insika 0.1.0 → 0.2.0

data/lib/insika/wiring/graph.rb

@@ -2,7 +2,7 @@
 
 module Insika
   module Wiring
-    # SHARED composition core for both roots (§12 G4 / §11.2 B4): the minimal wiring
+    # SHARED composition core for both roots: the minimal wiring
     # (config/wiring.rb) and the concrete deployment (config/deployment.rb) were two
     # near-identical composition roots. The duplication — backend→stores, event
     # stream, registries + policy builtins, capability registry, hooks, the Executor,
@@ -28,7 +28,14 @@ module Insika
         db && !db.empty? ? Insika::Stores::SQLite.new(path: db) : Insika::Stores::Memory.new
       end
 
-      # Phase 1 — the infra spine that is IDENTICAL across roots. `extra_policy_
+      # an integer tick knob from the env, nil when unset (the caller's
+      # default wins). Dual-read honors the deprecated HARNESS_* alias.
+      def tick_env(name, env = ENV)
+        value = Insika::EnvSchema.read(name, env)
+        value&.to_i
+      end
+
+      # the infra spine that is IDENTICAL across roots. `extra_policy_
       # builtins` covers the one real divergence (the minimal wiring also registers
       # :workflow_allowlist; the deployment does not expose workflows).
       def spine(backend:, extra_policy_builtins: {})
@@ -38,14 +45,17 @@ module Insika
         pending_action_store = Insika::PendingActionStore.new(store: backend)
         delegation_store     = Insika::DelegationStore.new(store: backend)
         memory_store         = Insika::MemoryStore.new(store: backend)
-        # RFC-0011 §6.4/§6.5: the two durable halves of a Shape B channel — the
+        token_store          = Insika::TokenStore.new(store: backend)
+        budget_ledger        = Insika::BudgetLedger.new(store: backend)
+        circuit_state        = Insika::CircuitState.new(store: backend)
+        # the two durable halves of a Shape B channel — the
         # replies still owed to a platform, and the retry window that stops a
         # redelivered webhook from becoming a second turn. Built unconditionally
         # (they are empty and free when no channel is registered) so a deployment
         # that turns a channel on later finds its state already durable.
         outbox_store         = Insika::OutboxStore.new(store: backend)
         inbound_log          = Insika::InboundLog.new(store: backend)
-        # RFC-0013 phase A: refinement RUNS (reports over real traffic). Runtime data,
+        # refinement RUNS (reports over real traffic). Runtime data,
         # same backend as sessions/tasks — the collector and the command that write it
         # are the root's business (deployment-only, like the memory commands).
         refinement_store     = Insika::RefinementStore.new(store: backend)
@@ -65,6 +75,7 @@ module Insika
           checkpoint_store: checkpoint_store, pending_action_store: pending_action_store,
           delegation_store: delegation_store,
           memory_store: memory_store, refinement_store: refinement_store,
+          token_store: token_store, budget_ledger: budget_ledger, circuit_state: circuit_state,
           outbox_store: outbox_store, inbound_log: inbound_log,
           code_tool_registry: code_tool_registry,
           workflow_registry: workflow_registry, policy_registry: policy_registry,
@@ -73,16 +84,16 @@ module Insika
         )
       end
 
-      # Phase 2 — assemble the graph on top of a spine.
+      # assemble the graph on top of a spine.
       #
       # tool_registry:     effective registry the Executor uses (plain REGISTRY at the
       #                    base; OverlayToolRegistry in the deployment).
       # guardrails:        a Safety::Factory — its input_guardrail becomes the single
       #                    middleware and its output_validator the after-task hook, so
-      #                    both wirings compose RFC-0009 identically.
+      #                    both wirings compose identically.
       # executor_extra:    optional Executor kwargs a root adds (deployment passes
       #                    settings_store + tool_trace_store; the base passes none).
-      # edge_limiter:      optional EdgeLimiter (item 33 / §12 G7). It goes BEFORE
+      # edge_limiter:      optional EdgeLimiter. It goes BEFORE
       #                    the InputGuardrail so a flood can't spend the LLM
       #                    moderator; nil = no edge (parity).
       def build(spine:, profiles:, tool_registry:, tool_catalog:, skill_catalog:,
@@ -98,7 +109,7 @@ module Insika
           policy_registry: spine.policy_registry, event_stream: spine.event_stream
         )
 
