@cat-factory/server 0.214.1 → 0.216.0

package/dist/modules/publicApi/decisions/scope.d.ts

@@ -0,0 +1,107 @@
+import type { BrainstormSession, BrainstormStage, ClarityReview, ExecutionInstance, RequirementReview } from '@cat-factory/contracts';
+import type { Context } from 'hono';
+import type { BrainstormModule, ClarityModule, RequirementsModule } from '@cat-factory/orchestration';
+import type { AppEnv } from '../../../http/env.js';
+/** A run resolved for the caller's key, with the block it is anchored on. */
+export interface ScopedRun {
+    execution: ExecutionInstance;
+    /** The run's anchor block id — a board task, or a headless job anchor. */
+    blockId: string;
+}
+/**
+ * Load a run by id for an authenticated key, scoped to the key's workspace. Accepts BOTH shapes the
+ * public surface can create: a headless job anchor (`getInternalTask`) and an ordinary board
+ * task (`getServiceTask`) — their union is exactly the set of runs this key may already read
+ * through `GET /api/v1/jobs/:id` and `GET /api/v1/tasks/:taskId/run`, so nothing new is exposed.
+ * Anything else in the workspace (or in another workspace) is a 404.
+ *
+ * WHY A RESOLVED RUN IS SAFE TO ANSWER THROUGH A BLOCK-SCOPED SERVICE METHOD. The three iterative
+ * reviews and both human-verdict gates delegate to methods keyed by BLOCK, not by run (the SPA
+ * drives them from the task's window), so the `runId` in the path names a run nothing downstream
+ * reads. That would be a misaddressing hazard (answer with a stale id, act on whatever run the
+ * block now holds), except the engine makes the two the same question: `insertLive` claims a
+ * block's live run under a partial unique index and DELETES that block's terminal rows in the same
+ * transaction, and a cancel / `stop-reset` deletes the run row outright. So a run that is no
+ * longer its block's live run is not resolvable AT ALL, and this 404 is already the refusal. That
+ * is an invariant of the execution repositories rather than of this file, so it is pinned by a
+ * conformance assertion (`refuses a block-scoped answer once the task has moved on`) instead of
+ * re-checked per request here. A runtime re-check would be an unreachable branch, and an
+ * unreachable branch in four published SDK error vocabularies.
+ */
+export declare function loadScopedRun<E extends AppEnv>(c: Context<E>, workspaceId: string, runId: string): Promise<ScopedRun | null>;
+/** The error a gate rejected with, kept as DATA so each handler emits its own typed `c.json`. */
+export type GateFailure = {
+    fail: {
+        status: 401 | 403 | 404 | 503;
+        code: string;
+        message: string;
+    };
+};
+/**
+ * Emit a gate's rejection as the surface's standard error body.
+ *
+ * The `c.json` call stays INSIDE each handler's closure (rather than this returning a built
+ * `Response`) so `buildHonoRoute` keeps type-checking every handler against its contract's declared
+ * response union — a bare `Response` would erase that. This just removes the identical copies
+ * of the body/status shuffle, which is where an inconsistent error envelope would eventually creep
+ * in between two routes of the same surface.
+ */
+export declare function failureBody(fail: GateFailure['fail']): {
+    error: {
+        code: string;
+        message: string;
+    };
+};
+/**
+ * Resolve the run + require the answering scope, then hand the handler a settled context — or the
+ * failure to emit. Every mutating route shares exactly this preamble, and duplicating it per route
+ * is how two surfaces drift apart.
+ *
+ * The failure is returned as DATA rather than a built `Response` (mirroring `authorize`) because
+ * `buildHonoRoute` types each handler against its contract's declared response union: a bare
+ * `Response` would erase that and stop the compiler checking the success payload.
+ */
+export declare function gateDecisionAction<E extends AppEnv>(c: Context<E>, runId: string): Promise<{
+    workspaceId: string;
+    scoped: ScopedRun;
+} | GateFailure>;
+/** The settled context an iterative-review route acts on, for one review kind. */
+export interface ReviewAction<TReview> {
+    workspaceId: string;
+    scoped: ScopedRun;
+    review: TReview;
+}
+/** The settled context a requirements route acts on. */
+export interface RequirementsAction extends ReviewAction<RequirementReview> {
+    requirements: RequirementsModule;
+}
+/**
+ * Gate a requirements action: the shared {@link gateDecisionAction} preamble, plus the opt-in
+ * requirements module and the run's LIVE review. Every requirements route needs exactly this
+ * quartet (key + scope, run, module, review), and hand-rolling it per route is how two surfaces
+ * end up disagreeing about which review a run's answer applies to.
+ */
+export declare function gateRequirementsAction<E extends AppEnv>(c: Context<E>, runId: string): Promise<RequirementsAction | GateFailure>;
+/** The settled context a clarity route acts on. */
+export interface ClarityAction extends ReviewAction<ClarityReview> {
+    clarity: ClarityModule;
+}
+/**
+ * Gate a clarity action — the requirements gate's twin, over the clarity module. Kept as a
+ * separate function rather than parameterised over the module because the two 503/404 messages
+ * have to NAME their own subject: a bug-triage caller told "requirements review is not configured"
+ * has been handed the wrong thing to go and wire.
+ */
+export declare function gateClarityAction<E extends AppEnv>(c: Context<E>, runId: string): Promise<ClarityAction | GateFailure>;
+/** The settled context a brainstorm route acts on, for ONE stage. */
+export interface BrainstormAction extends ReviewAction<BrainstormSession> {
+    brainstorm: BrainstormModule;
+    stage: BrainstormStage;
+}
+/**
+ * Gate a brainstorm action. Keyed by `(block, stage)` rather than block alone, because a block may
+ * hold one live `requirements` session and one live `architecture` session at once — resolving
+ * "the run's brainstorm" without the stage would answer whichever the store returned first.
+ */
+export declare function gateBrainstormAction<E extends AppEnv>(c: Context<E>, runId: string, stage: BrainstormStage): Promise<BrainstormAction | GateFailure>;
+//# sourceMappingURL=scope.d.ts.map

