@agent-native/creative-context 0.0.0-beta-20260820202238

package/dist/store/contexts.js

@@ -0,0 +1,1346 @@
+import { assertCurrentRequestUserIsOrgAdmin, currentRequestUserIsOrgAdmin, } from "@agent-native/core/server";
+import { accessFilter, assertAccess, resolveAccess, } from "@agent-native/core/sharing";
+import { and, asc, count, eq, gt, inArray, isNotNull, isNull, or, } from "drizzle-orm";
+import { creativeContextMediaUrl } from "../media-url.js";
+import { getCreativeContext } from "../server/context.js";
+import { captureNativeCreativeResource, parseNativeCreativeArtifactKey, resolveNativeCreativeResourceUpdateStatuses, } from "../server/native-resource-capture.js";
+import { sanitizePublicMetadata } from "../server/public-serialization.js";
+import { getCreativeContextItem } from "./content.js";
+import { newId, nowIso, parseJson, requireActor, stringifyJson, } from "./helpers.js";
+function creativeContextAccessRole(role) {
+    return role === "commenter" ? "viewer" : role;
+}
+function defaultContextScopeKey(actor) {
+    return actor.orgId ? `org:${actor.orgId}` : `user:${actor.ownerEmail}`;
+}
+function mapContext(row, memberCount = 0, role = "viewer") {
+    return {
+        id: row.id,
+        name: row.name,
+        description: row.description ?? null,
+        kind: row.kind,
+        brandProfileId: row.brandProfileId ?? null,
+        approvalPolicy: row.approvalPolicy,
+        archivedAt: row.archivedAt ?? null,
+        visibility: row.visibility,
+        memberCount,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+        access: {
+            role,
+            canSubmit: role !== "viewer",
+            canReview: role === "owner" || role === "admin",
+            canAdmin: role === "owner" || role === "admin",
+        },
+    };
+}
+function mapMembership(row) {
+    return {
+        id: row.id,
+        contextId: row.contextId,
+        artifactKey: row.artifactKey,
+        publishedItemId: row.publishedItemId ?? null,
+        publishedItemVersionId: row.publishedItemVersionId ?? null,
+        pendingSubmissionId: row.pendingSubmissionId ?? null,
+        rank: row.rank,
+        purpose: row.purpose ?? null,
+        status: row.status,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+function mapSubmission(row) {
+    return {
+        id: row.id,
+        contextId: row.contextId,
+        membershipId: row.membershipId,
+        artifactKey: row.artifactKey,
+        publishedItemId: row.publishedItemId ?? null,
+        publishedItemVersionId: row.publishedItemVersionId ?? null,
+        note: row.note ?? null,
+        status: row.status,
+        submittedBy: row.submittedBy,
+        reviewedBy: row.reviewedBy ?? null,
+        reviewNote: row.reviewNote ?? null,
+        createdAt: row.createdAt,
+        reviewedAt: row.reviewedAt ?? null,
+    };
+}
+async function appendAudit(tx, contextId, operation, details) {
+    const { schema } = getCreativeContext();
+    const actor = requireActor();
+    await tx.insert(schema.creativeContextAudit).values({
+        id: newId("cca"),
+        contextId,
+        operation,
+        actorEmail: actor.ownerEmail,
+        details: stringifyJson(details),
+        createdAt: nowIso(),
+        ownerEmail: actor.ownerEmail,
+        orgId: actor.orgId,
+    });
+}
+async function assertContextRole(contextId, role) {
+    return assertAccess("creative-context", contextId, role, undefined, {
+        skipResourceBody: true,
+    });
+}
+async function requireReviewer(contextId) {
+    await assertContextRole(contextId, "admin");
+}
+function normalizedFromDetail(detail) {
+    return {
+        externalId: detail.item.externalId,
+        kind: detail.item.kind,
+        title: detail.version.title,
+        canonicalUrl: detail.item.canonicalUrl ?? undefined,
+        mimeType: detail.version.mimeType ?? undefined,
+        content: detail.version.content,
+        summary: detail.version.summary ?? undefined,
+        contentHash: detail.version.contentHash,
+        sourceModifiedAt: detail.version.sourceModifiedAt ?? undefined,
+        sourceVersion: detail.version.sourceVersion ?? undefined,
+        rawSnapshotBlobRef: detail.version.rawSnapshotBlobRef ?? undefined,
+        parseStatus: detail.version.parseStatus,
+        parseError: detail.version.parseError ?? undefined,
+        upstreamAccess: detail.item.upstreamAccess,
+        curationStatus: "included",
+        curationRank: detail.item.curationRank === "ignored"
+            ? "normal"
+            : detail.item.curationRank,
+        tags: detail.item.tags,
+        colors: detail.item.colors,
+        provenance: detail.item.provenance,
+        thumbnailBlobRef: detail.item.thumbnailBlobRef ?? undefined,
+        // Keep compiler/reassembly manifests while stripping capability-like metadata.
+        metadata: (sanitizePublicMetadata(detail.version.metadata) ?? {}),
+        chunks: detail.chunks.map((chunk) => ({
+            ordinal: chunk.ordinal,
+            kind: chunk.kind,
+            text: chunk.text,
+            ...(chunk.startOffset === null ? {} : { startOffset: chunk.startOffset }),
+            ...(chunk.endOffset === null ? {} : { endOffset: chunk.endOffset }),
+            ...(chunk.tokenCount === null ? {} : { tokenCount: chunk.tokenCount }),
+            metadata: chunk.metadata,
+        })),
+        media: detail.media.map((media) => ({
+            kind: media.kind,
+            ...(media.mimeType ? { mimeType: media.mimeType } : {}),
+            accessMode: media.accessMode,
+            ...(media.url ? { url: media.url } : {}),
+            ...(media.storageKey ? { storageKey: media.storageKey } : {}),
+            ...(media.provenanceUrl ? { provenanceUrl: media.provenanceUrl } : {}),
+            ...(media.altText ? { altText: media.altText } : {}),
+            ...(media.caption ? { caption: media.caption } : {}),
+            captionStatus: media.captionStatus,
+            ...(media.ocrText ? { ocrText: media.ocrText } : {}),
+            palette: media.palette,
+            ...(media.contentHash ? { contentHash: media.contentHash } : {}),
+            ...(media.width === null ? {} : { width: media.width }),
+            ...(media.height === null ? {} : { height: media.height }),
+            ...(media.durationMs === null ? {} : { durationMs: media.durationMs }),
+            metadata: media.metadata,
+        })),
+        edges: detail.edges.map((edge) => ({
+            relation: edge.relation,
+            ...(edge.toItemId ? { toItemId: edge.toItemId } : {}),
+            ...(edge.toItemVersionId
+                ? { toItemVersionId: edge.toItemVersionId }
+                : {}),
+            ...(edge.toExternalId ? { toExternalId: edge.toExternalId } : {}),
+            metadata: edge.metadata,
+        })),
+    };
+}
+async function writeSnapshot(input) {
+    const { getDb, schema } = getCreativeContext();
+    const timestamp = nowIso();
+    const existing = await getDb()
