@fabricorg/platform-host 8.5.0 → 8.6.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyDecision, AgentActionPolicyEvaluator, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, StagedInvocationRequest, canonicalJson } from "@fabricorg/platform";
+import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyContext, AgentActionPolicyDecision, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, StagedInvocationRequest, canonicalJson } from "@fabricorg/platform";
 import { AssemblyLockfile } from "@fabricorg/assembly";
 //#region src/observability.d.ts
 /** Version of the vendor-neutral health/readiness contract. */
@@ -183,7 +183,7 @@ export interface IdempotencyConflict {
   code: "IDEMPOTENCY_CONFLICT";
   idempotencyKey: string;
   existingInvocationId: string;
-  reasons: Array<"actor" | "authority_binding" | "action_version" | "parameters">;
+  reasons: Array<"actor" | "authority_binding" | "action_version" | "parameters" | "agent_proposal">;
 }
 export declare class IdempotencyConflictError extends Error {
   readonly conflict: IdempotencyConflict;
@@ -276,7 +276,21 @@ export interface StagedInvocationOrigin {
   parentInvocationId: string;
   stageKey: string;
 }
+export interface AgentProposal {
+  confidence?: number;
+  riskTier?: AgentActionRiskTier;
+  agentSessionId?: string;
+  agentRunId?: string;
+  reason?: string;
+  evidence?: ApprovalEvidence;
+}
+export interface HostHitlEvaluatorContext extends AgentActionPolicyContext {
+  actionInvocationId: string;
+  /** The durable (post-redaction) invocation record as read before evaluation. */
+  invocation: Readonly<ActionInvocationRecord>;
+}
 export interface ActionInvocationRecord {
+  readonly agentProposal?: AgentProposal;
   id: string;
   tenantId: string;
   spaceId: string;
@@ -1335,9 +1349,12 @@ export interface PlatformActionDispatcher {
  * `provenance` and `authorizationBinding` are also read once there and
  * replaced by Host's own copies. For any other action Host uses those three
  * as the caller's objects, read where and as often as before (README,
- * "Submission snapshot").
+ * "Submission snapshot"). `agentProposal` is read once and deeply copied before
+ * the first await for all actions, independently of `admitSubmission`.
  */
 export interface SubmitActionInput {
+  /** Read once and deeply copied before the first await, regardless of admission. */
+  agentProposal?: AgentProposal;
   actionId: ActionId;
   parameters: Record<string, unknown>;
   tenantId: string;
@@ -1550,7 +1567,7 @@ export interface PlatformHostOptions<TDb> {
     shouldPublish?(event: AssetEventEnvelope): boolean;
   };
   /** Optional vertical-owned evaluator. When absent, agent behavior is unchanged. */
-  hitlEvaluator?: (context: Parameters<AgentActionPolicyEvaluator>[0]) => HostHitlDecision | Promise<HostHitlDecision>;
+  hitlEvaluator?: (context: HostHitlEvaluatorContext) => HostHitlDecision | Promise<HostHitlDecision>;
   /** Positive integer milliseconds, used when the evaluator supplies no absolute deadline. */
   approvalDefaultTtlMs?: number;
   /** Atomic approval lifecycle events and outbox writes; defaults to false. */
@@ -1607,6 +1624,8 @@ export interface PlatformHostOptions<TDb> {
    * copy, after the check admitted the submission.
    */
   redactActionParameters?: (actionId: ActionId, parameters: Record<string, unknown>) => Record<string, unknown>;
+  /** Runs beside parameter redaction; output is validated and copied before persistence. */
+  redactAgentProposal?: (actionId: ActionId, proposal: AgentProposal) => AgentProposal;
   /**
    * The bound on an action's `admitSubmission` check. An answer that
    * settles this many milliseconds or more after the check was called,

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyDecision, AgentActionPolicyEvaluator, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, StagedInvocationRequest, canonicalJson } from "@fabricorg/platform";
+import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyContext, AgentActionPolicyDecision, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, StagedInvocationRequest, canonicalJson } from "@fabricorg/platform";
 import { AssemblyLockfile } from "@fabricorg/assembly";
 //#region src/observability.d.ts
 /** Version of the vendor-neutral health/readiness contract. */
@@ -183,7 +183,7 @@ export interface IdempotencyConflict {
   code: "IDEMPOTENCY_CONFLICT";
   idempotencyKey: string;
   existingInvocationId: string;
-  reasons: Array<"actor" | "authority_binding" | "action_version" | "parameters">;
+  reasons: Array<"actor" | "authority_binding" | "action_version" | "parameters" | "agent_proposal">;
 }
 export declare class IdempotencyConflictError extends Error {
   readonly conflict: IdempotencyConflict;
@@ -276,7 +276,21 @@ export interface StagedInvocationOrigin {
   parentInvocationId: string;
   stageKey: string;
 }
+export interface AgentProposal {
+  confidence?: number;
+  riskTier?: AgentActionRiskTier;
+  agentSessionId?: string;
+  agentRunId?: string;
+  reason?: string;
+  evidence?: ApprovalEvidence;
+}
+export interface HostHitlEvaluatorContext extends AgentActionPolicyContext {
+  actionInvocationId: string;
+  /** The durable (post-redaction) invocation record as read before evaluation. */
+  invocation: Readonly<ActionInvocationRecord>;
+}
 export interface ActionInvocationRecord {
+  readonly agentProposal?: AgentProposal;
   id: string;
   tenantId: string;
   spaceId: string;
@@ -1335,9 +1349,12 @@ export interface PlatformActionDispatcher {
  * `provenance` and `authorizationBinding` are also read once there and
  * replaced by Host's own copies. For any other action Host uses those three
  * as the caller's objects, read where and as often as before (README,
- * "Submission snapshot").