package/dist/modules/publicApi/decisions/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../../src/modules/publicApi/decisions/scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAYlD,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CAAC,CAAC,SAAS,MAAM,EAClD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQ3B;AAED,iGAAiG;AACjG,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAEpG;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG;IACtD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CACzC,CAEA;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,MAAM,EACvD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG,WAAW,CAAC,CAYnE;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY,CAAC,OAAO;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAmB,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACzE,YAAY,EAAE,kBAAkB,CAAA;CACjC;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,SAAS,MAAM,EAC3D,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAa3C;AAED,mDAAmD;AACnD,MAAM,WAAW,aAAc,SAAQ,YAAY,CAAC,aAAa,CAAC;IAChE,OAAO,EAAE,aAAa,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EACtD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC,CAatC;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACvE,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,eAAe,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EACzD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,gBAAgB,GAAG,WAAW,CAAC,CAazC"}

package/dist/modules/publicApi/decisions/scope.js

@@ -0,0 +1,142 @@
+import { authorize } from '../publicApiAuth.js';
+/**
+ * Load a run by id for an authenticated key, scoped to the key's workspace. Accepts BOTH shapes the
+ * public surface can create: a headless job anchor (`getInternalTask`) and an ordinary board
+ * task (`getServiceTask`) — their union is exactly the set of runs this key may already read
+ * through `GET /api/v1/jobs/:id` and `GET /api/v1/tasks/:taskId/run`, so nothing new is exposed.
+ * Anything else in the workspace (or in another workspace) is a 404.
+ *
+ * WHY A RESOLVED RUN IS SAFE TO ANSWER THROUGH A BLOCK-SCOPED SERVICE METHOD. The three iterative
+ * reviews and both human-verdict gates delegate to methods keyed by BLOCK, not by run (the SPA
+ * drives them from the task's window), so the `runId` in the path names a run nothing downstream
+ * reads. That would be a misaddressing hazard (answer with a stale id, act on whatever run the
+ * block now holds), except the engine makes the two the same question: `insertLive` claims a
+ * block's live run under a partial unique index and DELETES that block's terminal rows in the same
+ * transaction, and a cancel / `stop-reset` deletes the run row outright. So a run that is no
+ * longer its block's live run is not resolvable AT ALL, and this 404 is already the refusal. That
+ * is an invariant of the execution repositories rather than of this file, so it is pinned by a
+ * conformance assertion (`refuses a block-scoped answer once the task has moved on`) instead of
+ * re-checked per request here. A runtime re-check would be an unreachable branch, and an
+ * unreachable branch in four published SDK error vocabularies.
+ */
+export async function loadScopedRun(c, workspaceId, runId) {
+    const container = c.get('container');
+    const execution = await container.executionRepository.get(workspaceId, runId);
+    if (!execution)
+        return null;
+    const task = await container.boardService.getServiceTask(workspaceId, execution.blockId);
+    if (task)
+        return { execution, blockId: execution.blockId };
+    const anchor = await container.boardService.getInternalTask(workspaceId, execution.blockId);
+    return anchor ? { execution, blockId: execution.blockId } : null;
+}
+/**
+ * Emit a gate's rejection as the surface's standard error body.
+ *
+ * The `c.json` call stays INSIDE each handler's closure (rather than this returning a built
+ * `Response`) so `buildHonoRoute` keeps type-checking every handler against its contract's declared
+ * response union — a bare `Response` would erase that. This just removes the identical copies
+ * of the body/status shuffle, which is where an inconsistent error envelope would eventually creep
+ * in between two routes of the same surface.
+ */
+export function failureBody(fail) {
+    return { error: { code: fail.code, message: fail.message } };
+}
+/**
+ * Resolve the run + require the answering scope, then hand the handler a settled context — or the
+ * failure to emit. Every mutating route shares exactly this preamble, and duplicating it per route
+ * is how two surfaces drift apart.
+ *
+ * The failure is returned as DATA rather than a built `Response` (mirroring `authorize`) because
+ * `buildHonoRoute` types each handler against its contract's declared response union: a bare
+ * `Response` would erase that and stop the compiler checking the success payload.
+ */
+export async function gateDecisionAction(c, runId) {
+    // `decide` — the same rung that admits a parking pipeline in the first place. Answering injects
+    // caller-supplied prose into the requirements every downstream agent then implements, so it sits
+    // above ordinary `write` task authoring.
+    const gate = await authorize(c, 'decide');
+    if ('fail' in gate)
+        return gate;
+    const { workspaceId } = gate.auth;
+    const scoped = await loadScopedRun(c, workspaceId, runId);
+    if (!scoped) {
+        return { fail: { status: 404, code: 'not_found', message: 'Run not found' } };
+    }
+    return { workspaceId, scoped };
+}
+/**
+ * Gate a requirements action: the shared {@link gateDecisionAction} preamble, plus the opt-in
+ * requirements module and the run's LIVE review. Every requirements route needs exactly this
+ * quartet (key + scope, run, module, review), and hand-rolling it per route is how two surfaces
+ * end up disagreeing about which review a run's answer applies to.
+ */
+export async function gateRequirementsAction(c, runId) {
+    const gated = await gateDecisionAction(c, runId);
+    if ('fail' in gated)
+        return gated;
+    const requirements = c.get('container').requirements;
+    if (!requirements) {
+        return moduleUnavailable('Requirements review is not configured');
+    }
+    const { workspaceId, scoped } = gated;
+    const review = await requirements.service.getForBlock(workspaceId, scoped.blockId);
+    if (!review) {
+        return noReview('This run has no requirements review');
+    }
+    return { workspaceId, scoped, requirements, review };
+}
+/**
+ * Gate a clarity action — the requirements gate's twin, over the clarity module. Kept as a
+ * separate function rather than parameterised over the module because the two 503/404 messages
+ * have to NAME their own subject: a bug-triage caller told "requirements review is not configured"
+ * has been handed the wrong thing to go and wire.
+ */
+export async function gateClarityAction(c, runId) {
+    const gated = await gateDecisionAction(c, runId);
+    if ('fail' in gated)
+        return gated;
+    const clarity = c.get('container').clarity;
+    if (!clarity) {
+        return moduleUnavailable('Clarity review is not configured');
+    }
+    const { workspaceId, scoped } = gated;
+    const review = await clarity.service.getForBlock(workspaceId, scoped.blockId);
+    if (!review) {
+        return noReview('This run has no clarity review');
+    }
+    return { workspaceId, scoped, clarity, review };
+}
+/**
+ * Gate a brainstorm action. Keyed by `(block, stage)` rather than block alone, because a block may
+ * hold one live `requirements` session and one live `architecture` session at once — resolving
+ * "the run's brainstorm" without the stage would answer whichever the store returned first.
+ */
+export async function gateBrainstormAction(c, runId, stage) {
+    const gated = await gateDecisionAction(c, runId);
+    if ('fail' in gated)
+        return gated;
+    const brainstorm = c.get('container').brainstorm;
+    if (!brainstorm) {
+        return moduleUnavailable('Brainstorm is not configured');
+    }
+    const { workspaceId, scoped } = gated;
+    const review = await brainstorm.services[stage].getForBlock(workspaceId, scoped.blockId);
+    if (!review) {
+        return noReview(`This run has no ${stage} brainstorm`);
+    }
+    return { workspaceId, scoped, brainstorm, stage, review };
+}
+/** A deployment that never wired the module behind a park cannot answer it: 503, naming what. */
+function moduleUnavailable(message) {
+    return { fail: { status: 503, code: 'unavailable', message } };
+}
+/**
+ * The run exists and the key may answer it, but the entity the route addresses does not exist.
+ * A 404 rather than a 409: there is nothing on this run to act on, which is a different fact from
+ * "the park moved on" (the service methods raise that themselves).
+ */
+function noReview(message) {
+    return { fail: { status: 404, code: 'no_review', message } };
+}
+//# sourceMappingURL=scope.js.map

