@agent-native/creative-context 0.8.35 → 0.8.37-nightly-20261009093831

package/dist/store/generation.js

@@ -1,5 +1,5 @@
 import { assertAccess } from "@agent-native/core/sharing";
-import { and, desc, eq } from "drizzle-orm";
+import { and, desc, eq, isNull, sql } from "drizzle-orm";
 import { getCreativeContext } from "../server/context.js";
 import { assertGenerationArtifactAccessProof, } from "../server/generation-artifact-access.js";
 import { newId, nowIso, parseJson, requireActor, stringifyJson, } from "./helpers.js";
@@ -37,6 +37,15 @@ export function assertGenerationCreativeContextInvariants(input) {
     }
 }
 export async function recordGenerationCreativeContext(input, options = {}) {
+    return recordGenerationCreativeContextInternal(input, options, false);
+}
+export async function recordGenerationCreativeContextFromSnapshot(input, options = {}) {
+    if (!input.onlyIfMissing) {
+        throw new Error("Creative Context snapshots must be recorded idempotently");
+    }
+    return recordGenerationCreativeContextInternal(input, options, true);
+}
+async function recordGenerationCreativeContextInternal(input, options, fromValidatedSnapshot) {
     const elementProvenance = input.elementProvenance ??
         input.reuseLabels.map((label, index) => ({
             elementId: label.elementId ?? `reference:${index + 1}`,
@@ -51,10 +60,10 @@ export async function recordGenerationCreativeContext(input, options = {}) {
         reuseLabels: input.reuseLabels,
         elementProvenance,
     });
-    if (input.contextPackId) {
+    if (input.contextPackId && !fromValidatedSnapshot) {
         await assertAccess("creative-context-pack", input.contextPackId, "viewer", undefined, { skipResourceBody: true });
     }
-    if (input.contextPackId) {
+    if (input.contextPackId && !fromValidatedSnapshot) {
         const { getDb, schema } = getCreativeContext();
         const db = options.db ?? getDb();
         const members = await db
@@ -92,18 +101,57 @@ export async function recordGenerationCreativeContext(input, options = {}) {
         ownerEmail: actor.ownerEmail,
         orgId: options.artifactAccess ? actor.orgId : null,
     };
-    await db.insert(schema.generationRecords).values(row);
-    await getCreativeContext().projections?.generation?.record({
-        appId: input.appId,
-        artifactType: input.artifactType,
-        artifactId: input.artifactId,
-        contextPackId: input.contextPackId,
-        elementProvenance,
-    });
-    return {
-        ...row,
-        elementProvenance: parseJson(row.elementProvenance, []),
-    };
+    let recorded;
+    if (input.onlyIfMissing) {
+        // Matching retries can reach separate server processes, so coordinate in Postgres.
+        const scopeKey = options.artifactAccess
+            ? ["org", actor.orgId, input.appId, input.artifactType, input.artifactId]
+            : [
+                "owner",
+                actor.ownerEmail,
+                input.appId,
+                input.artifactType,
+                input.artifactId,
+            ];
+        recorded = await db.transaction(async (tx) => {
+            await tx.execute(sql `SELECT pg_advisory_xact_lock(hashtextextended(${`creative-context-generation:${JSON.stringify(scopeKey)}`}, 0::bigint))`);
+            const existing = await getGenerationCreativeContext({
+                appId: input.appId,
+                artifactType: input.artifactType,
+                artifactId: input.artifactId,
+            }, { artifactAccess: options.artifactAccess, db: tx });
+            if (existing)
+                return { record: existing, inserted: false };
+            await tx.insert(schema.generationRecords).values(row);
+            return {
+                record: {
+                    ...row,
+                    elementProvenance: parseJson(row.elementProvenance, []),
+                },
+                inserted: true,
+            };
+        });
+    }
+    else {
+        await db.insert(schema.generationRecords).values(row);
+        recorded = {
+            record: {
+                ...row,
+                elementProvenance: parseJson(row.elementProvenance, []),
+            },
+            inserted: true,
+        };
+    }
+    if (recorded.inserted || input.onlyIfMissing) {
+        await getCreativeContext().projections?.generation?.record({
+            appId: recorded.record.appId,
+            artifactType: recorded.record.artifactType,
+            artifactId: recorded.record.artifactId,
+            contextPackId: recorded.record.contextPackId,
+            elementProvenance: recorded.record.elementProvenance,
+        });
+    }
+    return recorded.record;
 }
 export async function getGenerationCreativeContext(input, options = {}) {
     const { getDb, schema } = getCreativeContext();
@@ -116,8 +164,8 @@ export async function getGenerationCreativeContext(input, options = {}) {
     }
     const actorScope = options.artifactAccess
         ? eq(schema.generationRecords.orgId, actor.orgId)
-        : eq(schema.generationRecords.ownerEmail, actor.ownerEmail);
-    const rows = await getDb()
+        : and(eq(schema.generationRecords.ownerEmail, actor.ownerEmail), isNull(schema.generationRecords.orgId));
+    const rows = await (options.db ?? getDb())
         .select()
         .from(schema.generationRecords)
         .where(and(eq(schema.generationRecords.appId, input.appId), eq(schema.generationRecords.artifactType, input.artifactType), eq(schema.generationRecords.artifactId, input.artifactId), actorScope))

