@absolutejs/absolute 0.19.0-beta.616 → 0.19.0-beta.618

package/dist/ai/index.js

@@ -2054,6 +2054,7 @@ var createRAGFileRetrievalLaneHandoffDecisionStore = (path) => ({
 });
 var createRAGFileRetrievalReleaseIncidentStore = (path) => ({
   listIncidents: async ({
+    corpusGroupKey,
     groupKey,
     limit,
     severity,
@@ -2070,7 +2071,7 @@ var createRAGFileRetrievalReleaseIncidentStore = (path) => ({
         throw error;
       }
     }
-    const filtered = parsed.filter((entry) => (!groupKey || entry.groupKey === groupKey) && (!targetRolloutLabel || entry.targetRolloutLabel === targetRolloutLabel) && (!severity || entry.severity === severity) && (!status || entry.status === status));
+    const filtered = parsed.filter((entry) => (!corpusGroupKey || entry.corpusGroupKey === corpusGroupKey) && (!groupKey || entry.groupKey === groupKey) && (!targetRolloutLabel || entry.targetRolloutLabel === targetRolloutLabel) && (!severity || entry.severity === severity) && (!status || entry.status === status));
     const sorted = normalizeRetrievalReleaseIncidentRecords(filtered);
     return typeof limit === "number" ? sorted.slice(0, limit) : sorted;
   },
@@ -2995,16 +2996,32 @@ var loadRAGRetrievalComparisonHistory = async ({
   suiteId,
   label,
   winnerId,
+  corpusGroupKey,
   groupKey,
   tag
-}) => normalizeRetrievalComparisonRuns(await Promise.resolve(store.listRuns({ groupKey, label, limit, suiteId, tag, winnerId })));
+}) => normalizeRetrievalComparisonRuns(await Promise.resolve(store.listRuns({
+  corpusGroupKey,
+  groupKey,
+  label,
+  limit,
+  suiteId,
+  tag,
+  winnerId
+})));
 var loadRAGRetrievalBaselines = async ({
   store,
+  corpusGroupKey,
   groupKey,
   tag,
   limit,
   status
-}) => normalizeRetrievalBaselineRecords(await Promise.resolve(store.listBaselines({ groupKey, limit, status, tag })));
+}) => normalizeRetrievalBaselineRecords(await Promise.resolve(store.listBaselines({
+  corpusGroupKey,
+  groupKey,
+  limit,
+  status,
+  tag
+})));
 var persistRAGRetrievalBaseline = async ({
   store,
   record
@@ -3014,18 +3031,21 @@ var persistRAGRetrievalBaseline = async ({
 };
 var loadRAGRetrievalReleaseDecisions = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   kind
-}) => normalizeRetrievalReleaseDecisionRecords(await Promise.resolve(store.listDecisions({ groupKey, kind, limit })));
+}) => normalizeRetrievalReleaseDecisionRecords(await Promise.resolve(store.listDecisions({ corpusGroupKey, groupKey, kind, limit })));
 var loadRAGRetrievalLaneHandoffDecisions = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   kind,
   sourceRolloutLabel,
   targetRolloutLabel
 }) => normalizeRetrievalLaneHandoffDecisionRecords(await Promise.resolve(store.listDecisions({
+  corpusGroupKey,
   groupKey,
   kind,
   limit,
@@ -3034,12 +3054,14 @@ var loadRAGRetrievalLaneHandoffDecisions = async ({
 })));
 var loadRAGRetrievalReleaseIncidents = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   targetRolloutLabel,
   status,
   severity
 }) => normalizeRetrievalReleaseIncidentRecords(await Promise.resolve(store.listIncidents({
+  corpusGroupKey,
   groupKey,
   limit,
   severity,
@@ -3048,12 +3070,14 @@ var loadRAGRetrievalReleaseIncidents = async ({
 })));
 var loadRAGRetrievalLaneHandoffIncidents = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   targetRolloutLabel,
   status,
   severity
 }) => normalizeRetrievalReleaseIncidentRecords(await Promise.resolve(store.listIncidents({
+  corpusGroupKey,
   groupKey,
   limit,
   severity,
@@ -3062,12 +3086,14 @@ var loadRAGRetrievalLaneHandoffIncidents = async ({
 })));
 var loadRAGRetrievalLaneHandoffIncidentHistory = async ({
   store,
+  corpusGroupKey,
   action,
   groupKey,
   incidentId,
   limit,
   targetRolloutLabel
 }) => await Promise.resolve(store.listRecords({
+  corpusGroupKey,
   action,
   groupKey,
   incidentId,
@@ -3112,21 +3138,25 @@ var loadRAGRetrievalIncidentRemediationExecutionHistory = async ({
 })));
 var loadRAGRetrievalLaneHandoffAutoCompletePolicyHistory = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   targetRolloutLabel
 }) => await Promise.resolve(store.listRecords({
+  corpusGroupKey,
   groupKey,
   limit,
   targetRolloutLabel
 }));
 var loadRAGRetrievalReleaseLanePolicyHistory = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   rolloutLabel,
   scope
 }) => await Promise.resolve(store.listRecords({
+  corpusGroupKey,
   groupKey,
   limit,
   rolloutLabel,
@@ -3134,11 +3164,13 @@ var loadRAGRetrievalReleaseLanePolicyHistory = async ({
 }));
 var loadRAGRetrievalBaselineGatePolicyHistory = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   rolloutLabel,
   scope
 }) => await Promise.resolve(store.listRecords({
+  corpusGroupKey,
   groupKey,
   limit,
   rolloutLabel,
@@ -3146,6 +3178,7 @@ var loadRAGRetrievalBaselineGatePolicyHistory = async ({
 }));
 var loadRAGRetrievalReleaseLaneEscalationPolicyHistory = async ({
   store,
+  corpusGroupKey,
   groupKey,
   limit,
   targetRolloutLabel
@@ -12208,6 +12241,7 @@ var ragChat = (config) => {
     const requiredMetadata = scope.requiredMetadata && Object.keys(scope.requiredMetadata).length > 0 ? scope.requiredMetadata : undefined;
     return {
       allowedComparisonGroupKeys: normalizeStringArray3(scope.allowedComparisonGroupKeys),
+      allowedCorpusGroupKeys: normalizeStringArray3(scope.allowedCorpusGroupKeys),
       allowedCorpusKeys: normalizeStringArray3(scope.allowedCorpusKeys),
       allowedDocumentIds: normalizeStringArray3(scope.allowedDocumentIds),
       allowedSourcePrefixes: normalizeStringArray3(scope.allowedSourcePrefixes),
@@ -12243,8 +12277,26 @@ var ragChat = (config) => {
     return matchesRequiredMetadata(scope.requiredMetadata, input.metadata);
   };
   const matchesSyncSourceScope = (scope, source) => !scope?.allowedSyncSourceIds?.length || scope.allowedSyncSourceIds.includes(source.id);
+  const deriveCorpusGroupKey = (input) => {
+    const explicitCorpusGroupKey = input.corpusGroupKey?.trim();
+    if (explicitCorpusGroupKey) {
+      return explicitCorpusGroupKey;
+    }
+    const normalizedCorpusKeys = [
+      ...new Set((input.corpusKeys ?? []).map((value) => value.trim()).filter((value) => value.length > 0))
+    ].sort((left, right) => left.localeCompare(right));
+    if (normalizedCorpusKeys.length === 0) {
+      return;
+    }
+    if (normalizedCorpusKeys.length === 1) {
+      return normalizedCorpusKeys[0];
+    }
+    return normalizedCorpusKeys.join("+");
+  };
+  const isAllowedCorpusGroupKey = (scope, corpusGroupKey) => !scope?.allowedCorpusGroupKeys?.length || typeof corpusGroupKey === "string" && scope.allowedCorpusGroupKeys.includes(corpusGroupKey);
   const isAllowedComparisonGroupKey = (scope, groupKey) => !scope?.allowedComparisonGroupKeys?.length || typeof groupKey === "string" && scope.allowedComparisonGroupKeys.includes(groupKey);
   const filterByComparisonGroupKey = (scope, records) => scope?.allowedComparisonGroupKeys?.length ? records.filter((record) => isAllowedComparisonGroupKey(scope, record.groupKey)) : records;
+  const filterByCorpusGroupKey = (scope, records) => scope?.allowedCorpusGroupKeys?.length ? records.filter((record) => isAllowedCorpusGroupKey(scope, record.corpusGroupKey)) : records;
   const persistJobStateIfConfigured = async () => {
     if (!jobStateStore) {
       return;
@@ -12755,6 +12807,7 @@ var ragChat = (config) => {
       ...input,
       baselineRetrievalId: getStringProperty(body, "baselineRetrievalId"),
       candidateRetrievalId: getStringProperty(body, "candidateRetrievalId"),
+      corpusGroupKey: getStringProperty(body, "corpusGroupKey"),
       groupKey: getStringProperty(body, "groupKey"),