-        # RFC-0011 §6.5. Always built: the registry starts empty, so `record` finds no
+        # Always built: the registry starts empty, so `record` finds no
         # channel and returns nil on every turn — the cost of wiring it is one nil
         # check per completed turn, and the alternative is a second wiring path that
         # only production exercises.
@@ -107,23 +118,49 @@ module Insika
           session_store: spine.session_store, event_stream: spine.event_stream
         )
 
-        executor = Insika::Executor.new(
-          context_builder: context_builder, policy_engine: policy_engine,
-          middleware: middleware, hooks: spine.hooks,
-          tool_registry: tool_registry, skill_catalog: skill_catalog, profiles: profiles,
-          session_store: spine.session_store, task_store: spine.task_store,
-          checkpoint_store: spine.checkpoint_store, event_stream: spine.event_stream,
-          workflow_registry: spine.workflow_registry, pending_action_store: spine.pending_action_store,
-          capability_registry: spine.capability_registry, tool_catalog: tool_catalog,
-          memory_store: spine.memory_store,
-          content_filter_factory: guardrails.content_filter_factory, # RFC-0009: stream redaction
-          delegation_store: spine.delegation_store, # RFC-0010 Fase 2: async delegation durability
-          channel_delivery: channel_delivery, # RFC-0011 §6.5: out-of-band reply delivery
-          **executor_extra
-        )
+# WS3 provider reliability (retries/backoff/fallback/breaker) is ALWAYS wired —
+      # the profile's `reliability` data gates it, so the bare wiring is unchanged.
+      reliability = Insika::Reliability.new(circuit_store: spine.circuit_state,
+                                            event_stream: spine.event_stream)
+      executor = Insika::Executor.new(
+        context_builder: context_builder, policy_engine: policy_engine,
+        middleware: middleware, hooks: spine.hooks,
+        tool_registry: tool_registry, skill_catalog: skill_catalog, profiles: profiles,
+        session_store: spine.session_store, task_store: spine.task_store,
+        checkpoint_store: spine.checkpoint_store, event_stream: spine.event_stream,
+        workflow_registry: spine.workflow_registry, pending_action_store: spine.pending_action_store,
+        capability_registry: spine.capability_registry, tool_catalog: tool_catalog,
+        memory_store: spine.memory_store,
+        content_filter_factory: guardrails.content_filter_factory, # stream redaction
+        delegation_store: spine.delegation_store, # async delegation durability
+        channel_delivery: channel_delivery, # out-of-band reply delivery
+        reliability: reliability, # WS3: retries/fallback/breaker (data-gated)
+        **executor_extra
+      )
 
         bus = build_core_bus(spine: spine, profiles: profiles, executor: executor)
 