+ * "Submission snapshot"). `agentProposal` is read once and deeply copied before
+ * the first await for all actions, independently of `admitSubmission`.
  */
 export interface SubmitActionInput {
+  /** Read once and deeply copied before the first await, regardless of admission. */
+  agentProposal?: AgentProposal;
   actionId: ActionId;
   parameters: Record<string, unknown>;
   tenantId: string;
@@ -1550,7 +1567,7 @@ export interface PlatformHostOptions<TDb> {
     shouldPublish?(event: AssetEventEnvelope): boolean;
   };
   /** Optional vertical-owned evaluator. When absent, agent behavior is unchanged. */
-  hitlEvaluator?: (context: Parameters<AgentActionPolicyEvaluator>[0]) => HostHitlDecision | Promise<HostHitlDecision>;
+  hitlEvaluator?: (context: HostHitlEvaluatorContext) => HostHitlDecision | Promise<HostHitlDecision>;
   /** Positive integer milliseconds, used when the evaluator supplies no absolute deadline. */
   approvalDefaultTtlMs?: number;
   /** Atomic approval lifecycle events and outbox writes; defaults to false. */
@@ -1607,6 +1624,8 @@ export interface PlatformHostOptions<TDb> {
    * copy, after the check admitted the submission.
    */
   redactActionParameters?: (actionId: ActionId, parameters: Record<string, unknown>) => Record<string, unknown>;
+  /** Runs beside parameter redaction; output is validated and copied before persistence. */
+  redactAgentProposal?: (actionId: ActionId, proposal: AgentProposal) => AgentProposal;
   /**
    * The bound on an action's `admitSubmission` check. An answer that
    * settles this many milliseconds or more after the check was called,

package/dist/index.js

@@ -296,6 +296,52 @@ async function appendLifecycleEvent(transaction, factory, invocation, kind) {
 	}, metadata);
 }
 //#endregion
+//#region src/agent-proposal.ts
+/** Validate without invoking getters or retaining caller-owned evidence. */
+function snapshotAgentProposal(value) {
+	const invalid = () => {
+		throw new Error("Invalid agent proposal.");
+	};
+	if (!value || typeof value !== "object" || Array.isArray(value) || types.isProxy(value)) return invalid();
+	if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return invalid();
+	const allowed = [
+		"confidence",
+		"riskTier",
+		"agentSessionId",
+		"agentRunId",
+		"reason",
+		"evidence"
+	];
+	for (const key of Reflect.ownKeys(value)) {
+		const descriptor = Object.getOwnPropertyDescriptor(value, key);
+		if (typeof key !== "string" || !allowed.includes(key) || !descriptor.enumerable || !Object.hasOwn(descriptor, "value")) return invalid();
+	}
+	if (value.confidence !== void 0 && (typeof value.confidence !== "number" || !Number.isFinite(value.confidence))) return invalid();
+	if (value.riskTier !== void 0 && ![
+		"low",
+		"medium",
+		"high"
+	].includes(value.riskTier)) return invalid();
+	for (const key of [
+		"agentSessionId",
+		"agentRunId",
+		"reason"
+	]) {
+		const field = value[key];
+		if (field !== void 0 && (typeof field !== "string" || field.length > (key === "reason" ? 4096 : 256) || key !== "reason" && field.trim().length === 0)) return invalid();
+	}
+	const evidence = snapshotApprovalDecision({
+		approved: true,
+		approverId: "proposal",
+		approverType: "agent",
+		...value.evidence !== void 0 ? { evidence: value.evidence } : {}
+	}).evidence;
+	return {
+		...value,
+		...evidence !== void 0 ? { evidence } : {}
+	};
+}
+//#endregion
 //#region src/command-identity.ts
 const PARAMETER_DIGEST_ALGORITHM = "fabric-canonical-json-sha256-v1";
 function digestParameters(parameters) {
@@ -1001,7 +1047,11 @@ function snapshotSubmission(input) {
 	const executionReason = scalar("executionReason");
 	const idempotencyKey = scalar("idempotencyKey");
 	const authorizationBindingId = scalar("authorizationBindingId");
+	const proposal = input.agentProposal;
+	if (proposal !== void 0 && actorType !== "agent") throw new Error("Agent proposal requires an agent actor.");