package/dist/store/generation.js.map

@@ -1 +1 @@
-{"version":3,"file":"generation.js","sourceRoot":"","sources":["../../src/store/generation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,mCAAmC,GAEpC,MAAM,yCAAyC,CAAC;AAMjD,OAAO,EACL,KAAK,EACL,MAAM,EACN,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,yCAAyC,CAAC,KAKzD;IACC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,uBAAuB;YACrD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,GAAG,KAAK,CAAC,iBAAiB;KAC3B,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,WAAW,KAAK,KAAK;YAC3B,CAAC,SAAS,CAAC,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAQC,EACD,OAAO,GAGH,EAAE;IAEN,MAAM,iBAAiB,GACrB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,aAAa,KAAK,GAAG,CAAC,EAAE;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAK,uBAAiC;YAChE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,CAAC;IACN,yCAAyC,CAAC;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,YAAY,CAChB,uBAAuB,EACvB,KAAK,CAAC,aAAa,EACnB,QAAQ,EACR,SAAS,EACT,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAC3B,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACN,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;YACxC,aAAa,EAAE,MAAM,CAAC,kBAAkB,CAAC,aAAa;SACvD,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,CACzE,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACtC,IACE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;gBACrC,CAAC,CAAC,KAAK,CAAC,MAAM;oBACZ,CAAC,KAAK,CAAC,aAAa;oBACpB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,EACzD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,mCAAmC,CACjC,KAAK,EACL,OAAO,CAAC,cAAc,EACtB,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG;QACV,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,aAAa,CAAC,iBAAiB,CAAC;QACnD,SAAS,EAAE,MAAM,EAAE;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;IACF,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,kBAAkB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;QACzD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,GAAG;QACN,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAIC,EACD,OAAO,GAEH,EAAE;IAEN,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc;QACvC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAM,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;SAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAC/C,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,EAC7D,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACzD,UAAU,CACX,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,GAAG;QACR,CAAC,CAAC;YACE,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;YACxC,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACvD,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}
+{"version":3,"file":"generation.js","sourceRoot":"","sources":["../../src/store/generation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,mCAAmC,GAEpC,MAAM,yCAAyC,CAAC;AAMjD,OAAO,EACL,KAAK,EACL,MAAM,EACN,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,yCAAyC,CAAC,KAKzD;IACC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,uBAAuB;YACrD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,GAAG,KAAK,CAAC,iBAAiB;KAC3B,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,WAAW,KAAK,KAAK;YAC3B,CAAC,SAAS,CAAC,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KASC,EACD,OAAO,GAGH,EAAE;IAEN,OAAO,uCAAuC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,KASC,EACD,OAAO,GAGH,EAAE;IAEN,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,uCAAuC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,uCAAuC,CACpD,KASC,EACD,OAGC,EACD,qBAA8B;IAE9B,MAAM,iBAAiB,GACrB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,aAAa,KAAK,GAAG,CAAC,EAAE;YACtD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAK,uBAAiC;YAChE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,CAAC;IACN,yCAAyC,CAAC;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,YAAY,CAChB,uBAAuB,EACvB,KAAK,CAAC,aAAa,EACnB,QAAQ,EACR,SAAS,EACT,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAC3B,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACN,MAAM,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