@agent-native/core 0.90.1 → 0.90.3

package/dist/history/actions/list-resource-history.js

@@ -0,0 +1,45 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { queryAuditEvents } from "../../audit/store.js";
+import { assertVersionedResourceAccess } from "../registry.js";
+import { queryResourceVersions } from "../store.js";
+const schema = z.object({
+    resourceType: z.string().min(1),
+    resourceId: z.string().min(1),
+    limit: z.number().int().positive().max(200).optional(),
+});
+export default defineAction({
+    description: "List versions and audit events for a reusable resource.",
+    schema,
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        await assertVersionedResourceAccess(args.resourceType, args.resourceId, actionCtx, "viewer");
+        const scope = {
+            userEmail: actionCtx?.userEmail ?? null,
+            orgId: actionCtx?.orgId ?? null,
+        };
+        const auditScope = {
+            userEmail: actionCtx?.userEmail ?? undefined,
+            orgId: actionCtx?.orgId ?? undefined,
+        };
+        const [versions, auditEvents] = await Promise.all([
+            queryResourceVersions({
+                resourceType: args.resourceType,
+                resourceId: args.resourceId,
+                scope,
+                bypassScope: true,
+                limit: args.limit,
+            }),
+            queryAuditEvents(auditScope, {
+                targetType: args.resourceType,
+                targetId: args.resourceId,
+                limit: args.limit ?? 50,
+            }),
+        ]);
+        return { versions, auditEvents };
+    },
+});
+//# sourceMappingURL=list-resource-history.js.map

package/dist/history/actions/list-resource-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-history.js","sourceRoot":"","sources":["../../../src/history/actions/list-resource-history.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yDAAyD;IACtE,MAAM;IACN,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,6BAA6B,CACjC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS;YAC5C,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,SAAS;SACrC,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,qBAAqB,CAAC;gBACpB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK;gBACL,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC;YACF,gBAAgB,CAAC,UAAU,EAAE;gBAC3B,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,QAAQ,EAAE,IAAI,CAAC,UAAU;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;aACxB,CAAC;SACH,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { queryAuditEvents } from \"../../audit/store.js\";\nimport { assertVersionedResourceAccess } from \"../registry.js\";\nimport { queryResourceVersions } from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z.object({\n  resourceType: z.string().min(1),\n  resourceId: z.string().min(1),\n  limit: z.number().int().positive().max(200).optional(),\n});\n\nexport default defineAction({\n  description: \"List versions and audit events for a reusable resource.\",\n  schema,\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    await assertVersionedResourceAccess(\n      args.resourceType,\n      args.resourceId,\n      actionCtx,\n      \"viewer\",\n    );\n    const scope = {\n      userEmail: actionCtx?.userEmail ?? null,\n      orgId: actionCtx?.orgId ?? null,\n    };\n    const auditScope = {\n      userEmail: actionCtx?.userEmail ?? undefined,\n      orgId: actionCtx?.orgId ?? undefined,\n    };\n    const [versions, auditEvents] = await Promise.all([\n      queryResourceVersions({\n        resourceType: args.resourceType,\n        resourceId: args.resourceId,\n        scope,\n        bypassScope: true,\n        limit: args.limit,\n      }),\n      queryAuditEvents(auditScope, {\n        targetType: args.resourceType,\n        targetId: args.resourceId,\n        limit: args.limit ?? 50,\n      }),\n    ]);\n    return { versions, auditEvents };\n  },\n});\n"]}

package/dist/history/actions/list-resource-versions.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    resourceType: string;
+    resourceId: string;
+    limit?: number;
+    offset?: number;
+}, {
+    versions: import("../types.js").ResourceVersion[];
+}>;
+export default _default;
+//# sourceMappingURL=list-resource-versions.d.ts.map

package/dist/history/actions/list-resource-versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-versions.d.ts","sourceRoot":"","sources":["../../../src/history/actions/list-resource-versions.ts"],"names":[],"mappings":""}

