@agent-native/core 0.90.2 → 0.90.3

package/dist/file-upload/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;qFAEqF;AACrF,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf;uEACmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,wDAAwD;IACxD,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACnC,UAAU,CACR,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,UAAU,EACjB,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACjC,eAAe,CACb,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;YAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;SAAE,GAC1C,OAAO,CAAC,MAAM,CAAC,CAAC;KACpB,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,4GAA4G;IAC5G,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;qFAEqF;AACrF,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf;uEACmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,wDAAwD;IACxD,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACnC,UAAU,CACR,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,UAAU,EACjB,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACjC,eAAe,CACb,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;YAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC;YAAC,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE,GACjE,OAAO,CAAC,MAAM,CAAC,CAAC;KACpB,CAAC;CACH"}

package/dist/file-upload/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG","sourcesContent":["/**\n * File upload framework primitive.\n *\n * Templates call `uploadFile()` to upload a file and get back a URL.\n * The framework dispatches to whichever provider is registered (Builder.io\n * built-in, or a user-supplied one). If no provider is active, it falls back\n * to the SQL resources store — fine for dev, not recommended for production.\n */\n\nexport interface FileUploadInput {\n  /** File contents. */\n  data: Uint8Array | Buffer;\n  /** Original filename, used for extension/display. */\n  filename?: string;\n  /** MIME type, e.g. \"image/png\". */\n  mimeType?: string;\n  /** Optional owner email for per-user scoping in fallback storage. */\n  ownerEmail?: string;\n  /** Builder.io upload hint: return after asset registration instead of waiting for server-side compression. */\n  skipCompressionWait?: boolean;\n}\n\nexport interface FileUploadResult {\n  /** Public URL where the file can be fetched. */\n  url: string;\n  /** Optional provider-specific id (e.g. resource id, Builder asset id). */\n  id?: string;\n  /** The provider that handled the upload. */\n  provider: string;\n}\n\n/** Opaque session handle returned by {@link FileUploadProvider.resumable.startSession}.\n * `sessionId` is provider-specific (GCS Location URI, S3 UploadId, etc.).\n * `meta` holds any provider state needed for subsequent relay and complete calls. */\nexport interface ResumableUploadSession {\n  sessionId: string;\n  meta: Record<string, unknown>;\n}\n\nexport interface ResumableChunkResult {\n  ok: boolean;\n  status: number;\n  /** Providers that need per-chunk state (e.g. S3 ETags) return updated meta\n   * here; the chunk route merges it back into the stored session. */\n  updatedMeta?: Record<string, unknown>;\n}\n\nexport interface FileUploadProvider {\n  /** Unique id, e.g. \"builder\", \"s3\". */\n  id: string;\n  /** Human-readable name. */\n  name: string;\n  /** Returns true if this provider is configured from synchronous runtime state. */\n  isConfigured: () => boolean;\n  /**\n   * Returns true if this provider is configured for the active request.\n   * Use for DB-backed user/org/workspace secrets that require request context.\n   */\n  isConfiguredForRequest?: () => Promise<boolean>;\n  /** Upload a file and return a URL. Throw on failure. */\n  upload: (input: FileUploadInput) => Promise<FileUploadResult>;\n  /**\n   * Optional resumable/streaming upload capability.\n   * When present, create-recording will initialise a session and stream chunks\n   * during recording instead of assembling the full blob after stop().\n   */\n  resumable?: {\n    startSession(\n      filename: string,\n      mimeType: string,\n      maxBytes: number,\n    ): Promise<ResumableUploadSession>;\n    relayChunk(\n      session: ResumableUploadSession,\n      contentRange: string,\n      bytes: Uint8Array,\n      options?: { mimeType?: string },\n    ): Promise<ResumableChunkResult>;\n    completeSession(\n      session: ResumableUploadSession,\n      filename: string,\n      options?: { skipCompressionWait?: boolean },\n    ): Promise<string>;\n  };\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG","sourcesContent":["/**\n * File upload framework primitive.\n *\n * Templates call `uploadFile()` to upload a file and get back a URL.\n * The framework dispatches to whichever provider is registered (Builder.io\n * built-in, or a user-supplied one). If no provider is active, it falls back\n * to the SQL resources store — fine for dev, not recommended for production.\n */\n\nexport interface FileUploadInput {\n  /** File contents. */\n  data: Uint8Array | Buffer;\n  /** Original filename, used for extension/display. */\n  filename?: string;\n  /** MIME type, e.g. \"image/png\". */\n  mimeType?: string;\n  /** Optional owner email for per-user scoping in fallback storage. */\n  ownerEmail?: string;\n  /** Builder.io upload hint: return after asset registration instead of waiting for server-side compression. */\n  skipCompressionWait?: boolean;\n  /** Builder.io upload hint: set false for internal artifacts that should not appear in the asset library. */\n  recordAsset?: boolean;\n}\n\nexport interface FileUploadResult {\n  /** Public URL where the file can be fetched. */\n  url: string;\n  /** Optional provider-specific id (e.g. resource id, Builder asset id). */\n  id?: string;\n  /** The provider that handled the upload. */\n  provider: string;\n}\n\n/** Opaque session handle returned by {@link FileUploadProvider.resumable.startSession}.\n * `sessionId` is provider-specific (GCS Location URI, S3 UploadId, etc.).\n * `meta` holds any provider state needed for subsequent relay and complete calls. */\nexport interface ResumableUploadSession {\n  sessionId: string;\n  meta: Record<string, unknown>;\n}\n\nexport interface ResumableChunkResult {\n  ok: boolean;\n  status: number;\n  /** Providers that need per-chunk state (e.g. S3 ETags) return updated meta\n   * here; the chunk route merges it back into the stored session. */\n  updatedMeta?: Record<string, unknown>;\n}\n\nexport interface FileUploadProvider {\n  /** Unique id, e.g. \"builder\", \"s3\". */\n  id: string;\n  /** Human-readable name. */\n  name: string;\n  /** Returns true if this provider is configured from synchronous runtime state. */\n  isConfigured: () => boolean;\n  /**\n   * Returns true if this provider is configured for the active request.\n   * Use for DB-backed user/org/workspace secrets that require request context.\n   */\n  isConfiguredForRequest?: () => Promise<boolean>;\n  /** Upload a file and return a URL. Throw on failure. */\n  upload: (input: FileUploadInput) => Promise<FileUploadResult>;\n  /**\n   * Optional resumable/streaming upload capability.\n   * When present, create-recording will initialise a session and stream chunks\n   * during recording instead of assembling the full blob after stop().\n   */\n  resumable?: {\n    startSession(\n      filename: string,\n      mimeType: string,\n      maxBytes: number,\n    ): Promise<ResumableUploadSession>;\n    relayChunk(\n      session: ResumableUploadSession,\n      contentRange: string,\n      bytes: Uint8Array,\n      options?: { mimeType?: string },\n    ): Promise<ResumableChunkResult>;\n    completeSession(\n      session: ResumableUploadSession,\n      filename: string,\n      options?: { skipCompressionWait?: boolean; recordAsset?: boolean },\n    ): Promise<string>;\n  };\n}\n"]}

