@m6d/cortex-cli 0.24.2 → 0.25.1

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@m6d/cortex-cli",
-    "version": "0.24.2",
+    "version": "0.25.1",
     "description": "Scaffold Cortex projects and manage a Cortex deployment",
     "license": "MIT",
     "type": "module",

package/src/contracts/management/procedures.generated.ts

@@ -516,6 +516,13 @@ export const managementProcedureKinds = {
   "observability.unhealthyToolIds": "query",
   "observability.unusedSkillIds": "query",
   "observability.updateSchemaDrift": "mutation",
+  "orgs.create": "mutation",
+  "orgs.delete": "mutation",
+  "orgs.inviteOwner": "mutation",
+  "orgs.list": "query",
+  "orgs.options": "query",
+  "orgs.restore": "mutation",
+  "orgs.suspend": "mutation",
   "publishing.exclusive": "query",
   "publishing.history": "query",
   "publishing.latest": "query",
@@ -590,9 +597,14 @@ export const managementProcedureKinds = {
   "triggers.setAudience": "mutation",
   "triggers.toggle": "mutation",
   "triggers.update": "mutation",
-  "users.create": "mutation",
+  "users.accounts": "query",
+  "users.invite": "mutation",
   "users.list": "query",
+  "users.listInvitations": "query",
+  "users.remove": "mutation",
+  "users.revokeInvitation": "mutation",
   "users.roleOptions": "query",
+  "users.setAccountActive": "mutation",
   "users.setActive": "mutation",
   "users.setRoles": "mutation",
   "users.setTempPassword": "mutation",
@@ -3841,7 +3853,7 @@ export type ManagementProcedures = {
       id: string;
       kind: "turn" | "subagent" | "tool";
       status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
       createdAt: string;
       finishedAt: string | null;
       source: "user" | "trigger" | "schedule" | "run" | null;
@@ -4017,7 +4029,7 @@ export type ManagementProcedures = {
         id: string;
         kind: "turn" | "subagent" | "tool";
         status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-        reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+        reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
         createdAt: string;
         finishedAt: string | null;
         source: "user" | "trigger" | "schedule" | "run" | null;
@@ -4188,6 +4200,120 @@ export type ManagementProcedures = {
       updatedAt: string;
     };
   };
+  /** Create an org with its Administrator role and assistant, and invite its owner as Administrator; returns the org and the invitation, whose link path is shown only once and expires in 7 days. */
+  "orgs.create": {
+    input: {
+      /** The org's address in engine URLs (`/orgs/<slug>/...`): lowercase letters, digits and single hyphens, unique, and never changed. */
+      slug: string;
+      name: string;
+      ownerEmail: string;
+    };
+    output: {
+      id: string;
+      slug: string;
+      name: string;
+      suspendedAt: string | null;
+      purgeAt: string | null;
+      createdAt: string;
+      updatedAt: string;
+      invitation: {
+        id: string;
+        email: string;
+        expiresAt: string;
+        invitePath: string;
+      };
+    };
+  };
+  /** Delete an org: it is suspended at once and purged with all its data and files after 30 days, unless restored first. */
+  "orgs.delete": {
+    input: {
+      id: string;
+    };
+    output: {
+      id: string;
+      slug: string;
+      name: string;
+      suspendedAt: string | null;
+      purgeAt: string | null;
+      createdAt: string;
+      updatedAt: string;
+    };
+  };
+  /** Invite an email into an org as its Administrator, so an org left without one gets it back; returns the invitation link's path, shown only once, which expires in 7 days. */
+  "orgs.inviteOwner": {
+    input: {
+      id: string;
+      ownerEmail: string;
+    };
+    output: {
+      id: string;
+      email: string;
+      expiresAt: string;
+      invitePath: string;
+    };
+  };
+  /** List the deployment's orgs with pagination and search by name or slug, suspended and deleted ones included. */
+  "orgs.list": {
+    input: {
+      pageIndex?: number;
+      pageSize?: number;
+      q?: string;
+    };
+    output: {
+      items: Array<{
+        id: string;
+        slug: string;
+        name: string;
+        suspendedAt: string | null;
+        purgeAt: string | null;
+        createdAt: string;
+        updatedAt: string;
+      }>;
+      /** Every row the caller may see, ignoring the search and filters. */
+      count: number;
+      /** The rows matching the search and filters, over all pages: the total to report. */
+      filteredCount: number;
+    };
+  };
+  /** Each org's id, slug and name, suspended and deleted ones included, for selectors. */
+  "orgs.options": {
+    input: undefined;
+    output: Array<{
+      id: string;
+      slug: string;
+      name: string;
+    }>;
+  };
+  /** Restore a suspended or deleted org before its purge, as it was, its assistant brought up to this release. */
+  "orgs.restore": {
+    input: {
+      id: string;
+    };
+    output: {
+      id: string;
+      slug: string;
+      name: string;
+      suspendedAt: string | null;
+      purgeAt: string | null;
+      createdAt: string;
+      updatedAt: string;
+    };
+  };
+  /** Suspend an org: its engine routes, sessions and credentials are refused until it is restored. */
+  "orgs.suspend": {
+    input: {
+      id: string;
+    };
+    output: {
+      id: string;
+      slug: string;
+      name: string;
+      suspendedAt: string | null;
+      purgeAt: string | null;
+      createdAt: string;
+      updatedAt: string;
