@massa-ai/tools-api 1.60.1 → 1.61.0

package/dist/index.js

@@ -979,7 +979,7 @@ function getConfigForEnv() {
   } else {
     console.error(`[getConfigForEnv] embedding.provider "${provider}" has no env-projection branch \u2014 no embedding env vars were set`);
   }
-  env.LOG_LEVEL = config.logging.level;
+  env.MASSA_AI_LOG_LEVEL = config.logging.level;
   env.ENABLE_METRICS = String(config.logging.enableMetrics);
   return env;
 }
@@ -2025,7 +2025,7 @@ var init_config = __esm(() => {
       corsOrigins: envList("MASSA_AI_API_CORS_ORIGINS", fileConfig.security?.corsOrigins ?? [])
     },
     logging: {
-      level: process.env.LOG_LEVEL || fileConfig.logging?.level || "info",
+      level: process.env.MASSA_AI_LOG_LEVEL || fileConfig.logging?.level || "info",
       enableMetrics: process.env.ENABLE_METRICS === "true" || process.env.ENABLE_METRICS === undefined && !!fileConfig.logging?.enableMetrics,
       file: process.env.MASSA_AI_LOG_FILE || fileConfig.logging?.file || path6.join(resolvedDataDir, "logs", "massa-ai.log"),
       enableFileSink: envBool("MASSA_AI_LOG_ENABLE_FILE_SINK", fileConfig.logging?.enableFileSink ?? true),
@@ -7558,6 +7558,32 @@ var init_log_buffer = __esm(() => {
 });
 
 // ../../packages/shared/dist/utils/logger.js
+function formatAgo(ms) {
+  const totalSeconds = Math.floor(ms / 1000);
+  if (totalSeconds < 60)
+    return `${totalSeconds}s`;
+  return `${Math.floor(totalSeconds / 60)}m`;
+}
+function capErrorText(value) {
+  if (value.length <= MAX_ERROR_TEXT_CHARS)
+    return value;
+  const truncatedChars = value.length - MAX_ERROR_TEXT_CHARS;
+  return `${value.slice(0, MAX_ERROR_TEXT_CHARS)}\u2026(truncated ${truncatedChars} chars)`;
+}
+function pickErrorFields(err, includeStack) {
+  const out = { name: err.name, message: capErrorText(err.message) };
+  if (includeStack)
+    out.stack = err.stack;
+  const code = err.code;
+  if (code !== undefined)
+    out.code = code;
+  const cause = err.cause;
+  if (cause !== undefined) {
+    out.cause = capErrorText(cause instanceof Error ? cause.message : String(cause));
+  }
+  return out;
+}
+
 class Logger {
   _level;
   _enableMetrics;
@@ -7566,6 +7592,7 @@ class Logger {
   _maxFileSizeBytes;
   _maxFiles;
   _initialized = false;
+  repeats = new Map;
   constructor() {}
   ensureInitialized() {
     if (!this._initialized) {
@@ -7626,13 +7653,70 @@ class Logger {
   shouldLog(level) {
     return level >= this.level;
   }
+  serializeMetaErrors(meta) {
+    if (!meta)
+      return meta;
+    let out;
+    for (const [key, value] of Object.entries(meta)) {
+      if (value instanceof Error) {
+        if (!out)
+          out = { ...meta };
+        out[key] = pickErrorFields(value, false);
+      }
+    }
+    return out ?? meta;
+  }
+  applyRepeatAccounting(level, message, meta) {
+    if (level !== LogLevel.WARN && level !== LogLevel.ERROR)
+      return meta;
+    const label = typeof meta?.label === "string" ? meta.label : "";
+    const key = `${level}|${message}|${label}`;
+    const now = Date.now();
+    const existing = this.repeats.get(key);
+    if (!existing || now - existing.firstSeenAt > REPEAT_WINDOW_MS) {
+      if (this.repeats.size >= MAX_REPEAT_KEYS)
+        this.repeats.clear();
+      this.repeats.set(key, { firstSeenAt: now, count: 1 });
+      return meta;
+    }
+    existing.count += 1;
+    return {
+      ...meta,
+      occurrences: existing.count,
+      firstSeenAgo: formatAgo(now - existing.firstSeenAt)
+    };
+  }
+  _resetRepeatsForTesting() {
+    this.repeats.clear();
+  }
+  safeStringifyMeta(meta) {
+    const seen = new WeakSet;
+    try {
+      return JSON.stringify(meta, (_key, value) => {
+        if (typeof value === "bigint")
+          return value.toString();
+        if (typeof value === "object" && value !== null) {
+          if (seen.has(value))
+            return "[Circular]";
+          seen.add(value);
+        }
+        return value;