package/dist/modules/publicApi/decisions/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../../src/modules/publicApi/decisions/scope.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAkB/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAa,EACb,WAAmB,EACnB,KAAa;IAEb,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC7E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAA;IAC1D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC3F,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAClE,CAAC;AAKD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB;IAGnD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAA;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,CAAa,EACb,KAAa;IAEb,gGAAgG;IAChG,iGAAiG;IACjG,yCAAyC;IACzC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACzC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;AAChC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,CAAA;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,iBAAiB,CAAC,uCAAuC,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAClF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAA;AACtD,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,iBAAiB,CAAC,kCAAkC,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AACjD,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,CAAa,EACb,KAAa,EACb,KAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,UAAU,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAA;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAA;AAC9D,CAAC"}

package/dist/modules/publicApi/publicApiAdmission.d.ts

@@ -63,16 +63,20 @@ export declare const PUBLIC_TASK_STOP_PATH = "POST /api/v1/tasks/:taskId/stop";
 /**
  * The park surfaces `/api/v1/runs/:runId/decisions` can actually ANSWER today.
  *
- * Deliberately a SEPARATE set from {@link PARKING_INLINE_KINDS}, because the asymmetry between them
- * IS the current state: admission lets a `decide` key start more parks than the decision surface
- * can answer (clarity review and both brainstorms are separate orchestration modules
- * `buildDecisionList` does not read; an approval gate is not projected at all). Closing that gap is
- * tracked in `docs/initiatives/public-api-additions.md`.
+ * Deliberately a SEPARATE set from {@link PARKING_INLINE_KINDS}, because the asymmetry between the
+ * two is the thing worth stating: admission decides what a `decide` key may set in motion, and
+ * this decides what the refusal is allowed to PROMISE it can then answer.
  *
  * Keeping the answerable set EXPLICIT rather than implied is what stops the refusal below drifting
  * from what the surface really serves: landing a slice moves a member here and the message it
  * builds updates itself, where a hand-written sentence would keep promising an answer path that
  * does not exist — which is exactly the defect this replaced.
+ *
+ * The gap is now down to ONE member of {@link parkSurfacesOf}: `human-review`, and it is not a
+ * slice waiting to be built. Its answer is a person approving the pull request on the VCS host,
+ * not an API call this surface could offer, so a run parked there is honestly reported as
+ * `parked: true` with nothing to answer and the refusal says as much. See
+ * `docs/initiatives/public-api-additions.md`.
  */
 export declare const PUBLICLY_ANSWERABLE_PARK_SURFACES: Set<string>;
 /** The pipeline shape admission reasons about — the step chain plus its parallel flag arrays. */