package/dist/history/actions/create-resource-version.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    resourceType: string;
+    resourceId: string;
+    title?: string;
+    summary?: string;
+    snapshot?: unknown;
+    metadata?: Record<string, unknown>;
+}, import("../types.js").ResourceVersion>;
+export default _default;
+//# sourceMappingURL=create-resource-version.d.ts.map

package/dist/history/actions/create-resource-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-resource-version.d.ts","sourceRoot":"","sources":["../../../src/history/actions/create-resource-version.ts"],"names":[],"mappings":""}

package/dist/history/actions/create-resource-version.js

@@ -0,0 +1,65 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { assertVersionedResourceAccess, getVersionedResource, normalizeHistoryVisibility, } from "../registry.js";
+import { insertResourceVersion } from "../store.js";
+const schema = z.object({
+    resourceType: z.string().min(1),
+    resourceId: z.string().min(1),
+    title: z.string().optional(),
+    summary: z.string().optional(),
+    snapshot: z.unknown().optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+export default defineAction({
+    description: "Create a reusable version-history snapshot for a resource.",
+    schema,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        const access = await assertVersionedResourceAccess(args.resourceType, args.resourceId, actionCtx, "editor");
+        const registration = getVersionedResource(args.resourceType);
+        const snapshot = args.snapshot !== undefined
+            ? args.snapshot
+            : await registration?.getSnapshot?.({
+                resourceType: args.resourceType,
+                resourceId: args.resourceId,
+                ctx: actionCtx,
+                access,
+            });
+        if (snapshot === undefined) {
+            throw new Error(`No snapshot was provided and ${args.resourceType} has no getSnapshot history handler`);
+        }
+        return insertResourceVersion({
+            resourceType: args.resourceType,
+            resourceId: args.resourceId,
+            createdBy: actionCtx?.userEmail ?? null,
+            actorKind: actorKindFromContext(actionCtx),
+            ownerEmail: access.ownerEmail ?? actionCtx?.userEmail ?? null,
+            orgId: access.orgId ?? actionCtx?.orgId ?? null,
+            visibility: normalizeHistoryVisibility(access.visibility),
+            title: args.title,
+            summary: args.summary,
+            snapshot,
+            metadata: args.metadata,
+        });
+    },
+    audit: {
+        target: (args, result) => {
+            const version = result;
+            return {
+                type: args.resourceType,
+                id: args.resourceId,
+                ownerEmail: version.ownerEmail,
+                orgId: version.orgId,
+                visibility: version.visibility,
+            };
+        },
+    },
+});
+function actorKindFromContext(ctx) {
+    const caller = typeof ctx?.caller === "string" ? ctx.caller : "";
+    if (caller === "agent" || caller === "tool") {
+        return "agent";
+    }
+    return ctx?.userEmail ? "human" : "system";
+}
+//# sourceMappingURL=create-resource-version.js.map