+    };
+  };
   /** Components of every kind shared with this agent alone: what deleting it leaves shared with nobody, unless `agents.delete` names them in `deleteComponentIds`. */
   "publishing.exclusive": {
     input: {
@@ -4242,13 +4368,13 @@ export type ManagementProcedures = {
     input: {
       name: string;
       description: string;
-      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage">;
+      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage" | "orgs:manage">;
     };
     output: {
       id: string;
       name: string;
       description: string;
-      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage">;
+      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage" | "orgs:manage">;
     };
   };
   /** Delete a role; the built-in Administrator role cannot be deleted. */
@@ -4270,7 +4396,7 @@ export type ManagementProcedures = {
         id: string;
         name: string;
         description: string;
-        permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage">;
+        permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage" | "orgs:manage">;
         builtInId: string | null;
         createdAt: string;
         assignedUsers: number;
@@ -4286,14 +4412,14 @@ export type ManagementProcedures = {
     input: {
       name: string;
       description: string;
-      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage">;
+      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage" | "orgs:manage">;
       id: string;
     };
     output: {
       id: string;
       name: string;
       description: string;
-      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage">;
+      permissions: Array<"agents:read" | "agents:write" | "tools:read" | "tools:write" | "tools:execute" | "services:read" | "services:write" | "skills:read" | "skills:write" | "triggers:read" | "triggers:write" | "triggers:fire" | "datasets:read" | "datasets:write" | "datasets:test" | "webhooks:read" | "webhooks:write" | "mcp-servers:read" | "mcp-servers:write" | "knowledge:read" | "knowledge:write" | "secrets:read" | "secrets:write" | "credentials:read" | "credentials:write" | "model-providers:read" | "model-providers:write" | "management-keys:use" | "servers:read" | "servers:write" | "threads:read" | "playground:use" | "publishing:read" | "manifests:apply" | "audit:read" | "observability:read" | "settings:manage" | "users:manage" | "roles:manage" | "orgs:manage">;
     };
   };
   /** Delete a secret; fails while a credential or an agent's auth (its signing secret or reCAPTCHA API key) still references it. */
@@ -4438,7 +4564,6 @@ export type ManagementProcedures = {
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
       syncAttempt: number;
       syncSettledAttempt: number;
-      system: boolean;
       signInChecksPerMinute: number;
       triggerChecksPerMinute: number;
       modelProvider: string | null;
@@ -4485,7 +4610,6 @@ export type ManagementProcedures = {
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
       syncAttempt: number;
       syncSettledAttempt: number;
-      system: boolean;
       signInChecksPerMinute: number;
       triggerChecksPerMinute: number;
       modelProvider: string | null;
@@ -4507,7 +4631,6 @@ export type ManagementProcedures = {
       description: string | null;
       url: string | null;
       keySecretName: string | null;
-      system: boolean;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
       createdAt: string;
@@ -4549,7 +4672,6 @@ export type ManagementProcedures = {
         description: string | null;
         url: string | null;
         keySecretName: string | null;
-        system: boolean;
         syncedAt: string | null;
         syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
         createdAt: string;
@@ -4561,11 +4683,9 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
-  /** Each server's id, name and display name, for selectors. Cortex's own system server is left out unless `includeSystem` asks for it, as a filter over its threads does. */
+  /** Each server's id, name and display name, for selectors. */
   "servers.options": {
-    input: {
-      includeSystem?: boolean;
-    };
+    input: undefined;
     output: Array<{
       id: string;
       name: string;
@@ -4627,7 +4747,6 @@ export type ManagementProcedures = {
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
       syncAttempt: number;
       syncSettledAttempt: number;
-      system: boolean;
       signInChecksPerMinute: number;
       triggerChecksPerMinute: number;
       modelProvider: string | null;
@@ -4858,23 +4977,27 @@ export type ManagementProcedures = {
       name: string;
     };
   };
-  /** Deployment settings: log and thread retention. */
+  /** The org's settings: log and thread retention, and the browser origins its engine routes admit. */
   "settings.get": {
     input: undefined;
     output: {
       logRetentionDays: number;
       threadRetentionDays: number | null;
+      corsOrigins: Array<string>;
     };
   };
-  /** Change retention settings. */
+  /** Change the org's settings: retention, and the browser origins its engine routes admit. */
   "settings.update": {
     input: {
       logRetentionDays: number;
       threadRetentionDays?: number;
+      /** Browser origins, beside the console's own, that may call the org's engine routes, such as a site embedding its widget. */
+      corsOrigins: Array<string>;
     };
     output: {
       logRetentionDays: number;
       threadRetentionDays: number | null;
+      corsOrigins: Array<string>;