       label: getStringProperty(body, "label"),
       persistRun: getBooleanProperty(body, "persistRun") === true,
@@ -12772,6 +12825,7 @@ var ragChat = (config) => {
       return null;
     }
     return {
+      corpusGroupKey: getStringProperty(body, "corpusGroupKey"),
       groupKey,
       approvedAt: getIntegerLikeProperty(body, "approvedAt"),
       approvedBy: getStringProperty(body, "approvedBy"),
@@ -12800,6 +12854,7 @@ var ragChat = (config) => {
       return null;
     }
     return {
+      corpusGroupKey: getStringProperty(body, "corpusGroupKey"),
       groupKey,
       overrideGate: getBooleanProperty(body, "overrideGate") === true,
       overrideReason: getStringProperty(body, "overrideReason"),
@@ -12830,6 +12885,7 @@ var ragChat = (config) => {
       return null;
     }
     return {
+      corpusGroupKey: getStringProperty(body, "corpusGroupKey"),
       groupKey,
       approvedAt: getIntegerLikeProperty(body, "approvedAt"),
       approvedBy: getStringProperty(body, "approvedBy"),
@@ -12876,6 +12932,7 @@ var ragChat = (config) => {
     }
     return {
       candidateRetrievalId: getStringProperty(body, "candidateRetrievalId"),
+      corpusGroupKey: getStringProperty(body, "corpusGroupKey"),
       decidedAt: getIntegerLikeProperty(body, "decidedAt"),
       decidedBy: getStringProperty(body, "decidedBy"),
       executePromotion: getBooleanProperty(body, "executePromotion") === true,
@@ -13230,6 +13287,12 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    if (!isAllowedCorpusGroupKey(accessScope, input.corpusGroupKey)) {
+      return {
+        error: "Retrieval comparison corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     for (const evaluationCase of input.cases) {
       if (evaluationCase.corpusKey && !matchesAccessScope(accessScope, {
         corpusKey: evaluationCase.corpusKey
@@ -13275,6 +13338,19 @@ var ragChat = (config) => {
         label: suiteLabel
       }
     });
+    const corpusGroupKey = deriveCorpusGroupKey({
+      corpusGroupKey: input.corpusGroupKey,
+      corpusKeys: comparison.corpusKeys
+    });
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval comparison corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (corpusGroupKey) {
+      comparison.corpusGroupKey = corpusGroupKey;
+    }
     if (input.persistRun && retrievalComparisonHistoryStore) {
       const finishedAt = Date.now();
       const decisionSummary = buildRAGRetrievalComparisonDecisionSummary({
@@ -13286,6 +13362,7 @@ var ragChat = (config) => {
       await persistRAGRetrievalComparisonRun({
         run: {
           comparison,
+          corpusGroupKey,
           corpusKeys: comparison.corpusKeys,
           decisionSummary,
           elapsedMs: finishedAt - startedAt,
@@ -13319,13 +13396,21 @@ var ragChat = (config) => {
     }
     const accessScope = await loadAccessScope(request);
     const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
     if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
       return {
         error: "Retrieval comparison group is outside the allowed RAG access scope",
         ok: false
       };
     }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval comparison corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const runs = await loadRAGRetrievalComparisonHistory({
+      corpusGroupKey,
       groupKey,
       label: getStringProperty(queryInput, "label"),
       limit: getIntegerLikeProperty(queryInput, "limit"),
@@ -13336,7 +13421,7 @@ var ragChat = (config) => {
     });
     return {
       ok: true,
-      runs: filterByComparisonGroupKey(accessScope, runs)
+      runs: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, runs))
     };
   };
   const handleRetrievalBaselineList = async (queryInput, request) => {
@@ -13348,13 +13433,21 @@ var ragChat = (config) => {
     }
     const accessScope = await loadAccessScope(request);
     const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
     if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
       return {
         error: "Retrieval baseline group is outside the allowed RAG access scope",
         ok: false
       };
     }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval baseline corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const baselines = await loadRAGRetrievalBaselines({
+      corpusGroupKey,
       groupKey,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       status: getStringProperty(queryInput, "status") === "active" || getStringProperty(queryInput, "status") === "superseded" ? getStringProperty(queryInput, "status") : undefined,
@@ -13362,7 +13455,7 @@ var ragChat = (config) => {
       tag: getStringProperty(queryInput, "tag")
     });
     return {
-      baselines: filterByComparisonGroupKey(accessScope, baselines),
+      baselines: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, baselines)),
       ok: true
     };
   };
@@ -13373,6 +13466,7 @@ var ragChat = (config) => {
     await persistRAGRetrievalReleaseDecision({
       record: {
         baselineId: input.baseline?.id,
+        corpusGroupKey: input.baseline?.corpusGroupKey ?? input.corpusGroupKey,
         decidedAt: input.baseline?.promotedAt ?? input.decidedAt ?? Date.now(),
         decidedBy: input.decidedBy,
         groupKey: input.baseline?.groupKey ?? input.groupKey,
@@ -13489,6 +13583,7 @@ var ragChat = (config) => {
     await persistRAGRetrievalLaneHandoffIncidentHistory({
       record: {
         action: input.action,
+        corpusGroupKey: input.incident.corpusGroupKey,
         groupKey: input.incident.groupKey,
         id: generateId(),
         incidentId: input.incident.id,
@@ -13511,6 +13606,7 @@ var ragChat = (config) => {
     await persistRAGRetrievalLaneHandoffAutoCompletePolicyHistory({
       record: {
         changeKind: input.changeKind,
+        corpusGroupKey: input.corpusGroupKey,
         enabled: input.enabled,
         groupKey: input.groupKey,
         id: generateId(),
@@ -13531,6 +13627,7 @@ var ragChat = (config) => {
       record: {
         approvalMaxAgeMs: input.approvalMaxAgeMs,
         changeKind: input.changeKind,
+        corpusGroupKey: input.corpusGroupKey,
         groupKey: input.groupKey,
         id: generateId(),
         previousApprovalMaxAgeMs: input.previousApprovalMaxAgeMs,
@@ -13550,6 +13647,7 @@ var ragChat = (config) => {
     await persistRAGRetrievalBaselineGatePolicyHistory({
       record: {
         changeKind: input.changeKind,
+        corpusGroupKey: input.corpusGroupKey,
         groupKey: input.groupKey,
         id: generateId(),
         policy: input.policy,
@@ -13569,6 +13667,7 @@ var ragChat = (config) => {
       record: {
         approvalExpiredSeverity: input.approvalExpiredSeverity,
         changeKind: input.changeKind,
+        corpusGroupKey: input.corpusGroupKey,
         gateFailureSeverity: input.gateFailureSeverity,
         groupKey: input.groupKey,
         id: generateId(),
@@ -13592,6 +13691,24 @@ var ragChat = (config) => {
       limit: 100,
       store: config.retrievalReleaseIncidentStore
     });
+    const baselineCorpusGroups = config.retrievalBaselineStore ? await loadRAGRetrievalBaselines({
+      limit: 200,
+      store: config.retrievalBaselineStore
+    }) : [];
+    const comparisonRunCorpusGroups = config.retrievalComparisonHistoryStore ? await loadRAGRetrievalComparisonHistory({
+      limit: 200,
+      store: config.retrievalComparisonHistoryStore
+    }) : [];
+    const releaseDecisionCorpusGroups = config.retrievalReleaseDecisionStore ? await loadRAGRetrievalReleaseDecisions({
+      limit: 200,
+      store: config.retrievalReleaseDecisionStore
+    }) : [];
+    const resolveIncidentCorpusGroupKey = (groupKey) => {