package/dist/history/actions/create-resource-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-resource-version.js","sourceRoot":"","sources":["../../../src/history/actions/create-resource-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,4DAA4D;IACzE,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,SAAS;YACzB,CAAC,CAAC,IAAI,CAAC,QAAQ;YACf,CAAC,CAAC,MAAM,YAAY,EAAE,WAAW,EAAE,CAAC;gBAChC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,GAAG,EAAE,SAAS;gBACd,MAAM;aACP,CAAC,CAAC;QAET,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,YAAY,qCAAqC,CACvF,CAAC;QACJ,CAAC;QAED,OAAO,qBAAqB,CAAC;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,SAAS,IAAI,IAAI;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/C,UAAU,EAAE,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC;YACzD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAIf,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,EAAE,EAAE,IAAI,CAAC,UAAU;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAC3B,GAAyC;IAEzC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  assertVersionedResourceAccess,\n  getVersionedResource,\n  normalizeHistoryVisibility,\n} from \"../registry.js\";\nimport { insertResourceVersion } from \"../store.js\";\nimport type { HistoryActorKind, VersionedResourceContext } from \"../types.js\";\n\nconst schema = z.object({\n  resourceType: z.string().min(1),\n  resourceId: z.string().min(1),\n  title: z.string().optional(),\n  summary: z.string().optional(),\n  snapshot: z.unknown().optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport default defineAction({\n  description: \"Create a reusable version-history snapshot for a resource.\",\n  schema,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    const access = await assertVersionedResourceAccess(\n      args.resourceType,\n      args.resourceId,\n      actionCtx,\n      \"editor\",\n    );\n    const registration = getVersionedResource(args.resourceType);\n    const snapshot =\n      args.snapshot !== undefined\n        ? args.snapshot\n        : await registration?.getSnapshot?.({\n            resourceType: args.resourceType,\n            resourceId: args.resourceId,\n            ctx: actionCtx,\n            access,\n          });\n\n    if (snapshot === undefined) {\n      throw new Error(\n        `No snapshot was provided and ${args.resourceType} has no getSnapshot history handler`,\n      );\n    }\n\n    return insertResourceVersion({\n      resourceType: args.resourceType,\n      resourceId: args.resourceId,\n      createdBy: actionCtx?.userEmail ?? null,\n      actorKind: actorKindFromContext(actionCtx),\n      ownerEmail: access.ownerEmail ?? actionCtx?.userEmail ?? null,\n      orgId: access.orgId ?? actionCtx?.orgId ?? null,\n      visibility: normalizeHistoryVisibility(access.visibility),\n      title: args.title,\n      summary: args.summary,\n      snapshot,\n      metadata: args.metadata,\n    });\n  },\n  audit: {\n    target: (args, result) => {\n      const version = result as {\n        ownerEmail?: string | null;\n        orgId?: string | null;\n        visibility?: \"private\" | \"org\" | \"public\";\n      };\n      return {\n        type: args.resourceType,\n        id: args.resourceId,\n        ownerEmail: version.ownerEmail,\n        orgId: version.orgId,\n        visibility: version.visibility,\n      };\n    },\n  },\n});\n\nfunction actorKindFromContext(\n  ctx: VersionedResourceContext | undefined,\n): HistoryActorKind {\n  const caller = typeof ctx?.caller === \"string\" ? ctx.caller : \"\";\n  if (caller === \"agent\" || caller === \"tool\") {\n    return \"agent\";\n  }\n  return ctx?.userEmail ? \"human\" : \"system\";\n}\n"]}

package/dist/history/actions/get-resource-version.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    id?: string;
+    resourceType?: string;
+    resourceId?: string;
+    versionNumber?: number;
+}, {
+    version: import("../types.js").ResourceVersion;
+}>;
+export default _default;
+//# sourceMappingURL=get-resource-version.d.ts.map

package/dist/history/actions/get-resource-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-resource-version.d.ts","sourceRoot":"","sources":["../../../src/history/actions/get-resource-version.ts"],"names":[],"mappings":""}

package/dist/history/actions/get-resource-version.js

@@ -0,0 +1,38 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { assertVersionedResourceAccess } from "../registry.js";
+import { getResourceVersionById, getResourceVersionByNumber, } from "../store.js";
+const schema = z
+    .object({
+    id: z.string().optional(),
+    resourceType: z.string().min(1).optional(),
+    resourceId: z.string().min(1).optional(),
+    versionNumber: z.number().int().positive().optional(),
+})
+    .refine((value) => value.id ||
+    (value.resourceType && value.resourceId && value.versionNumber), {
+    message: "Provide either id or resourceType, resourceId, and versionNumber",
+});
+export default defineAction({
+    description: "Read one version-history snapshot for a reusable resource.",
+    schema,
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        const scope = {
+            userEmail: actionCtx?.userEmail ?? null,
+            orgId: actionCtx?.orgId ?? null,
+        };
+        const version = args.id
+            ? await getResourceVersionById(args.id, scope, { bypassScope: true })
+            : await getResourceVersionByNumber(args.resourceType, args.resourceId, args.versionNumber, scope, { bypassScope: true });
+        if (!version) {
+            throw new Error("Resource version not found");
+        }
+        await assertVersionedResourceAccess(version.resourceType, version.resourceId, actionCtx, "viewer");
+        return { version };
+    },
+});
+//# sourceMappingURL=get-resource-version.js.map