     };
   };
   /** How many published skills an agent has. */
@@ -6085,7 +6208,7 @@ export type ManagementProcedures = {
       kind: "turn" | "subagent" | "tool";
       subagentRunId: string | null;
       status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
       result: unknown;
       waits: Array<{
         kind: "approval" | "client_tool";
@@ -6169,7 +6292,7 @@ export type ManagementProcedures = {
       kind: "turn" | "subagent" | "tool";
       subagentRunId: string | null;
       status: "running" | "waiting" | "completed" | "failed" | "cancelled";
-      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | "output_limit" | null;
       result: unknown;
       waits: Array<{
         kind: "approval" | "client_tool";
@@ -6253,8 +6376,8 @@ export type ManagementProcedures = {
         id: string;
         name: string;
         displayName: Partial<Record<"en" | "ar", string>>;
+        fireUrl: string | null;
       }>;
-      engineUrl: string | null;
       variables: Array<{
         name: string;
         description: string;
@@ -6461,21 +6584,48 @@ export type ManagementProcedures = {
       name: string;
     };
   };
-  /** Create a user with a temporary password and roles. */
-  "users.create": {
+  /** List every account on the deployment with pagination, search by name or email, the orgs each is a member of, and optionally only one org's members. */
+  "users.accounts": {
+    input: {
+      pageIndex?: number;
+      pageSize?: number;
+      q?: string;
+      orgId?: string;
+    };
+    output: {
+      items: Array<{
+        id: string;
+        name: string;
+        email: string;
+        banned: boolean;
+        mustChangePassword: boolean;
+        createdAt: string;
+        orgs: Array<{
+          id: string;
+          name: string;
+        }>;
+        manageable: boolean;
+      }>;
+      /** Every row the caller may see, ignoring the search and filters. */
+      count: number;
+      /** The rows matching the search and filters, over all pages: the total to report. */
+      filteredCount: number;
+    };
+  };
+  /** Invite an email into the org with roles; returns the accept link's path, shown only once, which expires in 7 days. */
+  "users.invite": {
     input: {
-      name: string;
       email: string;
-      tempPassword: string;
       roleIds: Array<string>;
     };
     output: {
       id: string;
-      name: string;
       email: string;
+      expiresAt: string;
+      invitePath: string;
     };
   };
-  /** List users with pagination, search, and their roles. */
+  /** List the org's members with pagination, search, their roles, and whether each is active in the org. */
   "users.list": {
     input: {
       pageIndex?: number;
@@ -6489,6 +6639,32 @@ export type ManagementProcedures = {
         email: string;
         banned: boolean;
         mustChangePassword: boolean;
+        joinedAt: string;
+        deactivatedAt: string | null;
+        roles: Array<{
+          id: string;
+          name: string;
+          builtInId: string | null;
+        }>;
+      }>;
+      /** Every row the caller may see, ignoring the search and filters. */
+      count: number;
+      /** The rows matching the search and filters, over all pages: the total to report. */
+      filteredCount: number;
+    };
+  };
+  /** List the org's invitations not yet accepted, with the roles each grants. */
+  "users.listInvitations": {
+    input: {
+      pageIndex?: number;
+      pageSize?: number;
+      q?: string;
+    };
+    output: {
+      items: Array<{
+        id: string;
+        email: string;
+        expiresAt: string;
         createdAt: string;
         roles: Array<{
           id: string;
@@ -6502,6 +6678,20 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
+  /** Remove a member from the org with their roles and management keys there; the account stays. */
+  "users.remove": {
+    input: {
+      userId: string;
+    };
+    output: null;
+  };
+  /** Revoke a pending invitation; its link stops working. */
+  "users.revokeInvitation": {
+    input: {
+      id: string;
+    };
+    output: null;
+  };
   /** Role id and name pairs for assignment. */
   "users.roleOptions": {
     input: undefined;
@@ -6511,7 +6701,15 @@ export type ManagementProcedures = {
       builtInId: string | null;
     }>;
   };
-  /** Deactivate or reactivate a user; deactivation also revokes their sessions and management keys. */
+  /** Deactivate or reactivate an account in every org; deactivation also ends its sessions and revokes its management keys. */
+  "users.setAccountActive": {
+    input: {
+      userId: string;
+      active: boolean;
+    };
+    output: null;
+  };
+  /** Deactivate or reactivate a member in the org; deactivation also revokes their management keys there. */
   "users.setActive": {
     input: {
       userId: string;
@@ -6519,7 +6717,7 @@ export type ManagementProcedures = {
     };
     output: null;
   };
-  /** Replace the user's roles. */
+  /** Replace a member's roles in the org. */
   "users.setRoles": {
     input: {
       userId: string;
@@ -6527,7 +6725,7 @@ export type ManagementProcedures = {
     };
     output: null;
   };
-  /** Set a temporary password the user must change on next login; this also revokes their sessions and management keys. */
+  /** Set a temporary password the user must change on next login; this also ends their sessions and revokes their management keys in every org. */
   "users.setTempPassword": {
     input: {
       userId: string;

