@cat-factory/kernel 0.6.0

package/dist/ports/index.d.ts

@@ -0,0 +1,68 @@
+export type { BlockPatch, BlockRepository, ExecutionRepository, PipelineRepository, RunRef, WorkspaceRepository, WorkspaceVisibility, } from './repositories.js';
+export type { AccountRecord, AccountRepository, AccountSettingsPatch, Membership, MembershipRepository, } from './account-repositories.js';
+export type { IdentityProvider, UserRecord, UserIdentityRecord, UserRepository, } from './user-repositories.js';
+export type { PasswordHasher } from './password-hasher.js';
+export type { EmailMessage, EmailSender, EmailProviderKind, EmailConnectionRecord, EmailConnectionRepository, } from './email-sender.js';
+export type { AccountInvitationRecord, AccountInvitationRepository, InvitationStatus, } from './invitation-repositories.js';
+export type { ServicePatch, ServiceRepository, WorkspaceMountPatch, WorkspaceMountRepository, } from './service-repositories.js';
+export type { Clock, IdGenerator } from './runtime.js';
+export type { RequirementReviewRepository } from './requirement-review-repositories.js';
+export type { ConsensusSessionRepository } from './consensus-repositories.js';
+export type { ClarityReviewRepository } from './clarity-review-repositories.js';
+export type { AgentRunRef, AgentRunRepository } from './agent-runs.js';
+export type { HarnessKind, ModelProvider, ModelProviderResolver, ModelRef, ModelScope, } from './model-provider.js';
+export { inlineModelRef } from './model-provider.js';
+export type { TokenUsageRecord, TokenUsageRepository, TokenUsageTotals } from './token-usage.js';
+export type { LlmCallMetric, LlmCallMetricRepository, LlmCallMetricSummary, LlmPromptChainTip, } from './llm-metrics.js';
+export { LLM_WARNING_FINISH_REASONS } from './llm-metrics.js';
+export type { LlmGenerationEvent, LlmToolSpan, LlmToolSpanContext, LlmTraceSink, InlineObservabilityContext, } from './llm-trace-sink.js';
+export { INLINE_OBSERVABILITY_NS, catFactoryObservability, readInlineObservabilityContext, } from './llm-trace-sink.js';
+export type { AgentDecisionRequest, AgentExecutor, AgentJobHandle, AgentJobUpdate, AgentRunContext, AgentRunResult, AgentTokenUsage, AsyncAgentExecutor, } from './agent-executor.js';
+export { isAsyncAgentExecutor } from './agent-executor.js';
+export { type WorkRunner, NoopWorkRunner } from './work-runner.js';
+export { type ExecutionEventPublisher, NoopEventPublisher } from './execution-events.js';
+export type { CommitFilesResult, GitHubClient, GitHubCodeSearchHit, GitHubIssueComment, GitHubIssueDetail, GitHubIssueSearchHit, GitHubRepoRef, InstallationMeta, InstallationSummary, ListOptions, Paged, RateLimitSnapshot, RepoContentEntry, RepoEntry, RepoFileContent, } from './github-client.js';
+export type { CreateRepoInput, GitHubProvisioningClient, InstallationPermissions, ProvisionedRepo, } from './github-provisioning.js';
+export type { BranchProjectionRepository, CheckRunProjectionRepository, CommitProjectionRepository, GitHubInstallation, GitHubInstallationRepository, IssueProjectionRepository, PullRequestProjectionRepository, RateLimitRepository, RepoProjectionRepository, StaleRepoRef, SyncCursor, SyncCursorKind, } from './github-repositories.js';
+export type { WebhookVerifier } from './webhook-verifier.js';
+export type { DocumentCredentials, DocumentContent, NormalizedConnection, DocumentSourceProvider, DocumentSourceRegistry, } from './document-source.js';
+export type { DocumentConnectionRecord, DocumentConnectionRepository, DocumentRecord, DocumentRepository, } from './document-repositories.js';
+export type { TaskCredentials, TaskContent, NormalizedTaskConnection, TaskSourceProvider, TaskSourceRegistry, } from './task-source.js';
+export type { TaskConnectionRecord, TaskConnectionRepository, TaskRecord, TaskRepository, } from './task-repositories.js';
+export type { FragmentAppliesTo, PromptFragmentRecord, PromptFragmentRepository, FragmentSourceRecord, FragmentSourceRepository, } from './fragment-repositories.js';
+export type { SelectableFragment, FragmentSelectionContext, FragmentSelector, ResolvedRunFragment, FragmentResolverInput, FragmentRunSelection, FragmentResolver, } from './fragment-selector.js';
+export type { SecretCipher } from './secret-cipher.js';
+export type { PersonalSecretCipher } from './personal-secret-cipher.js';
+export type { EnvironmentProvider, ProvisionContext, ProvisionEnvironmentRequest, EnvironmentStatusRequest, EnvironmentTeardownRequest, ProvisionedEnvironment, ProvisionFields, SecretResolver, } from './environment-provider.js';
+export { type UrlSafetyPolicy, STRICT_URL_SAFETY_POLICY } from './url-safety-policy.js';
+export type { EnvironmentConnectionRecord, EnvironmentConnectionRepository, EnvironmentRecord, EnvironmentRecordPatch, EnvironmentRegistryRepository, } from './environment-repositories.js';
+export type { BootstrapJobRecord, BootstrapJobRecordPatch, BootstrapJobRepository, ReferenceArchitectureRecord, ReferenceArchitectureRecordPatch, ReferenceArchitectureRepository, } from './bootstrap-repositories.js';
+export type { BootstrapJobHandle, BootstrapJobUpdate, BootstrapRepoOutcome, BootstrapRepoRequest, RepoBootstrapper, } from './repo-bootstrapper.js';
+export { type BootstrapRunner, NoopBootstrapRunner } from './bootstrap-runner.js';
+export type { RunnerDispatchKind, RunnerDispatchOptions, RunnerJobProgress, RunnerJobRef, RunnerJobResult, RunnerJobView, RunnerTransport, } from './runner-transport.js';
+export type { RunnerDispatchRequest, RunnerPollRequest, RunnerPoolProvider, } from './runner-pool-provider.js';
+export type { RunnerPoolConnectionRecord, RunnerPoolConnectionRepository, } from './runner-pool-repositories.js';
+export type { SubscriptionVendor, ProviderSubscriptionTokenRecord, ProviderSubscriptionTokenRepository, } from './provider-subscription-repositories.js';