+        # the periodic tick (outbox drain + stale recovery sweep). Built
+        # here, after the bus, because its recovery half dispatches resume_task
+        # through it; handed to the Executor, which starts it as a child of the
+        # turn supervisor in serving mode. `INSIKA_TICK_INTERVAL=0` disables.
+        executor.tick = Insika::Tick.new(
+          store: spine.backend, channel_delivery: channel_delivery,
+          recovery: Insika::Recovery.new(
+            task_store: spine.task_store, checkpoint_store: spine.checkpoint_store, command_bus: bus
+          ),
+          interval: tick_env("INSIKA_TICK_INTERVAL") || Insika::Tick::DEFAULT_INTERVAL,
+          stale_after: tick_env("INSIKA_TICK_STALE_AFTER") || Insika::Tick::DEFAULT_STALE_AFTER
+        )
+        # WS6 operator alerts: answers budget_warning / breaker_open /
+        # delivery_failed per agent (`alerts.webhook`) via the outbox+claim
+        # pipeline. Always wired — the per-agent data gates it (parity).
+        executor.alert_dispatcher = Insika::AlertDispatcher.new(
+          event_stream: spine.event_stream, outbox: spine.outbox_store,
+          channels: spine.channel_registry, profiles: profiles,
+          task_store: spine.task_store, http: Insika::HttpClient.new
+        )
+
         Graph::Result.new(
           backend: spine.backend, event_stream: spine.event_stream,
           session_store: spine.session_store, task_store: spine.task_store,
@@ -131,6 +168,8 @@ module Insika
           delegation_store: spine.delegation_store,
           memory_store: spine.memory_store, refinement_store: spine.refinement_store,
           outbox_store: spine.outbox_store, inbound_log: spine.inbound_log,
+          token_store: spine.token_store, budget_ledger: spine.budget_ledger,
+          circuit_state: spine.circuit_state,
           channel_registry: spine.channel_registry, channel_delivery: channel_delivery,
           code_tool_registry: spine.code_tool_registry,
           tool_registry: tool_registry, workflow_registry: spine.workflow_registry,
@@ -144,7 +183,7 @@ module Insika
 
       # The CORE command surface every root needs — turn essentials + the operator
       # controls (pause/approve) the Studio dispatches. Registering pause_task/
-      # approve_action HERE is the crux of B4: it retires the config.ru:28-34 patch.
+      # approve_action HERE is the crux of: it retires the config.ru:28-34 patch.
       def build_core_bus(spine:, profiles:, executor:)
         bus = Insika::CommandBus.new
         bus.register(:create_session,
@@ -163,6 +202,18 @@ module Insika
         bus.register(:resume_task,
                      Insika::Commands::ResumeTask.new(profiles: profiles, task_store: spine.task_store,
                                                        checkpoint_store: spine.checkpoint_store, executor: executor))
+        # WS1 multi-tenant credentials: per-tenant + operator tokens, stored as
+        # hashes. Operator-only BY CONSTRUCTION — the edge refuses a tenant
+        # principal on POST /v1/commands, and the handlers re-check meta.
+        bus.register(:issue_tenant_token,
+                     Insika::Commands::IssueTenantToken.new(token_store: spine.token_store,
+                                                            event_stream: spine.event_stream))
+        bus.register(:revoke_token,
+                     Insika::Commands::RevokeToken.new(token_store: spine.token_store,
+                                                       event_stream: spine.event_stream))
+        bus.register(:rotate_tenant_token,
+                     Insika::Commands::RotateTenantToken.new(token_store: spine.token_store,
+                                                             event_stream: spine.event_stream))
         bus
       end
 
@@ -171,7 +222,7 @@ module Insika
       Spine = Struct.new(
         :backend, :event_stream, :session_store, :task_store, :checkpoint_store,
         :pending_action_store, :delegation_store, :memory_store, :refinement_store,
-        :outbox_store, :inbound_log, :code_tool_registry,
+        :token_store, :budget_ledger, :circuit_state, :outbox_store, :inbound_log, :code_tool_registry,
         :workflow_registry, :policy_registry, :capability_registry, :hooks,
         :channel_registry, keyword_init: true
       )
@@ -182,8 +233,8 @@ module Insika
       Result = Struct.new(
         :backend, :event_stream,
         :session_store, :task_store, :checkpoint_store, :pending_action_store, :delegation_store,
-        :memory_store, :refinement_store, :outbox_store, :inbound_log,
-        :channel_registry, :channel_delivery,
+        :memory_store, :refinement_store, :outbox_store, :inbound_log, :token_store,
+        :budget_ledger, :circuit_state, :channel_registry, :channel_delivery,
         :code_tool_registry, :tool_registry, :workflow_registry, :policy_registry, :capability_registry,
         :tool_catalog, :skill_catalog, :prompt_catalog,
         :hooks, :guardrails, :middleware,