package/dist/modules/publicApi/publicApiAdmission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publicApiAdmission.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,KAAK,iBAAiB,EAMvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oBAAoB,aAK/B,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,kBAAkB,CAAA;AAEzD;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,eAAe,CAAA;AAEnD;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,iCAAiC,CAAA;AACpE,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iCAAiC,aAG5C,CAAA;AAEF,iGAAiG;AACjG,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;CAClB;AASD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAIT;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAEzE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,uBAAuB,GAAG,MAAM,EAAE,CAO1E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgBjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,uBAAuB,EACjC,OAAO,EAAE;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,GACpC,MAAM,EAAE,CAKV;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAET"}
+{"version":3,"file":"publicApiAdmission.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,KAAK,iBAAiB,EAMvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oBAAoB,aAK/B,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,kBAAkB,CAAA;AAEzD;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,eAAe,CAAA;AAEnD;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,iCAAiC,CAAA;AACpE,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,iCAAiC,aAO5C,CAAA;AAEF,iGAAiG;AACjG,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;CAClB;AASD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAIT;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAEzE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,uBAAuB,GAAG,MAAM,EAAE,CAO1E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgBjG;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,uBAAuB,EACjC,OAAO,EAAE;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,GACpC,MAAM,EAAE,CAKV;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAET"}

package/dist/modules/publicApi/publicApiAdmission.js

@@ -80,20 +80,28 @@ export const PUBLIC_TASK_STOP_PATH = 'POST /api/v1/tasks/:taskId/stop';
 /**
  * The park surfaces `/api/v1/runs/:runId/decisions` can actually ANSWER today.
  *
- * Deliberately a SEPARATE set from {@link PARKING_INLINE_KINDS}, because the asymmetry between them
- * IS the current state: admission lets a `decide` key start more parks than the decision surface
- * can answer (clarity review and both brainstorms are separate orchestration modules
- * `buildDecisionList` does not read; an approval gate is not projected at all). Closing that gap is
- * tracked in `docs/initiatives/public-api-additions.md`.
+ * Deliberately a SEPARATE set from {@link PARKING_INLINE_KINDS}, because the asymmetry between the
+ * two is the thing worth stating: admission decides what a `decide` key may set in motion, and
+ * this decides what the refusal is allowed to PROMISE it can then answer.
  *
  * Keeping the answerable set EXPLICIT rather than implied is what stops the refusal below drifting
  * from what the surface really serves: landing a slice moves a member here and the message it
  * builds updates itself, where a hand-written sentence would keep promising an answer path that
  * does not exist — which is exactly the defect this replaced.
+ *
+ * The gap is now down to ONE member of {@link parkSurfacesOf}: `human-review`, and it is not a
+ * slice waiting to be built. Its answer is a person approving the pull request on the VCS host,
+ * not an API call this surface could offer, so a run parked there is honestly reported as
+ * `parked: true` with nothing to answer and the refusal says as much. See
+ * `docs/initiatives/public-api-additions.md`.
  */
 export const PUBLICLY_ANSWERABLE_PARK_SURFACES = new Set([
     REQUIREMENTS_REVIEW_AGENT_KIND,
+    CLARITY_REVIEW_AGENT_KIND,
+    REQUIREMENTS_BRAINSTORM_AGENT_KIND,
+    ARCHITECTURE_BRAINSTORM_AGENT_KIND,
     INPUT_GATE_PARK_SURFACE,
+    APPROVAL_GATE_PARK_SURFACE,
 ]);
 /** The enabled steps of a pipeline, paired with their ORIGINAL index (gates are index-aligned). */
 function enabledSteps(pipeline) {

package/dist/modules/publicApi/publicApiAdmission.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicApiAdmission.js","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,0FAA0F;AAC1F,mCAAmC;AACnC,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,sFAAsF;AACtF,mCAAmC;AACnC,EAAE;AACF,4DAA4D;AAE5D,OAAO,EAEL,kCAAkC,EAClC,yBAAyB,EACzB,iBAAiB,EACjB,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,8BAA8B;IAC9B,yBAAyB;IACzB,kCAAkC;IAClC,kCAAkC;CACnC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAA;AAEzD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAA;AAEnD;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAA;AAEtE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAS;IAC/D,8BAA8B;IAC9B,uBAAuB;CACxB,CAAC,CAAA;AAWF,mGAAmG;AACnG,SAAS,YAAY,CAAC,QAAiC;IACrD,OAAO,QAAQ,CAAC,UAAU;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/B,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,QAA2B;IAE3B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiC;IAC9D,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiC;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;QACjE,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,OAA+B;IACvF,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,CAAC,+CAA+C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,wDAAwD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;QACxH,CAAC,CAAC,yCAAyC,CAC9C,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,6CAA6C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,UAAU,GAAG,CACnK,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,OAAqC;IAErC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,6FAA6F;IAC7F,uEAAuE;IACvE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAiC,EACjC,QAA2B;IAE3B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;AAC9E,CAAC"}
+{"version":3,"file":"publicApiAdmission.js","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAdmission.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,0FAA0F;AAC1F,mCAAmC;AACnC,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,sFAAsF;AACtF,mCAAmC;AACnC,EAAE;AACF,4DAA4D;AAE5D,OAAO,EAEL,kCAAkC,EAClC,yBAAyB,EACzB,iBAAiB,EACjB,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,8BAA8B;IAC9B,yBAAyB;IACzB,kCAAkC;IAClC,kCAAkC;CACnC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAA;AAEzD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAA;AAEnD;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAA;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAS;IAC/D,8BAA8B;IAC9B,yBAAyB;IACzB,kCAAkC;IAClC,kCAAkC;IAClC,uBAAuB;IACvB,0BAA0B;CAC3B,CAAC,CAAA;AAWF,mGAAmG;AACnG,SAAS,YAAY,CAAC,QAAiC;IACrD,OAAO,QAAQ,CAAC,UAAU;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/B,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,QAA2B;IAE3B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiC;IAC9D,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiC;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;QACjE,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,OAA+B;IACvF,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,CAAC,+CAA+C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,KAAK,CAAC,IAAI,CACR,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,wDAAwD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;QACxH,CAAC,CAAC,yCAAyC,CAC9C,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,6CAA6C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,UAAU,GAAG,CACnK,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,OAAqC;IAErC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,6FAA6F;IAC7F,uEAAuE;IACvE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,uBAAuB,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAiC,EACjC,QAA2B;IAE3B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;AAC9E,CAAC"}