+      });
+    } catch (err) {
+      return JSON.stringify({
+        metaUnserializable: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
   formatMessage(level, message, meta, timestamp = new Date().toISOString()) {
-    const metaStr = meta ? ` ${JSON.stringify(meta)}` : "";
+    const metaStr = meta ? ` ${this.safeStringifyMeta(meta)}` : "";
     return `[${timestamp}] [${level}] ${message}${metaStr}`;
   }
   emit(level, message, meta) {
+    const serializedMeta = this.serializeMetaErrors(meta);
+    const finalMeta = this.applyRepeatAccounting(level, message, serializedMeta);
     const ts = new Date().toISOString();
-    const line = this.formatMessage(LOG_LEVEL_LABELS[level], message, meta, ts);
+    const line = this.formatMessage(LOG_LEVEL_LABELS[level], message, finalMeta, ts);
     console.error(line);
     if (this.enableFileSink) {
       const filePath = this.logFilePath;
@@ -7644,7 +7728,7 @@ class Logger {
       ts,
       level: LOG_LEVEL_BUFFER_TAGS[level],
       message,
-      ...meta ? { meta } : {}
+      ...finalMeta ? { meta: finalMeta } : {}
     });
   }
   debug(message, meta) {
@@ -7666,11 +7750,7 @@ class Logger {
     if (this.shouldLog(LogLevel.ERROR)) {
       const errorMeta = error ? {
         ...meta,
-        error: {
-          name: error.name,
-          message: error.message,
-          stack: error.stack
-        }
+        error: error instanceof Error ? pickErrorFields(error, true) : { message: String(error) }
       } : meta;
       this.emit(LogLevel.ERROR, message, errorMeta);
     }
@@ -7701,7 +7781,7 @@ class Logger {
     return childLogger;
   }
 }
-var LogLevel, LOG_LEVEL_LABELS, LOG_LEVEL_BUFFER_TAGS, logger;
+var LogLevel, LOG_LEVEL_LABELS, LOG_LEVEL_BUFFER_TAGS, REPEAT_WINDOW_MS, MAX_REPEAT_KEYS = 500, MAX_ERROR_TEXT_CHARS = 300, logger;
 var init_logger = __esm(() => {
   init_config();
   init_log_sink();
@@ -7724,6 +7804,7 @@ var init_logger = __esm(() => {
     [LogLevel.WARN]: "warn",
     [LogLevel.ERROR]: "error"
   };
+  REPEAT_WINDOW_MS = 15 * 60 * 1000;
   logger = new Logger;
 });
 
@@ -7779,8 +7860,9 @@ var init_metrics = __esm(() => {
         }
       } catch (error) {
         const err = error instanceof Error ? error : new Error(String(error));
-        logger.warn(`Failed to fetch pricing for ${modelId}`, {
-          error: { name: err.name, message: err.message }
+        logger.warn("MetricsCollector: failed to fetch pricing", {
+          modelId,
+          error: err
         });
       }
       const fallback = FALLBACK_PRICING[modelId];
@@ -7788,7 +7870,7 @@ var init_metrics = __esm(() => {
         logger.debug(`Using fallback pricing for ${modelId}`);
         return fallback;
       }
-      logger.warn(`Unknown model ${modelId}, using gpt-4 pricing as default`);
+      logger.warn("MetricsCollector: unknown model, using gpt-4 pricing as default", { modelId });
       return FALLBACK_PRICING["gpt-4"];
     }
     static calculateCost(inputTokens, outputTokens, model) {
@@ -7967,7 +8049,9 @@ class SmartRateLimiter {
     const hasRequestCapacity = this.requestLimiter.tryConsume(1);
     const hasTokenCapacity = this.tokenLimiter.tryConsume(estimatedTokens);
     if (!hasRequestCapacity) {
-      logger.warn("Request rate limit exceeded");
+      logger.warn("Request rate limit exceeded", {
+        availableTokens: this.requestLimiter.getAvailableTokens()
+      });
       return false;
     }
     if (!hasTokenCapacity) {
@@ -8510,6 +8594,7 @@ function readRoles(liveRoot, activeProfile) {
 }
 function runtimeDriftReport(opts = {}) {
   const targetHome = opts.targetHome ?? os6.homedir();
+  const host = opts.host ?? "claude";
   const stateFilePath = opts.stateFilePath ?? path12.join(targetHome, ".config", "massa-ai", "install-state.json");
   let state = opts.state ?? null;
   if (state === null) {
@@ -8519,9 +8604,24 @@ function runtimeDriftReport(opts = {}) {
       state = null;
     }