+        .select()
+        .from(schema.contextItems)
+        .where(and(eq(schema.contextItems.sourceId, input.sourceId), eq(schema.contextItems.externalId, input.artifactKey)))
+        .limit(1);
+    const previous = existing[0];
+    const itemId = previous?.id ?? newId("cci");
+    const itemVersionId = newId("ccv");
+    const versionNumber = previous
+        ? (await getDb()
+            .select({ versionNumber: schema.contextItemVersions.versionNumber })
+            .from(schema.contextItemVersions)
+            .where(eq(schema.contextItemVersions.id, previous.currentVersionId))
+            .limit(1))[0]?.versionNumber + 1
+        : 1;
+    const itemValues = {
+        kind: input.item.kind,
+        title: input.item.title,
+        canonicalUrl: input.item.canonicalUrl ?? null,
+        mimeType: input.item.mimeType ?? null,
+        currentVersionId: itemVersionId,
+        currentContentHash: input.item.contentHash,
+        status: "active",
+        upstreamAccess: input.item.upstreamAccess ?? "available",
+        curationStatus: "included",
+        curationRank: input.item.curationRank ?? "normal",
+        starred: input.item.starred ? 1 : 0,
+        inventoryState: input.item.inventoryState ?? "available",
+        indexState: input.item.indexState ?? "pending",
+        tags: stringifyJson(input.item.tags ?? []),
+        colors: stringifyJson(input.item.colors ?? (input.item.color ? [input.item.color] : [])),
+        sortOrder: input.item.sortOrder ?? 0,
+        parentItemId: input.item.parentItemId ?? null,
+        provenance: stringifyJson(input.item.provenance),
+        thumbnailBlobRef: input.item.thumbnailBlobRef ?? null,
+        metadata: stringifyJson(input.item.metadata),
+        updatedAt: timestamp,
+    };
+    await getDb().transaction(async (tx) => {
+        if (previous)
+            await tx
+                .update(schema.contextItems)
+                .set(itemValues)
+                .where(eq(schema.contextItems.id, itemId));
+        else
+            await tx.insert(schema.contextItems).values({
+                id: itemId,
+                sourceId: input.sourceId,
+                externalId: input.artifactKey,
+                ...itemValues,
+                createdAt: timestamp,
+                ownerEmail: input.ownerEmail,
+                orgId: input.orgId,
+            });
+        await tx.insert(schema.contextItemVersions).values({
+            id: itemVersionId,
+            itemId,
+            versionNumber: Number(versionNumber ?? 1),
+            contentHash: input.item.contentHash,
+            title: input.item.title,
+            content: input.item.content,
+            summary: input.item.summary ?? null,
+            mimeType: input.item.mimeType ?? null,
+            sourceModifiedAt: input.item.sourceModifiedAt ?? null,
+            sourceVersion: input.item.sourceVersion ?? null,
+            rawSnapshotBlobRef: input.item.rawSnapshotBlobRef ?? null,
+            parseStatus: input.item.parseStatus ?? "parsed",
+            parseError: input.item.parseError ?? null,
+            metadata: stringifyJson(input.item.metadata),
+            createdAt: timestamp,
+            ownerEmail: input.ownerEmail,
+            orgId: input.orgId,
+        });
+        const chunks = input.item.chunks?.length
+            ? input.item.chunks
+            : [{ ordinal: 0, kind: "text", text: input.item.content }];
+        await tx.insert(schema.contextChunks).values(chunks.map((chunk) => ({
+            id: newId("ccc"),
+            itemId,
+            itemVersionId,
+            ordinal: chunk.ordinal,
+            kind: chunk.kind ?? "text",
+            text: chunk.text,
+            startOffset: chunk.startOffset ?? null,
+            endOffset: chunk.endOffset ?? null,
+            tokenCount: chunk.tokenCount ?? null,
+            metadata: stringifyJson(chunk.metadata),
+            createdAt: timestamp,
+            ownerEmail: input.ownerEmail,
+            orgId: input.orgId,
+        })));
+        if (input.item.media?.length)
+            await tx.insert(schema.contextMedia).values(input.item.media.map((media) => ({
+                id: newId("ccm"),
+                itemId,
+                itemVersionId,
+                kind: media.kind,
+                mimeType: media.mimeType ?? null,
+                accessMode: media.accessMode ?? "public",
+                url: media.accessMode === "public" ? (media.url ?? null) : null,
+                storageKey: media.storageKey ?? null,
+                provenanceUrl: media.provenanceUrl ?? media.url ?? null,
+                altText: media.altText ?? null,
+                caption: media.caption ?? null,
+                captionStatus: media.captionStatus ?? "pending",
+                ocrText: media.ocrText ?? null,
+                palette: stringifyJson(media.palette ?? []),
+                contentHash: media.contentHash ?? null,
+                width: media.width ?? null,
+                height: media.height ?? null,
+                durationMs: media.durationMs ?? null,
+                metadata: stringifyJson(media.metadata),
+                createdAt: timestamp,
+                ownerEmail: input.ownerEmail,
+                orgId: input.orgId,
+            })));
+        if (input.item.edges?.length)
+            await tx.insert(schema.contextEdges).values(input.item.edges.map((edge) => ({
+                id: newId("cce"),
+                fromItemId: itemId,
+                fromItemVersionId: itemVersionId,
+                toItemId: edge.toItemId ?? null,
+                toItemVersionId: edge.toItemVersionId ?? null,
+                toExternalId: edge.toExternalId ?? null,
+                relation: edge.relation,
+                metadata: stringifyJson(edge.metadata),
+                createdAt: timestamp,
+                ownerEmail: input.ownerEmail,
+                orgId: input.orgId,
+            })));
+        await tx
+            .update(schema.contextSources)
+            .set({ updatedAt: timestamp })
+            .where(eq(schema.contextSources.id, input.sourceId));
+    });
+    return { itemId, itemVersionId };
+}
+async function readSnapshot(itemId, itemVersionId) {
+    const { getDb, schema } = getCreativeContext();
+    const [item] = await getDb()
+        .select()
+        .from(schema.contextItems)
+        .where(eq(schema.contextItems.id, itemId))
+        .limit(1);
+    const [version] = await getDb()
+        .select()
+        .from(schema.contextItemVersions)
+        .where(eq(schema.contextItemVersions.id, itemVersionId))
+        .limit(1);
+    if (!item || !version)
+        throw new Error("Staged context snapshot was not found");
+    const [chunks, media, edges] = await Promise.all([
+        getDb()
+            .select()
+            .from(schema.contextChunks)
+            .where(eq(schema.contextChunks.itemVersionId, itemVersionId)),
+        getDb()
+            .select()
+            .from(schema.contextMedia)