package/dist/history/actions/list-resource-versions.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { assertVersionedResourceAccess } from "../registry.js";
+import { queryResourceVersions } from "../store.js";
+const schema = z.object({
+    resourceType: z.string().min(1),
+    resourceId: z.string().min(1),
+    limit: z.number().int().positive().max(200).optional(),
+    offset: z.number().int().nonnegative().optional(),
+});
+export default defineAction({
+    description: "List version-history snapshots for a reusable resource.",
+    schema,
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        await assertVersionedResourceAccess(args.resourceType, args.resourceId, actionCtx, "viewer");
+        return {
+            versions: await queryResourceVersions({
+                resourceType: args.resourceType,
+                resourceId: args.resourceId,
+                scope: {
+                    userEmail: actionCtx?.userEmail ?? null,
+                    orgId: actionCtx?.orgId ?? null,
+                },
+                bypassScope: true,
+                limit: args.limit,
+                offset: args.offset,
+            }),
+        };
+    },
+});
+//# sourceMappingURL=list-resource-versions.js.map

package/dist/history/actions/list-resource-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-versions.js","sourceRoot":"","sources":["../../../src/history/actions/list-resource-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yDAAyD;IACtE,MAAM;IACN,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,6BAA6B,CACjC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,MAAM,qBAAqB,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE;oBACL,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;oBACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;iBAChC;gBACD,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;SACH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { assertVersionedResourceAccess } from \"../registry.js\";\nimport { queryResourceVersions } from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z.object({\n  resourceType: z.string().min(1),\n  resourceId: z.string().min(1),\n  limit: z.number().int().positive().max(200).optional(),\n  offset: z.number().int().nonnegative().optional(),\n});\n\nexport default defineAction({\n  description: \"List version-history snapshots for a reusable resource.\",\n  schema,\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    await assertVersionedResourceAccess(\n      args.resourceType,\n      args.resourceId,\n      actionCtx,\n      \"viewer\",\n    );\n    return {\n      versions: await queryResourceVersions({\n        resourceType: args.resourceType,\n        resourceId: args.resourceId,\n        scope: {\n          userEmail: actionCtx?.userEmail ?? null,\n          orgId: actionCtx?.orgId ?? null,\n        },\n        bypassScope: true,\n        limit: args.limit,\n        offset: args.offset,\n      }),\n    };\n  },\n});\n"]}

package/dist/history/actions/restore-resource-version.d.ts

@@ -0,0 +1,11 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    id?: string;
+    resourceType?: string;
+    resourceId?: string;
+    versionNumber?: number;
+}, {
+    version: import("../types.js").ResourceVersion;
+    result: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=restore-resource-version.d.ts.map

package/dist/history/actions/restore-resource-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-resource-version.d.ts","sourceRoot":"","sources":["../../../src/history/actions/restore-resource-version.ts"],"names":[],"mappings":""}

package/dist/history/actions/restore-resource-version.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { assertVersionedResourceAccess, getVersionedResource, } from "../registry.js";
+import { getResourceVersionById, getResourceVersionByNumber, } from "../store.js";
+const schema = z
+    .object({
+    id: z.string().optional(),
+    resourceType: z.string().min(1).optional(),
+    resourceId: z.string().min(1).optional(),
+    versionNumber: z.number().int().positive().optional(),
+})
+    .refine((value) => value.id ||
+    (value.resourceType && value.resourceId && value.versionNumber), {
+    message: "Provide either id or resourceType, resourceId, and versionNumber",
+});
+export default defineAction({
+    description: "Restore a resource from a reusable version-history snapshot.",
+    schema,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        const scope = {
+            userEmail: actionCtx?.userEmail ?? null,
+            orgId: actionCtx?.orgId ?? null,
+        };
+        const version = args.id
+            ? await getResourceVersionById(args.id, scope, { bypassScope: true })
+            : await getResourceVersionByNumber(args.resourceType, args.resourceId, args.versionNumber, scope, { bypassScope: true });
+        if (!version) {
+            throw new Error("Resource version not found");
+        }
+        const access = await assertVersionedResourceAccess(version.resourceType, version.resourceId, actionCtx, "editor");
+        const registration = getVersionedResource(version.resourceType);
+        if (!registration?.restoreSnapshot) {
+            throw new Error(`${version.resourceType} has no restoreSnapshot history handler registered`);
+        }
+        const result = await registration.restoreSnapshot({
+            resourceType: version.resourceType,
+            resourceId: version.resourceId,
+            ctx: actionCtx,
+            access,
+            version,
+            snapshot: version.snapshot,
+        });
+        return { version, result };
+    },
+    audit: {
+        target: (_args, result) => {
+            const restored = result;
+            return {
+                type: restored.version.resourceType,
+                id: restored.version.resourceId,
+                ownerEmail: restored.version.ownerEmail,
+                orgId: restored.version.orgId,
+                visibility: restored.version.visibility,
+            };
+        },
+    },
+});
+//# sourceMappingURL=restore-resource-version.js.map