   }
-  const platform = state?.platforms?.claude;
+  const platform = state?.platforms?.[host];
   const stateVersion = typeof platform?.plugin?.version === "string" ? platform.plugin.version : null;
   const activeProfile = platform?.modelProfile?.profile ?? null;
+  if (host !== "claude") {
+    return {
+      host,
+      route: "unresolved",
+      liveRoot: null,
+      sourceVersion: null,
+      stateVersion,
+      pinnedVersion: null,
+      activeProfile,
+      roles: [],
+      envOverride: detectEnvOverride(opts.env ?? process.env),
+      versionDrift: false,
+      profileMaterialized: false
+    };
+  }
   const install = resolveClaudeMarketplaceInstall({ targetHome, pluginKey: opts.pluginKey });
   const liveRoot = install?.root ?? null;
   const sourceVersion = liveRoot === null ? null : readPluginVersion(liveRoot);
@@ -8593,7 +8693,7 @@ function listProfiles(opts = {}) {
         installed: false,
         skipped: false,
         skipReason: null,
-        activeProfile: platform2.modelProfile?.profile ?? opts.hostDefaults?.[host] ?? "balanced",
+        activeProfile: platform2.modelProfile?.profile ?? "balanced",
         bundleVersion: platform2.plugin?.version ?? null,
         availableProfiles: [],
         ...claudeDriftFields(host)
@@ -8620,7 +8720,7 @@ function listProfiles(opts = {}) {
       installed,
       skipped: false,
       skipReason: null,
-      activeProfile: platform?.modelProfile?.profile ?? opts.hostDefaults?.[host] ?? "balanced",
+      activeProfile: platform?.modelProfile?.profile ?? "balanced",
       bundleVersion: platform?.plugin?.version ?? null,
       availableProfiles,
       ...claudeDriftFields(host)
@@ -9097,6 +9197,7 @@ var init_dist = __esm(() => {
   init_engine();
   init_variant_sync();
   init_repo_root();
+  init_doctor();
   init_bootstrap();
   init_types();
   init_interfaces();
@@ -15310,7 +15411,7 @@ class ProjectIdentityAliasResolver {
       this.cache.set(projectId, { canonical, expiresAt: this.now() + this.ttlMs });
       return canonical;
     } catch (error) {
-      logger.warn("[project-identity] alias resolution failed; using original id", safeErrorSummary(error));
+      logger.warn("[project-identity] alias resolution failed; using original id", { projectId, ...safeErrorSummary(error) });
       return projectId;
     }
   }
@@ -52855,7 +52956,7 @@ async function _checkJsonSchemaSupport() {
   } catch (e) {
     _jsonSchemaSupported = false;
     logger.warn("json_schema: version check error \u2014 falling back to json_object", {
-      error: e.message
+      error: e
     });
     return false;
   }
@@ -52903,7 +53004,7 @@ function hostPort(url2) {
     return null;
   }
 }
-function resolveInferenceSpec(baseUrl) {
+function resolveMatchedProviderSpec(baseUrl) {
   const target = hostPort(baseUrl);
   if (target) {
     const match2 = inferenceProviderList().find((spec) => hostPort(spec.defaultLlmBaseUrl) === target);
@@ -52921,7 +53022,13 @@ function resolveInferenceSpec(baseUrl) {
   if (embeddingProvider && LOCAL_INFERENCE_IDS.includes(embeddingProvider)) {
     return INFERENCE_PROVIDERS[embeddingProvider];
   }
-  return INFERENCE_PROVIDERS.ollama;
+  return;
+}
+function resolveInferenceSpec(baseUrl) {
+  return resolveMatchedProviderSpec(baseUrl) ?? INFERENCE_PROVIDERS.ollama;
+}
+function resolveProviderIdForLogging(baseUrl) {
+  return resolveMatchedProviderSpec(baseUrl)?.id ?? "unknown";
 }
 function _wrapFetchDisableThink(baseFetch) {
   const wrapped = async (input, init) => {
@@ -53064,12 +53171,40 @@ function _isAbortOrTimeoutError(err) {
   }
   return false;
 }
-async function llmComplete(prompt, opts = {}) {
+function summarizeZodIssues(error51, maxIssues = 5) {
+  return error51.issues.slice(0, maxIssues).map((issue2) => `${issue2.path.join(".") || "(root)"}: ${issue2.message}`).join("; ");
+}
+function recordLlmFailure(label, role, model, baseUrl, timeoutMs, elapsedMs, err) {