+export type { ApiKeyScope, ApiKeyProvider, ApiKeyScopeRef, ProviderApiKeyRecord, ProviderApiKeyRepository, } from './provider-api-key-repositories.js';
+export type { PersonalSubscriptionRecord, PersonalSubscriptionRepository, SubscriptionActivationRecord, SubscriptionActivationRepository, } from './personal-subscription-repositories.js';
+export type { LocalModelEndpointRecord, LocalModelEndpointRepository, } from './local-model-repositories.js';
+export type { BoardWritePort } from './board-operations.js';
+export type { PullRequestMerger } from './pr-merger.js';
+export type { CiCheck, CiStatusReport, CiStatusProvider } from './ci-status.js';
+export type { ReleaseSignal, ReleaseSignalKind, ReleaseSignalState, ReleaseHealthStatus, ReleaseHealthReport, ReleaseErrorSample, ReleaseEvidence, ReleaseHealthProvider, } from './release-health.js';
+export type { IncidentMatchQuery, IncidentUpdate, IncidentEnrichmentProvider, } from './incident-enrichment.js';
+export { CompositeIncidentEnrichmentProvider } from './incident-enrichment.js';
+export type { DatadogConnectionRecord, DatadogConnectionRepository, ReleaseHealthConfigRecord, ReleaseHealthConfigRepository, } from './release-health-repositories.js';
+export type { MergeabilityVerdict, MergeabilityReport, PullRequestMergeabilityProvider, } from './pr-mergeability.js';
+export type { NotificationRepository } from './notification-repositories.js';
+export type { SlackConnectionRecord, SlackConnectionRepository, SlackSettingsRecord, SlackSettingsRepository, SlackMemberMappingRepository, } from './slack-repositories.js';
+export type { MergePresetRepository } from './merge-preset-repositories.js';
+export type { WorkspaceSettingsRepository } from './workspace-settings-repositories.js';
+export type { SandboxPromptVersionRepository, SandboxFixtureRepository, SandboxExperimentRepository, SandboxRunRepository, SandboxGradeRepository, } from './sandbox-repositories.js';
+export type { ModelDefaultsRepository } from './model-default-repositories.js';
+export type { ServiceFragmentDefaultsRepository } from './service-fragment-default-repositories.js';
+export type { DueSchedule, PipelineScheduleRepository } from './recurring-repositories.js';
+export type { TrackerSettingsRepository } from './tracker-settings-repositories.js';
+export type { CreateTicketRequest, CreatedTicket, TicketTrackerProvider } from './ticket-tracker.js';
+export { type NotificationChannel, CompositeNotificationChannel, NoopNotificationChannel, } from './notification-channel.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,EACV,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,YAAY,EACV,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,uBAAuB,EACvB,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,8BAA8B,CAAA;AACrC,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACtD,YAAY,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAA;AACvF,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAC7E,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC/E,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACtE,YAAY,EACV,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAChG,YAAY,EACV,aAAa,EACb,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAC7D,YAAY,EACV,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,KAAK,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,KAAK,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACxF,YAAY,EACV,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,KAAK,EACL,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,eAAe,EACf,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,GAChB,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EAClB,4BAA4B,EAC5B,yBAAyB,EACzB,+BAA+B,EAC/B,mBAAmB,EACnB,wBAAwB,EACxB,YAAY,EACZ,UAAU,EACV,cAAc,GACf,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,cAAc,EACd,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,eAAe,EACf,WAAW,EACX,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,oBAAoB,EACpB,wBAAwB,EACxB,UAAU,EACV,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AACvE,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,EACf,cAAc,GACf,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,KAAK,eAAe,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACvF,YAAY,EACV,2BAA2B,EAC3B,+BAA+B,EAC/B,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,6BAA6B,CAAA;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,KAAK,eAAe,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AACjF,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,kBAAkB,EAClB,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,yCAAyC,CAAA;AAChD,YAAY,EACV,WAAW,EACX,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EACV,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,yCAAyC,CAAA;AAChD,YAAY,EACV,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,+BAA+B,CAAA;AACtC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAC/E,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,qBAAqB,GACtB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,0BAA0B,GAC3B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,mCAAmC,EAAE,MAAM,0BAA0B,CAAA;AAC9E,YAAY,EACV,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAC5E,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,yBAAyB,CAAA;AAChC,YAAY,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAC3E,YAAY,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAA;AACvF,YAAY,EACV,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,2BAA2B,CAAA;AAClC,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAC9E,YAAY,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAA;AACnG,YAAY,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAC1F,YAAY,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAA;AACnF,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACpG,OAAO,EACL,KAAK,mBAAmB,EACxB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAA"}