;YACxC,aAAa,EAAE,MAAM,CAAC,kBAAkB,CAAC,aAAa;SACvD,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,CACzE,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACtC,IACE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;gBACrC,CAAC,CAAC,KAAK,CAAC,MAAM;oBACZ,CAAC,KAAK,CAAC,aAAa;oBACpB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,EACzD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,mCAAmC,CACjC,KAAK,EACL,OAAO,CAAC,cAAc,EACtB,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG;QACV,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,aAAa,CAAC,iBAAiB,CAAC;QACnD,SAAS,EAAE,MAAM,EAAE;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;IACF,IAAI,QAGH,CAAC;IACF,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,mFAAmF;QACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc;YACrC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;YACzE,CAAC,CAAC;gBACE,OAAO;gBACP,KAAK,CAAC,UAAU;gBAChB,KAAK,CAAC,KAAK;gBACX,KAAK,CAAC,YAAY;gBAClB,KAAK,CAAC,UAAU;aACjB,CAAC;QACN,QAAQ,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAO,EAAE,EAAE;YAChD,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,iDAAiD,+BAA+B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,eAAe,CAC7H,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CACjD;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,EACD,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE,CACnD,CAAC;YACF,IAAI,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAE3D,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtD,OAAO;gBACL,MAAM,EAAE;oBACN,GAAG,GAAG;oBACN,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;iBACxD;gBACD,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,QAAQ,GAAG;YACT,MAAM,EAAE;gBACN,GAAG,GAAG;gBACN,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;aACxD;YACD,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,kBAAkB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;YACzD,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;YAC5B,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YAC1C,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;YACtC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa;YAC5C,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB;SACrD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAIC,EACD,OAAO,GAGH,EAAE;IAEN,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc;QACvC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAM,CAAC;QAClD,CAAC,CAAC,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACzD,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CACvC,CAAC;IACN,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;SACvC,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;SAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAC/C,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,EAC7D,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACzD,UAAU,CACX,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;SACjD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,GAAG;QACR,CAAC,CAAC;YACE,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;YACxC,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACvD,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/creative-context",
-  "version": "0.8.35",
+  "version": "0.8.37-nightly-20261009093831",
   "description": "Shared creative context ingestion, versioning, search, brand DNA, and context-pack primitives for agent-native apps.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -58,12 +58,12 @@
     "react-dom": "^19.2.7",
     "typescript-7": "npm:typescript@^7.0.2",
     "vitest": "^4.1.5",
-    "@agent-native/toolkit": "^0.204.0",
-    "@agent-native/core": "0.204.0"
+    "@agent-native/toolkit": "^0.206.0-nightly-20261009093831",
+    "@agent-native/core": "0.206.0-nightly-20261009093831"
   },
   "peerDependencies": {
-    "@agent-native/core": ">=0.190.0",
-    "@agent-native/toolkit": ">=0.1.0",
+    "@agent-native/core": "0.206.0-nightly-20261009093831",
+    "@agent-native/toolkit": "0.206.0-nightly-20261009093831",
     "@tabler/icons-react": ">=3.41.1",
     "@tanstack/react-query": ">=5.101.4",
     "drizzle-orm": ">=0.45",

