorKind;
+    /** Human on whose behalf it ran — populated even for agent calls. */
+    actorEmail: string | null;
+    orgId: string | null;
+    /** Agent conversation thread, when caller is the agent loop. */
+    threadId: string | null;
+    /** Agent turn that produced the mutation — the unit of one agent response. */
+    turnId: string | null;
+    targetType: string | null;
+    targetId: string | null;
+    status: AuditStatus;
+    summary: string | null;
+    /** Redacted JSON of the call arguments, or null. */
+    input: string | null;
+    errorCode: string | null;
+    /** Denormalized owner used to scope reads (defaults to the actor). */
+    ownerEmail: string | null;
+    visibility: AuditVisibility;
+}
+/** Filters for `queryAuditEvents`. */
+export interface AuditQueryFilters {
+    targetType?: string;
+    targetId?: string;
+    actorKind?: AuditActorKind;
+    actorEmail?: string;
+    status?: AuditStatus;
+    threadId?: string;
+    turnId?: string;
+    action?: string;
+    sinceMs?: number;
+    limit?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,yCAAyC;AACzC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qEAAqE;IACrE,MAAM,CAAC,EAAE,CACP,IAAI,EAAE,GAAG,EACT,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,aAAa,KAChB,WAAW,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,KAAK,MAAM,CAAC;CACvE;AAED,+BAA+B;AAC/B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,cAAc,CAAC;IAC1B,qEAAqE;IACrE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oDAAoD;IACpD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sEAAsE;IACtE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,sCAAsC;AACtC,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/audit/types.js

@@ -0,0 +1,15 @@
+/**
+ * Types for the framework audit log.
+ *
+ * The audit log is a durable, complete, access-scoped, append-only record of
+ * *who mutated what app data, when, from where, and — when it was the agent —
+ * in which run*. It is deliberately distinct from observability (sampled
+ * agent-run telemetry) and tracking (fire-and-forget product analytics): audit
+ * rows are complete, locally queryable, and scoped to the data they describe.
+ *
+ * Capture happens automatically at the action-execution seam (`defineAction`):
+ * every mutating action records an audit event after it runs. Read-only (GET /
+ * `readOnly`) actions are skipped unless they opt in via `audit.onRead`.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG","sourcesContent":["/**\n * Types for the framework audit log.\n *\n * The audit log is a durable, complete, access-scoped, append-only record of\n * *who mutated what app data, when, from where, and — when it was the agent —\n * in which run*. It is deliberately distinct from observability (sampled\n * agent-run telemetry) and tracking (fire-and-forget product analytics): audit\n * rows are complete, locally queryable, and scoped to the data they describe.\n *\n * Capture happens automatically at the action-execution seam (`defineAction`):\n * every mutating action records an audit event after it runs. Read-only (GET /\n * `readOnly`) actions are skipped unless they opt in via `audit.onRead`.\n */\n\n/** Outcome of an audited action call. */\nexport type AuditStatus = \"success\" | \"error\" | \"denied\";\n\n/**\n * Who performed the mutation.\n * - `agent` — the in-app assistant / sub-agents / A2A (caller `\"tool\"`).\n * - `human` — a person via the UI, HTTP, CLI, or an external MCP client.\n * - `system` — no resolved identity (background jobs, schedules).\n */\nexport type AuditActorKind = \"agent\" | \"human\" | \"system\";\n\nexport type AuditVisibility = \"private\" | \"org\" | \"public\";\n\n/**\n * The resource an action mutated, plus the ownership used to scope who can\n * read the resulting audit event. Returned by an action's `audit.target`.\n *\n * `ownerEmail` / `orgId` / `visibility` default to the actor's identity when\n * omitted, which is correct for the common case where a user mutates their own\n * data. Provide them explicitly when a user edits a resource owned by someone\n * else so the *owner* sees the change in their audit trail.\n */\nexport interface AuditTarget {\n  type?: string;\n  id?: string;\n  ownerEmail?: string | null;\n  orgId?: string | null;\n  visibility?: AuditVisibility;\n}\n\n/** Metadata about the call, passed to `audit.target` / `audit.summary`. */\nexport interface AuditCallMeta {\n  status: AuditStatus;\n  caller: string;\n  userEmail?: string;\n  orgId?: string | null;\n}\n\n/**\n * Per-action audit configuration, set on `defineAction({ audit })`.\n *\n * Audit is **default-on for mutating actions** — you only need this object to\n * *tune* capture (declare the target, customize the summary) or to opt a\n * read-only action in / a noisy action out.\n */\nexport interface ActionAuditConfig {\n  /**\n   * Force audit on (`true`) or off (`false`). Overrides every default,\n   * including the read-only skip and the high-frequency denylist. When\n   * omitted, mutating actions are audited and read-only actions are not.\n   */\n  enabled?: boolean;\n  /**\n   * Audit this action even though it is read-only (GET). Use for sensitive\n   * reads worth recording — secret access, bulk export. Ignored when\n   * `enabled` is set explicitly.\n   */\n  onRead?: boolean;\n  /** Capture the (redacted) call arguments. Default `true`. */\n  recordInputs?: boolean;\n  /** Resolve the mutated resource + its ownership for scoped reads. */\n  target?: (\n    args: any,\n    result: unknown,\n    meta: AuditCallMeta,\n  ) => AuditTarget | null | undefined;\n  /** Build a short human-readable summary line for the event. */\n  summary?: (args: any, result: unknown, meta: AuditCallMeta) => string;\n}\n\n/** A persisted audit event. */\nexport interface AuditEvent {\n  id: string;\n  createdAt: number;\n  /** Action name (the registry key, e.g. `delete-recording`). */\n  action: string;\n  /** Invocation surface: tool | frontend | http | cli | mcp | a2a. */\n  caller: string;\n  actorKind: AuditActorKind;\n  /** Human on whose behalf it ran — populated even for agent calls. */\n  actorEmail: string | null;\n  orgId: string | null;\n  /** Agent conversation thread, when caller is the agent loop. */\n  threadId: string | null;\n  /** Agent turn that produced the mutation — the unit of one agent response. */\n  turnId: string | null;\n  targetType: string | null;\n  targetId: string | null;\n  status: AuditStatus;\n  summary: string | null;\n  /** Redacted JSON of the call arguments, or null. */\n  input: string | null;\n  errorCode: string | null;\n  /** Denormalized owner used to scope reads (defaults to the actor). */\n  ownerEmail: string | null;\n  visibility: AuditVisibility;\n}\n\n/** Filters for `queryAuditEvents`. */\nexport interface AuditQueryFilters {\n  targetType?: string;\n  targetId?: string;\n  actorKind?: AuditActorKind;\n  actorEmail?: string;\n  status?: AuditStatus;\n  threadId?: string;\n  turnId?: string;\n  action?: string;\n  sinceMs?: number;\n  limit?: number;\n}\n"]}