package/dist/ports/index.js

@@ -0,0 +1,11 @@
+export { inlineModelRef } from './model-provider.js';
+export { LLM_WARNING_FINISH_REASONS } from './llm-metrics.js';
+export { INLINE_OBSERVABILITY_NS, catFactoryObservability, readInlineObservabilityContext, } from './llm-trace-sink.js';
+export { isAsyncAgentExecutor } from './agent-executor.js';
+export { NoopWorkRunner } from './work-runner.js';
+export { NoopEventPublisher } from './execution-events.js';
+export { STRICT_URL_SAFETY_POLICY } from './url-safety-policy.js';
+export { NoopBootstrapRunner } from './bootstrap-runner.js';
+export { CompositeIncidentEnrichmentProvider } from './incident-enrichment.js';
+export { CompositeNotificationChannel, NoopNotificationChannel, } from './notification-channel.js';
+//# sourceMappingURL=index.js.map

package/dist/ports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAQpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAQ7D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAW5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAmB,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAgC,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AA6FxF,OAAO,EAAwB,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AAuBvF,OAAO,EAAwB,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AA2DjF,OAAO,EAAE,mCAAmC,EAAE,MAAM,0BAA0B,CAAA;AAkC9E,OAAO,EAEL,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAA"}

package/dist/ports/invitation-repositories.d.ts

@@ -0,0 +1,28 @@
+import type { AccountRole } from '../domain/types.js';
+export type InvitationStatus = 'pending' | 'accepted' | 'revoked';
+export interface AccountInvitationRecord {
+    id: string;
+    accountId: string;
+    /** Lowercased invitee email. */
+    email: string;
+    /** The roles the invitee gains on acceptance (at least one). */
+    roles: AccountRole[];
+    /** SHA-256 hash (hex/base64url) of the opaque token; the raw token is never stored. */
+    tokenHash: string;
+    /** User id of the inviter. */
+    invitedBy: string;
+    status: InvitationStatus;
+    expiresAt: number;
+    createdAt: number;
+}
+export interface AccountInvitationRepository {
+    create(record: AccountInvitationRecord): Promise<void>;
+    get(id: string): Promise<AccountInvitationRecord | null>;
+    /** Resolve a pending invitation by its token hash (the redeem path). */
+    findByTokenHash(tokenHash: string): Promise<AccountInvitationRecord | null>;
+    /** Every invitation for an account (the roster's pending/revoked list). */
+    listByAccount(accountId: string): Promise<AccountInvitationRecord[]>;
+    /** Update an invitation's status (accept / revoke). */
+    setStatus(id: string, status: InvitationStatus): Promise<void>;
+}
+//# sourceMappingURL=invitation-repositories.d.ts.map

package/dist/ports/invitation-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/invitation-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAOrD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;AAEjE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,gEAAgE;IAChE,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAA;IACjB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,gBAAgB,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;IACxD,wEAAwE;IACxE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;IAC3E,2EAA2E;IAC3E,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;IACpE,uDAAuD;IACvD,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D"}

package/dist/ports/invitation-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=invitation-repositories.js.map