package/dist/history/actions/get-resource-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-resource-version.js","sourceRoot":"","sources":["../../../src/history/actions/get-resource-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,GAAG,CAAC;KACb,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,EAAE;IACR,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa,CAAC,EACjE;IACE,OAAO,EACL,kEAAkE;CACrE,CACF,CAAC;AAEJ,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,4DAA4D;IACzE,MAAM;IACN,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;YACrB,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACrE,CAAC,CAAC,MAAM,0BAA0B,CAC9B,IAAI,CAAC,YAAa,EAClB,IAAI,CAAC,UAAW,EAChB,IAAI,CAAC,aAAc,EACnB,KAAK,EACL,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;QACN,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,6BAA6B,CACjC,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,SAAS,EACT,QAAQ,CACT,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { assertVersionedResourceAccess } from \"../registry.js\";\nimport {\n  getResourceVersionById,\n  getResourceVersionByNumber,\n} from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z\n  .object({\n    id: z.string().optional(),\n    resourceType: z.string().min(1).optional(),\n    resourceId: z.string().min(1).optional(),\n    versionNumber: z.number().int().positive().optional(),\n  })\n  .refine(\n    (value) =>\n      value.id ||\n      (value.resourceType && value.resourceId && value.versionNumber),\n    {\n      message:\n        \"Provide either id or resourceType, resourceId, and versionNumber\",\n    },\n  );\n\nexport default defineAction({\n  description: \"Read one version-history snapshot for a reusable resource.\",\n  schema,\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    const scope = {\n      userEmail: actionCtx?.userEmail ?? null,\n      orgId: actionCtx?.orgId ?? null,\n    };\n    const version = args.id\n      ? await getResourceVersionById(args.id, scope, { bypassScope: true })\n      : await getResourceVersionByNumber(\n          args.resourceType!,\n          args.resourceId!,\n          args.versionNumber!,\n          scope,\n          { bypassScope: true },\n        );\n    if (!version) {\n      throw new Error(\"Resource version not found\");\n    }\n    await assertVersionedResourceAccess(\n      version.resourceType,\n      version.resourceId,\n      actionCtx,\n      \"viewer\",\n    );\n    return { version };\n  },\n});\n"]}

package/dist/history/actions/list-resource-history.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    resourceType: string;
+    resourceId: string;
+    limit?: number;
+}, {
+    versions: import("../types.js").ResourceVersion[];
+    auditEvents: import("../../audit/types.js").AuditEvent[];
+}>;
+export default _default;
+//# sourceMappingURL=list-resource-history.d.ts.map

package/dist/history/actions/list-resource-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-history.d.ts","sourceRoot":"","sources":["../../../src/history/actions/list-resource-history.ts"],"names":[],"mappings":""}

package/dist/history/actions/list-resource-history.js

@@ -0,0 +1,45 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { queryAuditEvents } from "../../audit/store.js";
+import { assertVersionedResourceAccess } from "../registry.js";
+import { queryResourceVersions } from "../store.js";
+const schema = z.object({
+    resourceType: z.string().min(1),
+    resourceId: z.string().min(1),
+    limit: z.number().int().positive().max(200).optional(),
+});
+export default defineAction({
+    description: "List versions and audit events for a reusable resource.",
+    schema,
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        await assertVersionedResourceAccess(args.resourceType, args.resourceId, actionCtx, "viewer");
+        const scope = {
+            userEmail: actionCtx?.userEmail ?? null,
+            orgId: actionCtx?.orgId ?? null,
+        };
+        const auditScope = {
+            userEmail: actionCtx?.userEmail ?? undefined,
+            orgId: actionCtx?.orgId ?? undefined,
+        };
+        const [versions, auditEvents] = await Promise.all([
+            queryResourceVersions({
+                resourceType: args.resourceType,
+                resourceId: args.resourceId,
+                scope,
+                bypassScope: true,
+                limit: args.limit,
+            }),
+            queryAuditEvents(auditScope, {
+                targetType: args.resourceType,
+                targetId: args.resourceId,
+                limit: args.limit ?? 50,
+            }),
+        ]);
+        return { versions, auditEvents };
+    },
+});
+//# sourceMappingURL=list-resource-history.js.map

package/dist/history/actions/list-resource-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-history.js","sourceRoot":"","sources":["../../../src/history/actions/list-resource-history.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yDAAyD;IACtE,MAAM;IACN,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,6BAA6B,CACjC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS;YAC5C,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,SAAS;SACrC,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,qBAAqB,CAAC;gBACpB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK;gBACL,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC;YACF,gBAAgB,CAAC,UAAU,EAAE;gBAC3B,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,QAAQ,EAAE,IAAI,CAAC,UAAU;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;aACxB,CAAC;SACH,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { queryAuditEvents } from \"../../audit/store.js\";\nimport { assertVersionedResourceAccess } from \"../registry.js\";\nimport { queryResourceVersions } from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z.object({\n  resourceType: z.string().min(1),\n  resourceId: z.string().min(1),\n  limit: z.number().int().positive().max(200).optional(),\n});\n\nexport default defineAction({\n  description: \"List versions and audit events for a reusable resource.\",\n  schema,\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    await assertVersionedResourceAccess(\n      args.resourceType,\n      args.resourceId,\n      actionCtx,\n      \"viewer\",\n    );\n    const scope = {\n      userEmail: actionCtx?.userEmail ?? null,\n      orgId: actionCtx?.orgId ?? null,\n    };\n    const auditScope = {\n      userEmail: actionCtx?.userEmail ?? undefined,\n      orgId: actionCtx?.orgId ?? undefined,\n    };\n    const [versions, auditEvents] = await Promise.all([\n      queryResourceVersions({\n        resourceType: args.resourceType,\n        resourceId: args.resourceId,\n        scope,\n        bypassScope: true,\n        limit: args.limit,\n      }),\n      queryAuditEvents(auditScope, {\n        targetType: args.resourceType,\n        targetId: args.resourceId,\n        limit: args.limit ?? 50,\n      }),\n    ]);\n    return { versions, auditEvents };\n  },\n});\n"]}

