@cat-factory/server 0.202.0 → 0.204.0

package/dist/runtime/platformHealth.js

@@ -1,20 +1,45 @@
-import { distinctAccountIds, evaluatePlatformHealth, platformAlertReasons, platformHealthCardContent, } from '@cat-factory/orchestration';
+import { alertsHaveRunEvidence, distinctAccountIds, evaluatePlatformHealth, platformAlertReasons, platformHealthCardContent, resolveAccountAlertConfig, } from '@cat-factory/orchestration';
+import { describeError } from '@cat-factory/kernel';
 import { sweepHealth } from '../observability/sweepHealth.js';
 // Runtime-neutral platform-health ALERT sweep — the push counterpart to the operator dashboard
 // read, shared by both facades' periodic sweeps (the Worker's cron `scheduled` handler and the
 // Node `setInterval` sweeper), exactly like `escalateStaleNotifications`. It evaluates each
 // account's aggregate run-health projection (the SAME `PlatformObservabilityService.summarize`
-// the dashboard reads — no new SQL) against the deployment thresholds and, per account:
+// the dashboard reads, no new SQL) against that account's thresholds and, per account:
 //   - raises ONE `platform_health` notification per workspace when a ceiling is crossed, or
 //   - clears the open card when the account has recovered.
-// The card de-dupes on (workspace, type) and its content is a pure function of the FIRING
-// reason set, so a persistently-unhealthy deployment re-notifies only when the set changes
-// (the "state-change dedup, not every sweep" requirement), not on every pass.
+// The card's identity is the FIRING REASON SET, and the sweep raises only when that set CHANGES
+// (the "state-change dedup, not every sweep" requirement), so a persistently-unhealthy
+// deployment neither re-toasts the inbox nor rewrites the row on every pass.
 //
 // A no-op unless alerting is opted in AND both the notifications module and the platform-
 // observability read are wired (tests / no telemetry DB / mothership local nodes). Best-effort
 // per account: a failed summarize/raise for one account is logged and skipped, never aborting
 // the others — this sweep must not become the silent background failure it exists to catch.
+/**
+ * How many failing runs a card links to per workspace. Small on purpose: the card is a pointer
+ * at the evidence, not a report, and the dashboard behind it is the complete, live view. The
+ * count of what was left out rides the payload beside the sample.
+ */
+const FAILING_RUN_SAMPLE = 5;
+/** Whether an open card's stored reason set already matches the one now firing. */
+function sameReasonSet(card, reasons) {
+    const stored = card?.payload?.platformAlerts;
+    return (Array.isArray(stored) &&
+        stored.length === reasons.length &&
+        stored.every((r, i) => r === reasons[i]));
+}
+/** The workspace's slice of the account's failing-run sample, in payload shape. */
+function failingRunsFor(refs, workspaceId) {
+    return refs
+        .filter((r) => r.workspaceId === workspaceId)
+        .map((r) => ({
+        executionId: r.executionId,
+        blockId: r.blockId,
+        failureKind: r.failureKind,
+        createdAt: r.createdAt,
+    }));
+}
 /**
  * Run one platform-health alert pass across every account. Returns the number of workspaces a
  * card was raised on and the number cleared. Enumerates accounts from the workspace projection
@@ -32,9 +57,9 @@ export async function sweepPlatformHealth(container, logger) {
     if (!cfg.enabled || !notifications || !observability)
         return { raised: 0, cleared: 0 };
     const workspaces = await container.workspaceService.list(null);
-    // Group workspaces by account so each account is summarized ONCE (five GROUP BY queries),
-    // then the verdict is fanned to every workspace in the account. Legacy null-account boards
-    // are skipped: the platform-metrics read is account-scoped (matches `distinctAccountIds`).
+    // Group workspaces by account so each account is summarized ONCE (a handful of GROUP BY
+    // queries), then the verdict is fanned to every workspace in the account. Legacy null-account
+    // boards are skipped: the platform-metrics read is account-scoped (matches `distinctAccountIds`).
     const byAccount = new Map();
     for (const ws of workspaces) {
         if (!ws.accountId)
@@ -47,36 +72,72 @@ export async function sweepPlatformHealth(container, logger) {
     }
     // Which workspaces already hold an open `platform_health` card, learned in ONE batched read
     // up front rather than a `findOpenByType` point-read per workspace inside the loop (that N+1
-    // would run across the whole deployment every sweep — every couple of minutes). A healthy
-    // workspace with no card is the steady-state common case, and it is now skipped entirely: we
-    // only touch `clearByType` for a workspace that actually has a card to clear.
