@cat-factory/contracts 0.245.0 → 0.247.0

package/dist/audit.d.ts

@@ -0,0 +1,100 @@
+import * as v from 'valibot';
+/**
+ * The privileged actions an account audit event can describe.
+ *
+ * Naming is `<subject>.<verb>`, past tense, subject first, so an alphabetical list groups by
+ * subject and a filter on a prefix is a filter on a subject. Members are added as the paths
+ * that produce them get instrumented, never speculatively: an action in the union that nothing
+ * writes reads to an operator as a category their deployment never exercises, which is
+ * indistinguishable from a category that is silently broken.
+ *
+ * What is deliberately NOT here yet, because nothing writes it until the run-lifecycle slice:
+ * run start/stop/retry, the notification `act` (which performs a real merge), and API-key
+ * mint/revoke.
+ */
+export declare const auditActionSchema: v.PicklistSchema<["account.member_added", "account.member_roles_changed", "account.budget_changed", "account.settings_changed", "account.invitation_created", "account.invitation_revoked", "account.invitation_accepted", "workspace.member_added", "workspace.member_role_changed", "workspace.member_removed", "workspace.access_mode_changed"], undefined>;
+export type AuditAction = v.InferOutput<typeof auditActionSchema>;
+/**
+ * WHAT KIND of thing an audited action acted on: the type `targetId` is an id WITHIN.
+ *
+ * Closed for the same reason `action` is, plus one specific to it: the viewer resolves
+ * `targetId` against a different table per kind (a user's name, an invitation's email), so a
+ * free-form `'users'` beside `'user'` is not a cosmetic typo, it is a row whose subject silently
+ * fails to resolve for exactly the admin trying to read it.
+ */
+export declare const auditTargetTypeSchema: v.PicklistSchema<["user", "invitation", "workspace", "account"], undefined>;
+export type AuditTargetType = v.InferOutput<typeof auditTargetTypeSchema>;
+/**
+ * WHO performed an audited action, as a closed set of principal KINDS.
+ *
+ * Three kinds rather than a nullable user id, because "the engine did it" and "we failed to
+ * resolve who did it" are different facts and an audit log that renders them identically is
+ * worse than one that omits the row: a reader concludes a human action was automated. `system`
+ * is therefore asserted by an engine-internal caller, never defaulted to when a user id is
+ * missing.
+ *
+ * `apiKey` is its own kind because a public-API key is a distinct principal from the user who
+ * minted it: the key's own lifecycle is auditable, and attributing its actions to that user
+ * would make a leaked key indistinguishable from the person in the log.
+ */
+export declare const auditActorKindSchema: v.PicklistSchema<["user", "apiKey", "system"], undefined>;
+export type AuditActorKind = v.InferOutput<typeof auditActorKindSchema>;
+/**
+ * The VALUES an audit event carries beside its action, keyed by action.
+ *
+ * This is the contract between the writer and the viewer: the backend states what changed as
+ * fields, and the SPA interpolates them into a translated sentence per action. Declared here
+ * as data rather than left to each writer's discretion so that "which values does this action
+ * carry" has ONE answer both sides read, and so a new action cannot ship with fields the copy
+ * has no slot for (the `Record` is exhaustive over the picklist, so adding a member fails the
+ * build until its keys are named).
+ *
+ * Every key is a value SAFE TO SHOW: a role, a ceiling, an email, an access mode. Never a
+ * credential, never model or prompt text. The audit store is strictly more exposed than the
+ * transactional domain (its whole purpose is to be read by humans, and a later slice serves it
+ * over HTTP), which is why the boundary is stated once, here, rather than at each call site.
+ */
+export declare const AUDIT_ACTION_DETAIL_KEYS: Record<AuditAction, readonly string[]>;
+/**
+ * One value inside an event's `details`.
+ *
+ * Scalars only, deliberately. Every detail exists to be interpolated into one translated
+ * sentence, and a bounded set of shapes is what keeps that interpolation TOTAL: a nested object
+ * or an array would each need the viewer to decide how to render it, per action, in every
+ * locale. A list of roles is therefore joined by its writer (`'admin, developer'`) rather than
+ * pushed onto the reader.
+ */
+export type AuditDetailValue = string | number | boolean | null;
+/** The machine-readable values an audited action carries. See {@link AUDIT_ACTION_DETAIL_KEYS}. */
+export type AuditEventDetails = Readonly<Record<string, AuditDetailValue>>;
+/**
+ * A persisted vocabulary member this build no longer declares.
+ *
+ * `action` and `targetType` are CLOSED vocabularies that are also PERSISTED, and those two facts
+ * together are what makes this shape necessary (CLAUDE.md → "But a break must ARRIVE as one"):
+ * retiring a member removes it from the type and NOT from the rows already written, so every
+ * exhaustive `Record`/`switch` over it is total against the TYPE and partial against the DATA.
+ * A reader that ignores the gap either renders `undefined` at an operator or throws in the
+ * viewer itself.
+ *
+ * So a value that is no longer a member reads back NAMED as retired: never guessed onto a
+ * current member (nothing can know which one was meant), and above all never DROPPED, because a
+ * missing row is the single failure an audit log must not have.
+ */
+export interface RetiredAuditValue {
+    retired: string;
+}
+/** Whether a read-back vocabulary value is one this build no longer declares. */
+export declare function isRetiredAuditValue<T extends string>(value: T | RetiredAuditValue): value is RetiredAuditValue;
+/**
+ * Whether a stored value is still a member of the action vocabulary — DERIVED from the picklist,
+ * so it cannot drift from it the way a hand-written second list would.