+  const consecutiveFailures = (llmFailureStreaks.get(label) ?? 0) + 1;
+  llmFailureStreaks.set(label, consecutiveFailures);
+  logger.warn("LLM call failed \u2014 using non-LLM fallback", {
+    label,
+    role,
+    model,
+    provider: resolveProviderIdForLogging(baseUrl),
+    timeoutMs,
+    elapsedMs,
+    timedOut: _isAbortOrTimeoutError(err),
+    error: err,
+    consecutiveFailures
+  });
+  return consecutiveFailures;
+}
+function recordLlmSuccess(label, model) {
+  const priorFailures = llmFailureStreaks.get(label) ?? 0;
+  if (priorFailures > 0) {
+    logger.info("LLM call recovered", { label, model, afterFailures: priorFailures });
+  }
+  llmFailureStreaks.set(label, 0);
+}
+async function llmComplete(prompt, opts) {
   if (!isLlmEnabled()) {
     return { ok: false, error: "llm disabled" };
   }
   const llm = getLlmConfig({ modelRole: opts.modelRole });
+  const role = opts.modelRole ?? "instruct";
   const timeoutMs = opts.timeoutMs ?? llm.timeoutMs;
+  const startedAt = Date.now();
   try {
     const result = await generateText({
       model: buildProvider(llm),
@@ -53080,14 +53215,17 @@ async function llmComplete(prompt, opts = {}) {
       abortSignal: timeoutSignal(timeoutMs)
     });
     const text2 = result.text ?? "";
-    if (text2.length > 0)
+    if (text2.length > 0) {
+      recordLlmSuccess(opts.label, llm.model);
       return { ok: true, value: text2 };
+    }
     if (llm.disableThink) {
       const reasoning = _reasoningToText(result);
       if (reasoning.length > 0) {
         logger.warn("llmComplete: empty content \u2014 recovered from reasoning channel", {
           reasoningLen: reasoning.length
         });
+        recordLlmSuccess(opts.label, llm.model);
         return { ok: true, value: reasoning };
       }
       logger.warn("llm reasoning-recovery empty", {
@@ -53095,21 +53233,22 @@ async function llmComplete(prompt, opts = {}) {
         finishReason: result?.finishReason ?? null
       });
     }
-    logger.warn("llmComplete: empty content and no reasoning \u2014 degrading", {});
-    return { ok: false, error: "empty content (thinking model)" };
+    const emptyErr = new Error("empty content (thinking model)");
+    recordLlmFailure(opts.label, role, llm.model, llm.baseUrl, timeoutMs, Date.now() - startedAt, emptyErr);
+    return { ok: false, error: emptyErr.message };
   } catch (e) {
-    logger.warn("llmComplete failed \u2014 degrading to non-LLM path", {
-      error: e.message
-    });
+    recordLlmFailure(opts.label, role, llm.model, llm.baseUrl, timeoutMs, Date.now() - startedAt, e);
     return { ok: false, error: e.message };
   }
 }
-async function llmObject(prompt, schema, opts = {}) {
+async function llmObject(prompt, schema, opts) {
   if (!isLlmEnabled()) {
     return { ok: false, error: "llm disabled" };
   }
   const llm = getLlmConfig({ modelRole: opts.modelRole });
+  const role = opts.modelRole ?? "instruct";
   const timeoutMs = opts.timeoutMs ?? llm.timeoutMs;
+  const startedAt = Date.now();
   let result = null;
   try {
     const useJsonSchema = llm.disableThink && await _checkJsonSchemaSupport();
@@ -53124,7 +53263,8 @@ async function llmObject(prompt, schema, opts = {}) {
         maxOutputTokens: llm.maxOutputTokens,
         abortSignal: timeoutSignal(timeoutMs)
       });
-      logger.info("json_schema: constrained decoding used", {});
+      logger.debug("json_schema: constrained decoding used", { label: opts.label, model: llm.model });
+      recordLlmSuccess(opts.label, llm.model);
       return { ok: true, value: result.object };
     }
     result = await generateObject({
@@ -53138,7 +53278,8 @@ async function llmObject(prompt, schema, opts = {}) {
     });
     const validated = schema.safeParse(result.object);
     if (validated.success) {
-      logger.info("json_schema: fallback to json_object \u2014 validated", {});
+      logger.debug("json_schema: fallback to json_object \u2014 validated", { label: opts.label, model: llm.model });