package/dist/history/actions/restore-resource-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-resource-version.js","sourceRoot":"","sources":["../../../src/history/actions/restore-resource-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,GAAG,CAAC;KACb,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,EAAE;IACR,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa,CAAC,EACjE;IACE,OAAO,EACL,kEAAkE;CACrE,CACF,CAAC;AAEJ,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,8DAA8D;IAC3E,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;YACrB,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACrE,CAAC,CAAC,MAAM,0BAA0B,CAC9B,IAAI,CAAC,YAAa,EAClB,IAAI,CAAC,UAAW,EAChB,IAAI,CAAC,aAAc,EACnB,KAAK,EACL,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;QACN,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,YAAY,oDAAoD,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;YAChD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,EAAE,SAAS;YACd,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,MAQhB,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY;gBACnC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;gBAC/B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;gBACvC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;gBAC7B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;aACxC,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  assertVersionedResourceAccess,\n  getVersionedResource,\n} from \"../registry.js\";\nimport {\n  getResourceVersionById,\n  getResourceVersionByNumber,\n} from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z\n  .object({\n    id: z.string().optional(),\n    resourceType: z.string().min(1).optional(),\n    resourceId: z.string().min(1).optional(),\n    versionNumber: z.number().int().positive().optional(),\n  })\n  .refine(\n    (value) =>\n      value.id ||\n      (value.resourceType && value.resourceId && value.versionNumber),\n    {\n      message:\n        \"Provide either id or resourceType, resourceId, and versionNumber\",\n    },\n  );\n\nexport default defineAction({\n  description: \"Restore a resource from a reusable version-history snapshot.\",\n  schema,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    const scope = {\n      userEmail: actionCtx?.userEmail ?? null,\n      orgId: actionCtx?.orgId ?? null,\n    };\n    const version = args.id\n      ? await getResourceVersionById(args.id, scope, { bypassScope: true })\n      : await getResourceVersionByNumber(\n          args.resourceType!,\n          args.resourceId!,\n          args.versionNumber!,\n          scope,\n          { bypassScope: true },\n        );\n    if (!version) {\n      throw new Error(\"Resource version not found\");\n    }\n\n    const access = await assertVersionedResourceAccess(\n      version.resourceType,\n      version.resourceId,\n      actionCtx,\n      \"editor\",\n    );\n    const registration = getVersionedResource(version.resourceType);\n    if (!registration?.restoreSnapshot) {\n      throw new Error(\n        `${version.resourceType} has no restoreSnapshot history handler registered`,\n      );\n    }\n\n    const result = await registration.restoreSnapshot({\n      resourceType: version.resourceType,\n      resourceId: version.resourceId,\n      ctx: actionCtx,\n      access,\n      version,\n      snapshot: version.snapshot,\n    });\n    return { version, result };\n  },\n  audit: {\n    target: (_args, result) => {\n      const restored = result as {\n        version: {\n          resourceType: string;\n          resourceId: string;\n          ownerEmail?: string | null;\n          orgId?: string | null;\n          visibility?: \"private\" | \"org\" | \"public\";\n        };\n      };\n      return {\n        type: restored.version.resourceType,\n        id: restored.version.resourceId,\n        ownerEmail: restored.version.ownerEmail,\n        orgId: restored.version.orgId,\n        visibility: restored.version.visibility,\n      };\n    },\n  },\n});\n"]}

package/dist/history/index.d.ts

@@ -0,0 +1,4 @@
+export type { HistoryActorKind, HistoryResourceRole, ResourceHistoryScope, ResourceVersion, VersionedResourceAccess, VersionedResourceContext, VersionedResourceRegistration, VersionedResourceRestoreContext, VersionedResourceSnapshotContext, } from "./types.js";
+export { __resetVersionedResourcesForTests, assertVersionedResourceAccess, getVersionedResource, listVersionedResources, registerVersionedResource, resolveVersionedResourceAccess, } from "./registry.js";
+export { __resetHistoryInitForTests, ensureResourceVersionsTable, getResourceVersionById, getResourceVersionByNumber, insertResourceVersion, queryResourceVersions, } from "./store.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/history/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/history/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC7B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/history/index.js