-    const withOpenCard = new Set((await notifications.service.listOpenByType(workspaces.map((ws) => ws.id), 'platform_health')).keys());
+    // would run across the whole deployment every sweep, every couple of minutes). The CARDS,
+    // not just their ids: the stored reason set on each is what makes the raise below
+    // state-change-driven rather than every-pass.
+    const openCards = await notifications.service.listOpenByType(workspaces.map((ws) => ws.id), 'platform_health');
     const worstSweep = sweepHealth.worst();
     let raised = 0;
     let cleared = 0;
     for (const accountId of distinctAccountIds(workspaces)) {
         const workspaceIds = byAccount.get(accountId) ?? [];
         try {
-            const snapshot = await observability.summarize(accountId, cfg.window);
+            // The account's own thresholds: the deployment env defaults with this account's stored
+            // settings layered over them (slice 6's settings surface writes those). Read per account
+            // rather than per workspace, matching the scope the projection is computed at, and
+            // necessarily BEFORE the change check below, since the thresholds are what decide which
+            // reasons fire. It is not the per-pass cost that reads like: `AccountSettingsService.resolve`
+            // goes through the app cache seam (invalidated on every settings write), so the steady state
+            // is a cache hit per account, not a row read and a decrypt.
+            const account = resolveAccountAlertConfig(cfg, await readAccountAlertSettings(container, accountId, logger));
+            if (!account.enabled)
+                continue;
+            const snapshot = await observability.summarize(accountId, account.window);
             // The sweeper streak is deployment-wide, not per account, so it is read once outside
             // the per-account loop and applies to every account's card: a wedged retention sweep is
             // everyone's problem, not the tenant's whose turn it happened to be.
-            const reasons = platformAlertReasons(evaluatePlatformHealth(snapshot, cfg.thresholds, worstSweep));
-            for (const workspaceId of workspaceIds) {
+            const reasons = platformAlertReasons(evaluatePlatformHealth(snapshot, account.thresholds, worstSweep));
+            // The workspaces whose card would actually change state this pass. A healthy workspace
+            // with no card, and an unhealthy one whose firing set is unchanged, are both no-ops.
+            const changing = workspaceIds.filter((id) => reasons.length > 0 ? !sameReasonSet(openCards.get(id), reasons) : openCards.has(id));
+            if (changing.length === 0)
+                continue;
+            // The failing runs the card deep-links to, fetched ONCE for the account and only when
+            // something is actually being raised on a run-evidenced condition, so the steady state
+            // (nothing changing, or a backlog/stall alert with no failures behind it) costs nothing.
+            const evidence = reasons.length > 0 && alertsHaveRunEvidence(reasons)
+                ? await readFailingRuns(observability, accountId, snapshot.since, logger)
+                : undefined;
+            for (const workspaceId of changing) {
                 if (reasons.length > 0) {
-                    const { title, body } = platformHealthCardContent(reasons, cfg.window);
+                    const { title, body } = platformHealthCardContent(reasons, account.window);
+                    const failingRuns = evidence ? failingRunsFor(evidence, workspaceId) : [];
                     await notifications.service.raise(workspaceId, {
                         type: 'platform_health',
                         blockId: null,
                         executionId: null,
                         title,
                         body,
-                        payload: { platformWindow: cfg.window, platformAlerts: reasons },
+                        payload: {
+                            platformWindow: account.window,
+                            platformAlerts: reasons,
+                            // Both omitted when there is nothing to link: an empty list and an absent one
+                            // would render the same, and only the absence is honest about a condition that
+                            // has no failing run behind it in the first place.
+                            ...(failingRuns.length > 0
+                                ? {
+                                    platformFailingRuns: failingRuns,
+                                    // Every row of a workspace's partition carries that workspace's full
+                                    // failed count, so the cap can say "5 of 23" without a second query.
+                                    platformFailedTotal: evidence?.find((r) => r.workspaceId === workspaceId)?.workspaceFailedTotal ??
+                                        failingRuns.length,
+                                }
+                                : {}),
+                        },
                     });
                     raised += 1;
                 }
-                else if (withOpenCard.has(workspaceId) &&
-                    (await notifications.service.clearByType(workspaceId, 'platform_health'))) {
+                else if (await notifications.service.clearByType(workspaceId, 'platform_health')) {
                     cleared += 1;
                 }
             }
@@ -91,4 +152,54 @@ export async function sweepPlatformHealth(container, logger) {
     }
     return { raised, cleared };
 }
+/**
+ * The failing-run sample, or undefined when it could not be read.
+ *
+ * Its own try/catch, INSIDE the per-account one, because the deep link is an enhancement to
+ * the alert and the alert is the thing that matters: letting this failure reach the handler
+ * above would suppress the card entirely, so a bad evidence query would mean an unhealthy
+ * deployment stopped telling anyone it was unhealthy. The card still fires, without links, and
+ * the drop is named rather than silent.