+ */
+export declare function isAuditAction(value: string): value is AuditAction;
+/** Whether a stored value is still a member of the target-type vocabulary. Derived, as above. */
+export declare function isAuditTargetType(value: string): value is AuditTargetType;
+/** A stored `action` as either a current member or the retired value it is. */
+export declare function readAuditAction(value: string): AuditAction | RetiredAuditValue;
+/** A stored `targetType` as either a current member or the retired value it is. */
+export declare function readAuditTargetType(value: string): AuditTargetType | RetiredAuditValue;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AA4B5B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,gWAuB5B,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,6EAShC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,2DAO/B,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAY3E,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;AAE/D,mGAAmG;AACnG,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAE1E;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,EAClD,KAAK,EAAE,CAAC,GAAG,iBAAiB,GAC3B,KAAK,IAAI,iBAAiB,CAE5B;AAKD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEzE;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,CAE9E;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,iBAAiB,CAEtF"}

package/dist/audit.js

@@ -0,0 +1,156 @@
+import * as v from 'valibot';
+// ---------------------------------------------------------------------------
+// The ACCOUNT AUDIT vocabulary: what privileged action a recorded audit event describes, who
+// performed it, what kind of thing it acted on, and which VALUES the viewer interpolates.
+//
+// It lives in contracts rather than kernel because both sides must agree about the SAME
+// member lists for different reasons. The backend writes an action when a mutation commits;
+// the SPA's viewer renders each one as human copy, through an exhaustive `Record` over this
+// picklist, so a member added without translated copy fails the SPA's typecheck instead of
+// rendering a raw `account.member_roles_changed` at an operator. A vocabulary kept only on the
+// backend becomes a hand-copied list in the viewer, and the two then drift in the one
+// direction that matters: an action nobody can read is an action nobody audits.
+//
+// The vocabularies are deliberately CLOSED and deliberately COARSE. Closed, because an audit
+// reader filters by action class and a free-form string makes `member.role_changed` and
+// `member.roles_changed` two unrelated actions that look identical in a list. Coarse, because
+// an action names WHAT changed, never the values: the values ride `details` as machine-readable
+// fields (see {@link AUDIT_ACTION_DETAIL_KEYS}), and the ones that are secret never get
+// recorded at all (see `AuditEvent` in kernel).
+//
+// NOTHING here records human-readable PROSE. The backend does not localize (see CLAUDE.md →
+// "Internationalization"), and an audit row is the sharpest case for that rule rather than an
+// exception to it: the row is PERSISTED, so an English sentence written today can never be
+// re-rendered for a reader in another locale. `action` + `details` is what lets slice 4's viewer
+// compose its copy from translated keys, for rows written years earlier.
+// ---------------------------------------------------------------------------
+/**
+ * The privileged actions an account audit event can describe.
+ *
+ * Naming is `<subject>.<verb>`, past tense, subject first, so an alphabetical list groups by
+ * subject and a filter on a prefix is a filter on a subject. Members are added as the paths
+ * that produce them get instrumented, never speculatively: an action in the union that nothing
+ * writes reads to an operator as a category their deployment never exercises, which is
+ * indistinguishable from a category that is silently broken.
+ *
+ * What is deliberately NOT here yet, because nothing writes it until the run-lifecycle slice:
+ * run start/stop/retry, the notification `act` (which performs a real merge), and API-key
+ * mint/revoke.
+ */
+export const auditActionSchema = v.picklist([
+    /** A member was added to an account. */
+    'account.member_added',
+    /** An existing account member's role set was replaced. */
+    'account.member_roles_changed',
+    /** An account's monthly spend ceiling was set, changed, or cleared. */
+    'account.budget_changed',
+    /** An account's settings were changed (today: the default cloud provider). */
+    'account.settings_changed',
+    /** A teammate was invited to an account by email. */
+    'account.invitation_created',
+    /** A pending invitation was revoked before it was accepted. */
+    'account.invitation_revoked',
+    /** An invitation was accepted, creating the membership it granted. */
+    'account.invitation_accepted',
+    /** A member was added to one workspace (board-level roster, not the account roster). */
+    'workspace.member_added',
+    /** A workspace member's role was changed. */
+    'workspace.member_role_changed',
+    /** A member was removed from a workspace. */
+    'workspace.member_removed',
+    /** A workspace's access mode was changed (open ⇄ restricted). */
+    'workspace.access_mode_changed',
+]);
+/**
+ * WHAT KIND of thing an audited action acted on: the type `targetId` is an id WITHIN.
+ *
+ * Closed for the same reason `action` is, plus one specific to it: the viewer resolves
+ * `targetId` against a different table per kind (a user's name, an invitation's email), so a
+ * free-form `'users'` beside `'user'` is not a cosmetic typo, it is a row whose subject silently
+ * fails to resolve for exactly the admin trying to read it.
+ */
+export const auditTargetTypeSchema = v.picklist([
+    /** A user, by internal id (`usr_*`). The account or board roster acted on a person. */
+    'user',
+    /** An account invitation, by its own id. */
+    'invitation',
+    /** A board, by workspace id. */
+    'workspace',
+    /** The account itself (settings, budget). */
+    'account',
+]);
+/**
+ * WHO performed an audited action, as a closed set of principal KINDS.
+ *
+ * Three kinds rather than a nullable user id, because "the engine did it" and "we failed to
+ * resolve who did it" are different facts and an audit log that renders them identically is
+ * worse than one that omits the row: a reader concludes a human action was automated. `system`
+ * is therefore asserted by an engine-internal caller, never defaulted to when a user id is
+ * missing.
+ *
+ * `apiKey` is its own kind because a public-API key is a distinct principal from the user who
+ * minted it: the key's own lifecycle is auditable, and attributing its actions to that user
+ * would make a leaked key indistinguishable from the person in the log.
+ */
+export const auditActorKindSchema = v.picklist([
+    /** A signed-in user acting through the SPA or the API. */
+    'user',
+    /** A public-API key acting on behalf of its account. */
+    'apiKey',
+    /** The engine itself, with no human in the loop. */
+    'system',
+]);
+/**
+ * The VALUES an audit event carries beside its action, keyed by action.
+ *
+ * This is the contract between the writer and the viewer: the backend states what changed as
+ * fields, and the SPA interpolates them into a translated sentence per action. Declared here
+ * as data rather than left to each writer's discretion so that "which values does this action
+ * carry" has ONE answer both sides read, and so a new action cannot ship with fields the copy
+ * has no slot for (the `Record` is exhaustive over the picklist, so adding a member fails the
+ * build until its keys are named).