+            .where(eq(schema.contextMedia.itemVersionId, itemVersionId)),
+        getDb()
+            .select()
+            .from(schema.contextEdges)
+            .where(eq(schema.contextEdges.fromItemVersionId, itemVersionId)),
+    ]);
+    return {
+        externalId: item.externalId,
+        kind: item.kind,
+        title: version.title,
+        canonicalUrl: item.canonicalUrl ?? undefined,
+        mimeType: version.mimeType ?? undefined,
+        content: version.content,
+        summary: version.summary ?? undefined,
+        contentHash: version.contentHash,
+        sourceModifiedAt: version.sourceModifiedAt ?? undefined,
+        sourceVersion: version.sourceVersion ?? undefined,
+        rawSnapshotBlobRef: version.rawSnapshotBlobRef ?? undefined,
+        parseStatus: version.parseStatus,
+        parseError: version.parseError ?? undefined,
+        upstreamAccess: item.upstreamAccess,
+        curationStatus: "included",
+        curationRank: item.curationRank,
+        tags: parseJson(item.tags, []),
+        colors: parseJson(item.colors, []),
+        provenance: parseJson(item.provenance, {}),
+        thumbnailBlobRef: item.thumbnailBlobRef ?? undefined,
+        metadata: parseJson(version.metadata, {}),
+        chunks: chunks.map((row) => ({
+            ordinal: row.ordinal,
+            kind: row.kind,
+            text: row.text,
+            startOffset: row.startOffset ?? undefined,
+            endOffset: row.endOffset ?? undefined,
+            tokenCount: row.tokenCount ?? undefined,
+            metadata: parseJson(row.metadata, {}),
+        })),
+        media: media.map((row) => ({
+            kind: row.kind,
+            mimeType: row.mimeType ?? undefined,
+            accessMode: row.accessMode,
+            url: row.url ?? undefined,
+            storageKey: row.storageKey ?? undefined,
+            provenanceUrl: row.provenanceUrl ?? undefined,
+            altText: row.altText ?? undefined,
+            caption: row.caption ?? undefined,
+            captionStatus: row.captionStatus,
+            ocrText: row.ocrText ?? undefined,
+            palette: parseJson(row.palette, []),
+            contentHash: row.contentHash ?? undefined,
+            width: row.width ?? undefined,
+            height: row.height ?? undefined,
+            durationMs: row.durationMs ?? undefined,
+            metadata: parseJson(row.metadata, {}),
+        })),
+        edges: edges.map((row) => ({
+            relation: row.relation,
+            ...(row.toItemId ? { toItemId: row.toItemId } : {}),
+            ...(row.toItemVersionId ? { toItemVersionId: row.toItemVersionId } : {}),
+            ...(row.toExternalId ? { toExternalId: row.toExternalId } : {}),
+            metadata: parseJson(row.metadata, {}),
+        })),
+    };
+}
+export async function createCreativeContext(input) {
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    const timestamp = nowIso();
+    if (actor.orgId)
+        await assertCurrentRequestUserIsOrgAdmin(actor.orgId);
+    const defaultScopeKey = input.kind === "default" ? defaultContextScopeKey(actor) : null;
+    if (input.kind === "default") {
+        const existing = await getDb()
+            .select({ id: schema.creativeContexts.id })
+            .from(schema.creativeContexts)
+            .where(eq(schema.creativeContexts.defaultScopeKey, defaultScopeKey))
+            .limit(1);
+        if (existing[0])
+            return getCreativeContextById(existing[0].id);
+    }
+    const id = newId("ccx"), stagingSourceId = newId("ccs"), publishedSourceId = newId("ccs");
+    try {
+        await getDb().transaction(async (tx) => {
+            for (const [sourceId, name, purpose] of [
+                [stagingSourceId, `${input.name} staging`, "staging"],
+                [publishedSourceId, `${input.name} published`, "published"],
+            ])
+                await tx.insert(schema.contextSources).values({
+                    id: sourceId,
+                    name,
+                    kind: "native-app",
+                    config: stringifyJson({ governedContextId: id, purpose }),
+                    upstreamAccess: "available",
+                    status: "active",
+                    healthStatus: "healthy",
+                    itemCount: 0,
+                    restrictedItemCount: 0,
+                    createdAt: timestamp,
+                    updatedAt: timestamp,
+                    ownerEmail: actor.ownerEmail,
+                    orgId: actor.orgId,
+                    visibility: "private",
+                });
+            await tx.insert(schema.creativeContexts).values({
+                id,
+                name: input.name,
+                description: input.description ?? null,
+                kind: input.kind,
+                defaultScopeKey,
+                brandProfileId: input.brandProfileId ?? null,
+                stagingSourceId,
+                publishedSourceId,
+                approvalPolicy: input.approvalPolicy ?? "open",
+                archivedAt: null,
+                createdAt: timestamp,
+                updatedAt: timestamp,
+                ownerEmail: actor.ownerEmail,
+                orgId: actor.orgId,
+                visibility: actor.orgId ? "org" : "private",
+            });
+            await appendAudit(tx, id, "create", {
+                kind: input.kind,
+                approvalPolicy: input.approvalPolicy ?? "open",
+            });
+        });
+    }
+    catch (error) {
+        if (input.kind === "default") {
+            const existing = await getDb()
+                .select({ id: schema.creativeContexts.id })
+                .from(schema.creativeContexts)
+                .where(eq(schema.creativeContexts.defaultScopeKey, defaultScopeKey))
+                .limit(1);
+            if (existing[0])
+                return getCreativeContextById(existing[0].id);
+        }
+        throw error;
+    }
+    return getCreativeContextById(id);
+}
+/** Idempotently establishes the actor's governed Default with the currently usable corpus. */
+export async function ensureDefaultCreativeContext() {
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    const existing = await getDb()
+        .select()
+        .from(schema.creativeContexts)
+        .where(eq(schema.creativeContexts.defaultScopeKey, defaultContextScopeKey(actor)))
+        .limit(1);
+    if (existing[0])
+        return getCreativeContextById(existing[0].id);
+    if (actor.orgId && !(await currentRequestUserIsOrgAdmin(actor.orgId)))
+        return null;
+    const profileRows = await getDb()
+        .select({ id: schema.brandProfiles.id })
+        .from(schema.brandProfiles)
+        .innerJoin(schema.brandDnaVersions, eq(schema.brandDnaVersions.profileId, schema.brandProfiles.id))
+        .where(and(accessFilter(schema.brandProfiles, schema.brandProfileShares), eq(schema.brandDnaVersions.status, "published")))
+        .limit(1);
+    const created = await createCreativeContext({