data/lib/insika/workflow.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Insika
-  # Workflow surface (item 22 / COMPETITIVE-ANALYSIS §4.4). A workflow is a Ruby
+  # Workflow surface (COMPETITIVE-ANALYSIS). A workflow is a Ruby
   # callable orchestrating RubyLLM Agents/Workflows FROM WITHIN (RubyLLM First);
   # its durable RUN is a Task (checkpointed, recoverable — stronger than Flue's
   # at-most-once run record). This module adds the EXPOSED surface the consumer

data/lib/insika/workflow_registry.rb

@@ -8,7 +8,7 @@ module Insika
   # checkpoint at the end. Nothing is validated at registration (the callable may come
   # via a factory block). Consumed by the TriggerWorkflow handler.
   #
-  # Item 22 / §4.4 — the EXPOSED surface: a registration may carry `input_schema:` /
+  # — the EXPOSED surface: a registration may carry `input_schema:` /
   # `output_schema:` (a JSON Schema Hash or any dry-schema-compatible validator) and a
   # `description:` in its metadata. `definition` bundles them with the factory into a
   # Workflow::Definition (schemas resolved, factory left lazy); `catalog` is the

data/lib/insika.rb

@@ -2,6 +2,13 @@
 
 require_relative "insika/version"
 require_relative "insika/errors"
+require_relative "insika/provider_error_classifier"
+require_relative "insika/token_store"
+require_relative "insika/budget_ledger"
+require_relative "insika/circuit_state"
+require_relative "insika/reliability"
+require_relative "insika/alert_dispatcher"
+require_relative "insika/channels/webhook"
 require_relative "insika/coercion"
 require_relative "insika/message_origin"
 require_relative "insika/env_schema"
@@ -20,12 +27,14 @@ require_relative "insika/checkpoint"
 require_relative "insika/command"
 require_relative "insika/hooks"
 require_relative "insika/middleware"
-# Production edge (item 33 / §12 G7): windowed counters + the rate-limit/cost
+# Production edge: windowed counters + the rate-limit/cost
 # Middleware. Both inert until configured (nil/0 = off).
 require_relative "insika/usage_ledger"
+require_relative "insika/budget_ledger"
 require_relative "insika/edge_limiter"
-# Content safety / guardrails (RFC-0009). detectors.rb is self-contained (the eval
-# requires it directly, D4); the rest hang off Middleware/hooks seams. No ruby_llm
+require_relative "insika/tool_output_compressor"
+# Content safety / guardrails. detectors.rb is self-contained (the eval
+# requires it directly); the rest hang off Middleware/hooks seams. No ruby_llm
 # at load-time — Factory requires the gem lazily, like the Executor's create_chat.
 require_relative "insika/safety/detectors"
 require_relative "insika/safety/safe_responses"
@@ -43,6 +52,7 @@ require_relative "insika/context/builder"
 require_relative "insika/context/providers/request"
 require_relative "insika/context/providers/prompt"
 require_relative "insika/context/providers/skill"
+require_relative "insika/context/providers/skill_trigger"
 require_relative "insika/context/providers/tool_search"
 require_relative "insika/context/providers/memory"
 require_relative "insika/context/providers/session"
@@ -65,7 +75,7 @@ require_relative "insika/task_store"
 require_relative "insika/checkpoint_store"
 require_relative "insika/pending_action_store"
 require_relative "insika/delegation_store"
-# Channels (RFC-0011): the outbound record + the inbound retry window. Both are
+# Channels: the outbound record + the inbound retry window. Both are
 # plain stores; the channel objects themselves come after the HTTP client.
 require_relative "insika/outbox_store"
 require_relative "insika/inbound_log"
@@ -77,7 +87,8 @@ require_relative "insika/skill_store"