+ *
+ * Every key is a value SAFE TO SHOW: a role, a ceiling, an email, an access mode. Never a
+ * credential, never model or prompt text. The audit store is strictly more exposed than the
+ * transactional domain (its whole purpose is to be read by humans, and a later slice serves it
+ * over HTTP), which is why the boundary is stated once, here, rather than at each call site.
+ */
+export const AUDIT_ACTION_DETAIL_KEYS = {
+    'account.member_added': ['roles'],
+    'account.member_roles_changed': ['previousRoles', 'roles'],
+    'account.budget_changed': ['limit'],
+    'account.settings_changed': ['defaultCloudProvider'],
+    'account.invitation_created': ['email', 'roles'],
+    'account.invitation_revoked': ['email'],
+    'account.invitation_accepted': ['email', 'roles', 'invitedBy'],
+    'workspace.member_added': ['role'],
+    'workspace.member_role_changed': ['previousRole', 'role'],
+    'workspace.member_removed': ['role'],
+    'workspace.access_mode_changed': ['accessMode'],
+};
+/** Whether a read-back vocabulary value is one this build no longer declares. */
+export function isRetiredAuditValue(value) {
+    return typeof value !== 'string';
+}
+const AUDIT_ACTION_SET = new Set(auditActionSchema.options);
+const AUDIT_TARGET_TYPE_SET = new Set(auditTargetTypeSchema.options);
+/**
+ * Whether a stored value is still a member of the action vocabulary — DERIVED from the picklist,
+ * so it cannot drift from it the way a hand-written second list would.
+ */
+export function isAuditAction(value) {
+    return AUDIT_ACTION_SET.has(value);
+}
+/** Whether a stored value is still a member of the target-type vocabulary. Derived, as above. */
+export function isAuditTargetType(value) {
+    return AUDIT_TARGET_TYPE_SET.has(value);
+}
+/** A stored `action` as either a current member or the retired value it is. */
+export function readAuditAction(value) {
+    return isAuditAction(value) ? value : { retired: value };
+}
+/** A stored `targetType` as either a current member or the retired value it is. */
+export function readAuditTargetType(value) {
+    return isAuditTargetType(value) ? value : { retired: value };
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,8EAA8E;AAC9E,6FAA6F;AAC7F,0FAA0F;AAC1F,EAAE;AACF,wFAAwF;AACxF,4FAA4F;AAC5F,4FAA4F;AAC5F,2FAA2F;AAC3F,+FAA+F;AAC/F,sFAAsF;AACtF,gFAAgF;AAChF,EAAE;AACF,6FAA6F;AAC7F,wFAAwF;AACxF,8FAA8F;AAC9F,gGAAgG;AAChG,wFAAwF;AACxF,gDAAgD;AAChD,EAAE;AACF,4FAA4F;AAC5F,8FAA8F;AAC9F,2FAA2F;AAC3F,iGAAiG;AACjG,yEAAyE;AACzE,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC1C,wCAAwC;IACxC,sBAAsB;IACtB,0DAA0D;IAC1D,8BAA8B;IAC9B,uEAAuE;IACvE,wBAAwB;IACxB,8EAA8E;IAC9E,0BAA0B;IAC1B,qDAAqD;IACrD,4BAA4B;IAC5B,+DAA+D;IAC/D,4BAA4B;IAC5B,sEAAsE;IACtE,6BAA6B;IAC7B,wFAAwF;IACxF,wBAAwB;IACxB,6CAA6C;IAC7C,+BAA+B;IAC/B,6CAA6C;IAC7C,0BAA0B;IAC1B,iEAAiE;IACjE,+BAA+B;CAChC,CAAC,CAAA;AAGF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC9C,uFAAuF;IACvF,MAAM;IACN,4CAA4C;IAC5C,YAAY;IACZ,gCAAgC;IAChC,WAAW;IACX,6CAA6C;IAC7C,SAAS;CACV,CAAC,CAAA;AAGF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC7C,0DAA0D;IAC1D,MAAM;IACN,wDAAwD;IACxD,QAAQ;IACR,oDAAoD;IACpD,QAAQ;CACT,CAAC,CAAA;AAGF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA2C;IAC9E,sBAAsB,EAAE,CAAC,OAAO,CAAC;IACjC,8BAA8B,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1D,wBAAwB,EAAE,CAAC,OAAO,CAAC;IACnC,0BAA0B,EAAE,CAAC,sBAAsB,CAAC;IACpD,4BAA4B,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAChD,4BAA4B,EAAE,CAAC,OAAO,CAAC;IACvC,6BAA6B,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC;IAC9D,wBAAwB,EAAE,CAAC,MAAM,CAAC;IAClC,+BAA+B,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC;IACzD,0BAA0B,EAAE,CAAC,MAAM,CAAC;IACpC,+BAA+B,EAAE,CAAC,YAAY,CAAC;CAChD,CAAA;AAkCD,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,KAA4B;IAE5B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAA;AAClC,CAAC;AAED,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;AAChF,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAA;AAEzF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACpC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACzC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC1D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC9D,CAAC"}

package/dist/auth.d.ts

@@ -30,6 +30,7 @@ export interface AuthProvidersConfig {
         github: boolean;
         password: boolean;
         google: boolean;
+        sso: boolean;
     };
 }
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAK5B,eAAO,MAAM,YAAY;;;;IAIvB,6EAA6E;;aAE7E,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,YAAY,CAAC,CAAA;AAE5D,eAAO,MAAM,mBAAmB;;;aAG9B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE1E,qFAAqF;AACrF,eAAO,MAAM,oBAAoB;;aAE/B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAE5E,iFAAiF;AACjF,eAAO,MAAM,mBAAmB;;;aAG9B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE1E,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAA;CACnE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAK5B,eAAO,MAAM,YAAY;;;;IAIvB,6EAA6E;;aAE7E,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,YAAY,CAAC,CAAA;AAE5D,eAAO,MAAM,mBAAmB;;;aAG9B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE1E,qFAAqF;AACrF,eAAO,MAAM,oBAAoB;;aAE/B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAE5E,iFAAiF;AACjF,eAAO,MAAM,mBAAmB;;;aAG9B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE1E,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAA;CACjF"}

package/dist/debug-api.d.ts

@@ -248,11 +248,101 @@ export declare const debugSignalSchema: v.ObjectSchema<{
     readonly stepIndex: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
 }, undefined>;
 export type DebugSignal = v.InferOutput<typeof debugSignalSchema>;
+/** The run's tool activity in total. */
+export declare const debugToolCallTotalsSchema: v.ObjectSchema<{
+    readonly calls: v.NumberSchema<undefined>;
+    /**
+     * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+     * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+     * where every one of those turns still reports a healthy model call.