@@ -0,0 +1,3 @@
+export { __resetVersionedResourcesForTests, assertVersionedResourceAccess, getVersionedResource, listVersionedResources, registerVersionedResource, resolveVersionedResourceAccess, } from "./registry.js";
+export { __resetHistoryInitForTests, ensureResourceVersionsTable, getResourceVersionById, getResourceVersionByNumber, insertResourceVersion, queryResourceVersions, } from "./store.js";
+//# sourceMappingURL=index.js.map

package/dist/history/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/history/index.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAC","sourcesContent":["export type {\n  HistoryActorKind,\n  HistoryResourceRole,\n  ResourceHistoryScope,\n  ResourceVersion,\n  VersionedResourceAccess,\n  VersionedResourceContext,\n  VersionedResourceRegistration,\n  VersionedResourceRestoreContext,\n  VersionedResourceSnapshotContext,\n} from \"./types.js\";\nexport {\n  __resetVersionedResourcesForTests,\n  assertVersionedResourceAccess,\n  getVersionedResource,\n  listVersionedResources,\n  registerVersionedResource,\n  resolveVersionedResourceAccess,\n} from \"./registry.js\";\nexport {\n  __resetHistoryInitForTests,\n  ensureResourceVersionsTable,\n  getResourceVersionById,\n  getResourceVersionByNumber,\n  insertResourceVersion,\n  queryResourceVersions,\n} from \"./store.js\";\n"]}

package/dist/history/registry.d.ts

@@ -0,0 +1,10 @@
+import { type Visibility } from "../sharing/schema.js";
+import type { HistoryResourceRole, VersionedResourceAccess, VersionedResourceContext, VersionedResourceRegistration } from "./types.js";
+export declare function registerVersionedResource(registration: VersionedResourceRegistration): void;
+export declare function getVersionedResource(type: string): VersionedResourceRegistration | undefined;
+export declare function listVersionedResources(): VersionedResourceRegistration[];
+export declare function resolveVersionedResourceAccess(resourceType: string, resourceId: string, ctx?: VersionedResourceContext): Promise<VersionedResourceAccess | null>;
+export declare function assertVersionedResourceAccess(resourceType: string, resourceId: string, ctx: VersionedResourceContext | undefined, minimumRole: HistoryResourceRole): Promise<VersionedResourceAccess>;
+export declare function normalizeHistoryVisibility(visibility: Visibility | null | undefined): Visibility;
+export declare function __resetVersionedResourcesForTests(): void;
+//# sourceMappingURL=registry.d.ts.map

package/dist/history/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/history/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,YAAY,CAAC;AAIpB,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,6BAA6B,GAC1C,IAAI,CAON;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,GACX,6BAA6B,GAAG,SAAS,CAE3C;AAED,wBAAgB,sBAAsB,IAAI,6BAA6B,EAAE,CAExE;AAED,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,wBAAwB,GAC7B,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA8BzC;AAED,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,wBAAwB,GAAG,SAAS,EACzC,WAAW,EAAE,mBAAmB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAYlC;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACxC,UAAU,CAIZ;AAED,wBAAgB,iCAAiC,IAAI,IAAI,CAExD"}