+      if (!groupKey) {
+        return;
+      }
+      return existing.find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey ?? comparisonRunCorpusGroups.find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey ?? baselineCorpusGroups.find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey ?? releaseDecisionCorpusGroups.find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey;
+    };
     const nextByKey = new Map;
     for (const candidate of input.promotionCandidates) {
       if (!candidate.groupKey || !candidate.targetRolloutLabel) {
@@ -13605,6 +13722,7 @@ var ragChat = (config) => {
       nextByKey.set(key, {
         baselineRetrievalId: candidate.baselineRetrievalId,
         candidateRetrievalId: candidate.candidateRetrievalId,
+        corpusGroupKey: resolveIncidentCorpusGroupKey(candidate.groupKey),
         groupKey: candidate.groupKey,
         id: key,
         kind,
@@ -13630,6 +13748,7 @@ var ragChat = (config) => {
       nextByKey.set(key, {
         baselineRetrievalId: handoff.targetBaselineRetrievalId,
         candidateRetrievalId: handoff.candidateRetrievalId,
+        corpusGroupKey: handoff.corpusGroupKey,
         groupKey: handoff.groupKey,
         id: key,
         kind: "handoff_stale",
@@ -13642,7 +13761,7 @@ var ragChat = (config) => {
       });
     }
     for (const incident of nextByKey.values()) {
-      const matchingIncidents = existing.filter((entry) => entry.groupKey === incident.groupKey && entry.kind === incident.kind && (entry.targetRolloutLabel ?? undefined) === (incident.targetRolloutLabel ?? undefined)).sort((left, right) => right.triggeredAt - left.triggeredAt);
+      const matchingIncidents = existing.filter((entry) => entry.corpusGroupKey === incident.corpusGroupKey && entry.groupKey === incident.groupKey && entry.kind === incident.kind && (entry.targetRolloutLabel ?? undefined) === (incident.targetRolloutLabel ?? undefined)).sort((left, right) => right.triggeredAt - left.triggeredAt);
       const openIncident = matchingIncidents.find((entry) => entry.status === "open");
       const latestMatchingIncident = matchingIncidents[0];
       if (!openIncident) {
@@ -13657,6 +13776,7 @@ var ragChat = (config) => {
           const matchingHandoff = (input.handoffs ?? []).find((entry) => entry.groupKey === incident.groupKey && entry.targetRolloutLabel === incident.targetRolloutLabel);
           const laneIncident = {
             ...incident,
+            corpusGroupKey: matchingHandoff?.corpusGroupKey,
             kind: "handoff_stale",
             sourceRolloutLabel: matchingHandoff?.sourceRolloutLabel
           };
@@ -14056,6 +14176,7 @@ var ragChat = (config) => {
         approvedAt: input.approvedAt,
         approvedBy: input.approvedBy,
         approvalNotes: input.approvalNotes,
+        corpusGroupKey: input.corpusGroupKey,
         groupKey: input.groupKey,
         id: generateId(),
         label: input.label ?? input.retrievalId,
@@ -14089,6 +14210,19 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    if (!isAllowedComparisonGroupKey(accessScope, input.groupKey)) {
+      return {
+        error: "Retrieval baseline group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, input.corpusGroupKey)) {
+      return {
+        error: "Retrieval baseline corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const job = createAdminJob("promote_retrieval_baseline", input.groupKey);
     const action = createAdminAction("promote_retrieval_baseline", undefined, input.groupKey);
     try {
@@ -14131,6 +14265,7 @@ var ragChat = (config) => {
         approvedAt: input.approvedAt,
         approvedBy: input.approvedBy,
         approvalNotes: input.approvalNotes,
+        corpusGroupKey: input.corpusGroupKey,
         groupKey: input.groupKey,
         label: input.label,
         metadata: input.metadata,
@@ -14144,6 +14279,7 @@ var ragChat = (config) => {
       });
       await persistRetrievalReleaseDecisionIfConfigured({
         baseline,
+        corpusGroupKey: baseline.corpusGroupKey,
         decidedBy: input.approvedBy,
         kind: "promote",
         notes: input.approvalNotes,
@@ -14186,6 +14322,19 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    if (!isAllowedComparisonGroupKey(accessScope, input.groupKey)) {
+      return {
+        error: "Retrieval baseline group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, input.corpusGroupKey)) {
+      return {
+        error: "Retrieval baseline corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const job = createAdminJob("promote_retrieval_baseline", input.groupKey);
     const action = createAdminAction("promote_retrieval_baseline", undefined, input.groupKey);
     try {
@@ -14197,6 +14346,13 @@ var ragChat = (config) => {
       if (!sourceRun) {
         throw new Error("Retrieval comparison run was not found");
       }
+      const corpusGroupKey = deriveCorpusGroupKey({
+        corpusGroupKey: input.corpusGroupKey ?? sourceRun.corpusGroupKey ?? sourceRun.comparison.corpusGroupKey,
+        corpusKeys: sourceRun.corpusKeys ?? sourceRun.comparison.corpusKeys
+      });
+      if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+        throw new Error("Retrieval baseline corpus group is outside the allowed RAG access scope");
+      }
       const retrievalId = input.retrievalId ?? sourceRun.decisionSummary?.candidateRetrievalId ?? sourceRun.comparison.summary.bestByPassingRate ?? sourceRun.comparison.entries[0]?.retrievalId;
       if (!retrievalId) {
         throw new Error("Unable to resolve retrieval candidate from comparison run");
@@ -14228,6 +14384,7 @@ var ragChat = (config) => {
         approvedAt: input.approvedAt,
         approvedBy: input.approvedBy,
         approvalNotes: input.approvalNotes,
+        corpusGroupKey,
         groupKey: input.groupKey,
         label: entry?.label ?? retrievalId,
         metadata: input.metadata,
@@ -14241,6 +14398,7 @@ var ragChat = (config) => {
       });
       await persistRetrievalReleaseDecisionIfConfigured({
         baseline,
+        corpusGroupKey,
         decidedBy: input.approvedBy,
         gateStatus: gate?.status,
         kind: "promote",
@@ -14286,6 +14444,19 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    if (!isAllowedComparisonGroupKey(accessScope, input.groupKey)) {
+      return {
+        error: "Retrieval baseline group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, input.corpusGroupKey)) {
+      return {
+        error: "Retrieval baseline corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const job = createAdminJob("revert_retrieval_baseline", input.groupKey);
     const action = createAdminAction("revert_retrieval_baseline", undefined, input.groupKey);
     try {
@@ -14297,10 +14468,14 @@ var ragChat = (config) => {
       if (!targetBaseline) {
         throw new Error("Retrieval baseline version was not found");
       }
+      if (!isAllowedCorpusGroupKey(accessScope, targetBaseline.corpusGroupKey)) {
+        throw new Error("Retrieval baseline corpus group is outside the allowed RAG access scope");
+      }
       const baseline = await promoteRetrievalBaselineRecord({
         approvedAt: input.approvedAt,
         approvedBy: input.approvedBy,
         approvalNotes: input.approvalNotes,
+        corpusGroupKey: targetBaseline.corpusGroupKey,
         groupKey: input.groupKey,
         label: targetBaseline.label,
         metadata: {
@@ -14317,6 +14492,7 @@ var ragChat = (config) => {
       });
       await persistRetrievalReleaseDecisionIfConfigured({
         baseline,
+        corpusGroupKey: baseline.corpusGroupKey,
         decidedBy: input.approvedBy,
         kind: "revert",
         notes: input.approvalNotes,