 require_relative "insika/secret_masking"
 require_relative "insika/tool_store"
 require_relative "insika/tool_trace_store"
-# Refinement (RFC-0013 phase A): the run record + the evidence half of the loop.
+require_relative "insika/context_trace_store"
+# Refinement: the run record + the evidence half of the loop.
 # Reads sessions/tasks/traces above; requires Safety::Detectors (loaded earlier) for
 # the PII redaction of the snippets it puts in a report.
 require_relative "insika/refinement_store"
@@ -92,7 +103,7 @@ require_relative "insika/egress_guard"
 require_relative "insika/schema_guard"
 require_relative "insika/sandbox"
 require_relative "insika/http_client"
-# Channels (RFC-0011 §4/§6): the registry, the bundled relay adapter and the
+# Channels: the registry, the bundled relay adapter and the
 # out-of-band dispatcher. After http_client and egress_guard — the relay POSTs
 # through both — and after registry.rb, which ChannelRegistry extends.
 require_relative "insika/channel_registry"
@@ -103,11 +114,11 @@ require_relative "insika/overlay_tool_registry"
 require_relative "insika/settings_store"
 require_relative "insika/llm_provider_store"
 require_relative "insika/llm_configurator"
-# LLM-first onboarding surface (item 20 / §5.6): serves start.md + models.json + the
+# LLM-first onboarding surface: serves start.md + models.json + the
 # public docs. Reads the settings/provider stores above at call-time (order is free).
 require_relative "insika/onboarding"
-# Evals (RFC-0008) — the quality harness, moved under lib/ so the engine can call it
-# (the RFC-0013 refinement gate scores a candidate agent with the SAME judge the CLI
+# Evals — the quality harness, moved under lib/ so the engine can call it
+# (the refinement gate scores a candidate agent with the SAME judge the CLI
 # uses; a second copy would be the worst outcome). It stays a CLIENT of the engine:
 # HttpTransport talks to a running deployment, nothing here reads a store. Pure Ruby +
 # stdlib; the judge's provider call is injected, so no ruby_llm at load time.
@@ -119,14 +130,14 @@ require_relative "insika/evals/runner"
 require_relative "insika/evals/report"
 require_relative "insika/evals/baseline"
 require_relative "insika/evals/transport"
-# Authored eval cases (RFC-0013 §3.7): the corpus becomes editable without a
+# Authored eval cases: the corpus becomes editable without a
 # checkout. Requires the loader above (it is the one validator).
 require_relative "insika/golden_store"
 require_relative "insika/baseline_store"
-# RFC-0013 §3.5: scores a candidate by REPLAYING it. After evals (the runner and
+# scores a candidate by REPLAYING it. After evals (the runner and
 # the baseline comparison) and after the stores it clones an agent through.
 require_relative "insika/refinement/gate"
-# RFC-0013 §3.9 (phase D): the proposer PANEL and the run's token budget. Needs the
+# the proposer PANEL and the run's token budget. Needs the
 # candidate format and the gate's Report shape, so it loads after both.
 require_relative "insika/refinement/panel"
 require_relative "insika/mcp_store"
@@ -151,6 +162,7 @@ require_relative "insika/commands/write_agent_file"
 require_relative "insika/commands/delete_agent_file"
 require_relative "insika/commands/restore_agent_file"
 require_relative "insika/commands/write_skill"
+require_relative "insika/commands/delete_skill"
 require_relative "insika/commands/set_skill_agents"
 require_relative "insika/commands/memory_put_fact"
 require_relative "insika/commands/memory_forget_fact"
@@ -162,6 +174,9 @@ require_relative "insika/commands/write_golden"