+        name: "Default",
+        kind: "default",
+        brandProfileId: profileRows[0]?.id ?? null,
+        approvalPolicy: "open",
+    });
+    if (!created)
+        return null;
+    const corpus = await getDb()
+        .select({
+        itemId: schema.contextItems.id,
+        itemVersionId: schema.contextItems.currentVersionId,
+        sourceId: schema.contextSources.id,
+        externalId: schema.contextItems.externalId,
+        rank: schema.contextItems.curationRank,
+    })
+        .from(schema.contextItems)
+        .innerJoin(schema.contextSources, eq(schema.contextSources.id, schema.contextItems.sourceId))
+        .where(and(accessFilter(schema.contextSources, schema.contextSourceShares), ...(created.visibility === "org"
+        ? [inArray(schema.contextSources.visibility, ["org", "public"])]
+        : []), eq(schema.contextItems.curationStatus, "included"), eq(schema.contextItems.status, "active"), eq(schema.contextSources.status, "active"), eq(schema.contextSources.upstreamAccess, "available")))
+        .limit(5_000);
+    const timestamp = nowIso();
+    if (corpus.length)
+        await getDb().transaction(async (tx) => {
+            await tx.insert(schema.creativeContextMemberships).values(corpus.map((item) => ({
+                id: newId("ccmbr"),
+                contextId: created.id,
+                artifactKey: `${item.sourceId}:${item.externalId}`,
+                publishedItemId: item.itemId,
+                publishedItemVersionId: item.itemVersionId,
+                pendingSubmissionId: null,
+                rank: item.rank === "canonical" || item.rank === "exemplar"
+                    ? item.rank
+                    : "normal",
+                purpose: "Backfilled accessible corpus",
+                status: "active",
+                createdAt: timestamp,
+                updatedAt: timestamp,
+                ownerEmail: actor.ownerEmail,
+                orgId: actor.orgId,
+            })));
+            await appendAudit(tx, created.id, "backfill-default", {
+                members: corpus.length,
+                brandProfileId: profileRows[0]?.id ?? null,
+            });
+        });
+    return getCreativeContextById(created.id);
+}
+export async function getCreativeContextById(contextId) {
+    const access = await resolveAccess("creative-context", contextId);
+    if (!access)
+        return null;
+    const { getDb, schema } = getCreativeContext();
+    const [membershipCount] = await getDb()
+        .select({ value: count() })
+        .from(schema.creativeContextMemberships)
+        .where(and(eq(schema.creativeContextMemberships.contextId, contextId), eq(schema.creativeContextMemberships.status, "active")));
+    return mapContext(access.resource, Number(membershipCount?.value ?? 0), creativeContextAccessRole(access.role));
+}
+export async function getCreativeContextAppBinding(appId) {
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    const scope = actor.orgId
+        ? eq(schema.creativeContextAppBindings.orgId, actor.orgId)
+        : isNull(schema.creativeContextAppBindings.orgId);
+    const rows = await getDb()
+        .select({ contextId: schema.creativeContextAppBindings.contextId })
+        .from(schema.creativeContextAppBindings)
+        .where(and(eq(schema.creativeContextAppBindings.appId, appId), scope, ...(actor.orgId
+        ? []
+        : [
+            eq(schema.creativeContextAppBindings.ownerEmail, actor.ownerEmail),
+        ])))
+        .orderBy(asc(schema.creativeContextAppBindings.updatedAt))
+        .limit(1);
+    return rows[0] ? getCreativeContextById(rows[0].contextId) : null;
+}
+export async function listCreativeContexts(input) {
+    await ensureDefaultCreativeContext();
+    const { getDb, schema } = getCreativeContext();
+    const filters = [
+        accessFilter(schema.creativeContexts, schema.creativeContextShares),
+    ];
+    if (input.cursor)
+        filters.push(gt(schema.creativeContexts.id, input.cursor));
+    if (!input.includeArchived)
+        filters.push(isNull(schema.creativeContexts.archivedAt));
+    const rows = await getDb()
+        .select()
+        .from(schema.creativeContexts)
+        .where(and(...filters))
+        .orderBy(asc(schema.creativeContexts.id))
+        .limit(input.limit + 1);
+    const page = rows.slice(0, input.limit);
+    const counts = page.length
+        ? await getDb()
+            .select({
+            contextId: schema.creativeContextMemberships.contextId,
+            id: schema.creativeContextMemberships.id,
+        })
+            .from(schema.creativeContextMemberships)
+            .where(and(inArray(schema.creativeContextMemberships.contextId, page.map((row) => row.id)), eq(schema.creativeContextMemberships.status, "active")))
+        : [];
+    const byContext = new Map();
+    for (const row of counts)
+        byContext.set(row.contextId, (byContext.get(row.contextId) ?? 0) + 1);
+    const accessById = new Map((await Promise.all(page.map(async (row) => [row.id, await resolveAccess("creative-context", row.id)]))).flatMap(([id, access]) => (access ? [[id, access]] : [])));
+    return {
+        contexts: page.flatMap((row) => {
+            const access = accessById.get(row.id);
+            return access
+                ? [
+                    mapContext(row, byContext.get(row.id) ?? 0, creativeContextAccessRole(access.role)),
+                ]
+                : [];
+        }),
+        nextCursor: rows.length > input.limit ? page.at(-1)?.id : undefined,
+    };
+}
+export async function updateCreativeContext(contextId, patch) {
+    await assertContextRole(contextId, "admin");
+    const { getDb, schema } = getCreativeContext();
+    const values = { ...patch, updatedAt: nowIso() };
+    await getDb().transaction(async (tx) => {
+        await tx
+            .update(schema.creativeContexts)
+            .set(values)
+            .where(eq(schema.creativeContexts.id, contextId));
+        await appendAudit(tx, contextId, "update", { fields: Object.keys(patch) });
+    });
+    return getCreativeContextById(contextId);
+}
+export async function archiveCreativeContext(contextId) {
+    await assertContextRole(contextId, "admin");
+    const { getDb, schema } = getCreativeContext();
+    const [context] = await getDb()
+        .select({ kind: schema.creativeContexts.kind })
+        .from(schema.creativeContexts)
+        .where(eq(schema.creativeContexts.id, contextId))
+        .limit(1);
+    if (context?.kind === "default")
+        throw new Error("The Default Creative Context cannot be archived");
+    await getDb()
+        .update(schema.creativeContexts)
+        .set({ archivedAt: nowIso(), updatedAt: nowIso() })
+        .where(eq(schema.creativeContexts.id, contextId));
+    return getCreativeContextById(contextId);
+}
+export async function setCreativeContextAppDefault(contextId, appId) {
+    const access = await assertContextRole(contextId, "admin");
+    if (access.resource.orgId)