package/dist/history/actions/list-resource-versions.d.ts

@@ -0,0 +1,10 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    resourceType: string;
+    resourceId: string;
+    limit?: number;
+    offset?: number;
+}, {
+    versions: import("../types.js").ResourceVersion[];
+}>;
+export default _default;
+//# sourceMappingURL=list-resource-versions.d.ts.map

package/dist/history/actions/list-resource-versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-versions.d.ts","sourceRoot":"","sources":["../../../src/history/actions/list-resource-versions.ts"],"names":[],"mappings":""}

package/dist/history/actions/list-resource-versions.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { assertVersionedResourceAccess } from "../registry.js";
+import { queryResourceVersions } from "../store.js";
+const schema = z.object({
+    resourceType: z.string().min(1),
+    resourceId: z.string().min(1),
+    limit: z.number().int().positive().max(200).optional(),
+    offset: z.number().int().nonnegative().optional(),
+});
+export default defineAction({
+    description: "List version-history snapshots for a reusable resource.",
+    schema,
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        await assertVersionedResourceAccess(args.resourceType, args.resourceId, actionCtx, "viewer");
+        return {
+            versions: await queryResourceVersions({
+                resourceType: args.resourceType,
+                resourceId: args.resourceId,
+                scope: {
+                    userEmail: actionCtx?.userEmail ?? null,
+                    orgId: actionCtx?.orgId ?? null,
+                },
+                bypassScope: true,
+                limit: args.limit,
+                offset: args.offset,
+            }),
+        };
+    },
+});
+//# sourceMappingURL=list-resource-versions.js.map

package/dist/history/actions/list-resource-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-resource-versions.js","sourceRoot":"","sources":["../../../src/history/actions/list-resource-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yDAAyD;IACtE,MAAM;IACN,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,6BAA6B,CACjC,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,MAAM,qBAAqB,CAAC;gBACpC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE;oBACL,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;oBACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;iBAChC;gBACD,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;SACH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { assertVersionedResourceAccess } from \"../registry.js\";\nimport { queryResourceVersions } from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z.object({\n  resourceType: z.string().min(1),\n  resourceId: z.string().min(1),\n  limit: z.number().int().positive().max(200).optional(),\n  offset: z.number().int().nonnegative().optional(),\n});\n\nexport default defineAction({\n  description: \"List version-history snapshots for a reusable resource.\",\n  schema,\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    await assertVersionedResourceAccess(\n      args.resourceType,\n      args.resourceId,\n      actionCtx,\n      \"viewer\",\n    );\n    return {\n      versions: await queryResourceVersions({\n        resourceType: args.resourceType,\n        resourceId: args.resourceId,\n        scope: {\n          userEmail: actionCtx?.userEmail ?? null,\n          orgId: actionCtx?.orgId ?? null,\n        },\n        bypassScope: true,\n        limit: args.limit,\n        offset: args.offset,\n      }),\n    };\n  },\n});\n"]}

package/dist/history/actions/restore-resource-version.d.ts

@@ -0,0 +1,11 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    id?: string;
+    resourceType?: string;
+    resourceId?: string;
+    versionNumber?: number;
+}, {
+    version: import("../types.js").ResourceVersion;
+    result: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=restore-resource-version.d.ts.map

package/dist/history/actions/restore-resource-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-resource-version.d.ts","sourceRoot":"","sources":["../../../src/history/actions/restore-resource-version.ts"],"names":[],"mappings":""}

package/dist/history/actions/restore-resource-version.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { assertVersionedResourceAccess, getVersionedResource, } from "../registry.js";
+import { getResourceVersionById, getResourceVersionByNumber, } from "../store.js";
+const schema = z
+    .object({
+    id: z.string().optional(),
+    resourceType: z.string().min(1).optional(),
+    resourceId: z.string().min(1).optional(),
+    versionNumber: z.number().int().positive().optional(),
+})
+    .refine((value) => value.id ||
+    (value.resourceType && value.resourceId && value.versionNumber), {
+    message: "Provide either id or resourceType, resourceId, and versionNumber",
+});
+export default defineAction({
+    description: "Restore a resource from a reusable version-history snapshot.",
+    schema,
+    run: async (args, ctx) => {
+        const actionCtx = ctx;
+        const scope = {
+            userEmail: actionCtx?.userEmail ?? null,
+            orgId: actionCtx?.orgId ?? null,
+        };
+        const version = args.id
+            ? await getResourceVersionById(args.id, scope, { bypassScope: true })
+            : await getResourceVersionByNumber(args.resourceType, args.resourceId, args.versionNumber, scope, { bypassScope: true });
+        if (!version) {
+            throw new Error("Resource version not found");
+        }
+        const access = await assertVersionedResourceAccess(version.resourceType, version.resourceId, actionCtx, "editor");
+        const registration = getVersionedResource(version.resourceType);
+        if (!registration?.restoreSnapshot) {
+            throw new Error(`${version.resourceType} has no restoreSnapshot history handler registered`);
+        }
+        const result = await registration.restoreSnapshot({
+            resourceType: version.resourceType,
+            resourceId: version.resourceId,
+            ctx: actionCtx,
+            access,
+            version,
+            snapshot: version.snapshot,
+        });
+        return { version, result };
+    },
+    audit: {
+        target: (_args, result) => {
+            const restored = result;
+            return {
+                type: restored.version.resourceType,
+                id: restored.version.resourceId,
+                ownerEmail: restored.version.ownerEmail,
+                orgId: restored.version.orgId,
+                visibility: restored.version.visibility,
+            };
+        },
+    },
+});
+//# sourceMappingURL=restore-resource-version.js.map