package/src/contracts/runs/index.ts

@@ -14,7 +14,8 @@ export type RunStatus = (typeof RUN_STATUSES)[number];
 /**
  * Why a run ended as it did: a trigger's answer that never came or never
  * fit its schema, a stop, a cancel (its own, or its parent's), a producer
- * that died (`lost`), or one that ran out of time.
+ * that died (`lost`), one that ran out of time, or a model answer the
+ * output limit cut off (`output_limit`).
  */
 export const RUN_REASONS = [
     "no_output",
@@ -24,6 +25,7 @@ export const RUN_REASONS = [
     "parent_cancelled",
     "lost",
     "timeout",
+    "output_limit",
 ] as const;
 export type RunReason = (typeof RUN_REASONS)[number];
 
@@ -128,8 +130,8 @@ export type WaitState = (typeof WAIT_STATES)[number];
 
 /**
  * One call a waiting run waits on, and the arguments it was made with: an
- * approval, which `POST /agents/:agentName/runs/:id/answer` decides, or a
- * client tool's call, which its widget answers.
+ * approval, which `POST /orgs/:org/agents/:agentName/runs/:id/answer`
+ * decides, or a client tool's call, which its widget answers.
  */
 export const runWaitSchema = z.object({
     kind: z.enum(WAIT_KINDS),
@@ -140,9 +142,9 @@ export const runWaitSchema = z.object({
 export type RunWait = z.infer<typeof runWaitSchema>;
 
 /**
- * A run as `GET /agents/:agentName/runs/:id` reads it, and each row of
- * `GET /agents/:agentName/triggers/:name/runs`: the input it answers, and
- * its thread, null once that thread is gone.
+ * A run as `GET /orgs/:org/agents/:agentName/runs/:id` reads it, and each
+ * row of `GET /orgs/:org/agents/:agentName/triggers/:name/runs`: the input
+ * it answers, and its thread, null once that thread is gone.
  */
 export const runRecordSchema = z.object({
     id: z.uuid(),
@@ -167,18 +169,18 @@ export const runRecordSchema = z.object({
 });
 export type RunRecord = z.infer<typeof runRecordSchema>;
 