@@ -14356,23 +14532,31 @@ var ragChat = (config) => {
     }
     const accessScope = await loadAccessScope(request);
     const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
     if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
       return {
         error: "Retrieval release decision group is outside the allowed RAG access scope",
         ok: false
       };
     }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval release decision corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const kind = getStringProperty(queryInput, "kind");
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const freshnessStatusFilter = getStringProperty(queryInput, "freshnessStatus");
     const decisions = await loadRAGRetrievalReleaseDecisions({
+      corpusGroupKey,
       groupKey,
       kind: kind === "approve" || kind === "promote" || kind === "reject" || kind === "revert" ? kind : undefined,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       store: config.retrievalReleaseDecisionStore
     });
     return {
-      decisions: filterByComparisonGroupKey(accessScope, decisions).map((decision) => ({
+      decisions: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, decisions)).map((decision) => ({
         ...decision,
         ...getDecisionFreshness({ record: decision })
       })).filter((decision) => {
@@ -14404,6 +14588,13 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    if (!isAllowedComparisonGroupKey(accessScope, input.groupKey)) {
+      return {
+        error: "Retrieval release decision group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const runs = await loadRAGRetrievalComparisonHistory({
       groupKey: input.groupKey,
       store: retrievalComparisonHistoryStore
@@ -14415,6 +14606,16 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const corpusGroupKey = deriveCorpusGroupKey({
+      corpusGroupKey: sourceRun.corpusGroupKey ?? sourceRun.comparison.corpusGroupKey,
+      corpusKeys: sourceRun.corpusKeys ?? sourceRun.comparison.corpusKeys
+    });
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval release decision corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const retrievalId = input.retrievalId ?? sourceRun.decisionSummary?.candidateRetrievalId ?? sourceRun.comparison.summary.bestByPassingRate ?? sourceRun.comparison.entries[0]?.retrievalId;
     if (!retrievalId) {
       return {
@@ -14444,6 +14645,7 @@ var ragChat = (config) => {
     const decidedAt = Date.now();
     await persistRetrievalReleaseDecisionIfConfigured({
       baseline: undefined,
+      corpusGroupKey,
       decidedAt: input.decidedAt,
       decidedBy: input.decidedBy,
       gateStatus: gate?.status,
@@ -14457,17 +14659,19 @@ var ragChat = (config) => {
       targetRolloutLabel: input.targetRolloutLabel
     });
     const decisions = await loadRAGRetrievalReleaseDecisions({
+      corpusGroupKey,
       groupKey: input.groupKey,
       limit: 10,
       store: config.retrievalReleaseDecisionStore
     });
     return {
-      decisions,
+      decisions: filterByCorpusGroupKey(accessScope, decisions),
       ok: true
     };
   };
-  const handleRetrievalReleaseGroupHistory = async (queryInput) => {
+  const handleRetrievalReleaseGroupHistory = async (queryInput, request) => {
     const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     if (!groupKey) {
       return {
@@ -14475,7 +14679,21 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval release decision group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval release corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const decisions = config.retrievalReleaseDecisionStore ? (await loadRAGRetrievalReleaseDecisions({
+      corpusGroupKey,
       groupKey,
       limit: getIntegerLikeProperty(queryInput, "decisionLimit") ?? 20,
       store: config.retrievalReleaseDecisionStore
@@ -14484,11 +14702,13 @@ var ragChat = (config) => {
       ...getDecisionFreshness({ record: decision })
     })).filter((decision) => targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? decision.targetRolloutLabel === targetRolloutLabel : true) : undefined;
     const baselines = retrievalBaselineStore ? await loadRAGRetrievalBaselines({
+      corpusGroupKey,
       groupKey,
       limit: getIntegerLikeProperty(queryInput, "baselineLimit") ?? 20,
       store: retrievalBaselineStore
     }).then((entries) => targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? entries.filter((entry) => entry.rolloutLabel === targetRolloutLabel) : entries) : undefined;
     const runs = retrievalComparisonHistoryStore ? await loadRAGRetrievalComparisonHistory({
+      corpusGroupKey,
       groupKey,
       limit: getIntegerLikeProperty(queryInput, "runLimit") ?? 20,
       store: retrievalComparisonHistoryStore
@@ -14496,11 +14716,13 @@ var ragChat = (config) => {
     const latest = decisions?.[0];
     return {
       baselines,
+      corpusGroupKey: corpusGroupKey ?? decisions?.[0]?.corpusGroupKey ?? baselines?.[0]?.corpusGroupKey ?? runs?.[0]?.corpusGroupKey,
       decisions,
       groupKey,
       ok: true,
       runs,
       timeline: {
+        corpusGroupKey: corpusGroupKey ?? decisions?.[0]?.corpusGroupKey ?? baselines?.[0]?.corpusGroupKey ?? runs?.[0]?.corpusGroupKey,
         groupKey,
         lastApprovedAt: decisions?.find((entry) => entry.kind === "approve")?.decidedAt,
         lastPromotedAt: decisions?.find((entry) => entry.kind === "promote")?.decidedAt,
@@ -14512,29 +14734,53 @@ var ragChat = (config) => {
       }
     };
   };
-  const handleRetrievalLaneHandoffList = async (queryInput) => {
+  const handleRetrievalLaneHandoffList = async (queryInput, request) => {
     const result = await buildOperationsPayload();
+    const accessScope = await loadAccessScope(request);
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const sourceRolloutLabel = getStringProperty(queryInput, "sourceRolloutLabel");
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const limit = getIntegerLikeProperty(queryInput, "limit");
-    const handoffs = (result.retrievalComparisons?.releaseLaneHandoffs ?? []).filter((entry) => (!getStringProperty(queryInput, "groupKey") || entry.groupKey === getStringProperty(queryInput, "groupKey")) && (sourceRolloutLabel !== "canary" && sourceRolloutLabel !== "stable" && sourceRolloutLabel !== "rollback_target" || entry.sourceRolloutLabel === sourceRolloutLabel) && (targetRolloutLabel !== "canary" && targetRolloutLabel !== "stable" && targetRolloutLabel !== "rollback_target" || entry.targetRolloutLabel === targetRolloutLabel));
+    const handoffs = (result.retrievalComparisons?.releaseLaneHandoffs ?? []).filter((entry) => (!corpusGroupKey || entry.corpusGroupKey === corpusGroupKey) && (!getStringProperty(queryInput, "groupKey") || entry.groupKey === getStringProperty(queryInput, "groupKey")) && (sourceRolloutLabel !== "canary" && sourceRolloutLabel !== "stable" && sourceRolloutLabel !== "rollback_target" || entry.sourceRolloutLabel === sourceRolloutLabel) && (targetRolloutLabel !== "canary" && targetRolloutLabel !== "stable" && targetRolloutLabel !== "rollback_target" || entry.targetRolloutLabel === targetRolloutLabel));
     return {
       handoffs: typeof limit === "number" ? handoffs.slice(0, limit) : handoffs,
       ok: true
     };
   };
-  const handleRetrievalLaneHandoffDecisionList = async (queryInput) => {
+  const handleRetrievalLaneHandoffDecisionList = async (queryInput, request) => {
     if (!config.retrievalLaneHandoffDecisionStore) {
       return {
         error: "RAG retrieval lane handoff decision store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval lane handoff decision group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff decision corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const sourceRolloutLabel = getStringProperty(queryInput, "sourceRolloutLabel");
