feat: add config versioning with parent tracking and version history timeline

Adds bundle lineage tracking via parent_bundle_id and a dedicated version
history page showing config evolution with inline diff summaries between
consecutive versions.

Author: raffaelschneider

lib/sentinel_cp/bundles.ex

@@ -7,13 +7,17 @@ defmodule SentinelCp.Bundles do
   """
 
   import Ecto.Query, warn: false
+  alias SentinelCp.Bundles.{Bundle, Diff}
   alias SentinelCp.Repo
-  alias SentinelCp.Bundles.Bundle
 
   @doc """
   Creates a bundle and enqueues compilation.
+
+  Automatically links the new bundle to the latest compiled bundle
+  for the same project as its parent.
   """
   def create_bundle(attrs) do
+    attrs = maybe_link_parent(attrs)
     changeset = Bundle.create_changeset(%Bundle{}, attrs)
 
     case Repo.insert(changeset) do
@@ -26,6 +30,19 @@ defmodule SentinelCp.Bundles do
     end
   end
 
+  defp maybe_link_parent(attrs) do
+    project_id = attrs[:project_id] || attrs["project_id"]
+
+    if project_id do
+      case get_latest_bundle(project_id) do
+        %Bundle{id: parent_id} -> Map.put(attrs, :parent_bundle_id, parent_id)
+        nil -> attrs
+      end
+    else
+      attrs
+    end
+  end
+
   @doc """
   Lists bundles for a project, ordered by most recent first.
   """
@@ -167,6 +184,70 @@ defmodule SentinelCp.Bundles do
     {:error, :cannot_delete_active_bundle}
   end
 
+  @doc """
+  Gets a bundle by ID with its parent bundle preloaded.
+  """
+  def get_bundle_with_parent(id) do
+    Bundle
+    |> Repo.get(id)
+    |> Repo.preload(:parent_bundle)
+  end
+
+  @doc """
+  Returns the chronologically previous compiled bundle for the same project.
+  """
+  def get_previous_bundle(bundle, project_id) do
+    from(b in Bundle,
+      where: b.project_id == ^project_id,
+      where: b.status == "compiled",
+      where: b.id != ^bundle.id,
+      where:
+        b.inserted_at < ^bundle.inserted_at or
+          (b.inserted_at == ^bundle.inserted_at and b.id < ^bundle.id),
+      order_by: [desc: b.inserted_at, desc: b.id],
+      limit: 1
+    )
+    |> Repo.one()
+  end
+
+  @doc """
+  Returns bundle version history for a project with diff summaries.
+
+  Lists compiled and failed bundles ordered by insertion time (newest first).
+  For each consecutive pair, precomputes diff stats and semantic summaries.
+
+  Returns `{bundles, diff_summaries}` where `diff_summaries` is a map of
+  `bundle_id => %{stats: ..., semantic: ...}`.
+  """
+  def list_bundle_history(project_id, opts \\ []) do
+    limit = Keyword.get(opts, :limit, 100)
+
+    bundles =
+      from(b in Bundle,
+        where: b.project_id == ^project_id,
+        where: b.status in ["compiled", "failed", "superseded", "revoked"],
+        order_by: [desc: b.inserted_at, desc: b.id],
+        limit: ^limit
+      )
+      |> Repo.all()
+
+    diff_summaries = compute_diff_summaries(bundles)
+
+    {bundles, diff_summaries}
+  end
+
+  defp compute_diff_summaries(bundles) do
+    bundles
+    |> Enum.chunk_every(2, 1, :discard)
+    |> Enum.reduce(%{}, fn [newer, older], acc ->
+      config_diff = Diff.config_diff(older, newer)
+      stats = Diff.diff_stats(config_diff)
+      semantic = Diff.semantic_diff(older, newer)
+
+      Map.put(acc, newer.id, %{stats: stats, semantic: semantic})
+    end)
+  end
+
   # Enqueue compilation via Oban
   defp enqueue_compilation(bundle) do
     %{bundle_id: bundle.id}

lib/sentinel_cp/bundles/bundle.ex

@@ -34,6 +34,7 @@ defmodule SentinelCp.Bundles.Bundle do
     field :sbom_format, :string
 
     belongs_to :project, SentinelCp.Projects.Project
+    belongs_to :parent_bundle, SentinelCp.Bundles.Bundle
 
     timestamps(type: :utc_datetime)
   end
@@ -49,7 +50,8 @@ defmodule SentinelCp.Bundles.Bundle do
       :source_type,
       :source_ref,
       :source_branch,
-      :source_repo
+      :source_repo,
+      :parent_bundle_id
     ])
     |> validate_required([:version, :config_source, :project_id])
     |> validate_length(:version, min: 1, max: 100)
@@ -58,6 +60,7 @@ defmodule SentinelCp.Bundles.Bundle do
     |> put_change(:status, "pending")
     |> unique_constraint([:project_id, :version])
     |> foreign_key_constraint(:project_id)
+    |> foreign_key_constraint(:parent_bundle_id)
   end
 
   def compilation_changeset(bundle, attrs) do

lib/sentinel_cp_web/graphql/types/bundle.ex

@@ -14,6 +14,8 @@ defmodule SentinelCpWeb.GraphQL.Types.Bundle do
     end
 
     field :size_bytes, :integer
+    field :risk_level, :string
+    field :parent_bundle_id, :id
     field :inserted_at, non_null(:datetime)
   end