+	const agentProposal = proposal === void 0 ? void 0 : snapshotAgentProposal(proposal);
 	const live = {
+		...agentProposal !== void 0 ? { agentProposal } : {},
 		actionId,
 		tenantId,
 		spaceId,
@@ -1070,6 +1120,7 @@ function privateSubmission(snapshot) {
 	const provenance = provenanceRead ? copyProvenance(provenanceRead) : void 0;
 	const authorizationBinding = bindingRead ? copyBinding(bindingRead) : void 0;
 	return Object.freeze({
+		...snapshot.agentProposal !== void 0 ? { agentProposal: snapshot.agentProposal } : {},
 		actionId: snapshot.actionId,
 		tenantId: snapshot.tenantId,
 		spaceId: snapshot.spaceId,
@@ -1166,6 +1217,7 @@ function parametersCopy(snapshot) {
 */
 function liveSubmissionView(snapshot, input) {
 	const view = {
+		...snapshot.agentProposal !== void 0 ? { agentProposal: snapshotAgentProposal(snapshot.agentProposal) } : {},
 		actionId: snapshot.actionId,
 		tenantId: snapshot.tenantId,
 		spaceId: snapshot.spaceId,
@@ -1207,6 +1259,7 @@ function submissionView(snapshot) {
 	const provenance = fresh(snapshot.provenance);
 	const authorizationBinding = fresh(snapshot.authorizationBinding);
 	return {
+		...snapshot.agentProposal !== void 0 ? { agentProposal: snapshotAgentProposal(snapshot.agentProposal) } : {},
 		actionId: snapshot.actionId,
 		parameters: parametersCopy(snapshot),
 		tenantId: snapshot.tenantId,
@@ -1543,7 +1596,8 @@ function createGovernedActionHost(options) {
 			if (submission.authorizationBinding) validateAuthorizationBinding(submission, parameterDigest, action.execution?.authorityMoment, now());
 			return {
 				durableParameters,
-				parameterDigest
+				parameterDigest,
+				agentProposal: submission.agentProposal === void 0 ? void 0 : snapshotAgentProposal(options.redactAgentProposal ? options.redactAgentProposal(submission.actionId, submission.agentProposal) : submission.agentProposal)
 			};
 		};
 		const early = declaresAdmission ? void 0 : prepare();
@@ -1558,9 +1612,10 @@ function createGovernedActionHost(options) {
 		};
 		assertGovernanceRuntimeEvidence(runtimeEvidence);
 		const admission = declaresAdmission ? await admitSubmission(action, submission) : void 0;
-		const { durableParameters, parameterDigest } = early ?? prepare();
+		const { durableParameters, parameterDigest, agentProposal } = early ?? prepare();
 		const invocationInput = {
 			id: actionInvocationId,
+			...agentProposal !== void 0 ? { agentProposal } : {},
 			tenantId: submission.tenantId,
 			spaceId: submission.spaceId,
 			actionId: submission.actionId,
@@ -1614,6 +1669,7 @@ function createGovernedActionHost(options) {
 		});
 		if (durableInvocation.id !== actionInvocationId && submission.idempotencyKey) {
 			const conflict = idempotencyConflict(durableInvocation, {
+				agentProposal,
 				actorId: submission.actorId,
 				authorizationBindingId: submission.authorizationBindingId,
 				actionVersion: action.version,
@@ -2335,21 +2391,24 @@ function createGovernedActionHost(options) {
 			}
 			if (invocation.actorType === "agent" && options.hitlEvaluator) {
 				const hitlParameters = isRecord(parsed.data) ? parsed.data : invocation.parameters;
+				const proposal = invocation.agentProposal;
 				const approvalStore = asApprovalStore(options.store);
 				if (!approvalStore) return hostOperation(() => failExecution(invocation, "failed", "The configured HITL evaluator requires a store with approval persistence support."));
 				let evaluatedApprovalExpiresAt;
 				if (!invocation.hitlRoute) {
 					const decision = await options.hitlEvaluator({
+						actionInvocationId: invocation.id,
+						invocation,
 						actionId: action.actionId,
 						actorId: invocation.actorId,
 						actorType: invocation.actorType,
 						tenantId,
 						spaceId,
 						parameters: hitlParameters,
-						...numberValue(hitlParameters.confidence) !== void 0 ? { confidence: numberValue(hitlParameters.confidence) } : {},