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const kind = getStringProperty(queryInput, "kind");
     const decisions = await loadRAGRetrievalLaneHandoffDecisions({
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      corpusGroupKey,
+      groupKey,
       kind: kind === "approve" || kind === "reject" || kind === "complete" ? kind : undefined,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       sourceRolloutLabel: sourceRolloutLabel === "canary" || sourceRolloutLabel === "stable" || sourceRolloutLabel === "rollback_target" ? sourceRolloutLabel : undefined,
@@ -14542,116 +14788,230 @@ var ragChat = (config) => {
       targetRolloutLabel: targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? targetRolloutLabel : undefined
     });
     return {
-      decisions,
+      decisions: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, decisions)),
       ok: true
     };
   };
-  const handleRetrievalLaneHandoffIncidentList = async (queryInput) => {
+  const handleRetrievalLaneHandoffIncidentList = async (queryInput, request) => {
     if (!config.retrievalLaneHandoffIncidentStore) {
       return {
         error: "RAG retrieval lane handoff incident store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval lane handoff incident group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff incident corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const status = getStringProperty(queryInput, "status");
     const severity = getStringProperty(queryInput, "severity");
     const incidents = await loadRAGRetrievalLaneHandoffIncidents({
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      corpusGroupKey,
+      groupKey,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       severity: severity === "warning" || severity === "critical" ? severity : undefined,
       status: status === "open" || status === "resolved" ? status : undefined,
       store: config.retrievalLaneHandoffIncidentStore,
       targetRolloutLabel: targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? targetRolloutLabel : undefined
     });
-    return { incidents, ok: true };
+    return {
+      incidents: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, incidents)),
+      ok: true
+    };
   };
-  const handleRetrievalLaneHandoffIncidentHistoryList = async (queryInput) => {
+  const handleRetrievalLaneHandoffIncidentHistoryList = async (queryInput, request) => {
     if (!config.retrievalLaneHandoffIncidentHistoryStore) {
       return {
         error: "RAG retrieval lane handoff incident history store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval lane handoff incident history group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff incident history corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const action = getStringProperty(queryInput, "action");
     const records = await loadRAGRetrievalLaneHandoffIncidentHistory({
+      corpusGroupKey,
       action: action === "opened" || action === "acknowledged" || action === "unacknowledged" || action === "resolved" ? action : undefined,
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      groupKey,
       incidentId: getStringProperty(queryInput, "incidentId"),
       limit: getIntegerLikeProperty(queryInput, "limit"),
       store: config.retrievalLaneHandoffIncidentHistoryStore,
       targetRolloutLabel: targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? targetRolloutLabel : undefined
     });
-    return { ok: true, records };
+    return {
+      ok: true,
+      records: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, records))
+    };
   };
-  const handleRetrievalLaneHandoffAutoCompletePolicyHistoryList = async (queryInput) => {
+  const handleRetrievalLaneHandoffAutoCompletePolicyHistoryList = async (queryInput, request) => {
     if (!config.retrievalLaneHandoffAutoCompletePolicyHistoryStore) {
       return {
         error: "RAG retrieval lane handoff auto-complete policy history store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval lane handoff auto-complete policy group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff auto-complete policy corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const records = await loadRAGRetrievalLaneHandoffAutoCompletePolicyHistory({
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      corpusGroupKey,
+      groupKey,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       store: config.retrievalLaneHandoffAutoCompletePolicyHistoryStore,
       targetRolloutLabel: targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? targetRolloutLabel : undefined
     });
-    return { ok: true, records };
+    return {
+      ok: true,
+      records: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, records))
+    };
   };
-  const handleRetrievalReleaseLanePolicyHistoryList = async (queryInput) => {
+  const handleRetrievalReleaseLanePolicyHistoryList = async (queryInput, request) => {
     if (!config.retrievalReleaseLanePolicyHistoryStore) {
       return {
         error: "RAG retrieval release lane policy history store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval release lane policy group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval release lane policy corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const rolloutLabel = getStringProperty(queryInput, "rolloutLabel");
     const scope = getStringProperty(queryInput, "scope");
     const records = await loadRAGRetrievalReleaseLanePolicyHistory({
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      corpusGroupKey,
+      groupKey,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       rolloutLabel: rolloutLabel === "canary" || rolloutLabel === "stable" || rolloutLabel === "rollback_target" ? rolloutLabel : undefined,
       scope: scope === "rollout_label" || scope === "group_rollout_label" ? scope : undefined,
       store: config.retrievalReleaseLanePolicyHistoryStore
     });
-    return { ok: true, records };
+    return {
+      ok: true,
+      records: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, records))
+    };
   };
-  const handleRetrievalBaselineGatePolicyHistoryList = async (queryInput) => {
+  const handleRetrievalBaselineGatePolicyHistoryList = async (queryInput, request) => {
     if (!config.retrievalBaselineGatePolicyHistoryStore) {
       return {
         error: "RAG retrieval baseline gate policy history store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval baseline gate policy group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval baseline gate policy corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const rolloutLabel = getStringProperty(queryInput, "rolloutLabel");
     const scope = getStringProperty(queryInput, "scope");
     const records = await loadRAGRetrievalBaselineGatePolicyHistory({
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      corpusGroupKey,
+      groupKey,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       rolloutLabel: rolloutLabel === "canary" || rolloutLabel === "stable" || rolloutLabel === "rollback_target" ? rolloutLabel : undefined,
       scope: scope === "rollout_label" || scope === "group_rollout_label" ? scope : undefined,
       store: config.retrievalBaselineGatePolicyHistoryStore
     });
-    return { ok: true, records };
+    return {
+      ok: true,
+      records: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, records))
+    };
   };
-  const handleRetrievalReleaseLaneEscalationPolicyHistoryList = async (queryInput) => {