package/dist/history/registry.js

@@ -0,0 +1,61 @@
+import { ForbiddenError, resolveAccess } from "../sharing/access.js";
+import { getShareableResource } from "../sharing/registry.js";
+import { roleSatisfies } from "../sharing/schema.js";
+const registrations = new Map();
+export function registerVersionedResource(registration) {
+    if (!registration.type.trim()) {
+        throw new Error("registerVersionedResource requires a non-empty resource type");
+    }
+    registrations.set(registration.type, registration);
+}
+export function getVersionedResource(type) {
+    return registrations.get(type);
+}
+export function listVersionedResources() {
+    return Array.from(registrations.values());
+}
+export async function resolveVersionedResourceAccess(resourceType, resourceId, ctx) {
+    const registration = getVersionedResource(resourceType);
+    if (registration?.resolveAccess) {
+        return registration.resolveAccess(resourceId, ctx);
+    }
+    if (getShareableResource(resourceType)) {
+        const access = await resolveAccess(resourceType, resourceId);
+        if (!access) {
+            return null;
+        }
+        return {
+            role: access.role,
+            ownerEmail: access.resource.ownerEmail ?? null,
+            orgId: access.resource.orgId ?? null,
+            visibility: access.resource.visibility,
+            resource: access.resource,
+        };
+    }
+    const userEmail = ctx?.userEmail ?? null;
+    if (!userEmail) {
+        return null;
+    }
+    return {
+        role: "owner",
+        ownerEmail: userEmail,
+        orgId: ctx?.orgId ?? null,
+        visibility: "private",
+    };
+}
+export async function assertVersionedResourceAccess(resourceType, resourceId, ctx, minimumRole) {
+    const access = await resolveVersionedResourceAccess(resourceType, resourceId, ctx);
+    if (!access || !roleSatisfies(access.role, minimumRole)) {
+        throw new ForbiddenError(`Not allowed to access ${resourceType}:${resourceId}`);
+    }
+    return access;
+}
+export function normalizeHistoryVisibility(visibility) {
+    return visibility === "org" || visibility === "public"
+        ? visibility
+        : "private";
+}
+export function __resetVersionedResourcesForTests() {
+    registrations.clear();
+}
+//# sourceMappingURL=registry.js.map

package/dist/history/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/history/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAmB,MAAM,sBAAsB,CAAC;AAQtE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAyC,CAAC;AAEvE,MAAM,UAAU,yBAAyB,CACvC,YAA2C;IAE3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY;IAEZ,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,YAAoB,EACpB,UAAkB,EAClB,GAA8B;IAE9B,MAAM,YAAY,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;QAChC,OAAO,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAA2B;YACxC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;YAC9C,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI;YACpC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;QACzB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAAoB,EACpB,UAAkB,EAClB,GAAyC,EACzC,WAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,YAAY,EACZ,UAAU,EACV,GAAG,CACJ,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,cAAc,CACtB,yBAAyB,YAAY,IAAI,UAAU,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAyC;IAEzC,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,QAAQ;QACpD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC","sourcesContent":["import { ForbiddenError, resolveAccess } from \"../sharing/access.js\";\nimport { getShareableResource } from \"../sharing/registry.js\";\nimport { roleSatisfies, type Visibility } from \"../sharing/schema.js\";\nimport type {\n  HistoryResourceRole,\n  VersionedResourceAccess,\n  VersionedResourceContext,\n  VersionedResourceRegistration,\n} from \"./types.js\";\n\nconst registrations = new Map<string, VersionedResourceRegistration>();\n\nexport function registerVersionedResource(\n  registration: VersionedResourceRegistration,\n): void {\n  if (!registration.type.trim()) {\n    throw new Error(\n      \"registerVersionedResource requires a non-empty resource type\",\n    );\n  }\n  registrations.set(registration.type, registration);\n}\n\nexport function getVersionedResource(\n  type: string,\n): VersionedResourceRegistration | undefined {\n  return registrations.get(type);\n}\n\nexport function listVersionedResources(): VersionedResourceRegistration[] {\n  return Array.from(registrations.values());\n}\n\nexport async function resolveVersionedResourceAccess(\n  resourceType: string,\n  resourceId: string,\n  ctx?: VersionedResourceContext,\n): Promise<VersionedResourceAccess | null> {\n  const registration = getVersionedResource(resourceType);\n  if (registration?.resolveAccess) {\n    return registration.resolveAccess(resourceId, ctx);\n  }\n\n  if (getShareableResource(resourceType)) {\n    const access = await resolveAccess(resourceType, resourceId);\n    if (!access) {\n      return null;\n    }\n    return {\n      role: access.role as HistoryResourceRole,\n      ownerEmail: access.resource.ownerEmail ?? null,\n      orgId: access.resource.orgId ?? null,\n      visibility: access.resource.visibility,\n      resource: access.resource,\n    };\n  }\n\n  const userEmail = ctx?.userEmail ?? null;\n  if (!userEmail) {\n    return null;\n  }\n  return {\n    role: \"owner\",\n    ownerEmail: userEmail,\n    orgId: ctx?.orgId ?? null,\n    visibility: \"private\",\n  };\n}\n\nexport async function assertVersionedResourceAccess(\n  resourceType: string,\n  resourceId: string,\n  ctx: VersionedResourceContext | undefined,\n  minimumRole: HistoryResourceRole,\n): Promise<VersionedResourceAccess> {\n  const access = await resolveVersionedResourceAccess(\n    resourceType,\n    resourceId,\n    ctx,\n  );\n  if (!access || !roleSatisfies(access.role, minimumRole)) {\n    throw new ForbiddenError(\n      `Not allowed to access ${resourceType}:${resourceId}`,\n    );\n  }\n  return access;\n}\n\nexport function normalizeHistoryVisibility(\n  visibility: Visibility | null | undefined,\n): Visibility {\n  return visibility === \"org\" || visibility === \"public\"\n    ? visibility\n    : \"private\";\n}\n\nexport function __resetVersionedResourcesForTests(): void {\n  registrations.clear();\n}\n"]}