package/src/actions/creative-context-a2a.spec.ts

@@ -6,8 +6,10 @@ const mocks = vi.hoisted(() => ({
   createResponseToken: vi.fn(),
   resolveLocal: vi.fn(),
   verifyArtifactAccess: vi.fn(),
+  verifySnapshotCapability: vi.fn(),
   getGeneration: vi.fn(),
   recordGeneration: vi.fn(),
+  recordGenerationFromSnapshot: vi.fn(),
 }));
 
 vi.mock("@agent-native/core/server", () => ({
@@ -25,11 +27,15 @@ vi.mock("../server/generation-context.js", () => ({
 
 vi.mock("../server/generation-artifact-access.js", () => ({
   verifyGenerationArtifactAccessCapability: mocks.verifyArtifactAccess,
+  verifyGenerationCreativeContextSnapshotCapability:
+    mocks.verifySnapshotCapability,
 }));
 
 vi.mock("../store/generation.js", () => ({
   getGenerationCreativeContext: mocks.getGeneration,
   recordGenerationCreativeContext: mocks.recordGeneration,
+  recordGenerationCreativeContextFromSnapshot:
+    mocks.recordGenerationFromSnapshot,
 }));
 
 import action from "./creative-context-a2a.js";
@@ -52,6 +58,7 @@ describe("creative-context-a2a receiver action", () => {
     });
     mocks.createResponseToken.mockReturnValue("response-token");
     mocks.verifyArtifactAccess.mockResolvedValue({ verified: true });
+    mocks.verifySnapshotCapability.mockResolvedValue(undefined);
     mocks.getGeneration.mockResolvedValue(null);
     mocks.recordGeneration.mockResolvedValue({
       id: "record-1",
@@ -63,6 +70,16 @@ describe("creative-context-a2a receiver action", () => {
       elementProvenance: [],
       createdAt: "2026-07-16T00:00:00.000Z",
     });
+    mocks.recordGenerationFromSnapshot.mockResolvedValue({
+      id: "record-1",
+      appId: "slides",
+      artifactType: "deck",
+      artifactId: "deck-1",
+      contextMode: "auto",
+      contextPackId: null,
+      elementProvenance: [],
+      createdAt: "2026-07-16T00:00:00.000Z",
+    });
   });
 
   it("executes the local operation and returns the opaque response token", async () => {
@@ -159,4 +176,86 @@ describe("creative-context-a2a receiver action", () => {
     );
     expect(mocks.recordGeneration).not.toHaveBeenCalled();
   });
+
+  it("records replayed provenance from a validated snapshot", async () => {
+    const record = {
+      appId: "slides",
+      artifactType: "deck",
+      artifactId: "deck-1",
+      contextMode: "auto",
+      contextPackId: null,
+      reuseLabels: [],
+      onlyIfMissing: true,
+    };
+    mocks.decodeRequest.mockReturnValue({
+      protocol: "creative-context-a2a-v1",
+      requestId: "87f466ae-32f4-4d0f-9de7-96f955e69f7b",
+      operation: "record",
+      payload: { ...record, snapshotCapability: "signed-snapshot-capability" },
+    });
+
+    await action.run({ requestToken: "request-token" });
+
+    expect(mocks.verifySnapshotCapability).toHaveBeenCalledWith(
+      "signed-snapshot-capability",
+      record,
+    );
+    expect(mocks.recordGenerationFromSnapshot).toHaveBeenCalledWith(record, {
+      artifactAccess: undefined,
+    });
+    expect(mocks.recordGeneration).not.toHaveBeenCalled();
+  });
+
+  it("does not bypass pack checks without a snapshot capability", async () => {
+    const record = {
+      appId: "slides",
+      artifactType: "deck",
+      artifactId: "deck-1",
+      contextMode: "pinned",
+      contextPackId: "pack-1",
+      reuseLabels: [],
+      onlyIfMissing: true,
+    };
+    mocks.decodeRequest.mockReturnValue({
+      protocol: "creative-context-a2a-v1",
+      requestId: "87f466ae-32f4-4d0f-9de7-96f955e69f7b",
+      operation: "record",
+      payload: record,
+    });
+
+    await action.run({ requestToken: "request-token" });
+
+    expect(mocks.verifySnapshotCapability).not.toHaveBeenCalled();
+    expect(mocks.recordGeneration).toHaveBeenCalledWith(record, {
+      artifactAccess: undefined,
+    });
+    expect(mocks.recordGenerationFromSnapshot).not.toHaveBeenCalled();
+  });
+
+  it("rejects an invalid snapshot capability before storing provenance", async () => {
+    const record = {
+      appId: "slides",
+      artifactType: "deck",
+      artifactId: "deck-1",
+      contextMode: "pinned",
+      contextPackId: "pack-1",
+      reuseLabels: [],
+      onlyIfMissing: true,
+    };
+    mocks.decodeRequest.mockReturnValue({
+      protocol: "creative-context-a2a-v1",
+      requestId: "87f466ae-32f4-4d0f-9de7-96f955e69f7b",
+      operation: "record",
+      payload: { ...record, snapshotCapability: "forged" },
+    });
+    mocks.verifySnapshotCapability.mockRejectedValue(
+      new Error("Invalid Creative Context snapshot capability"),
+    );
+
+    await expect(action.run({ requestToken: "request-token" })).rejects.toThrow(
+      /invalid creative context snapshot capability/i,
+    );
+    expect(mocks.recordGeneration).not.toHaveBeenCalled();
+    expect(mocks.recordGenerationFromSnapshot).not.toHaveBeenCalled();
+  });
 });