package/dist/modules/publicApi/publicApiAuth.d.ts

@@ -16,6 +16,14 @@ export type KeyResult = {
         message: string;
     };
 };
+/**
+ * The raw key the caller presented, stripped of its `Bearer` prefix.
+ *
+ * Shared rather than re-derived, because the hosted MCP endpoint FORWARDS the key onto the calls its
+ * tools make: a second copy of this parse could admit a key here and hand a differently-trimmed one
+ * to the SDK, which authenticates as nobody.
+ */
+export declare function bearerToken<E extends AppEnv>(c: Context<E>): string | undefined;
 /**
  * Render an auth `fail` as its response. Lives here rather than in each controller because the
  * refusal shape is part of the surface's contract, not a per-route choice: every `/api/v1` handler
@@ -44,4 +52,18 @@ export declare function resolveKey<E extends AppEnv>(c: Context<E>): Promise<Key
  * this". Every `/api/v1` handler gates through this, naming the least scope it needs.
  */
 export declare function authorize<E extends AppEnv>(c: Context<E>, need: PublicApiScope): Promise<KeyResult>;
+/**
+ * {@link authorize} for a route with no contract-declared response schema: the refusal is THROWN as
+ * a `DomainError` so `handleError` renders it, correlation id and all.
+ *
+ * The `fail`-as-data shape above exists because the contract handlers must stay typed against their
+ * declared responses; a hand-mounted route (the MCP endpoint) has no such obligation and gets the
+ * repo's default instead of a fourth hand-built envelope. Same ladder either way: the scope rule
+ * lives in exactly one place, and this is a translation of its verdict rather than a second copy.
+ *
+ * `details.reason` carries the machine-readable cause, since `code` is only the status class: an
+ * `insufficient_scope` needs a wider key, a `invalid_api_key` a valid one, and an unconfigured
+ * public API needs the deployment's operator.
+ */
+export declare function authorizeOrThrow<E extends AppEnv>(c: Context<E>, need: PublicApiScope): Promise<PublicApiKeyAuth>;
 //# sourceMappingURL=publicApiAuth.d.ts.map

package/dist/modules/publicApi/publicApiAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publicApiAuth.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAS/C;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAExE;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EACrC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,MAAM,CAAC;;QAE1B,IAAI;QAAa,OAAO;;4BAClD;AAED,sFAAsF;AACtF,wBAAsB,UAAU,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAWpF;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,CAAC,SAAS,MAAM,EAC9C,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,SAAS,CAAC,CAapB"}
+{"version":3,"file":"publicApiAuth.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAEjF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAS/C;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAExE;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,SAAS,CAE/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EACrC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,MAAM,CAAC;;QAE1B,IAAI;QAAa,OAAO;;4BAClD;AAED,sFAAsF;AACtF,wBAAsB,UAAU,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAUpF;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,CAAC,SAAS,MAAM,EAC9C,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,SAAS,CAAC,CAapB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EACrD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAY3B"}

package/dist/modules/publicApi/publicApiAuth.js

@@ -1,4 +1,15 @@
 import { scopeSatisfies } from '@cat-factory/integrations';
+import { ForbiddenError, UnauthorizedError, UnavailableError } from '@cat-factory/kernel';
+/**
+ * The raw key the caller presented, stripped of its `Bearer` prefix.
+ *
+ * Shared rather than re-derived, because the hosted MCP endpoint FORWARDS the key onto the calls its
+ * tools make: a second copy of this parse could admit a key here and hand a differently-trimmed one
+ * to the SDK, which authenticates as nobody.
+ */
+export function bearerToken(c) {
+    return c.req.header('authorization')?.replace(/^Bearer\s+/i, '');
+}
 /**
  * Render an auth `fail` as its response. Lives here rather than in each controller because the
  * refusal shape is part of the surface's contract, not a per-route choice: every `/api/v1` handler
@@ -18,8 +29,7 @@ export async function resolveKey(c) {
     if (!svc) {
         return { fail: { status: 503, code: 'unavailable', message: 'Public API is not configured' } };
     }
-    const raw = c.req.header('authorization')?.replace(/^Bearer\s+/i, '');
-    const auth = await svc.authenticate(raw);
+    const auth = await svc.authenticate(bearerToken(c));
     if (!auth) {
         return { fail: { status: 401, code: 'unauthorized', message: 'Invalid or missing API key' } };
     }
@@ -47,4 +57,31 @@ export async function authorize(c, need) {
     }
     return result;
 }
+/**
+ * {@link authorize} for a route with no contract-declared response schema: the refusal is THROWN as
+ * a `DomainError` so `handleError` renders it, correlation id and all.
+ *
+ * The `fail`-as-data shape above exists because the contract handlers must stay typed against their
+ * declared responses; a hand-mounted route (the MCP endpoint) has no such obligation and gets the
+ * repo's default instead of a fourth hand-built envelope. Same ladder either way: the scope rule
+ * lives in exactly one place, and this is a translation of its verdict rather than a second copy.
+ *
+ * `details.reason` carries the machine-readable cause, since `code` is only the status class: an
+ * `insufficient_scope` needs a wider key, a `invalid_api_key` a valid one, and an unconfigured
+ * public API needs the deployment's operator.
+ */
+export async function authorizeOrThrow(c, need) {
+    const result = await authorize(c, need);
+    if (!('fail' in result))
+        return result.auth;
+    const { status, code, message } = result.fail;
+    switch (status) {
+        case 401:
+            throw new UnauthorizedError(message, 'invalid_api_key');
+        case 403:
+            throw new ForbiddenError(message, { reason: code, requiredScope: need });
+        case 503:
+            throw new UnavailableError(message, 'public_api_unconfigured');
+    }
+}
 //# sourceMappingURL=publicApiAuth.js.map