package/dist/ports/invitation-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-repositories.js","sourceRoot":"","sources":["../../src/ports/invitation-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/llm-metrics.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Upstream finish reasons that are not failures but warrant a warning: the model
+ * was cut short by the output limit, or filtered. Shared by the service's
+ * classification and each repo's summary aggregation so the two runtimes agree.
+ */
+export declare const LLM_WARNING_FINISH_REASONS: readonly ['length', 'content_filter'];
+/** One proxied LLM call, with its full prompt/response and timing breakdown. */
+export interface LlmCallMetric {
+    id: string;
+    workspaceId: string;
+    /** The run this call belongs to (null only for calls outside a run). */
+    executionId: string | null;
+    agentKind: string;
+    provider: string;
+    model: string;
+    /** When the call completed (epoch ms). */
+    createdAt: number;
+    /** Whether the upstream call was streamed (SSE) rather than buffered. */
+    streaming: boolean;
+    /** Number of chat messages in the request. */
+    messageCount: number;
+    /** Number of tools offered in the request (0 = the agent can't edit anything). */
+    toolCount: number;
+    /** The `max_tokens` the request asked for (the effective output ceiling), or null. */
+    requestMaxTokens: number | null;
+    /** Prompt (input) tokens the model reported. */
+    promptTokens: number;
+    /**
+     * Prompt tokens served from the provider's prompt cache (a subset of
+     * {@link promptTokens}), across the field names providers use. 0 when the provider
+     * reported none or does not cache. Lets the dashboard show the actual cache hit rate.
+     */
+    cachedPromptTokens: number;
+    /** Completion (output) tokens the model reported. */
+    completionTokens: number;
+    /** Total tokens the model reported. */
+    totalTokens: number;
+    /** The upstream finish reason (`stop` | `length` | `tool_calls` | `content_filter` | …), or null. */
+    finishReason: string | null;
+    /** Time spent waiting on the upstream model (ms) — the actual execution. */
+    upstreamMs: number;
+    /** Transport/proxy overhead (ms): the call's total time minus {@link upstreamMs}. */
+    overheadMs: number;
+    /** End-to-end time the proxy spent on this call (ms). */
+    totalMs: number;
+    /** Whether the call succeeded (a 2xx upstream response). */
+    ok: boolean;
+    /** The upstream HTTP status, when the call reached an upstream (null for in-process / refusals). */
+    httpStatus: number | null;
+    /** A short error message when {@link ok} is false, else null. */
+    errorMessage: string | null;
+    /**
+     * The request messages serialised as JSON — stored as a DELTA: only the messages
+     * this call appended beyond {@link promptPrefixCount}. When `promptPrefixCount` is
+     * 0 this is the full array. Reconstruct the full prompt by replaying a chain's
+     * deltas (see `reconstructPrompts` in orchestration).
+     */
+    promptText: string;
+    /**
+     * Number of leading messages elided from {@link promptText} (already stored by an
+     * earlier call in this conversation chain). 0 ⇒ {@link promptText} is the full array.
+     */
+    promptPrefixCount: number;
+    /**
+     * Hash of this call's FULL messages array, used to verify that the NEXT call in the
+     * chain genuinely extends this one before its prefix is elided.
+     */
+    promptHash: string;
+    /** The full assistant response text (concatenated for streamed calls). */
+    responseText: string;
+    /**
+     * The model's reasoning / "thinking" trace, when it emits one on a separate channel
+     * (AI SDK `reasoningText`; OpenAI-compatible `reasoning_content` / `reasoning`).
+     * Empty for non-reasoning models. Captured so a turn that spends its whole output
+     * budget thinking and returns empty {@link responseText} is still diagnosable
+     * (otherwise those tokens look like they vanished).
+     */
+    reasoningText: string;
+}
+/**
+ * Per-agent-kind aggregate over a run's calls, attached to the matching pipeline
+ * step for at-a-glance board display. Computed by SQL aggregation — it never reads
+ * the heavy prompt/response text columns.
+ */
+export interface LlmCallMetricSummary {
+    agentKind: string;
+    /** Number of calls recorded for this agent kind in the run. */
+    calls: number;
+    /** Sum of prompt (input) tokens. */
+    promptTokens: number;
+    /** Sum of completion (output) tokens. */
+    completionTokens: number;
+    /** The largest single completion the model produced (closest approach to the limit). */
+    peakCompletionTokens: number;
+    /** The output ceiling in effect (max requested `max_tokens`), or null when unknown. */
+    maxOutputTokens: number | null;
+    /** Calls cut short by the output limit (`finish_reason === 'length'`). */
+    truncatedCalls: number;
+    /** Sum of model execution time (ms). */
+    upstreamMs: number;
+    /** Sum of transport/proxy overhead (ms). */
+    overheadMs: number;
+    /** Calls that failed (non-2xx / refused / in-process error). */
+    errors: number;
+    /** Calls that produced a warning (truncated or content-filtered) but did not fail. */
+    warnings: number;
+}
+/** The most recent call's chain tip for delta prompt storage. */
+export interface LlmPromptChainTip {
+    /** The call's full message count. */
+    messageCount: number;
+    /** The call's {@link LlmCallMetric.promptHash}. */
+    promptHash: string;
+}
+export interface LlmCallMetricRepository {
+    /** Append one metered call. */
+    record(metric: LlmCallMetric): Promise<void>;
+    /**
+     * The most recent call's chain tip for a `(workspaceId, executionId, agentKind)`
+     * conversation, or null when there is none. Lets the sink store the next call's
+     * prompt as a delta against this one. Cheap: one indexed row, no text columns.
+     */
+    latestChainTip(workspaceId: string, executionId: string, agentKind: string): Promise<LlmPromptChainTip | null>;
+    /**
+     * Calls recorded for a run, newest first (full prompt/response included). `limit`
+     * caps the rows returned (the bodies are heavy) — newest `limit` calls; omit for
+     * all. Callers pass a bound so a long run can't produce an unbounded payload.
+     */
+    listByExecution(workspaceId: string, executionId: string, limit?: number): Promise<LlmCallMetric[]>;
+    /**
+     * Per-agent-kind aggregates for a run, for the board rollups. Aggregates in SQL
+     * and deliberately selects no text columns, so it is cheap to run on every emit.
+     */
+    summarizeByExecution(workspaceId: string, executionId: string): Promise<LlmCallMetricSummary[]>;
+    /**
+     * Retention: delete rows older than `epochMs` (exclusive), returning how many
+     * were removed. The full request/response bodies make this table heavy, so it is
+     * pruned to a configured window alongside the other unbounded tables.
+     */
+    deleteOlderThan(epochMs: number): Promise<number>;
+}
+//# sourceMappingURL=llm-metrics.d.ts.map