 require_relative "insika/commands/update_settings"
 require_relative "insika/commands/upsert_llm_provider"
 require_relative "insika/commands/delete_llm_provider"
+require_relative "insika/commands/issue_tenant_token"
+require_relative "insika/commands/revoke_token"
+require_relative "insika/commands/rotate_tenant_token"
 require_relative "insika/commands/upsert_mcp"
 require_relative "insika/commands/delete_mcp"
 require_relative "insika/commands/write_system_file"
@@ -179,6 +194,7 @@ require_relative "insika/session_actor"
 require_relative "insika/skill_catalog"
 require_relative "insika/tool_catalog"
 require_relative "insika/steer_injector"
+require_relative "insika/loop_detector"
 require_relative "insika/turn_output"
 require_relative "insika/turn_state"
 require_relative "insika/turn_timing"
@@ -188,19 +204,20 @@ require_relative "insika/tool_assembly"
 require_relative "insika/chat_builder"
 require_relative "insika/executor"
 require_relative "insika/shutdown"
+require_relative "insika/tick"
 require_relative "insika/pack"
 require_relative "insika/pack_importer"
 require_relative "insika/telemetry"
-# Strict config + diagnosis (item 23 / §8.1). Doctor reads the config stores above;
+# Strict config + diagnosis. Doctor reads the config stores above;
 # EnvSchema (required at the top) is its env layer.
 require_relative "insika/doctor"
 # Shared composition core for both roots (config/wiring.rb + config/deployment.rb).
 # Only references the classes above at call-time, so require order is unconstrained.
 require_relative "insika/wiring/graph"
-# Public Ruby DSL (item 36): Insika.agent { … }. The Builder is gem-free (it only
+# Public Ruby DSL: Insika.agent { … }. The Builder is gem-free (it only
 # generates a Pack); the runtime (chat/serve) is required lazily by Definition, so
 # `require "insika"` stays free of ruby_llm and the HTTP server.
 require_relative "insika/dsl"
 # Do NOT require "insika/tools/load_skill" here: it does `require "ruby_llm"` at
 # the top (inherits from RubyLLM::Tool) and would pull the gem in at load-time. The
-# Executor loads it lazily inside create_chat (D9).
+# Executor loads it lazily inside create_chat.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: insika
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Guilherme Lages Santos
@@ -179,8 +179,10 @@ files:
 - lib/insika.rb
 - lib/insika/agent_file_store.rb
 - lib/insika/agent_profile.rb
+- lib/insika/alert_dispatcher.rb
 - lib/insika/allowlist.rb
 - lib/insika/baseline_store.rb
+- lib/insika/budget_ledger.rb
 - lib/insika/capability/resolved_tool.rb
 - lib/insika/capability_registry.rb
 - lib/insika/channel_delivery.rb
@@ -188,9 +190,11 @@ files:
 - lib/insika/channels/relay.rb
 - lib/insika/channels/web.rb
 - lib/insika/channels/web/widget.js
+- lib/insika/channels/webhook.rb
 - lib/insika/chat_builder.rb
 - lib/insika/checkpoint.rb
 - lib/insika/checkpoint_store.rb
+- lib/insika/circuit_state.rb
 - lib/insika/coercion.rb
 - lib/insika/command.rb
 - lib/insika/command_bus.rb
@@ -204,10 +208,12 @@ files:
 - lib/insika/commands/delete_data_tool.rb
 - lib/insika/commands/delete_llm_provider.rb
 - lib/insika/commands/delete_mcp.rb
+- lib/insika/commands/delete_skill.rb
 - lib/insika/commands/delete_system_file.rb
 - lib/insika/commands/gate_refinement.rb
 - lib/insika/commands/import_mcp_tools.rb
 - lib/insika/commands/import_tools.rb
+- lib/insika/commands/issue_tenant_token.rb
 - lib/insika/commands/memory_add_note.rb
 - lib/insika/commands/memory_forget_fact.rb
 - lib/insika/commands/memory_put_fact.rb
@@ -217,6 +223,8 @@ files:
 - lib/insika/commands/restore_data_tool.rb
 - lib/insika/commands/restore_system_file.rb