package/src/actions/creative-context-a2a.ts

@@ -2,7 +2,10 @@ import { defineAction } from "@agent-native/core/action";
 import { getRequestUserEmail } from "@agent-native/core/server";
 import { z } from "zod";
 
-import { verifyGenerationArtifactAccessCapability } from "../server/generation-artifact-access.js";
+import {
+  verifyGenerationArtifactAccessCapability,
+  verifyGenerationCreativeContextSnapshotCapability,
+} from "../server/generation-artifact-access.js";
 import {
   createCreativeContextA2AResponseToken,
   decodeCreativeContextA2ARequest,
@@ -60,7 +63,10 @@ export default defineAction({
       case "record": {
         const { recordGenerationCreativeContext } =
           await import("../store/generation.js");
-        const { artifactAccessCapability, ...record } = request.payload;
+        const { recordGenerationCreativeContextFromSnapshot } =
+          await import("../store/generation.js");
+        const { artifactAccessCapability, snapshotCapability, ...record } =
+          request.payload;
         const artifactAccess = artifactAccessCapability
           ? await verifyGenerationArtifactAccessCapability(
               artifactAccessCapability,
@@ -68,9 +74,20 @@ export default defineAction({
               "record",
             )
           : undefined;
-        result = await recordGenerationCreativeContext(record, {
-          artifactAccess,
-        });
+        if (snapshotCapability) {
+          const snapshot = { ...record, onlyIfMissing: true as const };
+          await verifyGenerationCreativeContextSnapshotCapability(
+            snapshotCapability,
+            snapshot,
+          );
+          result = await recordGenerationCreativeContextFromSnapshot(snapshot, {
+            artifactAccess,
+          });
+        } else {
+          result = await recordGenerationCreativeContext(record, {
+            artifactAccess,
+          });
+        }
         break;
       }
     }

package/src/server/context.ts

@@ -56,6 +56,8 @@ export interface CreativeContextProjectionAdapters {
     }): Promise<void>;
   };
   generation?: {
+    // onlyIfMissing retries can replay this after the SQL row commits.
+    // Implementations must upsert by the artifact identity.
     record(input: {
       appId: string;
       artifactType: string;