+ */
+async function readFailingRuns(observability, accountId, since, logger) {
+    try {
+        return await observability.failingRuns(accountId, since, FAILING_RUN_SAMPLE);
+    }
+    catch (error) {
+        logger?.warn('platform-health: could not read the failing runs behind the alert', {
+            scope: 'platform-health',
+            accountId,
+            ...describeError(error),
+        });
+        return undefined;
+    }
+}
+/**
+ * The account's stored alert overrides, or undefined when nothing is stored, the settings
+ * module is not wired, or the row cannot be read.
+ *
+ * The failure is caught HERE rather than left to the per-account handler above, and that
+ * placement is the point: an unreadable settings row must cost the account its OVERRIDES, not
+ * its alerting. Letting it propagate would mean a sealed-blob problem (a rotated encryption
+ * key, say) silently switched off the very watcher that is supposed to notice things going
+ * wrong, and it would do so on exactly the deployment where something already has. Falling
+ * back to the deployment defaults matches how `parseStoredAccountSettingsConfig` treats a
+ * malformed blob: unreadable is not a policy.
+ */
+async function readAccountAlertSettings(container, accountId, logger) {
+    const settings = container.accountSettings;
+    if (!settings)
+        return undefined;
+    try {
+        return (await settings.service.resolve(accountId)).config.platformAlerts;
+    }
+    catch (error) {
+        logger?.warn('platform-health: account alert settings unreadable; using deployment defaults', {
+            scope: 'platform-health',
+            accountId,
+            ...describeError(error),
+        });
+        return undefined;
+    }
+}
 //# sourceMappingURL=platformHealth.js.map

package/dist/runtime/platformHealth.js.map

@@ -1 +1 @@
-{"version":3,"file":"platformHealth.js","sourceRoot":"","sources":["../../src/runtime/platformHealth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAE7D,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,+FAA+F;AAC/F,wFAAwF;AACxF,4FAA4F;AAC5F,2DAA2D;AAC3D,0FAA0F;AAC1F,2FAA2F;AAC3F,8EAA8E;AAC9E,EAAE;AACF,0FAA0F;AAC1F,+FAA+F;AAC/F,8FAA8F;AAC9F,4FAA4F;AAE5F;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAA0B,EAC1B,MAAe;IAEf,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,cAAc,CAAA;IAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAA;IAC7C,MAAM,aAAa,GAAG,SAAS,CAAC,qBAAqB,CAAA;IACrD,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IAEtF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9D,0FAA0F;IAC1F,2FAA2F;IAC3F,2FAA2F;IAC3F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC7C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,SAAS;YAAE,SAAQ;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,4FAA4F;IAC5F,6FAA6F;IAC7F,0FAA0F;IAC1F,6FAA6F;IAC7F,8EAA8E;IAC9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CACE,MAAM,aAAa,CAAC,OAAO,CAAC,cAAc,CACxC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAC7B,iBAAiB,CAClB,CACF,CAAC,IAAI,EAAE,CACT,CAAA;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,CAAA;IACtC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;YACrE,qFAAqF;YACrF,wFAAwF;YACxF,qEAAqE;YACrE,MAAM,OAAO,GAAG,oBAAoB,CAClC,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAC7D,CAAA;YACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;gBACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;oBACtE,MAAM,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;wBAC7C,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,IAAI;wBACb,WAAW,EAAE,IAAI;wBACjB,KAAK;wBACL,IAAI;wBACJ,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE;qBACjE,CAAC,CAAA;oBACF,MAAM,IAAI,CAAC,CAAA;gBACb,CAAC;qBAAM,IACL,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;oBAC7B,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,EACzE,CAAC;oBACD,OAAO,IAAI,CAAC,CAAA;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE;gBAC1D,KAAK,EAAE,iBAAiB;gBACxB,SAAS;gBACT,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC"}