-						...isRiskTier(hitlParameters.riskTier) ? { riskTier: hitlParameters.riskTier } : {},
-						...stringValue(hitlParameters.agentSessionId) ? { agentSessionId: stringValue(hitlParameters.agentSessionId) } : {},
-						...stringValue(hitlParameters.agentRunId) ? { agentRunId: stringValue(hitlParameters.agentRunId) } : {}
+						...(proposal?.confidence ?? numberValue(hitlParameters.confidence)) !== void 0 ? { confidence: proposal?.confidence ?? numberValue(hitlParameters.confidence) } : {},
+						...isRiskTier(proposal?.riskTier ?? hitlParameters.riskTier) ? { riskTier: proposal?.riskTier ?? hitlParameters.riskTier } : {},
+						...proposal?.agentSessionId ?? stringValue(hitlParameters.agentSessionId) ? { agentSessionId: proposal?.agentSessionId ?? stringValue(hitlParameters.agentSessionId) } : {},
+						...proposal?.agentRunId ?? stringValue(hitlParameters.agentRunId) ? { agentRunId: proposal?.agentRunId ?? stringValue(hitlParameters.agentRunId) } : {}
 					});
 					if (decision.approvalExpiresAt !== void 0 && !validApprovalDate(decision.approvalExpiresAt)) return hostOperation(() => failExecution(invocation, "failed", "approvalExpiresAt must be a valid Date."));
 					evaluatedApprovalExpiresAt = decision.approvalExpiresAt === void 0 ? void 0 : new Date(decision.approvalExpiresAt);
@@ -4313,6 +4372,7 @@ function validateAuthorizationBinding(input, parameterDigest, authorityMoment, c
 }
 function idempotencyConflict(existing, incoming) {
 	const reasons = [];
+	if (canonicalJson(existing.agentProposal ?? null) !== canonicalJson(incoming.agentProposal ?? null)) reasons.push("agent_proposal");
 	if ((existing.idempotencyActorId ?? existing.actorId) !== incoming.actorId) reasons.push("actor");
 	if ((existing.idempotencyAuthorizationBindingId ?? existing.authorizationBindingId) !== incoming.authorizationBindingId) reasons.push("authority_binding");
 	if (existing.actionVersion !== incoming.actionVersion) reasons.push("action_version");
@@ -5618,6 +5678,11 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 					ON fabric_platform.action_invocations (approval_expires_at, id)
 					WHERE status='waiting_for_approval' AND approval_expires_at IS NOT NULL;
 			`
+			},
+			{
+				version: 13,
+				name: "agent_proposal",
+				sql: `ALTER TABLE fabric_platform.action_invocations ADD COLUMN IF NOT EXISTS agent_proposal jsonb;`
 			}
 		]);
 	}
@@ -5629,6 +5694,8 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 		const admitted = input.admittedAt !== void 0;
 		const admittedColumn = admitted ? "admitted_at," : "";
 		const admittedValue = admitted ? "$25," : "";
+		const proposalColumn = input.agentProposal !== void 0 ? "agent_proposal," : "";
+		const proposalValue = input.agentProposal !== void 0 ? `$${admitted ? 26 : 25}::jsonb,` : "";
 		let result;
 		try {
 			result = await this.sql.query(`INSERT INTO fabric_platform.action_invocations
@@ -5636,8 +5703,8 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 				  parameters,result,correlation_id,causation_id,idempotency_key,
 				  parameter_digest,parameter_digest_algorithm,idempotency_actor_id,
 				  idempotency_authorization_binding_id,invocation_provenance,authorization_binding,execution_reason,
-				  authorization_binding_id,error,runtime_evidence,${admittedColumn}created_at,updated_at)
-				 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$16,$17,$18::jsonb,$19::jsonb,$20,$21,$22,$23::jsonb,${admittedValue}$24,$24)
+				  authorization_binding_id,error,runtime_evidence,${admittedColumn}${proposalColumn}created_at,updated_at)
+				 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$16,$17,$18::jsonb,$19::jsonb,$20,$21,$22,$23::jsonb,${admittedValue}${proposalValue}$24,$24)
 				 ON CONFLICT (tenant_id,space_id,action_id,idempotency_key)
 				 WHERE idempotency_key IS NOT NULL DO UPDATE SET id=fabric_platform.action_invocations.id