-/** `GET /agents/:agentName/triggers/:name/runs`: a page of the trigger's runs, newest first. */
+/** `GET /orgs/:org/agents/:agentName/triggers/:name/runs`: a page of the trigger's runs, newest first. */
 export const runListSchema = z.object({ runs: z.array(runRecordSchema) });
 export type RunList = z.infer<typeof runListSchema>;
 
-/** `POST /agents/:agentName/runs/:id/cancel`: whether it stopped or ended anything; a run already over is left as it is. */
+/** `POST /orgs/:org/agents/:agentName/runs/:id/cancel`: whether it stopped or ended anything; a run already over is left as it is. */
 export const runCancelSchema = z.object({ cancelled: z.boolean() });
 export type RunCancel = z.infer<typeof runCancelSchema>;
 
 /**
- * `POST /agents/:agentName/runs/:id/answer`: the decision on one call the
- * run waits on. A call id is as long as the model provider made it (some
- * carry a signature), so only the request's body limit bounds it.
+ * `POST /orgs/:org/agents/:agentName/runs/:id/answer`: the decision on one
+ * call the run waits on. A call id is as long as the model provider made it
+ * (some carry a signature), so only the request's body limit bounds it.
  */
 export const runAnswerSchema = z.object({
     toolCallId: z.string().min(1),

package/src/contracts/server/index.ts

@@ -231,7 +231,7 @@ const runEventFields = {
  * A run parked on calls that wait for a decision, as every receiver hears
  * of it: a webhook's body and the agent's server's event are this one
  * object. `runId` names the run a receiver decides through
- * `POST /agents/:agentName/runs/:id/answer`. Every call it waits on is
+ * `POST /orgs/:org/agents/:agentName/runs/:id/answer`. Every call it waits on is
  * named, a client tool's among them; one whose input would carry the event
  * past `SERVER_REQUEST_MAX_BYTES` comes without its input. A run waiting
  * only on its widget's calls is not announced.

package/src/contracts/triggers/index.ts

@@ -4,7 +4,7 @@ import { inputReceiptSchema, runRecordSchema } from "../runs/index";
 
 /*
  * Triggers: named entry points on an agent. A caller fires one over
- * `POST /agents/:agentName/triggers/:name` with the trigger's secret as its
+ * `POST /orgs/:org/agents/:agentName/triggers/:name` with the trigger's secret as its
  * bearer; the fire is an input on the thread the trigger's policy names,
  * and the run that takes it is read and decided under `/runs/:id`. These
  * are the shapes Cortex answers that caller with.
@@ -13,19 +13,24 @@ import { inputReceiptSchema, runRecordSchema } from "../runs/index";
 /** The tool a trigger run with an output schema answers through; no other tool may take its name. */
 export const TRIGGER_ANSWER_TOOL_NAME = "submitAnswer";
 
-/** The engine route of agent `agentName`, which the widget chats with and its triggers and runs sit under. */
-export function agentRoute(agentName: string) {
-    return `/agents/${encodeURIComponent(agentName)}`;
+/** The engine route of org `orgSlug`, which its agents' routes and its sign-ins sit under. */
+export function orgRoute(orgSlug: string) {
+    return `/orgs/${encodeURIComponent(orgSlug)}`;
 }
 
-/** The engine route a trigger is fired at on agent `agentName`; its runs are listed under it. */
-export function triggerRoute(agentName: string, name: string) {
-    return `${agentRoute(agentName)}/triggers/${encodeURIComponent(name)}`;
+/** The engine route of agent `agentName` in org `orgSlug`, which the widget chats with and its triggers and runs sit under. */
+export function agentRoute(orgSlug: string, agentName: string) {
+    return `${orgRoute(orgSlug)}/agents/${encodeURIComponent(agentName)}`;
 }
 