+        await assertCurrentRequestUserIsOrgAdmin(access.resource.orgId);
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    const timestamp = nowIso();
+    await getDb().transaction(async (tx) => {
+        await tx
+            .delete(schema.creativeContextAppBindings)
+            .where(and(eq(schema.creativeContextAppBindings.appId, appId), actor.orgId
+            ? eq(schema.creativeContextAppBindings.orgId, actor.orgId)
+            : and(isNull(schema.creativeContextAppBindings.orgId), eq(schema.creativeContextAppBindings.ownerEmail, actor.ownerEmail))));
+        await tx.insert(schema.creativeContextAppBindings).values({
+            id: newId("ccab"),
+            appId,
+            contextId,
+            createdAt: timestamp,
+            updatedAt: timestamp,
+            ownerEmail: actor.ownerEmail,
+            orgId: actor.orgId,
+        });
+        await appendAudit(tx, contextId, "set-app-default", { appId });
+    });
+    return getCreativeContextById(contextId);
+}
+export async function listContextMemberships(input) {
+    const access = await assertContextRole(input.contextId, "viewer");
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    const canReview = access.role === "owner" || access.role === "admin";
+    const filters = [
+        eq(schema.creativeContextMemberships.contextId, input.contextId),
+    ];
+    if (input.status)
+        filters.push(eq(schema.creativeContextMemberships.status, input.status));
+    if (input.cursor)
+        filters.push(gt(schema.creativeContextMemberships.id, input.cursor));
+    if (!canReview)
+        filters.push(or(isNotNull(schema.creativeContextMemberships.publishedItemId), eq(schema.creativeContextSubmissions.submittedBy, actor.ownerEmail)));
+    const rows = await getDb()
+        .select({
+        membership: schema.creativeContextMemberships,
+        pendingSubmission: schema.creativeContextSubmissions,
+    })
+        .from(schema.creativeContextMemberships)
+        .leftJoin(schema.creativeContextSubmissions, eq(schema.creativeContextSubmissions.id, schema.creativeContextMemberships.pendingSubmissionId))
+        .where(and(...filters))
+        .orderBy(asc(schema.creativeContextMemberships.id))
+        .limit(input.limit + 1);
+    const page = rows.slice(0, input.limit);
+    const canViewPendingSubmission = (submission) => Boolean(submission && (canReview || submission.submittedBy === actor.ownerEmail));
+    const publishedVersionIds = page.flatMap(({ membership }) => membership.publishedItemVersionId
+        ? [membership.publishedItemVersionId]
+        : []);
+    const pendingVersionIds = page.flatMap(({ pendingSubmission }) => canViewPendingSubmission(pendingSubmission) &&
+        pendingSubmission.stagingItemVersionId
+        ? [pendingSubmission.stagingItemVersionId]
+        : []);
+    const previewVersionIds = [
+        ...new Set([...publishedVersionIds, ...pendingVersionIds]),
+    ];
+    const [previewItems, previewMedia] = previewVersionIds.length
+        ? await Promise.all([
+            getDb()
+                .select({
+                id: schema.contextItems.id,
+                itemVersionId: schema.contextItemVersions.id,
+                title: schema.contextItemVersions.title,
+                kind: schema.contextItems.kind,
+                canonicalUrl: schema.contextItems.canonicalUrl,
+                status: schema.contextItems.status,
+                sourceModifiedAt: schema.contextItemVersions.sourceModifiedAt,
+                metadata: schema.contextItemVersions.metadata,
+            })
+                .from(schema.contextItemVersions)
+                .innerJoin(schema.contextItems, eq(schema.contextItems.id, schema.contextItemVersions.itemId))
+                .where(inArray(schema.contextItemVersions.id, previewVersionIds)),
+            getDb()
+                .select({
+                id: schema.contextMedia.id,
+                itemVersionId: schema.contextMedia.itemVersionId,
+                kind: schema.contextMedia.kind,
+                mimeType: schema.contextMedia.mimeType,
+            })
+                .from(schema.contextMedia)
+                .where(inArray(schema.contextMedia.itemVersionId, previewVersionIds)),
+        ])
+        : [[], []];
+    const mediaByVersion = new Map();
+    for (const media of previewMedia) {
+        const list = mediaByVersion.get(media.itemVersionId) ?? [];
+        list.push({
+            id: media.id,
+            kind: media.kind,
+            mimeType: media.mimeType ?? null,
+            url: creativeContextMediaUrl({ mediaId: media.id }),
+        });
+        mediaByVersion.set(media.itemVersionId, list);
+    }
+    const previewByVersion = new Map(previewItems.map((item) => {
+        const preview = sanitizePublicMetadata(parseJson(item.metadata, {}).preview);
+        return [
+            item.itemVersionId,
+            {
+                id: item.id,
+                itemVersionId: item.itemVersionId,
+                title: item.title,
+                kind: item.kind,
+                canonicalUrl: typeof sanitizePublicMetadata(item.canonicalUrl) === "string"
+                    ? sanitizePublicMetadata(item.canonicalUrl)
+                    : null,
+                status: item.status,
+                sourceModifiedAt: item.sourceModifiedAt ?? null,
+                media: mediaByVersion.get(item.itemVersionId) ?? [],
+                ...(preview && typeof preview === "object" && !Array.isArray(preview)
+                    ? { preview: preview }
+                    : {}),
+            },
+        ];
+    }));
+    return {
+        memberships: page.map(({ membership, pendingSubmission }) => {
+            const canViewPending = canViewPendingSubmission(pendingSubmission);
+            return {
+                ...mapMembership(canViewPending
+                    ? membership
+                    : { ...membership, pendingSubmissionId: null }),
+                publishedItem: membership.publishedItemVersionId
+                    ? (previewByVersion.get(membership.publishedItemVersionId) ?? null)
+                    : null,
+                pendingSubmission: canViewPending && pendingSubmission
+                    ? {
+                        ...mapSubmission(pendingSubmission),
+                        proposedItem: pendingSubmission.stagingItemVersionId
+                            ? (previewByVersion.get(pendingSubmission.stagingItemVersionId) ?? null)
+                            : null,
+                    }
+                    : null,
+            };
+        }),
+        nextCursor: rows.length > input.limit ? page.at(-1)?.membership.id : undefined,
+    };
+}
+/**
+ * Resolves private media for a pending submission without making the staged
+ * item generally readable. This is intentionally server-only: callers must
+ * already have an authenticated request context and can only read the exact
+ * staged version they submitted or are allowed to review.
