Method ListProtectionEventsByAgent

internal/identity/screening.go:106–124

ListProtectionEventsByAgent returns an agent's most recent screening events (newest first, capped by limit) for the security/analytics view.

(ctx context.Context, agentID string, limit int)

// ListProtectionEventsByAgent returns an agent's most recent screening events
// (newest first, capped by limit) for the security/analytics view.
func (s *Store) ListProtectionEventsByAgent(ctx context.Context, agentID string, limit int) ([]ProtectionEvent, error) {
	if limit <= 0 || limit > 1000 {
		limit = 100
	}
	rows, err := s.pool.Query(ctx,
		`SELECT id, message_id, agent_id, direction, source, reason, action,
		        subject_addr, detector, score, categories, spans, raw, created_at
		   FROM protection_events
		  WHERE agent_id = $1
		  ORDER BY created_at DESC, id
		  LIMIT $2`,
		agentID, limit,
	)
	if err != nil {
		return nil, fmt.Errorf("list screening events by agent: %w", err)
	}
	defer rows.Close()
	return scanProtectionEvents(rows)
}

// rowScanner is the minimal surface of pgx.Rows used here, so scanProtectionEvents
// stays decoupled from the concrete driver type.