package/dist/history/store.d.ts

@@ -0,0 +1,34 @@
+import type { Visibility } from "../sharing/schema.js";
+import type { HistoryActorKind, ResourceHistoryScope, ResourceVersion } from "./types.js";
+export interface InsertResourceVersionInput {
+    resourceType: string;
+    resourceId: string;
+    createdBy?: string | null;
+    actorKind?: HistoryActorKind;
+    ownerEmail?: string | null;
+    orgId?: string | null;
+    visibility?: Visibility | null;
+    title?: string | null;
+    summary?: string | null;
+    snapshot: unknown;
+    metadata?: Record<string, unknown> | null;
+}
+export interface QueryResourceVersionsInput {
+    resourceType: string;
+    resourceId: string;
+    scope: ResourceHistoryScope;
+    bypassScope?: boolean;
+    limit?: number;
+    offset?: number;
+}
+export declare function ensureResourceVersionsTable(): Promise<void>;
+export declare function insertResourceVersion(input: InsertResourceVersionInput): Promise<ResourceVersion>;
+export declare function queryResourceVersions(input: QueryResourceVersionsInput): Promise<ResourceVersion[]>;
+export declare function getResourceVersionById(id: string, scope: ResourceHistoryScope, options?: {
+    bypassScope?: boolean;
+}): Promise<ResourceVersion | null>;
+export declare function getResourceVersionByNumber(resourceType: string, resourceId: string, versionNumber: number, scope: ResourceHistoryScope, options?: {
+    bypassScope?: boolean;
+}): Promise<ResourceVersion | null>;
+export declare function __resetHistoryInitForTests(): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/history/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/history/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EAChB,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAkDjE;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,eAAe,CAAC,CAwE1B;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,eAAe,EAAE,CAAC,CAiB5B;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAejC;AAED,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAkBjC;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/history/store.js