 				 RETURNING *`, [
@@ -5665,9 +5732,11 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 				input.error ?? null,
 				input.runtimeEvidence ? JSON.stringify(input.runtimeEvidence) : null,
 				now,
-				...admitted ? [input.admittedAt] : []
+				...admitted ? [input.admittedAt] : [],
+				...input.agentProposal !== void 0 ? [JSON.stringify(input.agentProposal)] : []
 			]);
 		} catch (error) {
+			if (input.agentProposal !== void 0 && error?.code === "42703") throw new Error("Agent proposals require PostgreSQL migration 13 (agent_proposal); run ensureSchema().", { cause: error });
 			if (admitted && error?.code === "42703") throw new Error("An admitted invocation needs the action_invocations.admitted_at column; run ensureSchema() to apply PostgreSQL migration 6 (invocation_admission) before submitting actions that declare admitSubmission.", { cause: error });
 			throw error;
 		}
@@ -5679,6 +5748,8 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 		const admitted = invocation.admittedAt !== void 0;
 		const admittedColumn = admitted ? ",admitted_at" : "";
 		const admittedValue = admitted ? ",$30" : "";
+		const proposalColumn = invocation.agentProposal !== void 0 ? ",agent_proposal" : "";
+		const proposalValue = invocation.agentProposal !== void 0 ? `,$${admitted ? 31 : 30}::jsonb` : "";
 		const values = [
 			invocation.id,
 			invocation.tenantId,
@@ -5709,7 +5780,8 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 			input.workerId,
 			input.leaseToken,
 			current,
-			...admitted ? [invocation.admittedAt] : []
+			...admitted ? [invocation.admittedAt] : [],
+			...invocation.agentProposal !== void 0 ? [JSON.stringify(invocation.agentProposal)] : []
 		];
 		let result;
 		try {
@@ -5727,15 +5799,16 @@ var PostgresPlatformHostStore = class PostgresPlatformHostStore {
 				  parameters,result,correlation_id,causation_id,idempotency_key,parameter_digest,
 				  parameter_digest_algorithm,idempotency_actor_id,idempotency_authorization_binding_id,
 				  invocation_provenance,authorization_binding,execution_reason,authorization_binding_id,error,
-				  runtime_evidence,staged_parent_invocation_id,staged_stage_key${admittedColumn},created_at,updated_at)
+				  runtime_evidence,staged_parent_invocation_id,staged_stage_key${admittedColumn}${proposalColumn},created_at,updated_at)
 				 SELECT $1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$16,$17,
-				        $18::jsonb,$19::jsonb,$20,$21,$22,$23::jsonb,$24,$25${admittedValue},$29,$29
+				        $18::jsonb,$19::jsonb,$20,$21,$22,$23::jsonb,$24,$25${admittedValue}${proposalValue},$29,$29
 				 FROM fence
 				 ON CONFLICT (tenant_id,space_id,staged_parent_invocation_id,staged_stage_key)
 				 WHERE staged_parent_invocation_id IS NOT NULL AND staged_stage_key IS NOT NULL
 				 DO UPDATE SET id=fabric_platform.action_invocations.id
 				 RETURNING *`, values);
 		} catch (error) {
+			if (invocation.agentProposal !== void 0 && error?.code === "42703") throw new Error("Agent proposals require PostgreSQL migration 13 (agent_proposal); run ensureSchema().", { cause: error });
 			if (error?.code === "42703" || error?.code === "42P01") throw new Error("A staged child needs PostgreSQL migration 11 (staged_descendant_invocations); run ensureSchema() before dispatching staged invocations.", { cause: error });
 			throw error;
 		}
@@ -6855,6 +6928,7 @@ function toActionRecord(row) {
 		...row.mutation_footprint ? { mutationFootprint: row.mutation_footprint } : {},
 		...row.execution_principal ? { executionPrincipal: row.execution_principal } : {},
 		...row.runtime_evidence ? { runtimeEvidence: row.runtime_evidence } : {},
+		...row.agent_proposal != null ? { agentProposal: row.agent_proposal } : {},
 		...row.admitted_at ? { admittedAt: new Date(row.admitted_at) } : {},
 		...row.error ? { error: String(row.error) } : {},
 		createdAt: new Date(row.created_at),