package/src/server/generation-artifact-access.spec.ts

@@ -18,7 +18,9 @@ vi.mock("@agent-native/core/server/request-context", () => ({
 import {
   assertGenerationArtifactAccessProof,
   createGenerationArtifactAccessCapability,
+  createGenerationCreativeContextSnapshotCapability,
   verifyGenerationArtifactAccessCapability,
+  verifyGenerationCreativeContextSnapshotCapability,
 } from "./generation-artifact-access.js";
 
 const originalKey = process.env.CREATIVE_CONTEXT_A2A_KEY;
@@ -27,6 +29,30 @@ const identity = {
   artifactType: "deck",
   artifactId: "deck-1",
 };
+const snapshot = {
+  ...identity,
+  contextMode: "pinned" as const,
+  contextPackId: "pack-1",
+  reuseLabels: [
+    {
+      itemId: "item-1",
+      itemVersionId: "version-1",
+      kind: "brand-voice",
+      label: "Voice reference",
+      dataRole: "untrusted-reference" as const,
+    },
+  ],
+  elementProvenance: [
+    {
+      elementId: "slide-1",
+      influence: "reference-conditioned" as const,
+      itemId: "item-1",
+      itemVersionId: "version-1",
+      label: "Voice reference",
+    },
+  ],
+  onlyIfMissing: true as const,
+};
 
 describe("generation artifact access capabilities", () => {
   beforeEach(() => {
@@ -146,4 +172,23 @@ describe("generation artifact access capabilities", () => {
       verifyGenerationArtifactAccessCapability(forged, identity, "read"),
     ).rejects.toThrow(/invalid generation artifact access capability/i);
   });
+
+  it("binds snapshot receipts to the exact provenance and caller", async () => {
+    const token =
+      await createGenerationCreativeContextSnapshotCapability(snapshot);
+
+    await expect(
+      verifyGenerationCreativeContextSnapshotCapability(token, snapshot),
+    ).resolves.toBeUndefined();
+    await expect(
+      verifyGenerationCreativeContextSnapshotCapability(token, {
+        ...snapshot,
+        contextPackId: "other-pack",
+      }),
+    ).rejects.toThrow(/invalid creative context snapshot capability/i);
+    mocks.getRequestUserEmail.mockReturnValue("mallory@example.test");
+    await expect(
+      verifyGenerationCreativeContextSnapshotCapability(token, snapshot),
+    ).rejects.toThrow(/invalid creative context snapshot capability/i);
+  });
 });

package/src/server/generation-artifact-access.ts

@@ -4,6 +4,11 @@ import {
 } from "@agent-native/core/server/request-context";
 import { assertAccess } from "@agent-native/core/sharing";
 
+import type {
+  CreativeContextElementProvenance,
+  CreativeContextReuseLabel,
+} from "../types.js";
+
 export interface GenerationArtifactIdentity {
   appId: string;
   artifactType: string;
@@ -40,6 +45,25 @@ interface CapabilityClaims {
 }
 
 const CAPABILITY_LIFETIME_MS = 60_000;
+const SNAPSHOT_CAPABILITY_LIFETIME_MS = 5 * 60_000;
+
+export type GenerationCreativeContextSnapshot = GenerationArtifactIdentity & {
+  contextMode: "off" | "auto" | "pinned";
+  contextPackId: string | null;
+  reuseLabels: CreativeContextReuseLabel[];
+  elementProvenance?: CreativeContextElementProvenance[];
+  onlyIfMissing: true;
+};
+
+interface SnapshotCapabilityClaims {
+  version: 1;
+  operation: "record-validated-snapshot";
+  identityKey: string;
+  snapshotDigest: string;
+  userEmail: string;
+  orgId: string | null;
+  expiresAt: number;
+}
 
 export function generationArtifactAccessRole(
   target: GenerationArtifactAccessTarget,
@@ -153,6 +177,65 @@ export async function verifyGenerationArtifactAccessCapability(
   return createProof(identity, operation, claims.minRole);
 }
 