package/dist/ports/llm-metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-metrics.d.ts","sourceRoot":"","sources":["../../src/ports/llm-metrics.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,YAAI,QAAQ,EAAE,gBAAgB,CAAU,CAAA;AAE/E,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAA;IAClB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAA;IACpB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAA;IACjB,sFAAsF;IACtF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAA;IAC1B,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IACxB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,qGAAqG;IACrG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAA;IAClB,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAA;IACf,4DAA4D;IAC5D,EAAE,EAAE,OAAO,CAAA;IACX,oGAAoG;IACpG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,iBAAiB,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;;OAMG;IACH,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAA;IACb,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAA;IACxB,wFAAwF;IACxF,oBAAoB,EAAE,MAAM,CAAA;IAC5B,uFAAuF;IACvF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,0EAA0E;IAC1E,cAAc,EAAE,MAAM,CAAA;IACtB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,+BAA+B;IAC/B,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C;;;;OAIG;IACH,cAAc,CACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACpC;;;;OAIG;IACH,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IAC3B;;;OAGG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAC/F;;;;OAIG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAClD"}

package/dist/ports/llm-metrics.js

@@ -0,0 +1,16 @@
+// Persistence port for LLM observability. Every container agent talks to a model
+// only through the runtime-neutral LLM proxy (the single chokepoint that sees the
+// full prompt, the upstream response/usage, the model lock + output limit, and the
+// upstream timing), so the proxy records one of these per call. Unlike the spend
+// ledger (which keeps only billed token totals), this captures the full request +
+// response, the output-limit headroom, and the latency split between transport
+// (proxy) overhead and actual model execution — so a run can be inspected end to
+// end. The domain depends only on this interface; each runtime facade implements it
+// (D1 on Cloudflare, Drizzle/Postgres on Node).
+/**
+ * Upstream finish reasons that are not failures but warrant a warning: the model
+ * was cut short by the output limit, or filtered. Shared by the service's
+ * classification and each repo's summary aggregation so the two runtimes agree.
+ */
+export const LLM_WARNING_FINISH_REASONS = ['length', 'content_filter'];
+//# sourceMappingURL=llm-metrics.js.map

package/dist/ports/llm-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-metrics.js","sourceRoot":"","sources":["../../src/ports/llm-metrics.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,+EAA+E;AAC/E,iFAAiF;AACjF,oFAAoF;AACpF,gDAAgD;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAU,CAAA"}