+     */
+    readonly failures: v.NumberSchema<undefined>;
+    /** `failures / calls`, or null when there were no calls. */
+    readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>;
+export type DebugToolCallTotals = v.InferOutput<typeof debugToolCallTotalsSchema>;
+/** One tool's slice of it, folded across the agent kinds that called it. */
+export declare const debugToolInsightSchema: v.ObjectSchema<{
+    readonly calls: v.NumberSchema<undefined>;
+    /**
+     * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+     * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+     * where every one of those turns still reports a healthy model call.
+     */
+    readonly failures: v.NumberSchema<undefined>;
+    /** `failures / calls`, or null when there were no calls. */
+    readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    readonly tool: v.StringSchema<undefined>;
+}, undefined>;
+export type DebugToolInsight = v.InferOutput<typeof debugToolInsightSchema>;
+/** One agent kind's slice of it, folded across the tools it called. */
+export declare const debugToolCallKindInsightSchema: v.ObjectSchema<{
+    readonly calls: v.NumberSchema<undefined>;
+    /**
+     * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+     * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+     * where every one of those turns still reports a healthy model call.
+     */
+    readonly failures: v.NumberSchema<undefined>;
+    /** `failures / calls`, or null when there were no calls. */
+    readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    readonly agentKind: v.StringSchema<undefined>;
+}, undefined>;
+export type DebugToolCallKindInsight = v.InferOutput<typeof debugToolCallKindInsightSchema>;
+/**
+ * The run's tool-EXECUTION activity, aggregated in SQL at the `(agentKind, tool)` grain and
+ * re-cut along each axis. The counterpart of the `llm` block, and the half of a run's health
+ * that block structurally cannot report: a tool that fails inside the container leaves every
+ * model call around it looking perfectly healthy.
+ *
+ * Both breakdowns are folds over ONE aggregate, so they total identically to each other and to
+ * `totals` by construction, and both lead with the most-failed row: a run's busiest tool is
+ * almost never its broken one, and the caller reading this is looking for the broken one.
+ * `GET /debug/runs/:runId/tool-calls?ok=false` is the drill-down into any row of it.
+ */
+export declare const debugToolCallRollupSchema: v.ObjectSchema<{
+    readonly totals: v.ObjectSchema<{
+        readonly calls: v.NumberSchema<undefined>;
+        /**
+         * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+         * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+         * where every one of those turns still reports a healthy model call.
+         */
+        readonly failures: v.NumberSchema<undefined>;
+        /** `failures / calls`, or null when there were no calls. */
+        readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    }, undefined>;
+    readonly byTool: v.ArraySchema<v.ObjectSchema<{
+        readonly calls: v.NumberSchema<undefined>;
+        /**
+         * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+         * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+         * where every one of those turns still reports a healthy model call.
+         */
+        readonly failures: v.NumberSchema<undefined>;
+        /** `failures / calls`, or null when there were no calls. */
+        readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+        readonly tool: v.StringSchema<undefined>;
+    }, undefined>, undefined>;
+    readonly byAgentKind: v.ArraySchema<v.ObjectSchema<{
+        readonly calls: v.NumberSchema<undefined>;
+        /**
+         * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+         * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+         * where every one of those turns still reports a healthy model call.
+         */
+        readonly failures: v.NumberSchema<undefined>;
+        /** `failures / calls`, or null when there were no calls. */
+        readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+        readonly agentKind: v.StringSchema<undefined>;
+    }, undefined>, undefined>;
+}, undefined>;
+export type DebugToolCallRollup = v.InferOutput<typeof debugToolCallRollupSchema>;
 /**
  * The run's diagnostic map: identity, per-step state, what each telemetry sink holds, the
- * SQL-aggregated LLM rollups, and the derived signals. Composed from aggregates only — it
- * reads no prompt, response or context body, so it stays cheap enough to be the first call a
- * debugging client always makes.
+ * SQL-aggregated LLM and tool-call rollups, and the derived signals. Composed from aggregates
+ * only — it reads no prompt, response or context body, so it stays cheap enough to be the
+ * first call a debugging client always makes.
  */
 export declare const debugRunOverviewSchema: v.ObjectSchema<{
     /** Schema marker so a consuming model knows the shape without external docs. */
@@ -472,6 +562,47 @@ export declare const debugRunOverviewSchema: v.ObjectSchema<{
          */
         readonly costCurrency: v.NullableSchema<v.StringSchema<undefined>, undefined>;
     }, undefined>;
+    /**
+     * What the run's agents DID with their tools, and how much of it failed. Counted from the
+     * same rows `sinks.toolCalls` counts, in the same pass, so the two can never disagree.
+     */
+    readonly toolCalls: v.ObjectSchema<{
+        readonly totals: v.ObjectSchema<{
+            readonly calls: v.NumberSchema<undefined>;
+            /**
+             * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+             * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+             * where every one of those turns still reports a healthy model call.
+             */
+            readonly failures: v.NumberSchema<undefined>;
+            /** `failures / calls`, or null when there were no calls. */
+            readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+        }, undefined>;
+        readonly byTool: v.ArraySchema<v.ObjectSchema<{
+            readonly calls: v.NumberSchema<undefined>;
+            /**
+             * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+             * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+             * where every one of those turns still reports a healthy model call.
+             */
+            readonly failures: v.NumberSchema<undefined>;
+            /** `failures / calls`, or null when there were no calls. */
+            readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+            readonly tool: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+        readonly byAgentKind: v.ArraySchema<v.ObjectSchema<{
+            readonly calls: v.NumberSchema<undefined>;
+            /**
+             * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+             * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+             * where every one of those turns still reports a healthy model call.