+ */
+export async function readPendingCreativeContextMedia(input) {
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    let itemId = input.itemId;
+    let itemVersionId = input.itemVersionId;
+    let media = null;
+    if (input.mediaId) {
+        const rows = await getDb()
+            .select({
+            id: schema.contextMedia.id,
+            itemId: schema.contextMedia.itemId,
+            itemVersionId: schema.contextMedia.itemVersionId,
+            storageKey: schema.contextMedia.storageKey,
+            mimeType: schema.contextMedia.mimeType,
+        })
+            .from(schema.contextMedia)
+            .where(eq(schema.contextMedia.id, input.mediaId))
+            .limit(1);
+        media = rows[0] ?? null;
+        if (!media)
+            return null;
+        if ((itemId && itemId !== media.itemId) ||
+            (itemVersionId && itemVersionId !== media.itemVersionId)) {
+            return null;
+        }
+        itemId = media.itemId;
+        itemVersionId = media.itemVersionId;
+    }
+    if (!itemId || !itemVersionId)
+        return null;
+    const submissions = await getDb()
+        .select({
+        contextId: schema.creativeContextSubmissions.contextId,
+        submittedBy: schema.creativeContextSubmissions.submittedBy,
+    })
+        .from(schema.creativeContextSubmissions)
+        .where(and(eq(schema.creativeContextSubmissions.status, "pending"), eq(schema.creativeContextSubmissions.stagingItemId, itemId), eq(schema.creativeContextSubmissions.stagingItemVersionId, itemVersionId)))
+        .limit(1);
+    const submission = submissions[0];
+    if (!submission)
+        return null;
+    const access = await resolveAccess("creative-context", submission.contextId);
+    if (!access)
+        return null;
+    const canReview = access.role === "owner" || access.role === "admin";
+    if (!canReview && submission.submittedBy !== actor.ownerEmail)
+        return null;
+    if (media) {
+        return {
+            itemId,
+            itemVersionId,
+            mediaId: media.id,
+            storageKey: media.storageKey,
+            mimeType: media.mimeType,
+        };
+    }
+    const rows = await getDb()
+        .select({
+        thumbnailBlobRef: schema.contextItems.thumbnailBlobRef,
+        mimeType: schema.contextItemVersions.mimeType,
+    })
+        .from(schema.contextItemVersions)
+        .innerJoin(schema.contextItems, eq(schema.contextItems.id, schema.contextItemVersions.itemId))
+        .where(and(eq(schema.contextItems.id, itemId), eq(schema.contextItemVersions.id, itemVersionId)))
+        .limit(1);
+    const item = rows[0];
+    return item
+        ? {
+            itemId,
+            itemVersionId,
+            mediaId: null,
+            storageKey: item.thumbnailBlobRef,
+            mimeType: item.mimeType,
+        }
+        : null;
+}
+async function resolveSubmissionItem(input) {
+    if (input.nativeResource) {
+        const captured = await captureNativeCreativeResource(input.nativeResource);
+        if (!captured.items.length)
+            throw new Error("Native capture returned no artifacts");
+        return {
+            artifactKey: captured.artifactKey,
+            items: captured.items,
+            privateMetadata: {
+                ...(captured.privateMetadata ?? {}),
+                nativeResource: input.nativeResource,
+            },
+            sourceAccess: captured.source.access ?? null,
+        };
+    }
+    if (!input.itemId)
+        throw new Error("itemId or nativeResource is required");
+    const detail = await getCreativeContextItem(input.itemId, input.itemVersionId);
+    if (!detail)
+        throw new Error("Context item version not found or not accessible");
+    const sourceAccess = await resolveAccess("creative-context-source", detail.item.sourceId);
+    const children = await Promise.all(detail.edges
+        .filter((edge) => edge.relation === "contains-native-child" &&
+        typeof edge.toItemId === "string")
+        .map((edge) => getCreativeContextItem(edge.toItemId, edge.toItemVersionId ?? undefined)));
+    return {
+        artifactKey: `${detail.item.sourceId}:${detail.item.externalId}`,
+        items: [
+            normalizedFromDetail(detail),
+            ...children.flatMap((child) => child ? [normalizedFromDetail(child)] : []),
+        ],
+        privateMetadata: {},
+        sourceAccess: sourceAccess
+            ? {
+                visibility: sourceAccess.resource.visibility,
+                canManage: sourceAccess.role === "owner" || sourceAccess.role === "admin",
+            }
+            : null,
+    };
+}
+function visibilityRank(visibility) {
+    return visibility === "public" ? 2 : visibility === "org" ? 1 : 0;
+}
+async function approveSubmission(context, membership, submission) {
+    const { getDb, schema } = getCreativeContext();
+    const actor = requireActor();
+    const staged = await readSnapshot(submission.stagingItemId, submission.stagingItemVersionId);
+    const published = await writeSnapshot({
+        sourceId: context.publishedSourceId,
+        artifactKey: submission.artifactKey,
+        item: staged,
+        ownerEmail: context.ownerEmail,
+        orgId: context.orgId ?? null,
+    });
+    const privateMetadata = parseJson(submission.privateMetadata, {});
+    const publishedChildren = [];
+    for (const child of Array.isArray(privateMetadata.stagedChildren)
+        ? privateMetadata.stagedChildren
+        : []) {
+        if (typeof child.artifactKey !== "string" ||
+            typeof child.itemId !== "string" ||
+            typeof child.itemVersionId !== "string")
+            continue;
+        const publishedChild = await writeSnapshot({
+            sourceId: context.publishedSourceId,
+            artifactKey: child.artifactKey,
+            item: await readSnapshot(child.itemId, child.itemVersionId),
+            ownerEmail: context.ownerEmail,
+            orgId: context.orgId ?? null,
+        });
+        publishedChildren.push({
+            artifactKey: child.artifactKey,
+            ...publishedChild,
+        });
+    }
+    for (const child of publishedChildren) {
+        await getDb()
+            .update(schema.contextEdges)
+            .set({ toItemId: child.itemId, toItemVersionId: child.itemVersionId })
+            .where(and(eq(schema.contextEdges.fromItemVersionId, published.itemVersionId), eq(schema.contextEdges.toExternalId, child.artifactKey)));
+    }
+    const timestamp = nowIso();
+    await getDb().transaction(async (tx) => {
+        await tx
+            .update(schema.creativeContextSubmissions)
+            .set({
+            status: "approved",
+            publishedItemId: published.itemId,
+            publishedItemVersionId: published.itemVersionId,
+            reviewedBy: actor.ownerEmail,
+            reviewedAt: timestamp,
+        })
+            .where(eq(schema.creativeContextSubmissions.id, submission.id));
+        await tx
+            .update(schema.creativeContextMemberships)
+            .set({
+            publishedItemId: published.itemId,
+            publishedItemVersionId: published.itemVersionId,
+            pendingSubmissionId: null,
+            status: "active",
+            updatedAt: timestamp,
+        })
+            .where(eq(schema.creativeContextMemberships.id, membership.id));
+        for (const child of publishedChildren) {
+            const existingChild = await tx
+                .select({ id: schema.creativeContextMemberships.id })
+                .from(schema.creativeContextMemberships)
+                .where(and(eq(schema.creativeContextMemberships.contextId, context.id), eq(schema.creativeContextMemberships.artifactKey, child.artifactKey)))
+                .limit(1);
+            const values = {
+                publishedItemId: child.itemId,
+                publishedItemVersionId: child.itemVersionId,
+                pendingSubmissionId: null,
+                status: "active",
+                updatedAt: timestamp,
+            };
+            if (existingChild[0]) {
+                await tx
+                    .update(schema.creativeContextMemberships)
+                    .set(values)
+                    .where(eq(schema.creativeContextMemberships.id, existingChild[0].id));
+            }
+            else {
+                await tx.insert(schema.creativeContextMemberships).values({
+                    id: newId("ccmbr"),
+                    contextId: context.id,
+                    artifactKey: child.artifactKey,
+                    ...values,
+                    rank: "normal",