package/dist/ports/llm-trace-sink.d.ts

@@ -0,0 +1,84 @@
+/** One completed LLM call (proxied or inline), normalised for an external trace. */
+export interface LlmGenerationEvent {
+    /** The workspace the call ran for, or null when not in a workspace scope. */
+    workspaceId: string | null;
+    /**
+     * The run this call belongs to, used to group every call of a run under one trace.
+     * Null for inline single-shot calls (requirements review / doc planner / fragment
+     * selection), which then become their own standalone trace.
+     */
+    executionId: string | null;
+    /** The agent kind / call site (`coder`, `merger`, `requirements-review`, …). */
+    agentKind: string;
+    provider: string;
+    model: string;
+    /** Epoch ms the call started (upstream dispatch). */
+    startedAt: number;
+    /** Epoch ms the call completed. */
+    endedAt: number;
+    promptTokens: number;
+    completionTokens: number;
+    totalTokens: number;
+    /** Upstream finish reason (`stop` | `length` | `tool_calls` | …), or null. */
+    finishReason: string | null;
+    /** Whether the call succeeded. */
+    ok: boolean;
+    /** A short error message when {@link ok} is false, else null. */
+    errorMessage: string | null;
+    /**
+     * The request messages serialised as JSON (the FULL prompt, not a delta), or empty
+     * when prompt recording is disabled (`LLM_RECORD_PROMPTS=false`) — the same privacy
+     * switch the local metric store honours.
+     */
+    input: string;
+    /** The full assistant response text, or empty when prompt recording is disabled. */
+    output: string;
+}
+/**
+ * One tool invocation inside a container agent's loop, captured by the harness and
+ * drained by the backend on its existing job poll, then emitted as a child span under
+ * the run's trace. Metadata only (never tool args/results) so the harness buffer stays
+ * tiny and bounded.
+ */
+export interface LlmToolSpan {
+    /** The tool name (`edit_file`, `run_command`, `todo`, …). */
+    tool: string;
+    /** Epoch ms the tool call started. */
+    startedAt: number;
+    /** Epoch ms the tool call ended. */
+    endedAt: number;
+    /** Whether the tool call succeeded. */
+    ok: boolean;
+}
+/** Scope a batch of {@link LlmToolSpan tool spans} to the run that produced them. */
+export interface LlmToolSpanContext {
+    workspaceId: string | null;
+    executionId: string | null;
+    agentKind: string;
+}
+export interface LlmTraceSink {
+    /** Emit one completed LLM call as a generation under its run's trace. */
+    recordGeneration(event: LlmGenerationEvent): Promise<void> | void;
+    /**
+     * Emit a drained batch of container tool spans as child spans under the run trace.
+     * Optional: a sink that only cares about generations can omit it.
+     */
+    recordToolSpans?(context: LlmToolSpanContext, spans: LlmToolSpan[]): Promise<void> | void;
+}
+/** Namespace used to smuggle observability context through the AI SDK's providerOptions. */
+export declare const INLINE_OBSERVABILITY_NS = "catFactoryObservability";
+/** The run context an inline LLM call carries for the trace sink. */
+export interface InlineObservabilityContext {
+    agentKind: string;
+    workspaceId?: string;
+    executionId?: string;
+}
+/**
+ * Build the `providerOptions` fragment a caller spreads into `generateText` to tag an
+ * inline call with its run context. Providers ignore unknown provider-option
+ * namespaces, so this is invisible to the model — only the instrumentation reads it.
+ */
+export declare function catFactoryObservability(context: InlineObservabilityContext): Record<string, Record<string, string>>;
+/** Read the {@link InlineObservabilityContext} back off a model call's params. */
+export declare function readInlineObservabilityContext(params: unknown): InlineObservabilityContext;
+//# sourceMappingURL=llm-trace-sink.d.ts.map

package/dist/ports/llm-trace-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-trace-sink.d.ts","sourceRoot":"","sources":["../../src/ports/llm-trace-sink.ts"],"names":[],"mappings":"AAkBA,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAA;IACjB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,kCAAkC;IAClC,EAAE,EAAE,OAAO,CAAA;IACX,iEAAiE;IACjE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAA;IACb,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,uCAAuC;IACvC,EAAE,EAAE,OAAO,CAAA;CACZ;AAED,qFAAqF;AACrF,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IACjE;;;OAGG;IACH,eAAe,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC1F;AAeD,4FAA4F;AAC5F,eAAO,MAAM,uBAAuB,4BAA4B,CAAA;AAEhE,qEAAqE;AACrE,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQxC;AAED,kFAAkF;AAClF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAO1F"}