+export async function createGenerationCreativeContextSnapshotCapability(
+  snapshot: GenerationCreativeContextSnapshot,
+): Promise<string> {
+  if (snapshot.onlyIfMissing !== true) {
+    throw new Error("Creative Context snapshot receipts require onlyIfMissing");
+  }
+  const actor = requireCapabilityActor();
+  const claims: SnapshotCapabilityClaims = {
+    version: 1,
+    operation: "record-validated-snapshot",
+    identityKey: generationIdentityKey(snapshot),
+    snapshotDigest: await generationSnapshotDigest(snapshot),
+    userEmail: actor.userEmail,
+    orgId: actor.orgId,
+    expiresAt: Date.now() + SNAPSHOT_CAPABILITY_LIFETIME_MS,
+  };
+  const encoded = Buffer.from(JSON.stringify(claims), "utf8").toString(
+    "base64url",
+  );
+  return `${encoded}.${await signCapability(encoded)}`;
+}
+
+export async function verifyGenerationCreativeContextSnapshotCapability(
+  token: string,
+  snapshot: GenerationCreativeContextSnapshot,
+): Promise<void> {
+  const [encoded, signature, extra] = token.split(".");
+  if (!encoded || !signature || extra) {
+    throw new Error("Invalid Creative Context snapshot capability");
+  }
+  const valid = await verifyCapabilitySignature(encoded, signature);
+  if (!valid) {
+    throw new Error("Invalid Creative Context snapshot capability");
+  }
+
+  let claims: SnapshotCapabilityClaims;
+  try {
+    claims = JSON.parse(
+      Buffer.from(encoded, "base64url").toString("utf8"),
+    ) as SnapshotCapabilityClaims;
+  } catch {
+    throw new Error("Invalid Creative Context snapshot capability");
+  }
+  const actor = requireCapabilityActor();
+  if (
+    claims.version !== 1 ||
+    claims.operation !== "record-validated-snapshot" ||
+    claims.identityKey !== generationIdentityKey(snapshot) ||
+    claims.snapshotDigest !== (await generationSnapshotDigest(snapshot)) ||
+    claims.userEmail !== actor.userEmail ||
+    claims.orgId !== actor.orgId ||
+    !Number.isSafeInteger(claims.expiresAt) ||
+    claims.expiresAt < Date.now() ||
+    claims.expiresAt > Date.now() + SNAPSHOT_CAPABILITY_LIFETIME_MS
+  ) {
+    throw new Error("Invalid Creative Context snapshot capability");
+  }
+}
+
 function createProof(
   identity: GenerationArtifactIdentity,
   operation: GenerationArtifactAccessOperation,
@@ -174,6 +257,40 @@ function generationIdentityKey(identity: GenerationArtifactIdentity): string {
   ]);
 }
 
+async function generationSnapshotDigest(
+  snapshot: GenerationCreativeContextSnapshot,
+): Promise<string> {
+  const canonicalSnapshot = JSON.stringify({
+    appId: snapshot.appId,
+    artifactType: snapshot.artifactType,
+    artifactId: snapshot.artifactId,
+    contextMode: snapshot.contextMode,
+    contextPackId: snapshot.contextPackId,
+    reuseLabels: snapshot.reuseLabels.map((label) => ({
+      itemId: label.itemId,
+      itemVersionId: label.itemVersionId,
+      kind: label.kind,
+      label: label.label,
+      dataRole: label.dataRole,
+      elementId: label.elementId,
+      influence: label.influence,
+    })),
+    elementProvenance: snapshot.elementProvenance?.map((entry) => ({
+      elementId: entry.elementId,
+      influence: entry.influence,
+      itemId: entry.itemId,
+      itemVersionId: entry.itemVersionId,
+      label: entry.label,
+    })),
+    onlyIfMissing: snapshot.onlyIfMissing,
+  });
+  const digest = await crypto.subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(canonicalSnapshot),
+  );
+  return Buffer.from(digest).toString("base64url");
+}
+
 function requireCapabilityActor(): {
   userEmail: string;
   orgId: string | null;