package/dist/history/actions/restore-resource-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-resource-version.js","sourceRoot":"","sources":["../../../src/history/actions/restore-resource-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,GAAG,CAAC;KACb,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,EAAE;IACR,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa,CAAC,EACjE;IACE,OAAO,EACL,kEAAkE;CACrE,CACF,CAAC;AAEJ,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,8DAA8D;IAC3E,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAA2C,CAAC;QAC9D,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;YACrB,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACrE,CAAC,CAAC,MAAM,0BAA0B,CAC9B,IAAI,CAAC,YAAa,EAClB,IAAI,CAAC,UAAW,EAChB,IAAI,CAAC,aAAc,EACnB,KAAK,EACL,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;QACN,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,UAAU,EAClB,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,YAAY,oDAAoD,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;YAChD,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,EAAE,SAAS;YACd,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,MAQhB,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY;gBACnC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;gBAC/B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;gBACvC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;gBAC7B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;aACxC,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport {\n  assertVersionedResourceAccess,\n  getVersionedResource,\n} from \"../registry.js\";\nimport {\n  getResourceVersionById,\n  getResourceVersionByNumber,\n} from \"../store.js\";\nimport type { VersionedResourceContext } from \"../types.js\";\n\nconst schema = z\n  .object({\n    id: z.string().optional(),\n    resourceType: z.string().min(1).optional(),\n    resourceId: z.string().min(1).optional(),\n    versionNumber: z.number().int().positive().optional(),\n  })\n  .refine(\n    (value) =>\n      value.id ||\n      (value.resourceType && value.resourceId && value.versionNumber),\n    {\n      message:\n        \"Provide either id or resourceType, resourceId, and versionNumber\",\n    },\n  );\n\nexport default defineAction({\n  description: \"Restore a resource from a reusable version-history snapshot.\",\n  schema,\n  run: async (args, ctx) => {\n    const actionCtx = ctx as VersionedResourceContext | undefined;\n    const scope = {\n      userEmail: actionCtx?.userEmail ?? null,\n      orgId: actionCtx?.orgId ?? null,\n    };\n    const version = args.id\n      ? await getResourceVersionById(args.id, scope, { bypassScope: true })\n      : await getResourceVersionByNumber(\n          args.resourceType!,\n          args.resourceId!,\n          args.versionNumber!,\n          scope,\n          { bypassScope: true },\n        );\n    if (!version) {\n      throw new Error(\"Resource version not found\");\n    }\n\n    const access = await assertVersionedResourceAccess(\n      version.resourceType,\n      version.resourceId,\n      actionCtx,\n      \"editor\",\n    );\n    const registration = getVersionedResource(version.resourceType);\n    if (!registration?.restoreSnapshot) {\n      throw new Error(\n        `${version.resourceType} has no restoreSnapshot history handler registered`,\n      );\n    }\n\n    const result = await registration.restoreSnapshot({\n      resourceType: version.resourceType,\n      resourceId: version.resourceId,\n      ctx: actionCtx,\n      access,\n      version,\n      snapshot: version.snapshot,\n    });\n    return { version, result };\n  },\n  audit: {\n    target: (_args, result) => {\n      const restored = result as {\n        version: {\n          resourceType: string;\n          resourceId: string;\n          ownerEmail?: string | null;\n          orgId?: string | null;\n          visibility?: \"private\" | \"org\" | \"public\";\n        };\n      };\n      return {\n        type: restored.version.resourceType,\n        id: restored.version.resourceId,\n        ownerEmail: restored.version.ownerEmail,\n        orgId: restored.version.orgId,\n        visibility: restored.version.visibility,\n      };\n    },\n  },\n});\n"]}

package/dist/history/index.d.ts

@@ -0,0 +1,4 @@
+export type { HistoryActorKind, HistoryResourceRole, ResourceHistoryScope, ResourceVersion, VersionedResourceAccess, VersionedResourceContext, VersionedResourceRegistration, VersionedResourceRestoreContext, VersionedResourceSnapshotContext, } from "./types.js";
+export { __resetVersionedResourcesForTests, assertVersionedResourceAccess, getVersionedResource, listVersionedResources, registerVersionedResource, resolveVersionedResourceAccess, } from "./registry.js";
+export { __resetHistoryInitForTests, ensureResourceVersionsTable, getResourceVersionById, getResourceVersionByNumber, insertResourceVersion, queryResourceVersions, } from "./store.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/history/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/history/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC7B,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/history/index.js