package/dist/ports/llm-trace-sink.js

@@ -0,0 +1,55 @@
+// Optional, opt-in sink for streaming LLM activity to an external observability
+// platform (e.g. Langfuse). It is the SINGLE code path that both LLM feeders reach:
+//
+//  - the runtime-neutral LLM proxy (container agent calls) — the orchestration
+//    `LlmObservabilityService` fans every metered call out here after persisting it;
+//  - the inline (non-proxied) LLM calls (the requirements reviewer/rework, the
+//    document planner, the fragment selector, the inline agent executor) — an
+//    `InstrumentedModelProvider` wraps every resolved model so each `generateText`
+//    surfaces the same {@link LlmGenerationEvent} here.
+//
+// Both build the identical {@link LlmGenerationEvent} and call {@link
+// LlmTraceSink.recordGeneration}, so adding a second feeder never means a second
+// sink. The port is implemented by an opt-in package (`@cat-factory/observability-langfuse`)
+// and wired into a facade only when configured; absent ⇒ no external emission and no
+// behaviour change. A sink MUST NOT throw into its caller (LLM work must never break
+// because observability is down) — implementations swallow + log their own errors, and
+// callers additionally schedule the call off the response path.
+// ----------------------------------------------------------------------------
+// Inline-call observability context
+//
+// The inline (non-proxied) LLM callers — the requirements reviewer/rework, the
+// document planner, the fragment selector, the inline agent — tag each
+// `generateText` with their run context so the `InstrumentedModelProvider`
+// middleware (in `@cat-factory/agents`) can group the call under its run's trace
+// and label it. The tag rides on the AI SDK's `providerOptions` under a private
+// namespace, which every model provider ignores — so it's invisible to the model
+// and only the instrumentation reads it. Lives in the kernel (dependency-free) so
+// any caller layer (orchestration, integrations, agents) can build the tag without
+// depending on `@cat-factory/agents`.
+/** Namespace used to smuggle observability context through the AI SDK's providerOptions. */
+export const INLINE_OBSERVABILITY_NS = 'catFactoryObservability';
+/**
+ * Build the `providerOptions` fragment a caller spreads into `generateText` to tag an
+ * inline call with its run context. Providers ignore unknown provider-option
+ * namespaces, so this is invisible to the model — only the instrumentation reads it.
+ */
+export function catFactoryObservability(context) {
+    return {
+        [INLINE_OBSERVABILITY_NS]: {
+            agentKind: context.agentKind,
+            ...(context.workspaceId ? { workspaceId: context.workspaceId } : {}),
+            ...(context.executionId ? { executionId: context.executionId } : {}),
+        },
+    };
+}
+/** Read the {@link InlineObservabilityContext} back off a model call's params. */
+export function readInlineObservabilityContext(params) {
+    const providerOptions = params?.providerOptions;
+    const raw = providerOptions?.[INLINE_OBSERVABILITY_NS];
+    const agentKind = typeof raw?.agentKind === 'string' ? raw.agentKind : 'inline';
+    const workspaceId = typeof raw?.workspaceId === 'string' ? raw.workspaceId : undefined;
+    const executionId = typeof raw?.executionId === 'string' ? raw.executionId : undefined;
+    return { agentKind, workspaceId, executionId };
+}
+//# sourceMappingURL=llm-trace-sink.js.map

package/dist/ports/llm-trace-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-trace-sink.js","sourceRoot":"","sources":["../../src/ports/llm-trace-sink.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,oFAAoF;AACpF,EAAE;AACF,+EAA+E;AAC/E,qFAAqF;AACrF,+EAA+E;AAC/E,8EAA8E;AAC9E,mFAAmF;AACnF,wDAAwD;AACxD,EAAE;AACF,sEAAsE;AACtE,iFAAiF;AACjF,6FAA6F;AAC7F,qFAAqF;AACrF,qFAAqF;AACrF,uFAAuF;AACvF,gEAAgE;AAyEhE,+EAA+E;AAC/E,oCAAoC;AACpC,EAAE;AACF,+EAA+E;AAC/E,uEAAuE;AACvE,2EAA2E;AAC3E,iFAAiF;AACjF,gFAAgF;AAChF,iFAAiF;AACjF,kFAAkF;AAClF,mFAAmF;AACnF,sCAAsC;AAEtC,4FAA4F;AAC5F,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAA;AAShE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAmC;IAEnC,OAAO;QACL,CAAC,uBAAuB,CAAC,EAAE;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;KACF,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,8BAA8B,CAAC,MAAe;IAC5D,MAAM,eAAe,GAAI,MAAwD,EAAE,eAAe,CAAA;IAClG,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC,uBAAuB,CAAwC,CAAA;IAC7F,MAAM,SAAS,GAAG,OAAO,GAAG,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC/E,MAAM,WAAW,GAAG,OAAO,GAAG,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACtF,MAAM,WAAW,GAAG,OAAO,GAAG,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACtF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;AAChD,CAAC"}