@@ -0,0 +1,265 @@
+import { getDbExec, intType, isPostgres } from "../db/client.js";
+import { ensureIndexExists, ensureTableExists } from "../db/ddl-guard.js";
+let historyTableInitPromise;
+export async function ensureResourceVersionsTable() {
+    if (!historyTableInitPromise) {
+        historyTableInitPromise = (async () => {
+            const client = getDbExec();
+            const createSql = `CREATE TABLE IF NOT EXISTS agent_resource_versions (
+      id TEXT PRIMARY KEY,
+      resource_type TEXT NOT NULL,
+      resource_id TEXT NOT NULL,
+      version_number ${intType()} NOT NULL,
+      created_at TEXT NOT NULL,
+      created_by TEXT,
+      actor_kind TEXT NOT NULL DEFAULT 'human',
+      owner_email TEXT,
+      org_id TEXT,
+      visibility TEXT NOT NULL DEFAULT 'private',
+      title TEXT,
+      summary TEXT,
+      snapshot_json TEXT NOT NULL,
+      metadata_json TEXT
+    )`;
+            const indexes = [
+                `CREATE INDEX IF NOT EXISTS idx_agent_resource_versions_resource
+           ON agent_resource_versions (resource_type, resource_id, version_number)`,
+                `CREATE INDEX IF NOT EXISTS idx_agent_resource_versions_owner
+           ON agent_resource_versions (owner_email, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_agent_resource_versions_org
+           ON agent_resource_versions (org_id, created_at)`,
+            ];
+            if (isPostgres()) {
+                await ensureTableExists("agent_resource_versions", createSql);
+                await ensureIndexExists("idx_agent_resource_versions_resource", indexes[0]);
+                await ensureIndexExists("idx_agent_resource_versions_owner", indexes[1]);
+                await ensureIndexExists("idx_agent_resource_versions_org", indexes[2]);
+            }
+            else {
+                await client.execute(createSql);
+                for (const indexSql of indexes) {
+                    await client.execute(indexSql);
+                }
+            }
+        })();
+    }
+    await historyTableInitPromise;
+}
+export async function insertResourceVersion(input) {
+    await ensureResourceVersionsTable();
+    const client = getDbExec();
+    const maxRows = await client.execute({
+        sql: `SELECT MAX(version_number) as max_version
+       FROM agent_resource_versions
+      WHERE resource_type = ? AND resource_id = ?`,
+        args: [input.resourceType, input.resourceId],
+    });
+    const versionNumber = Number(maxRows.rows?.[0]?.max_version ??
+        0) + 1;
+    const id = createVersionId();
+    const createdAt = new Date().toISOString();
+    const version = {
+        id,
+        resourceType: input.resourceType,
+        resourceId: input.resourceId,
+        versionNumber,
+        createdAt,
+        createdBy: input.createdBy ?? null,
+        actorKind: input.actorKind ?? "human",
+        ownerEmail: input.ownerEmail ?? input.createdBy ?? null,
+        orgId: input.orgId ?? null,
+        visibility: input.visibility === "org" || input.visibility === "public"
+            ? input.visibility
+            : "private",
+        title: input.title ?? null,
+        summary: input.summary ?? null,
+        snapshot: input.snapshot,
+        metadata: input.metadata ?? null,
+    };
+    await client.execute({
+        sql: `INSERT INTO agent_resource_versions (
+      id,
+      resource_type,
+      resource_id,
+      version_number,
+      created_at,
+      created_by,
+      actor_kind,
+      owner_email,
+      org_id,
+      visibility,
+      title,
+      summary,
+      snapshot_json,
+      metadata_json
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        args: [
+            version.id,
+            version.resourceType,
+            version.resourceId,
+            version.versionNumber,
+            version.createdAt,
+            version.createdBy,
+            version.actorKind,
+            version.ownerEmail,
+            version.orgId,
+            version.visibility,
+            version.title,
+            version.summary,
+            JSON.stringify(version.snapshot),
+            stringifyOptionalJson(version.metadata),
+        ],
+    });
+    return version;
+}
+export async function queryResourceVersions(input) {
+    await ensureResourceVersionsTable();
+    const client = getDbExec();
+    const { clause, params } = input.bypassScope
+        ? { clause: "1 = 1", params: [] }
+        : scopedResourceClause(input.scope);
+    const limit = clampLimit(input.limit);
+    const offset = Math.max(0, Math.floor(input.offset ?? 0));
+    const result = await client.execute({
+        sql: `SELECT ${listColumns()}