-/** The engine route a run of agent `agentName` is read at, and answered and cancelled under. */
-export function runRoute(agentName: string, runId: string) {
-    return `${agentRoute(agentName)}/runs/${encodeURIComponent(runId)}`;
+/** The engine route a trigger is fired at on agent `agentName` in org `orgSlug`; its runs are listed under it. */
+export function triggerRoute(orgSlug: string, agentName: string, name: string) {
+    return `${agentRoute(orgSlug, agentName)}/triggers/${encodeURIComponent(name)}`;
+}
+
+/** The engine route a run of agent `agentName` in org `orgSlug` is read at, and answered and cancelled under. */
+export function runRoute(orgSlug: string, agentName: string, runId: string) {
+    return `${agentRoute(orgSlug, agentName)}/runs/${encodeURIComponent(runId)}`;
 }
 
 /** What a fire answers once its run started: its input, run and thread; `GET .../runs/:id` reads the run. */
@@ -43,7 +48,7 @@ export const fireRejectedSchema = z.object({
 });
 
 /**
- * What `POST /agents/:agentName/triggers/:name` answers as JSON: the run it
+ * What `POST /orgs/:org/agents/:agentName/triggers/:name` answers as JSON: the run it
  * started (`started`, 202); with `?wait=`, that run once it ended (a
  * `RunRecord`, 200) or parked on a decision (202); the fire's input while it
  * waits on the thread, once refused, or once cancelled before any run took

package/src/contracts/wire/index.ts

@@ -8,6 +8,7 @@
  * alike.
  */
 
+import { isRecord } from "../json/index";
 import type { RunReason, RunStatus } from "../runs/index";
 
 /** The UI locales every localized value is keyed by; the console's message catalogs follow it. */
@@ -215,7 +216,7 @@ export type AccountConnection = {
 };
 
 /**
- * The form `POST /oauth/start` takes, posted into the window a sign-in runs
+ * The form `POST /orgs/:org/oauth/start` takes, posted into the window a sign-in runs
  * in with its bearer in the body, so no link can start one: the console's
  * operator token and the server's id for the shared connection.
  */
@@ -335,6 +336,58 @@ export function approvalTitleOf(input: unknown) {
     return modelLineOf(input, APPROVAL_TITLE_FIELD);
 }
 
+/** One input field an approval tool's schema declares (`ApprovalInput`). */
+export type ApprovalField = {
+    name: string;
+    /** The field may carry a secret: it, anything inside it, or anything containing it is marked `x-sensitive`. */
+    sensitive?: true;
+    /** Cortex fills the field itself and refuses a call that writes it, so no card shows it. */
+    sourced?: true;
+};
+
+/** How the calls of a tool that waits for the user's approval show their input (`ToolCallMetadata.approvalInput`). */
+export type ApprovalInput = {
+    /** The fields its schema declares, in its order. */
+    fields: ApprovalField[];
+    /** Any other key the model writes may carry a secret, as the schemas that would admit it say. */
+    extraSensitive?: true;
+};
+
+/**
+ * Each key of a call's input as its tool's `approval` classes it, with its
+ * value: the declared fields the input holds, in the tool's order, then the
+ * keys the model added, in its. The title, which the card shows apart, is
+ * none of them.
+ */
+export function approvalKeysOf(input: unknown, approval: ApprovalInput | undefined) {
+    if (!isRecord(input) || !approval) return [];
+    const declared = new Set(approval.fields.map(({ name }) => name));
+    const extra = Object.keys(input).filter(
+        (name) => !declared.has(name) && name !== APPROVAL_TITLE_FIELD,
+    );
+    return approval.fields
+        .filter(({ name }) => Object.hasOwn(input, name))
+        .concat(
+            extra.map((name) => ({
+                name,
+                ...(approval.extraSensitive && { sensitive: true as const }),
+            })),
+        )
+        .map((field) => ({ ...field, value: input[field.name] }));
+}
+
+/**
+ * What a call the user decides on will run with: every key it forwards
+ * (`approvalKeysOf`) but the fields Cortex fills. A sensitive one says only
+ * that it is set (`hidden`), never its value.
+ */
+export function approvalEntriesOf(input: unknown, approval: ApprovalInput | undefined) {
+    return approvalKeysOf(input, approval).flatMap(({ name, value, sensitive, sourced }) => {
+        if (sourced) return [];
+        return [sensitive ? { name, hidden: true as const } : { name, value }];
+    });
+}
+
 /**
  * What Cortex stamps on a tool call's `metadata.cortex` from its first chunk,
  * so the live part and the stored one agree.
@@ -355,6 +408,12 @@ export type ToolCallMetadata = {
      * live run asked it.
      */
     paused?: { runId: string; interrupt: RunInterrupt };
+    /**
+     * Set on a call of a tool that waits for the user's approval: how its card shows the
+     * input (`approvalEntriesOf`) while the call waits. Every view of the call leaves a
+     * sensitive key's value out.
+     */
+    approvalInput?: ApprovalInput;
 };
 