+{"version":3,"file":"platformHealth.js","sourceRoot":"","sources":["../../src/runtime/platformHealth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAA;AAQnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAE7D,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,+FAA+F;AAC/F,uFAAuF;AACvF,4FAA4F;AAC5F,2DAA2D;AAC3D,gGAAgG;AAChG,uFAAuF;AACvF,6EAA6E;AAC7E,EAAE;AACF,0FAA0F;AAC1F,+FAA+F;AAC/F,8FAA8F;AAC9F,4FAA4F;AAE5F;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAE5B,mFAAmF;AACnF,SAAS,aAAa,CAAC,IAA8B,EAAE,OAA8B;IACnF,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,CAAA;IAC5C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CACzC,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,IAA4B,EAAE,WAAmB;IACvE,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC,CAAC,CAAA;AACP,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAA0B,EAC1B,MAAe;IAEf,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,cAAc,CAAA;IAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAA;IAC7C,MAAM,aAAa,GAAG,SAAS,CAAC,qBAAqB,CAAA;IACrD,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IAEtF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9D,wFAAwF;IACxF,8FAA8F;IAC9F,kGAAkG;IAClG,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC7C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,SAAS;YAAE,SAAQ;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,4FAA4F;IAC5F,6FAA6F;IAC7F,0FAA0F;IAC1F,kFAAkF;IAClF,8CAA8C;IAC9C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,cAAc,CAC1D,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAC7B,iBAAiB,CAClB,CAAA;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,CAAA;IACtC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;QACnD,IAAI,CAAC;YACH,uFAAuF;YACvF,yFAAyF;YACzF,mFAAmF;YACnF,wFAAwF;YACxF,8FAA8F;YAC9F,6FAA6F;YAC7F,4DAA4D;YAC5D,MAAM,OAAO,GAAG,yBAAyB,CACvC,GAAG,EACH,MAAM,wBAAwB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAC7D,CAAA;YACD,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,SAAQ;YAC9B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACzE,qFAAqF;YACrF,wFAAwF;YACxF,qEAAqE;YACrE,MAAM,OAAO,GAAG,oBAAoB,CAClC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CACjE,CAAA;YACD,uFAAuF;YACvF,qFAAqF;YACrF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1C,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CACpF,CAAA;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YACnC,sFAAsF;YACtF,uFAAuF;YACvF,yFAAyF;YACzF,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,qBAAqB,CAAC,OAAO,CAAC;gBAClD,CAAC,CAAC,MAAM,eAAe,CAAC,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACzE,CAAC,CAAC,SAAS,CAAA;YACf,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;oBAC1E,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;oBACzE,MAAM,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;wBAC7C,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,IAAI;wBACb,WAAW,EAAE,IAAI;wBACjB,KAAK;wBACL,IAAI;wBACJ,OAAO,EAAE;4BACP,cAAc,EAAE,OAAO,CAAC,MAAM;4BAC9B,cAAc,EAAE,OAAO;4BACvB,8EAA8E;4BAC9E,+EAA+E;4BAC/E,mDAAmD;4BACnD,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gCACxB,CAAC,CAAC;oCACE,mBAAmB,EAAE,WAAW;oCAChC,qEAAqE;oCACrE,qEAAqE;oCACrE,mBAAmB,EACjB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,EAAE,oBAAoB;wCAC1E,WAAW,CAAC,MAAM;iCACrB;gCACH,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF,CAAC,CAAA;oBACF,MAAM,IAAI,CAAC,CAAA;gBACb,CAAC;qBAAM,IAAI,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;oBACnF,OAAO,IAAI,CAAC,CAAA;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE;gBAC1D,KAAK,EAAE,iBAAiB;gBACxB,SAAS;gBACT,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,aAAoE,EACpE,SAAiB,EACjB,KAAa,EACb,MAAe;IAEf,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAA;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,CAAC,mEAAmE,EAAE;YAChF,KAAK,EAAE,iBAAiB;YACxB,SAAS;YACT,GAAG,aAAa,CAAC,KAAK,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,wBAAwB,CACrC,SAA0B,EAC1B,SAAiB,EACjB,MAAe;IAEf,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAA;IAC1C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,CAAC,+EAA+E,EAAE;YAC5F,KAAK,EAAE,iBAAiB;YACxB,SAAS;YACT,GAAG,aAAa,CAAC,KAAK,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/server",
-  "version": "0.202.0",
+  "version": "0.204.0",
   "description": "Runtime-neutral HTTP layer for the Agent Architecture Board: the Hono controllers, middleware (auth/authz/CORS/error), request helpers and the gateway seams shared by every deployment facade (Cloudflare Worker, Node service).",
   "repository": {
     "type": "git",
@@ -30,13 +30,13 @@
     "hono": "^4.12.33",
     "pino": "^10.3.1",
     "valibot": "^1.4.2",
-    "@cat-factory/agents": "0.106.6",
-    "@cat-factory/contracts": "0.219.0",
-    "@cat-factory/integrations": "0.120.1",
-    "@cat-factory/orchestration": "0.190.0",
-    "@cat-factory/prompt-fragments": "0.15.44",
-    "@cat-factory/kernel": "0.221.1",
-    "@cat-factory/spend": "0.13.9"
+    "@cat-factory/agents": "0.106.8",
+    "@cat-factory/contracts": "0.221.0",
+    "@cat-factory/integrations": "0.121.1",
+    "@cat-factory/kernel": "0.223.0",
+    "@cat-factory/orchestration": "0.192.0",
+    "@cat-factory/prompt-fragments": "0.15.46",
+    "@cat-factory/spend": "0.13.11"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",