@@ -0,0 +1,3 @@
+export { __resetVersionedResourcesForTests, assertVersionedResourceAccess, getVersionedResource, listVersionedResources, registerVersionedResource, resolveVersionedResourceAccess, } from "./registry.js";
+export { __resetHistoryInitForTests, ensureResourceVersionsTable, getResourceVersionById, getResourceVersionByNumber, insertResourceVersion, queryResourceVersions, } from "./store.js";
+//# sourceMappingURL=index.js.map

package/dist/history/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/history/index.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAC","sourcesContent":["export type {\n  HistoryActorKind,\n  HistoryResourceRole,\n  ResourceHistoryScope,\n  ResourceVersion,\n  VersionedResourceAccess,\n  VersionedResourceContext,\n  VersionedResourceRegistration,\n  VersionedResourceRestoreContext,\n  VersionedResourceSnapshotContext,\n} from \"./types.js\";\nexport {\n  __resetVersionedResourcesForTests,\n  assertVersionedResourceAccess,\n  getVersionedResource,\n  listVersionedResources,\n  registerVersionedResource,\n  resolveVersionedResourceAccess,\n} from \"./registry.js\";\nexport {\n  __resetHistoryInitForTests,\n  ensureResourceVersionsTable,\n  getResourceVersionById,\n  getResourceVersionByNumber,\n  insertResourceVersion,\n  queryResourceVersions,\n} from \"./store.js\";\n"]}

package/dist/history/registry.d.ts

@@ -0,0 +1,10 @@
+import { type Visibility } from "../sharing/schema.js";
+import type { HistoryResourceRole, VersionedResourceAccess, VersionedResourceContext, VersionedResourceRegistration } from "./types.js";
+export declare function registerVersionedResource(registration: VersionedResourceRegistration): void;
+export declare function getVersionedResource(type: string): VersionedResourceRegistration | undefined;
+export declare function listVersionedResources(): VersionedResourceRegistration[];
+export declare function resolveVersionedResourceAccess(resourceType: string, resourceId: string, ctx?: VersionedResourceContext): Promise<VersionedResourceAccess | null>;
+export declare function assertVersionedResourceAccess(resourceType: string, resourceId: string, ctx: VersionedResourceContext | undefined, minimumRole: HistoryResourceRole): Promise<VersionedResourceAccess>;
+export declare function normalizeHistoryVisibility(visibility: Visibility | null | undefined): Visibility;
+export declare function __resetVersionedResourcesForTests(): void;
+//# sourceMappingURL=registry.d.ts.map

package/dist/history/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/history/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,YAAY,CAAC;AAIpB,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,6BAA6B,GAC1C,IAAI,CAON;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,GACX,6BAA6B,GAAG,SAAS,CAE3C;AAED,wBAAgB,sBAAsB,IAAI,6BAA6B,EAAE,CAExE;AAED,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,wBAAwB,GAC7B,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA8BzC;AAED,wBAAsB,6BAA6B,CACjD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,wBAAwB,GAAG,SAAS,EACzC,WAAW,EAAE,mBAAmB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAYlC;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACxC,UAAU,CAIZ;AAED,wBAAgB,iCAAiC,IAAI,IAAI,CAExD"}

package/dist/history/registry.js

@@ -0,0 +1,61 @@
+import { ForbiddenError, resolveAccess } from "../sharing/access.js";
+import { getShareableResource } from "../sharing/registry.js";
+import { roleSatisfies } from "../sharing/schema.js";
+const registrations = new Map();
+export function registerVersionedResource(registration) {
+    if (!registration.type.trim()) {
+        throw new Error("registerVersionedResource requires a non-empty resource type");
+    }
+    registrations.set(registration.type, registration);
+}
+export function getVersionedResource(type) {
+    return registrations.get(type);
+}
+export function listVersionedResources() {
+    return Array.from(registrations.values());
+}
+export async function resolveVersionedResourceAccess(resourceType, resourceId, ctx) {
+    const registration = getVersionedResource(resourceType);
+    if (registration?.resolveAccess) {
+        return registration.resolveAccess(resourceId, ctx);
+    }
+    if (getShareableResource(resourceType)) {
+        const access = await resolveAccess(resourceType, resourceId);
+        if (!access) {
+            return null;
+        }
+        return {
+            role: access.role,
+            ownerEmail: access.resource.ownerEmail ?? null,
+            orgId: access.resource.orgId ?? null,
+            visibility: access.resource.visibility,
+            resource: access.resource,
+        };
+    }
+    const userEmail = ctx?.userEmail ?? null;
+    if (!userEmail) {
+        return null;
+    }
+    return {
+        role: "owner",
+        ownerEmail: userEmail,
+        orgId: ctx?.orgId ?? null,
+        visibility: "private",
+    };
+}
+export async function assertVersionedResourceAccess(resourceType, resourceId, ctx, minimumRole) {
+    const access = await resolveVersionedResourceAccess(resourceType, resourceId, ctx);
+    if (!access || !roleSatisfies(access.role, minimumRole)) {
+        throw new ForbiddenError(`Not allowed to access ${resourceType}:${resourceId}`);
+    }
+    return access;
+}
+export function normalizeHistoryVisibility(visibility) {
+    return visibility === "org" || visibility === "public"
+        ? visibility
+        : "private";
+}
+export function __resetVersionedResourcesForTests() {
+    registrations.clear();
+}
+//# sourceMappingURL=registry.js.map