 /** An interrupt as a paused run raises it on its end, in AG-UI's shape. */

package/src/scaffold/files.ts

@@ -28,7 +28,7 @@ import { applyPorts, type Ports } from "@/scaffold/ports";
  * `@m6d/cortex` range below are stamped by scripts/sync-package-versions.ts
  * before the CLI publishes, so a scaffold pins what was current then.
  */
-const CORTEX_VERSION = "0.23.2";
+const CORTEX_VERSION = "0.24.1";
 
 /** This machine as Cortex's containers name it: the one private host the stack's egress policy admits. */
 export const DOCKER_HOST = "host.docker.internal";
@@ -147,7 +147,7 @@ function packageJson({ name, datasets, setup }: Project) {
                 verify: "bun run format:check && bun run lint && bun run spellcheck && bun run check && bun run audit",
             },
             dependencies: {
-                "@m6d/cortex": "~0.11.1",
+                "@m6d/cortex": "~0.12.1",
                 // drizzle 1.0 is in beta; this is the build `@m6d/cortex/drizzle` is tested against.
                 ...(datasets ? { "drizzle-orm": "1.0.0-beta.15-859cf75" } : {}),
                 hono: "^4.12.3",
@@ -330,6 +330,9 @@ x-cortex: &cortex
         # address the app reaches it at inside the stack.
         ENGINE_PUBLIC_URL: http://localhost:{{port.engine}}
         ENGINE_INTERNAL_URL: http://engine:3001
+        # The console's public origin: its playground and assistant call the
+        # engine from there, and MCP clients sign in to its /api/mcp.
+        CONSOLE_PUBLIC_URL: http://localhost:{{port.cortex}}
     # Docker Desktop resolves host.docker.internal on its own; Linux needs this.
     extra_hosts:
         - host.docker.internal:host-gateway
@@ -391,21 +394,14 @@ services:
             MC_HOST_local: http://minio:\${S3_SECRET_ACCESS_KEY:?run bun install to generate .env}@minio:9000
         command: ["mb", "--ignore-existing", "local/cortex"]
 
-    # One-shot: migrate the database, then create the first admin and its key.
-    migrator:
+    # One-shot: migrate and set up the database, then create the first admin and its key.
+    bootstrap:
         <<: *cortex
-        command: ["bun", "run", "db:migrate"]
+        command: ["bun", "run", "bootstrap"]
         depends_on:
             postgres:
                 condition: service_healthy
 
-    seeder:
-        <<: *cortex
-        command: ["bun", "run", "db:seed:admin"]
-        depends_on:
-            migrator:
-                condition: service_completed_successfully
-
     # The console and the management API.
     app:
         <<: *cortex
@@ -413,7 +409,7 @@ services:
         ports:
             - "127.0.0.1:{{port.cortex}}:3000"
         depends_on:
-            seeder:
+            bootstrap:
                 condition: service_completed_successfully
             minio-init:
                 condition: service_completed_successfully
@@ -423,7 +419,7 @@ services:
         restart: unless-stopped
         command: ["bun", "src/jobs/worker.ts"]
         depends_on:
-            seeder:
+            bootstrap:
                 condition: service_completed_successfully
             minio-init:
                 condition: service_completed_successfully
@@ -440,12 +436,10 @@ services:
         environment:
             <<: *cortex-environment
             PORT: "3001"
-            # Browser origins allowed to call the engine: the console's, for its playground and assistant.
-            ENGINE_CORS_ORIGINS: http://localhost:{{port.cortex}},http://127.0.0.1:{{port.cortex}}
         ports:
             - "127.0.0.1:{{port.engine}}:3001"
         depends_on:
-            seeder:
+            bootstrap:
                 condition: service_completed_successfully
             redis:
                 condition: service_healthy