+             */
+            readonly failures: v.NumberSchema<undefined>;
+            /** `failures / calls`, or null when there were no calls. */
+            readonly failureRate: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+            readonly agentKind: v.StringSchema<undefined>;
+        }, undefined>, undefined>;
+    }, undefined>;
     readonly signals: v.ArraySchema<v.ObjectSchema<{
         readonly code: v.StringSchema<undefined>;
         readonly severity: v.PicklistSchema<["info", "warning", "error"], undefined>;
@@ -1398,16 +1529,33 @@ export type DebugSearchQueryList = v.InferOutput<typeof debugSearchQueryListSche
 export declare const toolCallOrderSchema: v.PicklistSchema<["recent", "trajectory"], undefined>;
 export type ToolCallOrder = v.InferOutput<typeof toolCallOrderSchema>;
 /**
- * Query params for the tool-call trajectory list. It takes the small-row page params plus two
- * of its own: the {@link toolCallOrderSchema order}, and a dispatch filter, because a run's step
+ * Whether to narrow a tool-call page to the calls that FAILED or the ones that worked.
+ *
+ * A string enum rather than a wire boolean, because it is a query parameter: `?ok=false`
+ * arrives as text either way, and the enum says so in the spec instead of declaring a type the
+ * transport cannot carry.
+ *
+ * Applied in SQL, like every other narrowing here. A caller filtering a page itself has already
+ * paid for the rows it throws away and has spent the page's `limit` on them, which on this list
+ * is worse than elsewhere: the failures it asked for fall off the end of a page filled with the
+ * calls that worked.
+ */
+export declare const toolCallOkFilterSchema: v.PicklistSchema<["true", "false"], undefined>;
+export type ToolCallOkFilter = v.InferOutput<typeof toolCallOkFilterSchema>;
+/**
+ * Query params for the tool-call trajectory list. It takes the small-row page params plus three
+ * of its own: the {@link toolCallOrderSchema order}; a dispatch filter, because a run's step
  * can dispatch more than once (a re-run, a gate's fixer rounds, a Ralph iteration) and "what did
- * the third ci-fixer round actually do" is a different question from "what did this run do".
+ * the third ci-fixer round actually do" is a different question from "what did this run do"; and
+ * the {@link toolCallOkFilterSchema outcome} filter, which is how the overview's failure counts
+ * are turned into the rows behind them.
  */
 export declare const listDebugToolCallsQuerySchema: v.ObjectSchema<{
     readonly limit: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "Must be a whole number">, v.TransformAction<any, number>, v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 100, undefined>]>, undefined>;
     readonly cursor: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>, undefined>;
     readonly jobId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
     readonly order: v.OptionalSchema<v.PicklistSchema<["recent", "trajectory"], undefined>, undefined>;
+    readonly ok: v.OptionalSchema<v.PicklistSchema<["true", "false"], undefined>, undefined>;
 }, undefined>;
 export type ListDebugToolCallsQuery = v.InferOutput<typeof listDebugToolCallsQuerySchema>;
 /**

package/dist/debug-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"debug-api.d.ts","sourceRoot":"","sources":["../src/debug-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AA+D5B,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,OAAQ,CAAA;AAE5C,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,SAAU,CAAA;AAE3C;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,UAAY,CAAA;AAE9C,yDAAyD;AACzD,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAgFzC;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;IAC1B,wFAAwF;;IAExF;;;OAGG;;IAEH;;;;OAIG;;IAEH,sGAAsG;;IAEtG,iFAAiF;;IAEjF;;;;;OAKG;;aAEH,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAM7D;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;IAEhC,8FAA8F;;;;;IAK9F,iFAAiF;;IAEjF,iDAAiD;;IAEjD,6CAA6C;;IAE7C,0EAA0E;;;;;;;;;;;;;;;;;;;aAE1E,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE,iDAAiD;AACjD,eAAO,MAAM,wBAAwB;IACnC,gGAAgG;;IAEhG,sDAAsD;;IAEtD,gFAAgF;;IAEhF,gEAAgE;;aAEhE,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,eAAO,MAAM,kBAAkB;;;QA7B7B,8FAA8F;;;;;QAK9F,iFAAiF;;QAEjF,iDAAiD;;QAEjD,6CAA6C;;QAE7C,0EAA0E;;;;;;;;;;;;;;;;;;;;IAoB1E,qEAAqE;;aAErE,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAMnE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;;;IAG7B,iFAAiF;;;IAGjF,gFAAgF;;IAEhF,8CAA8C;;IAE9C,qEAAqE;;IAErE,2DAA2D;;IAE3D;;;;OAIG;;IAEH,0FAA0F;;;;;;IAI1F,2EAA2E;;IAE3E,qEAAqE;;IAErE,gGAAgG;;IAEhG;;;;OAIG;;QAzHH,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aAqGH,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;aAGhC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,2DAA2C,CAAA;AACjF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;IAI5B,mHAAmH;;IAEnH,oEAAoE;;IAEpE,oEAAoE;;aAEpE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;IACjC,gFAAgF;;;IAGhF,oDAAoD;;;;QAxIpD,8FAA8F;;;;;QAK9F,iFAAiF;;QAEjF,iDAAiD;;QAEjD,6CAA6C;;QAE7C,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;QAuC1E,iFAAiF;;;QAGjF,gFAAgF;;QAEhF,8CAA8C;;QAE9C,qEAAqE;;QAErE,2DAA2D;;QAE3D;;;;WAIG;;QAEH,0FAA0F;;;;;;QAI1F,2EAA2E;;QAE3E,qEAAqE;;QAErE,gGAAgG;;QAEhG;;;;WAIG;;YAzHH,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;IA8JH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASH;;;;;;;;;;;OAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAKD;;;;WAIG;;;;;;;QAvDL,mHAAmH;;QAEnH,oEAAoE;;QAEpE,oEAAoE;;;aAuDpE,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAM3E,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,yDAAyC,CAAA;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E,oDAAoD;AACpD,eAAO,MAAM,oBAAoB,mDAAmC,CAAA;AACpE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,kDAAkC,CAAA;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;IACnC;;;OAGG;;IAEH,yGAAyG;;IAEzG,+FAA+F;;IAE/F,yFAAyF;;IAEzF,4GAA4G;;;;YA9P5G,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;IA0OH,sFAAsF;;QAhQtF,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aA4OH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;IAa7B;;;;;;;;;OASG;;IAEH;;;;;;;OAOG;;IAEH,+DAA+D;;IAE/D,0EAA0E;;;IAG1E,6EAA6E;;IAE7E,uFAAuF;;IAEvF;;;;;OAKG;;;;;;;IAOH,8FAA8F;;IAE9F,qEAAqE;;QAxUrE,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;IAoTH,qCAAqC;;QA1UrC,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;IAsTH,iEAAiE;;QA5UjE,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;IAwTH;;;;;;;;;OASG;;QApGH;;;WAGG;;QAEH,yGAAyG;;QAEzG,+FAA+F;;QAE/F,yFAAyF;;QAEzF,4GAA4G;;;;gBA9P5G,wFAAwF;;gBAExF;;;mBAGG;;gBAEH;;;;mBAIG;;gBAEH,sGAAsG;;gBAEtG,iFAAiF;;gBAEjF;;;;;mBAKG;;;;QA0OH,sFAAsF;;YAhQtF,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;aAmUH,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,kEAAkE;AAClE,eAAO,MAAM,4BAA4B;IACvC,uFAAuF;;IAEvF;;;;;;;;OAQG;;IAEH,sEAAsE;;IAEtE;;;;;;OAMG;;IAEH,+EAA+E;;IAE/E,gFAAgF;;;IAGhF;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEvF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;QArGjC;;;;;;;;;WASG;;QAEH;;;;;;;WAOG;;QAEH,+DAA+D;;QAE/D,0EAA0E;;;QAG1E,6EAA6E;;QAE7E,uFAAuF;;QAEvF;;;;;WAKG;;;;;;;QAOH,8FAA8F;;QAE9F,qEAAqE;;YAxUrE,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;QAoTH,qCAAqC;;YA1UrC,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;QAsTH,iEAAiE;;YA5UjE,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;QAwTH;;;;;;;;;WASG;;YApGH;;;eAGG;;YAEH,yGAAyG;;YAEzG,+FAA+F;;YAE/F,yFAAyF;;YAEzF,4GAA4G;;;;oBA9P5G,wFAAwF;;oBAExF;;;uBAGG;;oBAEH;;;;uBAIG;;oBAEH,sGAAsG;;oBAEtG,iFAAiF;;oBAEjF;;;;;uBAKG;;;;YA0OH,sFAAsF;;gBAhQtF,wFAAwF;;gBAExF;;;mBAGG;;gBAEH;;;;mBAIG;;gBAEH,sGAAsG;;gBAEtG,iFAAiF;;gBAEjF;;;;;mBAKG;;;;;;aA+WH,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E,mDAAmD;AACnD,eAAO,MAAM,0BAA0B;IACrC;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAOnF;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B;;;IAGvC,yEAAyE;;;;;;;IAOzE;;;;;;;;;OASG;;;aAGH,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEvF,sEAAsE;AACtE,eAAO,MAAM,gCAAgC;IAC3C,iGAAiG;;;;aAIjG,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAE/F,eAAO,MAAM,2BAA2B;;;;QA/BtC,yEAAyE;;;;;;;QAOzE;;;;;;;;;WASG;;;;;aAkBH,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,gEAAgE;AAChE,eAAO,MAAM,+BAA+B;;;QApd1C,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aAicH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,kFAAkF;AAClF,eAAO,MAAM,2BAA2B;;;;;QA3dtC,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aA0cH,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;QAvexC,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;;QAtBH,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;;;;YAtBH,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;;;;;;YAtBH,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;IA6dH;;;OAGG;;aAEH,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF,uDAAuD;AACvD,eAAO,MAAM,+BAA+B;IAC1C;;;OAGG;;IAEH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAM7F,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB;;;aAGnC,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;aAGrC,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,uDAAuC,CAAA;AACvE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;;;;;aAKxC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;aAGlC,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;aAG7B,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA"}
+{"version":3,"file":"debug-api.d.ts","sourceRoot":"","sources":["../src/debug-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AA+D5B,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,OAAQ,CAAA;AAE5C,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,SAAU,CAAA;AAE3C;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,UAAY,CAAA;AAE9C,yDAAyD;AACzD,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAgFzC;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;IAC1B,wFAAwF;;IAExF;;;OAGG;;IAEH;;;;OAIG;;IAEH,sGAAsG;;IAEtG,iFAAiF;;IAEjF;;;;;OAKG;;aAEH,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,eAAe,CAAC,CAAA;AAM7D;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;IAEhC,8FAA8F;;;;;IAK9F,iFAAiF;;IAEjF,iDAAiD;;IAEjD,6CAA6C;;IAE7C,0EAA0E;;;;;;;;;;;;;;;;;;;aAE1E,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE,iDAAiD;AACjD,eAAO,MAAM,wBAAwB;IACnC,gGAAgG;;IAEhG,sDAAsD;;IAEtD,gFAAgF;;IAEhF,gEAAgE;;aAEhE,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,eAAO,MAAM,kBAAkB;;;QA7B7B,8FAA8F;;;;;QAK9F,iFAAiF;;QAEjF,iDAAiD;;QAEjD,6CAA6C;;QAE7C,0EAA0E;;;;;;;;;;;;;;;;;;;;IAoB1E,qEAAqE;;aAErE,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAMnE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;;;IAG7B,iFAAiF;;;IAGjF,gFAAgF;;IAEhF,8CAA8C;;IAE9C,qEAAqE;;IAErE,2DAA2D;;IAE3D;;;;OAIG;;IAEH,0FAA0F;;;;;;IAI1F,2EAA2E;;IAE3E,qEAAqE;;IAErE,gGAAgG;;IAEhG;;;;OAIG;;QAzHH,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aAqGH,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;aAGhC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,2DAA2C,CAAA;AACjF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;IAI5B,mHAAmH;;IAEnH,oEAAoE;;IAEpE,oEAAoE;;aAEpE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAsBjE,wCAAwC;AACxC,eAAO,MAAM,yBAAyB;;IAXpC;;;;OAIG;;IAEH,4DAA4D;;aAKS,CAAA;AACvE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB;;IAfjC;;;;OAIG;;IAEH,4DAA4D;;;aAS+B,CAAA;AAC7F,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E,uEAAuE;AACvE,eAAO,MAAM,8BAA8B;;IAnBzC;;;;OAIG;;IAEH,4DAA4D;;;aAgB5D,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA;AAE3F;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB;;;QApCpC;;;;WAIG;;QAEH,4DAA4D;;;;;QAN5D;;;;WAIG;;QAEH,4DAA4D;;;;;;QAN5D;;;;WAIG;;QAEH,4DAA4D;;;;aAkC5D,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;IACjC,gFAAgF;;;IAGhF,oDAAoD;;;;QA7LpD,8FAA8F;;;;;QAK9F,iFAAiF;;QAEjF,iDAAiD;;QAEjD,6CAA6C;;QAE7C,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;QAuC1E,iFAAiF;;;QAGjF,gFAAgF;;QAEhF,8CAA8C;;QAE9C,qEAAqE;;QAErE,2DAA2D;;QAE3D;;;;WAIG;;QAEH,0FAA0F;;;;;;QAI1F,2EAA2E;;QAE3E,qEAAqE;;QAErE,gGAAgG;;QAEhG;;;;WAIG;;YAzHH,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;IAmNH;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASH;;;;;;;;;;;OAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAKD;;;;WAIG;;;IAGL;;;OAGG;;;;YA/FH;;;;eAIG;;YAEH,4DAA4D;;;;;YAN5D;;;;eAIG;;YAEH,4DAA4D;;;;;;YAN5D;;;;eAIG;;YAEH,4DAA4D;;;;;;;;;QAzB5D,mHAAmH;;QAEnH,oEAAoE;;QAEpE,oEAAoE;;;aAiHpE,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAM3E,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,yDAAyC,CAAA;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E,oDAAoD;AACpD,eAAO,MAAM,oBAAoB,mDAAmC,CAAA;AACpE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,kDAAkC,CAAA;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;IACnC;;;OAGG;;IAEH,yGAAyG;;IAEzG,+FAA+F;;IAE/F,yFAAyF;;IAEzF,4GAA4G;;;;YAxT5G,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;IAoSH,sFAAsF;;QA1TtF,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aAsSH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;IAa7B;;;;;;;;;OASG;;IAEH;;;;;;;OAOG;;IAEH,+DAA+D;;IAE/D,0EAA0E;;;IAG1E,6EAA6E;;IAE7E,uFAAuF;;IAEvF;;;;;OAKG;;;;;;;IAOH,8FAA8F;;IAE9F,qEAAqE;;QAlYrE,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;IA8WH,qCAAqC;;QApYrC,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;IAgXH,iEAAiE;;QAtYjE,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;IAkXH;;;;;;;;;OASG;;QApGH;;;WAGG;;QAEH,yGAAyG;;QAEzG,+FAA+F;;QAE/F,yFAAyF;;QAEzF,4GAA4G;;;;gBAxT5G,wFAAwF;;gBAExF;;;mBAGG;;gBAEH;;;;mBAIG;;gBAEH,sGAAsG;;gBAEtG,iFAAiF;;gBAEjF;;;;;mBAKG;;;;QAoSH,sFAAsF;;YA1TtF,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;aA6XH,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,kEAAkE;AAClE,eAAO,MAAM,4BAA4B;IACvC,uFAAuF;;IAEvF;;;;;;;;OAQG;;IAEH,sEAAsE;;IAEtE;;;;;;OAMG;;IAEH,+EAA+E;;IAE/E,gFAAgF;;;IAGhF;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEvF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;QArGjC;;;;;;;;;WASG;;QAEH;;;;;;;WAOG;;QAEH,+DAA+D;;QAE/D,0EAA0E;;;QAG1E,6EAA6E;;QAE7E,uFAAuF;;QAEvF;;;;;WAKG;;;;;;;QAOH,8FAA8F;;QAE9F,qEAAqE;;YAlYrE,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;QA8WH,qCAAqC;;YApYrC,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;QAgXH,iEAAiE;;YAtYjE,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;QAkXH;;;;;;;;;WASG;;YApGH;;;eAGG;;YAEH,yGAAyG;;YAEzG,+FAA+F;;YAE/F,yFAAyF;;YAEzF,4GAA4G;;;;oBAxT5G,wFAAwF;;oBAExF;;;uBAGG;;oBAEH;;;;uBAIG;;oBAEH,sGAAsG;;oBAEtG,iFAAiF;;oBAEjF;;;;;uBAKG;;;;YAoSH,sFAAsF;;gBA1TtF,wFAAwF;;gBAExF;;;mBAGG;;gBAEH;;;;mBAIG;;gBAEH,sGAAsG;;gBAEtG,iFAAiF;;gBAEjF;;;;;mBAKG;;;;;;aAyaH,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E,mDAAmD;AACnD,eAAO,MAAM,0BAA0B;IACrC;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAOnF;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B;;;IAGvC,yEAAyE;;;;;;;IAOzE;;;;;;;;;OASG;;;aAGH,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEvF,sEAAsE;AACtE,eAAO,MAAM,gCAAgC;IAC3C,iGAAiG;;;;aAIjG,CAAA;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAA;AAE/F,eAAO,MAAM,2BAA2B;;;;QA/BtC,yEAAyE;;;;;;;QAOzE;;;;;;;;;WASG;;;;;aAkBH,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,gEAAgE;AAChE,eAAO,MAAM,+BAA+B;;;QA9gB1C,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aA2fH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F,kFAAkF;AAClF,eAAO,MAAM,2BAA2B;;;;;QArhBtC,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;aAogBH,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;QAjiBxC,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;;QAtBH,wFAAwF;;QAExF;;;WAGG;;QAEH;;;;WAIG;;QAEH,sGAAsG;;QAEtG,iFAAiF;;QAEjF;;;;;WAKG;;;;;;YAtBH,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;;;;;;YAtBH,wFAAwF;;YAExF;;;eAGG;;YAEH;;;;eAIG;;YAEH,sGAAsG;;YAEtG,iFAAiF;;YAEjF;;;;;eAKG;;;;IAuhBH;;;OAGG;;aAEH,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF,uDAAuD;AACvD,eAAO,MAAM,+BAA+B;IAC1C;;;OAGG;;IAEH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAM7F,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB;;;aAGnC,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;aAGrC,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,uDAAuC,CAAA;AACvE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,gDAAgC,CAAA;AACnE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;aAMxC,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;aAGlC,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;aAG7B,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA"}

package/dist/debug-api.js

@@ -245,11 +245,55 @@ export const debugSignalSchema = v.object({
     /** The step index the signal is about, when it is scoped to one. */
     stepIndex: v.nullable(v.number()),
 });
+/**
+ * What every level of the tool-call rollup counts, plus the ratio the counts only mean
+ * something as.