package/dist/history/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/history/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAmB,MAAM,sBAAsB,CAAC;AAQtE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAyC,CAAC;AAEvE,MAAM,UAAU,yBAAyB,CACvC,YAA2C;IAE3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY;IAEZ,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,YAAoB,EACpB,UAAkB,EAClB,GAA8B;IAE9B,MAAM,YAAY,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,aAAa,EAAE,CAAC;QAChC,OAAO,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAA2B;YACxC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;YAC9C,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI;YACpC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;QACzB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAAoB,EACpB,UAAkB,EAClB,GAAyC,EACzC,WAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,YAAY,EACZ,UAAU,EACV,GAAG,CACJ,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,cAAc,CACtB,yBAAyB,YAAY,IAAI,UAAU,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAyC;IAEzC,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,QAAQ;QACpD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC","sourcesContent":["import { ForbiddenError, resolveAccess } from \"../sharing/access.js\";\nimport { getShareableResource } from \"../sharing/registry.js\";\nimport { roleSatisfies, type Visibility } from \"../sharing/schema.js\";\nimport type {\n  HistoryResourceRole,\n  VersionedResourceAccess,\n  VersionedResourceContext,\n  VersionedResourceRegistration,\n} from \"./types.js\";\n\nconst registrations = new Map<string, VersionedResourceRegistration>();\n\nexport function registerVersionedResource(\n  registration: VersionedResourceRegistration,\n): void {\n  if (!registration.type.trim()) {\n    throw new Error(\n      \"registerVersionedResource requires a non-empty resource type\",\n    );\n  }\n  registrations.set(registration.type, registration);\n}\n\nexport function getVersionedResource(\n  type: string,\n): VersionedResourceRegistration | undefined {\n  return registrations.get(type);\n}\n\nexport function listVersionedResources(): VersionedResourceRegistration[] {\n  return Array.from(registrations.values());\n}\n\nexport async function resolveVersionedResourceAccess(\n  resourceType: string,\n  resourceId: string,\n  ctx?: VersionedResourceContext,\n): Promise<VersionedResourceAccess | null> {\n  const registration = getVersionedResource(resourceType);\n  if (registration?.resolveAccess) {\n    return registration.resolveAccess(resourceId, ctx);\n  }\n\n  if (getShareableResource(resourceType)) {\n    const access = await resolveAccess(resourceType, resourceId);\n    if (!access) {\n      return null;\n    }\n    return {\n      role: access.role as HistoryResourceRole,\n      ownerEmail: access.resource.ownerEmail ?? null,\n      orgId: access.resource.orgId ?? null,\n      visibility: access.resource.visibility,\n      resource: access.resource,\n    };\n  }\n\n  const userEmail = ctx?.userEmail ?? null;\n  if (!userEmail) {\n    return null;\n  }\n  return {\n    role: \"owner\",\n    ownerEmail: userEmail,\n    orgId: ctx?.orgId ?? null,\n    visibility: \"private\",\n  };\n}\n\nexport async function assertVersionedResourceAccess(\n  resourceType: string,\n  resourceId: string,\n  ctx: VersionedResourceContext | undefined,\n  minimumRole: HistoryResourceRole,\n): Promise<VersionedResourceAccess> {\n  const access = await resolveVersionedResourceAccess(\n    resourceType,\n    resourceId,\n    ctx,\n  );\n  if (!access || !roleSatisfies(access.role, minimumRole)) {\n    throw new ForbiddenError(\n      `Not allowed to access ${resourceType}:${resourceId}`,\n    );\n  }\n  return access;\n}\n\nexport function normalizeHistoryVisibility(\n  visibility: Visibility | null | undefined,\n): Visibility {\n  return visibility === \"org\" || visibility === \"public\"\n    ? visibility\n    : \"private\";\n}\n\nexport function __resetVersionedResourcesForTests(): void {\n  registrations.clear();\n}\n"]}

package/dist/history/store.d.ts

@@ -0,0 +1,34 @@
+import type { Visibility } from "../sharing/schema.js";
+import type { HistoryActorKind, ResourceHistoryScope, ResourceVersion } from "./types.js";
+export interface InsertResourceVersionInput {
+    resourceType: string;
+    resourceId: string;
+    createdBy?: string | null;
+    actorKind?: HistoryActorKind;
+    ownerEmail?: string | null;
+    orgId?: string | null;
+    visibility?: Visibility | null;
+    title?: string | null;
+    summary?: string | null;
+    snapshot: unknown;
+    metadata?: Record<string, unknown> | null;
+}
+export interface QueryResourceVersionsInput {
+    resourceType: string;
+    resourceId: string;
+    scope: ResourceHistoryScope;
+    bypassScope?: boolean;
+    limit?: number;
+    offset?: number;
+}
+export declare function ensureResourceVersionsTable(): Promise<void>;
+export declare function insertResourceVersion(input: InsertResourceVersionInput): Promise<ResourceVersion>;
+export declare function queryResourceVersions(input: QueryResourceVersionsInput): Promise<ResourceVersion[]>;
+export declare function getResourceVersionById(id: string, scope: ResourceHistoryScope, options?: {
+    bypassScope?: boolean;
+}): Promise<ResourceVersion | null>;
+export declare function getResourceVersionByNumber(resourceType: string, resourceId: string, versionNumber: number, scope: ResourceHistoryScope, options?: {
+    bypassScope?: boolean;
+}): Promise<ResourceVersion | null>;
+export declare function __resetHistoryInitForTests(): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/history/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/history/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EAChB,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAkDjE;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,eAAe,CAAC,CAwE1B;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,eAAe,EAAE,CAAC,CAiB5B;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAejC;AAED,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAkBjC;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}