package/dist/chat-threads/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AA6BA,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAeZ;AAyGD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AAoGD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CAmCrB;AAYD,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAStE;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAAE,GAC/D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkF5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAkB,GAAG,MAAW,EACzC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8B9B;AAMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GACrD,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAyB9B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,MAAM,WAAW,uBAAuB;IACtC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmEf;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,aAAa,EAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAWD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AA2CD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAOtC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAmCrC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAgCtC;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkB5B;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/D"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/chat-threads/store.ts"],"names":[],"mappings":"AA8BA,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAeZ;AAkHD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AAoGD,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,GACrE,OAAO,CAAC,UAAU,CAAC,CAmCrB;AAYD,wBAAsB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAStE;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAAE,GAC/D,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkF5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,qEAAqE;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,kBAAkB,GAAG,MAAW,EACzC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8B9B;AAMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GACrD,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAyB9B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,MAAM,WAAW,uBAAuB;IACtC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAmEf;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,aAAa,EAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAsBf;AAWD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AA2CD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAOtC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAmCrC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAgCtC;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkB5B;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/D"}

package/dist/chat-threads/store.js

@@ -1,5 +1,6 @@
 import crypto from "node:crypto";
 import { getDbExec, intType } from "../db/client.js";
+import { widenIntColumnsToBigInt } from "../db/widen-columns.js";
 import { mergeThreadDataForClientSave, normalizeThreadRepository, normalizeThreadTitle, } from "../agent/thread-data-builder.js";
 import { emitChatThreadChange } from "./emitter.js";
 let _initPromise;
@@ -75,6 +76,15 @@ async function ensureTable() {
                     // Column already exists.
                 }
             }
+            // Widen millisecond-timestamp columns that older deployments created as
+            // 32-bit `INTEGER`; on Postgres the `Date.now()` written on every turn
+            // overflows int4. No-op once widened / on fresh BIGINT databases.
+            await widenIntColumnsToBigInt("chat_threads", [
+                "created_at",
+                "updated_at",
+                "pinned_at",
+                "archived_at",
+            ]);
             // Indexes for the hot read paths. Both the sidebar list and the
             // scoped/per-resource list filter on owner_email (and optionally
             // scope) and sort by updated_at. Keep these dialect-agnostic (no