+ *
+ * `failureRate` is null where nothing was called, never 0: a run that made no tool calls has
+ * no failure rate, and a clean 0% would file it beside a run whose every call worked — the
+ * same number for "nothing happened" and "everything worked".
+ */
+const toolCallCountsSchema = {
+    calls: v.number(),
+    /**
+     * Calls that came back `ok: false`: the TOOL failed inside the container (a rejected edit,
+     * a non-zero command, malformed arguments), which is invisible in the LLM rollup beside it,
+     * where every one of those turns still reports a healthy model call.
+     */
+    failures: v.number(),
+    /** `failures / calls`, or null when there were no calls. */
+    failureRate: v.nullable(v.number()),
+};
+/** The run's tool activity in total. */
+export const debugToolCallTotalsSchema = v.object(toolCallCountsSchema);
+/** One tool's slice of it, folded across the agent kinds that called it. */
+export const debugToolInsightSchema = v.object({ tool: v.string(), ...toolCallCountsSchema });
+/** One agent kind's slice of it, folded across the tools it called. */
+export const debugToolCallKindInsightSchema = v.object({
+    agentKind: v.string(),
+    ...toolCallCountsSchema,
+});
+/**
+ * The run's tool-EXECUTION activity, aggregated in SQL at the `(agentKind, tool)` grain and
+ * re-cut along each axis. The counterpart of the `llm` block, and the half of a run's health
+ * that block structurally cannot report: a tool that fails inside the container leaves every
+ * model call around it looking perfectly healthy.
+ *
+ * Both breakdowns are folds over ONE aggregate, so they total identically to each other and to
+ * `totals` by construction, and both lead with the most-failed row: a run's busiest tool is
+ * almost never its broken one, and the caller reading this is looking for the broken one.
+ * `GET /debug/runs/:runId/tool-calls?ok=false` is the drill-down into any row of it.
+ */
+export const debugToolCallRollupSchema = v.object({
+    totals: debugToolCallTotalsSchema,
+    byTool: v.array(debugToolInsightSchema),
+    byAgentKind: v.array(debugToolCallKindInsightSchema),
+});
 /**
  * The run's diagnostic map: identity, per-step state, what each telemetry sink holds, the
- * SQL-aggregated LLM rollups, and the derived signals. Composed from aggregates only — it
- * reads no prompt, response or context body, so it stays cheap enough to be the first call a
- * debugging client always makes.
+ * SQL-aggregated LLM and tool-call rollups, and the derived signals. Composed from aggregates
+ * only — it reads no prompt, response or context body, so it stays cheap enough to be the
+ * first call a debugging client always makes.
  */
 export const debugRunOverviewSchema = v.object({
     /** Schema marker so a consuming model knows the shape without external docs. */
@@ -294,6 +338,11 @@ export const debugRunOverviewSchema = v.object({
          */
         costCurrency: v.nullable(v.string()),
     }),
+    /**
+     * What the run's agents DID with their tools, and how much of it failed. Counted from the
+     * same rows `sinks.toolCalls` counts, in the same pass, so the two can never disagree.
+     */
+    toolCalls: debugToolCallRollupSchema,
     signals: v.array(debugSignalSchema),
 });
 // ---------------------------------------------------------------------------
@@ -598,16 +647,32 @@ export const debugSearchQueryListSchema = v.object({
  */
 export const toolCallOrderSchema = v.picklist(['recent', 'trajectory']);
 /**
- * Query params for the tool-call trajectory list. It takes the small-row page params plus two
- * of its own: the {@link toolCallOrderSchema order}, and a dispatch filter, because a run's step
+ * Whether to narrow a tool-call page to the calls that FAILED or the ones that worked.
+ *
+ * A string enum rather than a wire boolean, because it is a query parameter: `?ok=false`
+ * arrives as text either way, and the enum says so in the spec instead of declaring a type the
+ * transport cannot carry.
+ *
+ * Applied in SQL, like every other narrowing here. A caller filtering a page itself has already
+ * paid for the rows it throws away and has spent the page's `limit` on them, which on this list
+ * is worse than elsewhere: the failures it asked for fall off the end of a page filled with the
+ * calls that worked.
+ */
+export const toolCallOkFilterSchema = v.picklist(['true', 'false']);
+/**
+ * Query params for the tool-call trajectory list. It takes the small-row page params plus three
+ * of its own: the {@link toolCallOrderSchema order}; a dispatch filter, because a run's step
  * can dispatch more than once (a re-run, a gate's fixer rounds, a Ralph iteration) and "what did
- * the third ci-fixer round actually do" is a different question from "what did this run do".
+ * the third ci-fixer round actually do" is a different question from "what did this run do"; and
+ * the {@link toolCallOkFilterSchema outcome} filter, which is how the overview's failure counts
+ * are turned into the rows behind them.
  */
 export const listDebugToolCallsQuerySchema = v.object({
     limit: v.optional(pageLimitSchema),
     cursor: v.optional(cursorSchema),
     jobId: v.optional(v.string()),
     order: v.optional(toolCallOrderSchema),
+    ok: v.optional(toolCallOkFilterSchema),
 });
 /**
  * The tool calls the run's agents made: the TRAJECTORY, which is the half of "how did this diff