+       FROM agent_resource_versions
+      WHERE resource_type = ? AND resource_id = ? AND ${clause}
+      ORDER BY version_number DESC
+      LIMIT ? OFFSET ?`,
+        args: [input.resourceType, input.resourceId, ...params, limit, offset],
+    });
+    return (result.rows ?? []).map((row) => mapVersionRow(row, false));
+}
+export async function getResourceVersionById(id, scope, options = {}) {
+    await ensureResourceVersionsTable();
+    const client = getDbExec();
+    const { clause, params } = options.bypassScope
+        ? { clause: "1 = 1", params: [] }
+        : scopedResourceClause(scope);
+    const result = await client.execute({
+        sql: `SELECT ${allColumns()}
+       FROM agent_resource_versions
+      WHERE id = ? AND ${clause}
+      LIMIT 1`,
+        args: [id, ...params],
+    });
+    const row = result.rows?.[0];
+    return row ? mapVersionRow(row, true) : null;
+}
+export async function getResourceVersionByNumber(resourceType, resourceId, versionNumber, scope, options = {}) {
+    await ensureResourceVersionsTable();
+    const client = getDbExec();
+    const { clause, params } = options.bypassScope
+        ? { clause: "1 = 1", params: [] }
+        : scopedResourceClause(scope);
+    const result = await client.execute({
+        sql: `SELECT ${allColumns()}
+       FROM agent_resource_versions
+      WHERE resource_type = ?
+        AND resource_id = ?
+        AND version_number = ?
+        AND ${clause}
+      LIMIT 1`,
+        args: [resourceType, resourceId, versionNumber, ...params],
+    });
+    const row = result.rows?.[0];
+    return row ? mapVersionRow(row, true) : null;
+}
+export function __resetHistoryInitForTests() {
+    historyTableInitPromise = undefined;
+}
+function listColumns() {
+    return [
+        "id",
+        "resource_type",
+        "resource_id",
+        "version_number",
+        "created_at",
+        "created_by",
+        "actor_kind",
+        "owner_email",
+        "org_id",
+        "visibility",
+        "title",
+        "summary",
+        "metadata_json",
+    ].join(", ");
+}
+function allColumns() {
+    return `${listColumns()}, snapshot_json`;
+}
+function scopedResourceClause(scope) {
+    const parts = [];
+    const params = [];
+    if (scope.userEmail) {
+        parts.push("owner_email = ?");
+        params.push(scope.userEmail);
+    }
+    if (scope.orgId) {
+        parts.push("(visibility = 'org' AND org_id = ?)");
+        params.push(scope.orgId);
+    }
+    parts.push("visibility = 'public'");
+    if (parts.length === 0) {
+        return { clause: "visibility = 'public'", params: [] };
+    }
+    return { clause: `(${parts.join(" OR ")})`, params };
+}
+function mapVersionRow(row, includeSnapshot) {
+    const version = {
+        id: String(row.id),
+        resourceType: String(row.resource_type),
+        resourceId: String(row.resource_id),
+        versionNumber: Number(row.version_number),
+        createdAt: String(row.created_at),
+        createdBy: nullableString(row.created_by),
+        actorKind: normalizeActorKind(row.actor_kind),
+        ownerEmail: nullableString(row.owner_email),
+        orgId: nullableString(row.org_id),
+        visibility: normalizeVisibility(row.visibility),
+        title: nullableString(row.title),
+        summary: nullableString(row.summary),
+        metadata: parseOptionalJson(row.metadata_json),
+    };
+    if (includeSnapshot) {
+        version.snapshot = parseRequiredJson(row.snapshot_json);
+    }
+    return version;
+}
+function createVersionId() {
+    return `ver_${globalThis.crypto.randomUUID()}`;
+}
+function clampLimit(value) {
+    if (!Number.isFinite(value)) {
+        return 50;
+    }
+    return Math.min(200, Math.max(1, Math.floor(value ?? 50)));
+}
+function nullableString(value) {
+    return value === null || value === undefined ? null : String(value);
+}
+function normalizeVisibility(value) {
+    return value === "org" || value === "public" ? value : "private";
+}
+function normalizeActorKind(value) {
+    return value === "agent" || value === "system" ? value : "human";
+}
+function stringifyOptionalJson(value) {
+    return value === null || value === undefined ? null : JSON.stringify(value);
+}
+function parseOptionalJson(value) {
+    if (value === null || value === undefined || value === "") {
+        return null;
+    }
+    const parsed = parseRequiredJson(value);
+    return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+        ? parsed
+        : null;
+}
+function parseRequiredJson(value) {
+    if (typeof value !== "string") {
+        return value;
+    }
+    return JSON.parse(value);
+}
+//# sourceMappingURL=store.js.map