+                    purpose: "Native artifact child",
+                    createdAt: timestamp,
+                    ownerEmail: context.ownerEmail,
+                    orgId: context.orgId ?? null,
+                });
+            }
+        }
+        await tx.insert(schema.creativeContextPublishedSnapshots).values([
+            {
+                id: newId("ccps"),
+                contextId: context.id,
+                sourceId: context.publishedSourceId,
+                membershipId: membership.id,
+                itemId: published.itemId,
+                itemVersionId: published.itemVersionId,
+                submissionId: submission.id,
+                createdAt: timestamp,
+                ownerEmail: context.ownerEmail,
+                orgId: context.orgId ?? null,
+            },
+            ...publishedChildren.map((child) => ({
+                id: newId("ccps"),
+                contextId: context.id,
+                sourceId: context.publishedSourceId,
+                membershipId: membership.id,
+                itemId: child.itemId,
+                itemVersionId: child.itemVersionId,
+                submissionId: submission.id,
+                createdAt: timestamp,
+                ownerEmail: context.ownerEmail,
+                orgId: context.orgId ?? null,
+            })),
+        ]);
+        await appendAudit(tx, context.id, "approve-submission", {
+            submissionId: submission.id,
+            membershipId: membership.id,
+        });
+    });
+}
+export async function submitLatestContextMembershipUpdate(input) {
+    await assertContextRole(input.contextId, "editor");
+    const configured = getCreativeContext();
+    const { getDb, schema } = configured;
+    const [published] = await getDb()
+        .select({
+        membership: schema.creativeContextMemberships,
+        sourceModifiedAt: schema.contextItemVersions.sourceModifiedAt,
+    })
+        .from(schema.creativeContextMemberships)
+        .innerJoin(schema.contextItemVersions, eq(schema.contextItemVersions.id, schema.creativeContextMemberships.publishedItemVersionId))
+        .where(and(eq(schema.creativeContextMemberships.id, input.membershipId), eq(schema.creativeContextMemberships.contextId, input.contextId), eq(schema.creativeContextMemberships.status, "active")))
+        .limit(1);
+    if (!published)
+        throw new Error("Published context membership not found");
+    const reference = parseNativeCreativeArtifactKey(published.membership.artifactKey);
+    if (!reference || reference.appId !== configured.connectorContext.appId) {
+        throw new Error("This context membership is not backed by a native resource in the active app");
+    }
+    const statuses = await resolveNativeCreativeResourceUpdateStatuses([
+        {
+            key: published.membership.id,
+            ...reference,
+            publishedSourceModifiedAt: published.sourceModifiedAt,
+        },
+    ]);
+    const status = statuses.get(published.membership.id);
+    if (!status)
+        throw new Error("Native resource not found or update status is unavailable");
+    if (status.state !== "update-available")
+        throw new Error("This context membership is already up to date");
+    return manageContextMembership({
+        operation: "submit",
+        contextId: input.contextId,
+        nativeResource: status.reference,
+        note: input.note,
+        rank: published.membership.rank,
+        purpose: published.membership.purpose ?? undefined,
+        confirmBroaderPublication: input.confirmBroaderPublication,
+    });
+}
+export async function manageContextMembership(input) {
+    const { getDb, schema } = getCreativeContext();
+    const access = await assertContextRole(input.contextId, input.operation === "submit" ? "editor" : "viewer");
+    const [context] = await getDb()
+        .select()
+        .from(schema.creativeContexts)
+        .where(eq(schema.creativeContexts.id, access.resource.id))
+        .limit(1);
+    if (!context)
+        throw new Error("Creative Context no longer exists");
+    const actor = requireActor();
+    if (input.operation === "submit") {
+        const captured = await resolveSubmissionItem(input);
+        if (!captured.sourceAccess ||
+            visibilityRank(context.visibility) >
+                visibilityRank(captured.sourceAccess.visibility)) {
+            if (!captured.sourceAccess?.canManage) {
+                throw new Error("Only a source manager may publish this artifact into a broader Creative Context");
+            }
+            if (!input.confirmBroaderPublication) {
+                throw new Error("Confirm broader publication before submitting an artifact into a broader Creative Context");
+            }
+        }
+        const root = captured.items[0];
+        if (!root)
+            throw new Error("Submission did not include a root artifact");
+        const timestamp = nowIso();
+        let membership = (await getDb()
+            .select()
+            .from(schema.creativeContextMemberships)
+            .where(and(eq(schema.creativeContextMemberships.contextId, input.contextId), eq(schema.creativeContextMemberships.artifactKey, captured.artifactKey)))
+            .limit(1))[0];
+        const membershipId = membership?.id ?? newId("ccmbr");
+        const staged = await writeSnapshot({
+            sourceId: context.stagingSourceId,
+            artifactKey: captured.artifactKey,
+            item: root,
+            ownerEmail: context.ownerEmail,
+            orgId: context.orgId ?? null,
+        });
+        const stagedChildren = await Promise.all(captured.items.slice(1).map(async (item) => {
+            const snapshot = await writeSnapshot({
+                sourceId: context.stagingSourceId,
+                artifactKey: item.externalId,
+                item,
+                ownerEmail: context.ownerEmail,
+                orgId: context.orgId ?? null,
+            });
+            return {
+                artifactKey: item.externalId,
+                ...snapshot,
+            };
+        }));
+        for (const child of stagedChildren) {
+            await getDb()
+                .update(schema.contextEdges)
+                .set({ toItemId: child.itemId, toItemVersionId: child.itemVersionId })
+                .where(and(eq(schema.contextEdges.fromItemVersionId, staged.itemVersionId), eq(schema.contextEdges.toExternalId, child.artifactKey)));
+        }
+        const submissionId = newId("ccsub");
+        const autoApprove = context.approvalPolicy === "open" ||
+            (context.approvalPolicy === "admins-only" &&
+                (await currentRequestUserIsOrgAdmin(context.orgId ?? undefined)));
+        await getDb().transaction(async (tx) => {
+            if (membership?.pendingSubmissionId)
+                await tx
+                    .update(schema.creativeContextSubmissions)
+                    .set({
+                    status: "superseded",
+                    reviewedBy: actor.ownerEmail,
+                    reviewedAt: timestamp,
+                })
+                    .where(eq(schema.creativeContextSubmissions.id, membership.pendingSubmissionId));
+            if (!membership)
+                await tx.insert(schema.creativeContextMemberships).values({
+                    id: membershipId,
+                    contextId: input.contextId,
+                    artifactKey: captured.artifactKey,
+                    publishedItemId: null,
+                    publishedItemVersionId: null,
+                    pendingSubmissionId: submissionId,
+                    rank: input.rank ?? "normal",
+                    purpose: input.purpose ?? null,
+                    status: "active",
+                    createdAt: timestamp,
+                    updatedAt: timestamp,
+                    ownerEmail: context.ownerEmail,
+                    orgId: context.orgId ?? null,
+                });
+            else
+                await tx
+                    .update(schema.creativeContextMemberships)
+                    .set({
+                    pendingSubmissionId: submissionId,
+                    rank: input.rank ?? membership.rank,
+                    purpose: input.purpose ?? membership.purpose,
+                    status: "active",
+                    updatedAt: timestamp,
+                })
+                    .where(eq(schema.creativeContextMemberships.id, membershipId));
+            await tx.insert(schema.creativeContextSubmissions).values({
+                id: submissionId,
+                contextId: input.contextId,
+                membershipId,