package/dist/modules/publicApi/publicApiAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicApiAuth.js","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAuth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAyB,MAAM,2BAA2B,CAAA;AAoBjF;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CACpB,CAAa,EACb,IAAmD;IAEnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;AACnF,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAmB,CAAa;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,aAAa,CAAA;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,CAAA;IAChG,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,CAAa,EACb,IAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,CAAA;IAClC,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACnC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,2BAA2B,IAAI,oCAAoC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG;aACjG;SACF,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"publicApiAuth.js","sourceRoot":"","sources":["../../../src/modules/publicApi/publicApiAuth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAyB,MAAM,2BAA2B,CAAA;AACjF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAoBzF;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAmB,CAAa;IACzD,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CACpB,CAAa,EACb,IAAmD;IAEnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;AACnF,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAmB,CAAa;IAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,aAAa,CAAA;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,CAAA;IAChG,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,CAAa,EACb,IAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,CAAA;IAClC,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACnC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,2BAA2B,IAAI,oCAAoC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG;aACjG;SACF,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,CAAa,EACb,IAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAA;IAC3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAA;IAC7C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;QACzD,KAAK,GAAG;YACN,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,KAAK,GAAG;YACN,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAA;IAClE,CAAC;AACH,CAAC"}

package/dist/modules/telemetry/TelemetryIngestController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TelemetryIngestController.d.ts","sourceRoot":"","sources":["../../../src/modules/telemetry/TelemetryIngestController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAS3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAQ/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAAC,MAAM,CAAC,CA6IxD"}
+{"version":3,"file":"TelemetryIngestController.d.ts","sourceRoot":"","sources":["../../../src/modules/telemetry/TelemetryIngestController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAe3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAQ/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAAC,MAAM,CAAC,CAmJxD"}

package/dist/modules/telemetry/TelemetryIngestController.js

@@ -1,6 +1,6 @@
 import { Hono } from 'hono';
 import * as v from 'valibot';
-import { agentContextSnapshotSchema, agentSearchQuerySchema, llmCallMetricSchema, } from '@cat-factory/contracts';
+import { agentContextSnapshotSchema, agentSearchQuerySchema, agentToolCallSchema, llmCallMetricSchema, } from '@cat-factory/contracts';
 import { verifyMachineRequest } from '../../auth/machineGate.js';
 import { logger } from '../../observability/logger.js';
 import { MAX_TELEMETRY_INGEST_CHARS, TELEMETRY_INGEST_LIMITS, } from '../../telemetry/machineTelemetry.js';
@@ -53,10 +53,12 @@ export function telemetryIngestController() {
         const metricRepository = repos?.llmCallMetricRepository;
         const snapshotRepository = repos?.agentContextSnapshotRepository;
         const searchRepository = repos?.agentSearchQueryRepository;
+        const toolCallRepository = repos?.agentToolCallRepository;
         if (typeof workspaceRepository?.accountOf !== 'function' ||
             typeof metricRepository?.recordMany !== 'function' ||
             typeof snapshotRepository?.recordMany !== 'function' ||
-            typeof searchRepository?.recordMany !== 'function') {
+            typeof searchRepository?.recordMany !== 'function' ||
+            typeof toolCallRepository?.recordMany !== 'function') {
             return c.json({ ok: false, error: { code: 'internal', message: 'telemetry ingest not enabled' } }, 503);
         }
         // Size backstop, in two steps, because the row caps below bound COUNT while a single
@@ -121,6 +123,7 @@ export function telemetryIngestController() {
             await metricRepository.recordMany(rows.metrics.map((m) => ({ ...m, ...scope })));
             await snapshotRepository.recordMany(rows.snapshots.map((s) => ({ ...s, ...scope })));
             await searchRepository.recordMany(rows.searchQueries.map((q) => ({ ...q, ...scope })));
+            await toolCallRepository.recordMany(rows.toolCalls.map((t) => ({ ...t, ...scope })));
         }
         catch (error) {
             // A failed append must be visible to the node: it leaves the run's high-water mark alone
@@ -138,6 +141,7 @@ export function telemetryIngestController() {
                 metrics: rows.metrics.length,
                 snapshots: rows.snapshots.length,
                 searchQueries: rows.searchQueries.length,
+                toolCalls: rows.toolCalls.length,
             },
         });
     });
@@ -152,11 +156,14 @@ function overCap(body) {
     if ((body.searchQueries?.length ?? 0) > TELEMETRY_INGEST_LIMITS.searchQueries) {
         return 'searchQueries';
     }
+    if ((body.toolCalls?.length ?? 0) > TELEMETRY_INGEST_LIMITS.toolCalls)
+        return 'toolCalls';
     return null;
 }
 const metricsSchema = v.optional(v.array(llmCallMetricSchema), []);
 const snapshotsSchema = v.optional(v.array(agentContextSnapshotSchema), []);
 const searchQueriesSchema = v.optional(v.array(agentSearchQuerySchema), []);
+const toolCallsSchema = v.optional(v.array(agentToolCallSchema), []);
 /**
  * Validate each sink's rows against the SAME wire schema the rest of the product reads them
  * through, or null when any row is out of contract. Whole-batch rejection rather than
@@ -167,12 +174,15 @@ function decodeRows(body) {
     const metrics = v.safeParse(metricsSchema, body.metrics);
     const snapshots = v.safeParse(snapshotsSchema, body.snapshots);
     const searchQueries = v.safeParse(searchQueriesSchema, body.searchQueries);
-    if (!metrics.success || !snapshots.success || !searchQueries.success)
+    const toolCalls = v.safeParse(toolCallsSchema, body.toolCalls);
+    if (!metrics.success || !snapshots.success || !searchQueries.success || !toolCalls.success) {
         return null;
+    }
     return {
         metrics: metrics.output,
         snapshots: snapshots.output,
         searchQueries: searchQueries.output,
+        toolCalls: toolCalls.output,
     };
 }
 //# sourceMappingURL=TelemetryIngestController.js.map