+  const handleRetrievalReleaseLaneEscalationPolicyHistoryList = async (queryInput, request) => {
     if (!config.retrievalReleaseLaneEscalationPolicyHistoryStore) {
       return {
         error: "RAG retrieval release lane escalation policy history store is not configured",
         ok: false
       };
     }
+    const accessScope = await loadAccessScope(request);
+    const groupKey = getStringProperty(queryInput, "groupKey");
+    const corpusGroupKey = getStringProperty(queryInput, "corpusGroupKey");
+    if (!isAllowedComparisonGroupKey(accessScope, groupKey)) {
+      return {
+        error: "Retrieval release lane escalation policy group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval release lane escalation policy corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const records = await loadRAGRetrievalReleaseLaneEscalationPolicyHistory({
-      groupKey: getStringProperty(queryInput, "groupKey"),
+      corpusGroupKey,
+      groupKey,
       limit: getIntegerLikeProperty(queryInput, "limit"),
       store: config.retrievalReleaseLaneEscalationPolicyHistoryStore,
       targetRolloutLabel: targetRolloutLabel === "canary" || targetRolloutLabel === "stable" || targetRolloutLabel === "rollback_target" ? targetRolloutLabel : undefined
     });
-    return { ok: true, records };
+    return {
+      ok: true,
+      records: filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, records))
+    };
   };
   const handleRetrievalLaneHandoffDecision = async (body) => {
     if (!config.retrievalLaneHandoffDecisionStore) {
@@ -14667,6 +15027,19 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const accessScope = await loadAccessScope();
+    if (!isAllowedComparisonGroupKey(accessScope, input.groupKey)) {
+      return {
+        error: "Retrieval lane handoff group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
+    if (!isAllowedCorpusGroupKey(accessScope, input.corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     const ops = await buildOperationsPayload();
     const handoff = ops.retrievalComparisons?.releaseLaneHandoffs?.find((entry) => entry.groupKey === input.groupKey && entry.sourceRolloutLabel === input.sourceRolloutLabel && entry.targetRolloutLabel === input.targetRolloutLabel);
     if (!handoff) {
@@ -14675,6 +15048,13 @@ var ragChat = (config) => {
         ok: false
       };
     }
+    const corpusGroupKey = input.corpusGroupKey ?? handoff.corpusGroupKey;
+    if (!isAllowedCorpusGroupKey(accessScope, corpusGroupKey)) {
+      return {
+        error: "Retrieval lane handoff corpus group is outside the allowed RAG access scope",
+        ok: false
+      };
+    }
     if (input.kind === "approve" && handoff.readyForHandoff !== true) {
       return {
         error: `handoff is not ready: ${handoff.reasons.join("; ")}`,
@@ -14699,6 +15079,7 @@ var ragChat = (config) => {
         approvalNotes: input.notes,
         approvedAt: input.decidedAt,
         approvedBy: input.decidedBy,
+        corpusGroupKey,
         groupKey: input.groupKey,
         retrievalId: input.candidateRetrievalId ?? handoff.candidateRetrievalId,
         rolloutLabel: input.targetRolloutLabel,
@@ -14714,6 +15095,7 @@ var ragChat = (config) => {
     const decision = await persistRAGRetrievalLaneHandoffDecision({
       record: {
         candidateRetrievalId: input.candidateRetrievalId ?? handoff.candidateRetrievalId,
+        corpusGroupKey,
         decidedAt: input.decidedAt ?? Date.now(),
         decidedBy: input.decidedBy,
         groupKey: input.groupKey,
@@ -14741,6 +15123,7 @@ var ragChat = (config) => {
         approvalNotes: input.notes,
         approvedAt,
         approvedBy: input.decidedBy,
+        corpusGroupKey,
         groupKey: input.groupKey,
         retrievalId: input.candidateRetrievalId ?? handoff.candidateRetrievalId,
         rolloutLabel: input.targetRolloutLabel,
@@ -14755,6 +15138,7 @@ var ragChat = (config) => {
       await persistRAGRetrievalLaneHandoffDecision({
         record: {
           candidateRetrievalId: input.candidateRetrievalId ?? handoff.candidateRetrievalId,
+          corpusGroupKey,
           decidedAt: Date.now(),
           decidedBy: input.decidedBy,
           groupKey: input.groupKey,
@@ -14790,6 +15174,7 @@ var ragChat = (config) => {
     const acknowledged = getStringProperty(queryInput, "acknowledged");
     const targetRolloutLabel = getStringProperty(queryInput, "targetRolloutLabel");
     const incidents = await loadRAGRetrievalReleaseIncidents({
+      corpusGroupKey: getStringProperty(queryInput, "corpusGroupKey"),
       groupKey: getStringProperty(queryInput, "groupKey"),
       limit: getIntegerLikeProperty(queryInput, "limit"),
       severity: severity === "warning" || severity === "critical" ? severity : undefined,
@@ -15440,6 +15825,7 @@ var ragChat = (config) => {
     });
     return {
       incidents: await loadRAGRetrievalReleaseIncidents({
+        corpusGroupKey: incident.corpusGroupKey,
         groupKey: incident.groupKey,
         limit: 20,
         store: config.retrievalReleaseIncidentStore
@@ -15483,6 +15869,7 @@ var ragChat = (config) => {
     });
     return {
       incidents: await loadRAGRetrievalReleaseIncidents({
+        corpusGroupKey: incident.corpusGroupKey,
         groupKey: incident.groupKey,
         limit: 20,
         store: config.retrievalReleaseIncidentStore
@@ -15526,6 +15913,7 @@ var ragChat = (config) => {
     });
     return {
       incidents: await loadRAGRetrievalReleaseIncidents({
+        corpusGroupKey: incident.corpusGroupKey,
         groupKey: incident.groupKey,
         limit: 20,
         store: config.retrievalReleaseIncidentStore
@@ -16166,6 +16554,7 @@ var ragChat = (config) => {
   });
   const buildOperationsPayload = async (request) => {
     const accessScope = await loadAccessScope(request);
+    const filterScopedGovernanceEntries = (entries) => entries ? filterByCorpusGroupKey(accessScope, filterByComparisonGroupKey(accessScope, entries)) : undefined;
     const collection = config.collection ?? (ragStore ? createRAGCollection({
       defaultModel: config.embeddingModel,
       defaultTopK: topK,
@@ -16185,51 +16574,51 @@ var ragChat = (config) => {
       limit: 5,
       store: searchTracePruneHistoryStore
     }) : undefined;
-    const recentRetrievalComparisonRuns = retrievalComparisonHistoryStore ? await loadRAGRetrievalComparisonHistory({
+    const recentRetrievalComparisonRuns = filterScopedGovernanceEntries(retrievalComparisonHistoryStore ? await loadRAGRetrievalComparisonHistory({
       limit: 5,
       store: retrievalComparisonHistoryStore
-    }) : undefined;
-    const activeRetrievalBaselines = retrievalBaselineStore ? await loadRAGRetrievalBaselines({
+    }) : undefined);
+    const activeRetrievalBaselines = filterScopedGovernanceEntries(retrievalBaselineStore ? await loadRAGRetrievalBaselines({
       limit: 5,
       status: "active",
       store: retrievalBaselineStore
-    }) : undefined;
-    const retrievalBaselineHistory = retrievalBaselineStore ? await loadRAGRetrievalBaselines({
+    }) : undefined);
+    const retrievalBaselineHistory = filterScopedGovernanceEntries(retrievalBaselineStore ? await loadRAGRetrievalBaselines({
       limit: 10,
       store: retrievalBaselineStore
-    }) : undefined;
-    const recentRetrievalReleaseDecisions = config.retrievalReleaseDecisionStore ? await loadRAGRetrievalReleaseDecisions({
+    }) : undefined);
+    const recentRetrievalReleaseDecisions = filterScopedGovernanceEntries(config.retrievalReleaseDecisionStore ? await loadRAGRetrievalReleaseDecisions({
       limit: 10,
       store: config.retrievalReleaseDecisionStore
-    }) : undefined;