+                artifactKey: captured.artifactKey,
+                stagingItemId: staged.itemId,
+                stagingItemVersionId: staged.itemVersionId,
+                publishedItemId: null,
+                publishedItemVersionId: null,
+                note: input.note ?? null,
+                privateMetadata: stringifyJson({
+                    ...captured.privateMetadata,
+                    stagedChildren,
+                }),
+                status: "pending",
+                submittedBy: actor.ownerEmail,
+                reviewedBy: null,
+                reviewNote: null,
+                createdAt: timestamp,
+                reviewedAt: null,
+                ownerEmail: context.ownerEmail,
+                orgId: context.orgId ?? null,
+            });
+            await appendAudit(tx, input.contextId, "submit", {
+                membershipId,
+                submissionId,
+                childCount: stagedChildren.length,
+            });
+        });
+        membership = { id: membershipId };
+        const submission = (await getDb()
+            .select()
+            .from(schema.creativeContextSubmissions)
+            .where(eq(schema.creativeContextSubmissions.id, submissionId))
+            .limit(1))[0];
+        if (autoApprove)
+            await approveSubmission(context, membership, submission);
+        return {
+            membershipId,
+            submission: mapSubmission((await getDb()
+                .select()
+                .from(schema.creativeContextSubmissions)
+                .where(eq(schema.creativeContextSubmissions.id, submissionId))
+                .limit(1))[0]),
+        };
+    }
+    if (!input.membershipId)
+        throw new Error("membershipId is required");
+    const membership = (await getDb()
+        .select()
+        .from(schema.creativeContextMemberships)
+        .where(and(eq(schema.creativeContextMemberships.id, input.membershipId), eq(schema.creativeContextMemberships.contextId, input.contextId)))
+        .limit(1))[0];
+    if (!membership)
+        throw new Error("Context membership not found");
+    if (input.operation === "remove") {
+        await requireReviewer(input.contextId);
+        const timestamp = nowIso();
+        await getDb().transaction(async (tx) => {
+            await tx
+                .update(schema.creativeContextMemberships)
+                .set({
+                status: "removed",
+                pendingSubmissionId: null,
+                updatedAt: timestamp,
+            })
+                .where(eq(schema.creativeContextMemberships.id, membership.id));
+            const snapshots = await tx
+                .select({
+                itemId: schema.creativeContextPublishedSnapshots.itemId,
+                itemVersionId: schema.creativeContextPublishedSnapshots.itemVersionId,
+            })
+                .from(schema.creativeContextPublishedSnapshots)
+                .where(eq(schema.creativeContextPublishedSnapshots.membershipId, membership.id));
+            const dependencies = snapshots.filter((snapshot) => snapshot.itemId !== membership.publishedItemId ||
+                snapshot.itemVersionId !== membership.publishedItemVersionId);
+            if (!dependencies.length)
+                return;
+            const dependentMemberships = await tx
+                .select({ id: schema.creativeContextMemberships.id })
+                .from(schema.creativeContextMemberships)
+                .where(and(eq(schema.creativeContextMemberships.contextId, input.contextId), eq(schema.creativeContextMemberships.status, "active"), eq(schema.creativeContextMemberships.purpose, "Native artifact child"), or(...dependencies.map((dependency) => and(eq(schema.creativeContextMemberships.publishedItemId, dependency.itemId), eq(schema.creativeContextMemberships.publishedItemVersionId, dependency.itemVersionId))))));
+            const dependentIds = dependentMemberships.map((row) => row.id);
+            if (dependentIds.length) {
+                await tx
+                    .update(schema.creativeContextMemberships)
+                    .set({
+                    status: "removed",
+                    pendingSubmissionId: null,
+                    updatedAt: timestamp,
+                })
+                    .where(inArray(schema.creativeContextMemberships.id, dependentIds));
+            }
+        });
+        return {
+            membership: mapMembership({
+                ...membership,
+                status: "removed",
+                pendingSubmissionId: null,
+            }),
+        };
+    }
+    const submission = membership.pendingSubmissionId
+        ? (await getDb()
+            .select()
+            .from(schema.creativeContextSubmissions)
+            .where(eq(schema.creativeContextSubmissions.id, membership.pendingSubmissionId))
+            .limit(1))[0]
+        : null;
+    if (!submission)
+        throw new Error("No pending submission for this membership");
+    if (input.operation === "withdraw") {
+        if (submission.submittedBy !== actor.ownerEmail)
+            await requireReviewer(input.contextId);
+        await getDb().transaction(async (tx) => {
+            await tx
+                .update(schema.creativeContextSubmissions)
+                .set({
+                status: "withdrawn",
+                reviewedBy: actor.ownerEmail,
+                reviewedAt: nowIso(),
+            })
+                .where(eq(schema.creativeContextSubmissions.id, submission.id));
+            await tx
+                .update(schema.creativeContextMemberships)
+                .set({ pendingSubmissionId: null, updatedAt: nowIso() })
+                .where(eq(schema.creativeContextMemberships.id, membership.id));
+        });
+        return { withdrawn: true };
+    }
+    await requireReviewer(input.contextId);
+    if (input.operation === "request-changes") {
+        await getDb().transaction(async (tx) => {
+            await tx
+                .update(schema.creativeContextSubmissions)
+                .set({
+                status: "rejected",
+                reviewedBy: actor.ownerEmail,
+                reviewNote: input.note ?? "Changes requested",
+                reviewedAt: nowIso(),
+            })
+                .where(eq(schema.creativeContextSubmissions.id, submission.id));
+            await tx
+                .update(schema.creativeContextMemberships)
+                .set({ pendingSubmissionId: null, updatedAt: nowIso() })
+                .where(eq(schema.creativeContextMemberships.id, membership.id));
+            await appendAudit(tx, input.contextId, "request-changes", {
+                submissionId: submission.id,
+            });
+        });
+        return { requestChanges: true };
+    }
+    await approveSubmission(context, membership, submission);
+    return { approved: true };
+}
+export async function resolveNativeContextCloneReference(input) {
+    await assertContextRole(input.contextId, "viewer");
+    const { getDb, schema } = getCreativeContext();
+    const [membership] = await getDb()
+        .select()
+        .from(schema.creativeContextMemberships)
+        .where(and(eq(schema.creativeContextMemberships.contextId, input.contextId), eq(schema.creativeContextMemberships.artifactKey, input.artifactKey), eq(schema.creativeContextMemberships.status, "active")))
+        .limit(1);
+    if (!membership?.publishedItemId || !membership?.publishedItemVersionId)
+        throw new Error("Creative context artifact is not published");
+    const [submission] = await getDb()
+        .select()
+        .from(schema.creativeContextSubmissions)
+        .where(and(eq(schema.creativeContextSubmissions.membershipId, membership.id), eq(schema.creativeContextSubmissions.status, "approved"), eq(schema.creativeContextSubmissions.publishedItemVersionId, membership.publishedItemVersionId)))
+        .limit(1);
+    const metadata = parseJson(submission?.privateMetadata, {});
+    const clone = metadata.clone;
+    if (!clone ||
+        !clone.handle ||
+        clone.appId !== input.appId ||
+        clone.resourceType !== input.resourceType ||
+        clone.resourceId !== input.resourceId ||
+        (input.expectedUpdatedAt !== undefined &&
+            clone.updatedAt !== input.expectedUpdatedAt))
+        throw new Error("Native creative resource reference does not match the governed context submission");
+    return {
+        publishedItemId: membership.publishedItemId,
+        publishedItemVersionId: membership.publishedItemVersionId,
+        cloneHandle: clone.handle,
+    };
+}
+//# sourceMappingURL=contexts.js.map