package/dist/modules/telemetry/TelemetryIngestController.js.map

@@ -1 +1 @@
-{"version":3,"file":"TelemetryIngestController.js","sourceRoot":"","sources":["../../../src/modules/telemetry/TelemetryIngestController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAA;AACtD,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GAExB,MAAM,qCAAqC,CAAA;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAEpC,0FAA0F;QAC1F,yBAAyB;QACzB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAA;QACpC,MAAM,mBAAmB,GAAG,KAAK,EAAE,mBAAmB,CAAA;QACtD,MAAM,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,CAAA;QACvD,MAAM,kBAAkB,GAAG,KAAK,EAAE,8BAA8B,CAAA;QAChE,MAAM,gBAAgB,GAAG,KAAK,EAAE,0BAA0B,CAAA;QAC1D,IACE,OAAO,mBAAmB,EAAE,SAAS,KAAK,UAAU;YACpD,OAAO,gBAAgB,EAAE,UAAU,KAAK,UAAU;YAClD,OAAO,kBAAkB,EAAE,UAAU,KAAK,UAAU;YACpD,OAAO,gBAAgB,EAAE,UAAU,KAAK,UAAU,EAClD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,EACnF,GAAG,CACJ,CAAA;QACH,CAAC;QAED,qFAAqF;QACrF,qCAAqC;QACrC,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,+FAA+F;QAC/F,8FAA8F;QAC9F,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,0BAA0B,EAAE,CAAC;YACvE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,6FAA6F;QAC7F,2DAA2D;QAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,IAA4B,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC1F,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,0CAA0C,EAAE;aACnF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,KAAK,EAAE,iBAAiB;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAA;QAEF,wFAAwF;QACxF,+FAA+F;QAC/F,MAAM,SAAS,GAAG,CAAC,MACjB,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAC/C,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAA8B,CAAA;QACtD,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YACvF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACvF,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,SAAS,EAAE,CAAC;YACd,4FAA4F;YAC5F,2DAA2D;YAC3D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,SAAS,OAAO,EAAE,EAAE,EACnF,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EAC/E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,4FAA4F;QAC5F,4CAA4C;QAC5C,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAA;QAC9E,IAAI,CAAC;YACH,0FAA0F;YAC1F,2FAA2F;YAC3F,MAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAC5B,CAAA;YACnB,MAAO,kBAAkB,CAAC,UAAU,CAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAC9B,CAAA;YACnB,MAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAClC,CAAA;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,mFAAmF;YACnF,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC5D,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC3F,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,IAAI;YACR,MAAM,EAAE;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;gBAChC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;aACzC;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kGAAkG;AAClG,SAAS,OAAO,CAAC,IAA4B;IAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IACnF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,SAAS;QAAE,OAAO,WAAW,CAAA;IACzF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,aAAa,EAAE,CAAC;QAC9E,OAAO,eAAe,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAA;AAClE,MAAM,eAAe,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAA;AAC3E,MAAM,mBAAmB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAA;AAQ3E;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAA4B;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9D,MAAM,aAAa,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1E,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACjF,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,SAAS,EAAE,SAAS,CAAC,MAAM;QAC3B,aAAa,EAAE,aAAa,CAAC,MAAM;KACpC,CAAA;AACH,CAAC"}
+{"version":3,"file":"TelemetryIngestController.js","sourceRoot":"","sources":["../../../src/modules/telemetry/TelemetryIngestController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAO/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAA;AACtD,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GAExB,MAAM,qCAAqC,CAAA;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAEpC,0FAA0F;QAC1F,yBAAyB;QACzB,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAA;QACpC,MAAM,mBAAmB,GAAG,KAAK,EAAE,mBAAmB,CAAA;QACtD,MAAM,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,CAAA;QACvD,MAAM,kBAAkB,GAAG,KAAK,EAAE,8BAA8B,CAAA;QAChE,MAAM,gBAAgB,GAAG,KAAK,EAAE,0BAA0B,CAAA;QAC1D,MAAM,kBAAkB,GAAG,KAAK,EAAE,uBAAuB,CAAA;QACzD,IACE,OAAO,mBAAmB,EAAE,SAAS,KAAK,UAAU;YACpD,OAAO,gBAAgB,EAAE,UAAU,KAAK,UAAU;YAClD,OAAO,kBAAkB,EAAE,UAAU,KAAK,UAAU;YACpD,OAAO,gBAAgB,EAAE,UAAU,KAAK,UAAU;YAClD,OAAO,kBAAkB,EAAE,UAAU,KAAK,UAAU,EACpD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,EACnF,GAAG,CACJ,CAAA;QACH,CAAC;QAED,qFAAqF;QACrF,qCAAqC;QACrC,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,+FAA+F;QAC/F,8FAA8F;QAC9F,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,0BAA0B,EAAE,CAAC;YACvE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,6FAA6F;QAC7F,2DAA2D;QAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,IAAI,IAA4B,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAC7E,GAAG,CACJ,CAAA;QACH,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC1F,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,0CAA0C,EAAE;aACnF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,KAAK,EAAE,iBAAiB;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAA;QAEF,wFAAwF;QACxF,+FAA+F;QAC/F,MAAM,SAAS,GAAG,CAAC,MACjB,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAC/C,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAA8B,CAAA;QACtD,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YACvF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACvF,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,SAAS,EAAE,CAAC;YACd,4FAA4F;YAC5F,2DAA2D;YAC3D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,SAAS,OAAO,EAAE,EAAE,EACnF,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EAC/E,GAAG,CACJ,CAAA;QACH,CAAC;QAED,4FAA4F;QAC5F,4CAA4C;QAC5C,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAA;QAC9E,IAAI,CAAC;YACH,0FAA0F;YAC1F,2FAA2F;YAC3F,MAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAC5B,CAAA;YACnB,MAAO,kBAAkB,CAAC,UAAU,CAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAC9B,CAAA;YACnB,MAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAClC,CAAA;YACnB,MAAO,kBAAkB,CAAC,UAAU,CAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAC9B,CAAA;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,mFAAmF;YACnF,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC5D,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC3F,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,IAAI;YACR,MAAM,EAAE;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;gBAChC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;aACjC;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kGAAkG;AAClG,SAAS,OAAO,CAAC,IAA4B;IAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IACnF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,SAAS;QAAE,OAAO,WAAW,CAAA;IACzF,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,aAAa,EAAE,CAAC;QAC9E,OAAO,eAAe,CAAA;IACxB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,uBAAuB,CAAC,SAAS;QAAE,OAAO,WAAW,CAAA;IACzF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAA;AAClE,MAAM,eAAe,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAA;AAC3E,MAAM,mBAAmB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAA;AAC3E,MAAM,eAAe,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAA;AASpE;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAA4B;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9D,MAAM,aAAa,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9D,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,SAAS,EAAE,SAAS,CAAC,MAAM;QAC3B,aAAa,EAAE,aAAa,CAAC,MAAM;QACnC,SAAS,EAAE,SAAS,CAAC,MAAM;KAC5B,CAAA;AACH,CAAC"}