-    const recentRetrievalLaneHandoffDecisions = config.retrievalLaneHandoffDecisionStore ? await loadRAGRetrievalLaneHandoffDecisions({
+    }) : undefined);
+    const recentRetrievalLaneHandoffDecisions = filterScopedGovernanceEntries(config.retrievalLaneHandoffDecisionStore ? await loadRAGRetrievalLaneHandoffDecisions({
       limit: 10,
       store: config.retrievalLaneHandoffDecisionStore
-    }) : undefined;
-    const recentRetrievalLaneHandoffIncidents = config.retrievalLaneHandoffIncidentStore ? await loadRAGRetrievalLaneHandoffIncidents({
+    }) : undefined);
+    const recentRetrievalLaneHandoffIncidents = filterScopedGovernanceEntries(config.retrievalLaneHandoffIncidentStore ? await loadRAGRetrievalLaneHandoffIncidents({
       limit: 10,
       store: config.retrievalLaneHandoffIncidentStore
-    }) : undefined;
-    const recentRetrievalLaneHandoffIncidentHistory = config.retrievalLaneHandoffIncidentHistoryStore ? await loadRAGRetrievalLaneHandoffIncidentHistory({
+    }) : undefined);
+    const recentRetrievalLaneHandoffIncidentHistory = filterScopedGovernanceEntries(config.retrievalLaneHandoffIncidentHistoryStore ? await loadRAGRetrievalLaneHandoffIncidentHistory({
       limit: 10,
       store: config.retrievalLaneHandoffIncidentHistoryStore
-    }) : undefined;
-    const recentHandoffAutoCompletePolicyHistory = config.retrievalLaneHandoffAutoCompletePolicyHistoryStore ? await loadRAGRetrievalLaneHandoffAutoCompletePolicyHistory({
+    }) : undefined);
+    const recentHandoffAutoCompletePolicyHistory = filterScopedGovernanceEntries(config.retrievalLaneHandoffAutoCompletePolicyHistoryStore ? await loadRAGRetrievalLaneHandoffAutoCompletePolicyHistory({
       limit: 10,
       store: config.retrievalLaneHandoffAutoCompletePolicyHistoryStore
-    }) : undefined;
-    const recentReleaseLanePolicyHistory = config.retrievalReleaseLanePolicyHistoryStore ? await loadRAGRetrievalReleaseLanePolicyHistory({
+    }) : undefined);
+    const recentReleaseLanePolicyHistory = filterScopedGovernanceEntries(config.retrievalReleaseLanePolicyHistoryStore ? await loadRAGRetrievalReleaseLanePolicyHistory({
       limit: 10,
       store: config.retrievalReleaseLanePolicyHistoryStore
-    }) : undefined;
-    const recentBaselineGatePolicyHistory = config.retrievalBaselineGatePolicyHistoryStore ? await loadRAGRetrievalBaselineGatePolicyHistory({
+    }) : undefined);
+    const recentBaselineGatePolicyHistory = filterScopedGovernanceEntries(config.retrievalBaselineGatePolicyHistoryStore ? await loadRAGRetrievalBaselineGatePolicyHistory({
       limit: 10,
       store: config.retrievalBaselineGatePolicyHistoryStore
-    }) : undefined;
-    const recentReleaseLaneEscalationPolicyHistory = config.retrievalReleaseLaneEscalationPolicyHistoryStore ? await loadRAGRetrievalReleaseLaneEscalationPolicyHistory({
+    }) : undefined);
+    const recentReleaseLaneEscalationPolicyHistory = filterScopedGovernanceEntries(config.retrievalReleaseLaneEscalationPolicyHistoryStore ? await loadRAGRetrievalReleaseLaneEscalationPolicyHistory({
       limit: 10,
       store: config.retrievalReleaseLaneEscalationPolicyHistoryStore
-    }) : undefined;
+    }) : undefined);
     const recentIncidentRemediationDecisions = config.retrievalIncidentRemediationDecisionStore ? await loadRAGRetrievalIncidentRemediationDecisions({
       limit: 10,
       store: config.retrievalIncidentRemediationDecisionStore
@@ -16294,6 +16683,12 @@ var ragChat = (config) => {
         targetRolloutLabel
       };
     }) : undefined;
+    const getComparisonCorpusGroupKey = (groupKey) => {
+      if (!groupKey) {
+        return;
+      }
+      return (recentRetrievalComparisonRuns ?? []).find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey ?? (activeRetrievalBaselines ?? []).find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey ?? (recentRetrievalReleaseDecisions ?? []).find((entry) => entry.groupKey === groupKey && typeof entry.corpusGroupKey === "string")?.corpusGroupKey;
+    };
     const baseReleaseGroups = (() => {
       const groups = new Set;
       for (const run of recentRetrievalComparisonRuns ?? []) {
@@ -16355,6 +16750,7 @@ var ragChat = (config) => {
           approvalMaxAgeMs: getRetrievalReleasePolicy(groupKey).approvalMaxAgeMs,
           approvalRequired: getRetrievalReleasePolicy(groupKey).requireApprovalBeforePromotion === true,
           blockedReasons,
+          corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
           escalationSeverity,
           groupKey,
           latestDecisionAt: latestDecision?.decidedAt,
@@ -16404,6 +16800,7 @@ var ragChat = (config) => {
         const groupDecisions = (enrichedRecentRetrievalReleaseDecisions ?? []).filter((entry) => entry.groupKey === groupKey);
         const latest = groupDecisions[0];
         return {
+          corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
           groupKey,
           lastApprovedAt: groupDecisions.find((entry) => entry.kind === "approve")?.decidedAt,
           lastPromotedAt: groupDecisions.find((entry) => entry.kind === "promote")?.decidedAt,
@@ -16435,6 +16832,7 @@ var ragChat = (config) => {
           const laneDecisions = (enrichedRecentRetrievalReleaseDecisions ?? []).filter((entry) => entry.groupKey === groupKey && (entry.targetRolloutLabel ?? undefined) === targetRolloutLabel);
           const latest = laneDecisions[0];
           summaries.push({
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             groupKey,
             lastApprovedAt: laneDecisions.find((entry) => entry.kind === "approve")?.decidedAt,
             lastPromotedAt: laneDecisions.find((entry) => entry.kind === "promote")?.decidedAt,
@@ -16470,6 +16868,7 @@ var ragChat = (config) => {
           const latest = laneDecisions[0];
           summaries.push({
             approvalCount: laneDecisions.filter((entry) => entry.kind === "approve").length,
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             decisionCount: laneDecisions.length,
             groupKey,
             latestDecisionAt: latest?.decidedAt,
@@ -16763,6 +17162,7 @@ var ragChat = (config) => {
         if (!latest) {
           await persistLaneHandoffAutoCompletePolicyHistoryRecord({
             changeKind: "snapshot",
+            corpusGroupKey: getComparisonCorpusGroupKey(policy.groupKey),
             enabled: policy.enabled,
             groupKey: policy.groupKey,
             maxApprovedDecisionAgeMs: policy.maxApprovedDecisionAgeMs,
@@ -16773,6 +17173,7 @@ var ragChat = (config) => {
         if (latest.enabled !== policy.enabled || latest.maxApprovedDecisionAgeMs !== policy.maxApprovedDecisionAgeMs) {
           await persistLaneHandoffAutoCompletePolicyHistoryRecord({
             changeKind: "changed",
+            corpusGroupKey: getComparisonCorpusGroupKey(policy.groupKey),
             enabled: policy.enabled,
             groupKey: policy.groupKey,
             maxApprovedDecisionAgeMs: policy.maxApprovedDecisionAgeMs,
@@ -16810,6 +17211,7 @@ var ragChat = (config) => {
           const latest = laneIncidents[0];
           summaries.push({
             acknowledgedOpenCount,
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             groupKey,
             highestSeverity: laneIncidents.some((entry) => entry.severity === "critical") ? "critical" : laneIncidents.some((entry) => entry.severity === "warning") ? "warning" : undefined,
             latestKind: latest?.kind,
@@ -16865,6 +17267,7 @@ var ragChat = (config) => {
           await persistReleaseLanePolicyHistoryRecord({
             approvalMaxAgeMs: policy.approvalMaxAgeMs,
             changeKind: "snapshot",
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             groupKey,