 - lib/insika/commands/resume_task.rb
+- lib/insika/commands/revoke_token.rb
+- lib/insika/commands/rotate_tenant_token.rb
 - lib/insika/commands/run_refinement.rb
 - lib/insika/commands/send_message.rb
 - lib/insika/commands/set_agent_tools.rb
@@ -242,7 +250,9 @@ files:
 - lib/insika/context/providers/request.rb
 - lib/insika/context/providers/session.rb
 - lib/insika/context/providers/skill.rb
+- lib/insika/context/providers/skill_trigger.rb
 - lib/insika/context/providers/tool_search.rb
+- lib/insika/context_trace_store.rb
 - lib/insika/delegation_store.rb
 - lib/insika/doctor.rb
 - lib/insika/dsl.rb
@@ -273,6 +283,7 @@ files:
 - lib/insika/inbound_log.rb
 - lib/insika/llm_configurator.rb
 - lib/insika/llm_provider_store.rb
+- lib/insika/loop_detector.rb
 - lib/insika/mcp_http_client.rb
 - lib/insika/mcp_store.rb
 - lib/insika/mcp_tool_ingestor.rb
@@ -295,6 +306,7 @@ files:
 - lib/insika/policy_registry.rb
 - lib/insika/profile_source.rb
 - lib/insika/prompt_catalog.rb
+- lib/insika/provider_error_classifier.rb
 - lib/insika/queue_policy.rb
 - lib/insika/recovery.rb
 - lib/insika/refinement/candidate.rb
@@ -304,6 +316,7 @@ files:
 - lib/insika/refinement/proposer.rb
 - lib/insika/refinement_store.rb
 - lib/insika/registry.rb
+- lib/insika/reliability.rb
 - lib/insika/safety/config.rb
 - lib/insika/safety/detectors.rb
 - lib/insika/safety/factory.rb
@@ -328,12 +341,12 @@ files:
 - lib/insika/server/a2a/protocol.rb
 - lib/insika/server/a2a/remotes.rb
 - lib/insika/server/a2a/task_projection.rb
-- lib/insika/server/admin_auth.rb
 - lib/insika/server/app.rb
 - lib/insika/server/boot.rb
 - lib/insika/server/rack_app.rb
 - lib/insika/server/responses.rb
 - lib/insika/server/sse_body.rb
+- lib/insika/server/tenant_auth.rb
 - lib/insika/session_actor.rb
 - lib/insika/session_store.rb
 - lib/insika/settings_store.rb
@@ -378,12 +391,15 @@ files:
 - lib/insika/telemetry/pricing.rb
 - lib/insika/telemetry/recorder.rb
 - lib/insika/testing/store_contract.rb
+- lib/insika/tick.rb
 - lib/insika/token_estimator.rb
+- lib/insika/token_store.rb
 - lib/insika/tool_assembly.rb
 - lib/insika/tool_catalog.rb
 - lib/insika/tool_definition.rb
 - lib/insika/tool_envelope.rb
 - lib/insika/tool_manifest.rb
+- lib/insika/tool_output_compressor.rb
 - lib/insika/tool_registry.rb
 - lib/insika/tool_store.rb
 - lib/insika/tool_trace_store.rb
@@ -393,6 +409,7 @@ files:
 - lib/insika/tools/data_defined_tool.rb
 - lib/insika/tools/load_skill.rb
 - lib/insika/tools/remember.rb
+- lib/insika/tools/stuck_signal.rb
 - lib/insika/tools/subagent.rb
 - lib/insika/tools/subagents.rb
 - lib/insika/tools/tool_search.rb

data/lib/insika/server/admin_auth.rb

@@ -1,29 +0,0 @@
-# frozen_string_literal: true
-
-require "rack"
-require "rack/utils"
-
-module Insika
-  module Server
-    # Minimal operator auth. Fail-closed BY CONSTRUCTION: with no
-    # token configured, /admin does not exist to the world (503) — never open
-    # by omission. Pure module, testable without a Rack env.
-    module AdminAuth
-      module_function
-
-      # config_token: config[:admin_token] (the wiring reads ADMIN_TOKEN).
-      # header: raw Authorization value.
-      # -> :disabled | :unauthorized | :ok
-      def check(config_token, header)
-        return :disabled if config_token.nil? || config_token.empty?
-
-        provided = header.to_s[/\ABearer (.+)\z/, 1]
-        return :unauthorized if provided.nil?
-        # Constant-time comparison: the operator token doesn't leak via timing.
-        return :unauthorized unless Rack::Utils.secure_compare(config_token, provided)
-
-        :ok
-      end
-    end
-  end
-end