package/dist/persistence/rpc-allowlist.d.ts

@@ -54,7 +54,7 @@ export declare const REMOTE_PERSISTENCE_METHODS: PersistenceMethodTable;
  * profile but is the org's budget SAFEGUARD, whose rollups the spend gate reads remotely — see its
  * `record` entry above.
  */
-export declare const LOCAL_FIRST_PERSISTENCE_REPOSITORIES: readonly ['llmCallMetricRepository', 'agentContextSnapshotRepository', 'agentSearchQueryRepository', 'provisioningLogRepository', 'subscriptionQuotaCycleRepository'];
+export declare const LOCAL_FIRST_PERSISTENCE_REPOSITORIES: readonly ['llmCallMetricRepository', 'agentContextSnapshotRepository', 'agentSearchQueryRepository', 'agentToolCallRepository', 'provisioningLogRepository', 'subscriptionQuotaCycleRepository'];
 /** A repository name in {@link LOCAL_FIRST_PERSISTENCE_REPOSITORIES}. */
 export type LocalFirstPersistenceRepository = (typeof LOCAL_FIRST_PERSISTENCE_REPOSITORIES)[number];
 //# sourceMappingURL=rpc-allowlist.d.ts.map

package/dist/persistence/rpc-allowlist.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc-allowlist.d.ts","sourceRoot":"","sources":["../../src/persistence/rpc-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAgBtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,0BAA0B,EAAE,sBA0nCxC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oCAAoC,YAC/C,yBAAyB,EACzB,gCAAgC,EAChC,4BAA4B,EAC5B,2BAA2B,EAC3B,kCAAkC,CAC1B,CAAA;AAEV,yEAAyE;AACzE,MAAM,MAAM,+BAA+B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"rpc-allowlist.d.ts","sourceRoot":"","sources":["../../src/persistence/rpc-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAgBtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,0BAA0B,EAAE,sBA0nCxC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,oCAAoC,YAC/C,yBAAyB,EACzB,gCAAgC,EAChC,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,kCAAkC,CAC1B,CAAA;AAEV,yEAAyE;AACzE,MAAM,MAAM,+BAA+B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/persistence/rpc-allowlist.js

@@ -1216,6 +1216,7 @@ export const LOCAL_FIRST_PERSISTENCE_REPOSITORIES = [
     'llmCallMetricRepository',
     'agentContextSnapshotRepository',
     'agentSearchQueryRepository',
+    'agentToolCallRepository',
     'provisioningLogRepository',
     'subscriptionQuotaCycleRepository',
 ];