             requireApprovalBeforePromotion: policy.requireApprovalBeforePromotion,
             rolloutLabel: policy.rolloutLabel,
@@ -16876,6 +17279,7 @@ var ragChat = (config) => {
           await persistReleaseLanePolicyHistoryRecord({
             approvalMaxAgeMs: policy.approvalMaxAgeMs,
             changeKind: "changed",
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             groupKey,
             previousApprovalMaxAgeMs: latest.approvalMaxAgeMs,
             previousRequireApprovalBeforePromotion: latest.requireApprovalBeforePromotion,
@@ -16895,6 +17299,7 @@ var ragChat = (config) => {
         if (!latest) {
           await persistBaselineGatePolicyHistoryRecord({
             changeKind: "snapshot",
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             groupKey,
             policy: policy.policy,
             rolloutLabel: policy.rolloutLabel,
@@ -16905,6 +17310,7 @@ var ragChat = (config) => {
         if (previousPolicy !== currentPolicy) {
           await persistBaselineGatePolicyHistoryRecord({
             changeKind: "changed",
+            corpusGroupKey: getComparisonCorpusGroupKey(groupKey),
             groupKey,
             policy: policy.policy,
             previousPolicy: latest.policy,
@@ -16959,6 +17365,7 @@ var ragChat = (config) => {
           await persistReleaseLaneEscalationPolicyHistoryRecord({
             approvalExpiredSeverity: policy.approvalExpiredSeverity,
             changeKind: "snapshot",
+            corpusGroupKey: getComparisonCorpusGroupKey(policy.groupKey),
             gateFailureSeverity: policy.gateFailureSeverity,
             groupKey: policy.groupKey,
             openIncidentSeverity: policy.openIncidentSeverity,
@@ -16971,6 +17378,7 @@ var ragChat = (config) => {
           await persistReleaseLaneEscalationPolicyHistoryRecord({
             approvalExpiredSeverity: policy.approvalExpiredSeverity,
             changeKind: "changed",
+            corpusGroupKey: getComparisonCorpusGroupKey(policy.groupKey),
             gateFailureSeverity: policy.gateFailureSeverity,
             groupKey: policy.groupKey,
             openIncidentSeverity: policy.openIncidentSeverity,
@@ -17025,6 +17433,7 @@ var ragChat = (config) => {
       const latestWinner = latestRetrievalComparisonRun.comparison.summary.bestByPassingRate;
       if (latestWinner && stableWinnerByPassingRate?.retrievalId && stableWinnerByPassingRate.retrievalId !== latestWinner) {
         alerts.push({
+          corpusGroupKey: latestRetrievalComparisonRun.corpusGroupKey,
           groupKey: latestRetrievalComparisonRun.groupKey,
           kind: "stable_winner_changed",
           latestRunId: latestRetrievalComparisonRun.id,
@@ -17041,6 +17450,7 @@ var ragChat = (config) => {
           baselineRetrievalId: latestRetrievalComparisonRun.decisionSummary?.baselineRetrievalId,
           candidateRetrievalId: latestRetrievalComparisonRun.decisionSummary?.candidateRetrievalId,
           delta,
+          corpusGroupKey: latestRetrievalComparisonRun.corpusGroupKey,
           groupKey: latestRetrievalComparisonRun.groupKey,
           kind: "baseline_regression",
           latestRunId: latestRetrievalComparisonRun.id,
@@ -17055,6 +17465,7 @@ var ragChat = (config) => {
           candidateRetrievalId: latestRetrievalComparisonRun.decisionSummary?.candidateRetrievalId,
           delta,
           gate,
+          corpusGroupKey: latestRetrievalComparisonRun.corpusGroupKey,
           groupKey: latestRetrievalComparisonRun.groupKey,
           kind: "baseline_gate_failed",
           latestRunId: latestRetrievalComparisonRun.id,
@@ -17072,6 +17483,7 @@ var ragChat = (config) => {
         const kind = reasonSet.has("no active canary baseline exists for this group") ? "handoff_auto_complete_source_lane_missing" : reasonSet.has("latest approved handoff decision is older than the auto-complete policy allows") ? "handoff_auto_complete_stale_approval" : reasonSet.has("approved handoff decision is required before auto-complete") ? "handoff_auto_complete_approval_missing" : reasonText.includes("gate") || reasonText.includes("passing rate delta") || reasonText.includes("average") || reasonText.includes("candidate does not match") ? "handoff_auto_complete_gate_blocked" : "handoff_auto_complete_policy_drift";
         alerts.push({
           candidateRetrievalId: entry.candidateRetrievalId,
+          corpusGroupKey: getComparisonCorpusGroupKey(entry.groupKey),
           groupKey: entry.groupKey,
           kind,
           latestRunId: entry.sourceRunId ?? latestRetrievalComparisonRun.id,
@@ -17182,6 +17594,7 @@ var ragChat = (config) => {
         latest: latestRetrievalComparisonRun ? {
           bestByAverageF1: latestRetrievalComparisonRun.comparison.summary.bestByAverageF1,
           bestByPassingRate: latestRetrievalComparisonRun.comparison.summary.bestByPassingRate,
+          corpusGroupKey: latestRetrievalComparisonRun.corpusGroupKey,
           elapsedMs: latestRetrievalComparisonRun.elapsedMs,
           fastest: latestRetrievalComparisonRun.comparison.summary.fastest,
           finishedAt: latestRetrievalComparisonRun.finishedAt,
@@ -18053,7 +18466,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/release-history`, async ({ query, request, set }) => {
-    const result = await handleRetrievalReleaseGroupHistory(query);
+    const result = await handleRetrievalReleaseGroupHistory(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -18068,7 +18481,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/handoffs`, async ({ query, request, set }) => {
-    const result = await handleRetrievalLaneHandoffList(query);
+    const result = await handleRetrievalLaneHandoffList(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -18083,7 +18496,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/handoffs/decisions`, async ({ query, request, set }) => {
-    const result = await handleRetrievalLaneHandoffDecisionList(query);
+    const result = await handleRetrievalLaneHandoffDecisionList(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -18098,7 +18511,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/handoffs/incidents`, async ({ query, request, set }) => {
-    const result = await handleRetrievalLaneHandoffIncidentList(query);
+    const result = await handleRetrievalLaneHandoffIncidentList(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -18113,7 +18526,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/handoffs/incidents/history`, async ({ query, request, set }) => {
-    const result = await handleRetrievalLaneHandoffIncidentHistoryList(query);
+    const result = await handleRetrievalLaneHandoffIncidentHistoryList(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -18650,7 +19063,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/escalation-policies/history`, async ({ query, request, set }) => {
-    const result = await handleRetrievalReleaseLaneEscalationPolicyHistoryList(query);
+    const result = await handleRetrievalReleaseLaneEscalationPolicyHistoryList(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -18665,7 +19078,7 @@ var ragChat = (config) => {
     }
     return result;
   }).get(`${path}/compare/retrieval/incident-policies/history`, async ({ query, request, set }) => {
-    const result = await handleRetrievalReleaseLaneEscalationPolicyHistoryList(query);
+    const result = await handleRetrievalReleaseLaneEscalationPolicyHistoryList(query, request);
     if (!result.ok) {
       set.status = HTTP_STATUS_BAD_REQUEST;
     }
@@ -23474,5 +23887,5 @@ export {
   aiChat
 };
 
-//# debugId=01B4F90C8AC5AD4364756E2164756E21
+//# debugId=3A168E4E2E133AED64756E2164756E21
 //# sourceMappingURL=index.js.map