package/dist/ports/local-model-repositories.d.ts

@@ -0,0 +1,29 @@
+import type { LocalRunner } from '@cat-factory/contracts';
+/** A user's configured local runner endpoint at rest. */
+export interface LocalModelEndpointRecord {
+    /** Internal user id (`usr_*`) of the owner. */
+    userId: string;
+    /** The runner type — also the `ModelRef.provider` a model on this endpoint resolves to. */
+    provider: LocalRunner;
+    /** Display label (defaults to the runner's name when the user leaves it blank). */
+    label: string;
+    /** OpenAI-compatible base URL, including the `/v1` suffix. */
+    baseUrl: string;
+    /** System-key ciphertext of an optional bearer key (null when keyless). */
+    apiKeyCipher: string | null;
+    /** Model ids the user enabled from this runner (surfaced in the picker). */
+    models: string[];
+    createdAt: number;
+    updatedAt: number;
+}
+export interface LocalModelEndpointRepository {
+    /** Every endpoint the user has configured. */
+    listByUser(userId: string): Promise<LocalModelEndpointRecord[]>;
+    /** The user's endpoint for a runner, or null. */
+    getByUserProvider(userId: string, provider: LocalRunner): Promise<LocalModelEndpointRecord | null>;
+    /** Insert or replace the user's endpoint for a runner (one per user+provider). */
+    upsert(record: LocalModelEndpointRecord): Promise<void>;
+    /** Remove the user's endpoint for a runner. */
+    remove(userId: string, provider: LocalRunner): Promise<void>;
+}
+//# sourceMappingURL=local-model-repositories.d.ts.map

package/dist/ports/local-model-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-model-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/local-model-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AASzD,yDAAyD;AACzD,MAAM,WAAW,wBAAwB;IACvC,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAA;IACd,2FAA2F;IAC3F,QAAQ,EAAE,WAAW,CAAA;IACrB,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAA;IACf,2EAA2E;IAC3E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,8CAA8C;IAC9C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAA;IAC/D,iDAAiD;IACjD,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAA;IAClG,kFAAkF;IAClF,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,+CAA+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7D"}

package/dist/ports/local-model-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=local-model-repositories.js.map

package/dist/ports/local-model-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-model-repositories.js","sourceRoot":"","sources":["../../src/ports/local-model-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/merge-preset-repositories.d.ts

@@ -0,0 +1,14 @@
+import type { MergeThresholdPreset } from '../domain/types.js';
+export interface MergePresetRepository {
+    /** A preset by id, or null if it does not exist. */
+    get(workspaceId: string, id: string): Promise<MergeThresholdPreset | null>;
+    /** All presets for a workspace (for the snapshot + settings UI). */
+    list(workspaceId: string): Promise<MergeThresholdPreset[]>;
+    /** The workspace's default preset, or null if none is seeded yet. */
+    getDefault(workspaceId: string): Promise<MergeThresholdPreset | null>;
+    /** Create or replace a preset (keyed by id). Promoting `isDefault` demotes the prior default. */
+    upsert(workspaceId: string, preset: MergeThresholdPreset): Promise<void>;
+    /** Remove a preset by id (no-op if absent). The default preset cannot be removed. */
+    remove(workspaceId: string, id: string): Promise<void>;
+}
+//# sourceMappingURL=merge-preset-repositories.d.ts.map

package/dist/ports/merge-preset-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-preset-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/merge-preset-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAQ9D,MAAM,WAAW,qBAAqB;IACpC,oDAAoD;IACpD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;IAC1E,oEAAoE;IACpE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAC1D,qEAAqE;IACrE,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;IACrE,iGAAiG;IACjG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxE,qFAAqF;IACrF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD"}

package/dist/ports/merge-preset-repositories.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=merge-preset-repositories.js.map

package/dist/ports/merge-preset-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-preset-repositories.js","sourceRoot":"","sources":["../../src/ports/merge-preset-repositories.ts"],"names":[],"mappings":""}

package/dist/ports/model-default-repositories.d.ts

@@ -0,0 +1,9 @@
+export interface ModelDefaultsRepository {
+    /** The whole per-kind default map for a workspace (`{ [agentKind]: modelId }`); empty when none set. */
+    get(workspaceId: string): Promise<Record<string, string>>;
+    /** The model id chosen for a single agent kind, or null when the workspace pins none. */
+    getForKind(workspaceId: string, agentKind: string): Promise<string | null>;
+    /** Replace the whole per-kind map for the workspace (a kind omitted is cleared). */
+    replace(workspaceId: string, defaults: Record<string, string>): Promise<void>;
+}
+//# sourceMappingURL=model-default-repositories.d.ts.map

package/dist/ports/model-default-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-default-repositories.d.ts","sourceRoot":"","sources":["../../src/ports/model-default-repositories.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,uBAAuB;IACtC,wGAAwG;IACxG,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACzD,yFAAyF;IACzF,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC1E,oFAAoF;IACpF,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9E"}

package/dist/ports/model-default-repositories.js

@@ -0,0 +1,6 @@
+// Persistence port for a workspace's per-agent-kind default model selection. The
+// worker implements it against D1, the Node service against Postgres; tests supply
+// an in-memory fake. The map is keyed by agent kind and valued by a model catalog
+// id; a kind absent from the map falls back to the env routing for that kind.
+export {};
+//# sourceMappingURL=model-default-repositories.js.map

package/dist/ports/model-default-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-default-repositories.js","sourceRoot":"","sources":["../../src/ports/model-default-repositories.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mFAAmF;AACnF,kFAAkF;AAClF,8EAA8E"}