+      recordLlmSuccess(opts.label, llm.model);
       return { ok: true, value: validated.data };
     }
     if (llm.disableThink) {
@@ -53151,15 +53292,17 @@ async function llmObject(prompt, schema, opts = {}) {
             logger.warn("llmObject: recovered object from reasoning channel (fallback path)", {
               reasoningLen: reasoning.length
             });
+            recordLlmSuccess(opts.label, llm.model);
             return { ok: true, value: recovered.data };
           }
         }
       }
     }
-    logger.warn("llmObject: fallback validation failed", {
-      zodError: validated.error.issues.map((i) => i.message).join("; ")
+    const validationErr = new Error("schema validation failed (fallback path)", {
+      cause: summarizeZodIssues(validated.error)
     });
-    return { ok: false, error: "schema validation failed (fallback path)" };
+    recordLlmFailure(opts.label, role, llm.model, llm.baseUrl, timeoutMs, Date.now() - startedAt, validationErr);
+    return { ok: false, error: validationErr.message };
   } catch (e) {
     if (llm.disableThink && !_isAbortOrTimeoutError(e)) {
       const reasoning = _reasoningToText(result).length > 0 ? _reasoningToText(result) : _reasoningToText(e);
@@ -53171,6 +53314,7 @@ async function llmObject(prompt, schema, opts = {}) {
             logger.warn("llmObject: recovered object from reasoning channel", {
               reasoningLen: reasoning.length
             });
+            recordLlmSuccess(opts.label, llm.model);
             return { ok: true, value: validated.data };
           }
         }
@@ -53180,19 +53324,18 @@ async function llmObject(prompt, schema, opts = {}) {
         finishReason: e?.finishReason ?? null
       });
     }
-    logger.warn("llmObject failed \u2014 degrading to non-LLM path", {
-      error: e.message
-    });
+    recordLlmFailure(opts.label, role, llm.model, llm.baseUrl, timeoutMs, Date.now() - startedAt, e);
     return { ok: false, error: e.message };
   }
 }
-var _jsonSchemaSupported = null, testEnabledOverride = null, testBaseUrlOverride = null, llm;
+var _jsonSchemaSupported = null, testEnabledOverride = null, testBaseUrlOverride = null, llmFailureStreaks, llm;
 var init_llm_client = __esm(() => {
   init_dist6();
   init_dist7();
   init_dist();
   init_config();
   init_inference_providers();
+  llmFailureStreaks = new Map;
   llm = {
     complete: llmComplete,
     object: llmObject,
@@ -62205,7 +62348,7 @@ class MetricsCollector2 {
     try {
       writeFileSync(this.metricsPath, JSON.stringify(this.currentMetrics, null, 2));
     } catch (error51) {
-      logger.error("[Metrics] Failed to save:", error51);
+      logger.error("Metrics: failed to save", error51, { path: this.metricsPath });
     }
   }
   reset() {
@@ -62380,7 +62523,8 @@ class EmbeddingRateLimiter {
         }
       }
       if (this.config.requestsPerDay && this.dailyRequestsWindow.length >= this.config.requestsPerDay) {
-        logger.warn(`[${this.providerId}] RPD limit reached, waiting 60s`, {
+        logger.warn("EmbeddingRateLimiter: RPD limit reached, waiting 60s", {
+          providerId: this.providerId,
           rpd: this.config.requestsPerDay,
           current: this.dailyRequestsWindow.length
         });
@@ -95683,16 +95827,16 @@ class LocalTransformersEmbeddingProvider {
       const out = await extractor("test", { pooling: "mean", normalize: true });
       const vec = Array.from(out.data);
       if (!Array.isArray(vec) || vec.length !== this.dimensions) {
-        logger.error(`[${this.id}] Invalid embedding dimensions`, undefined, { expected: this.dimensions, got: vec.length });
+        logger.error("LocalTransformersProvider: invalid embedding dimensions", undefined, { providerId: this.id, expected: this.dimensions, got: vec.length });
         return false;
       }
       if (vec.some((v) => typeof v !== "number" || isNaN(v))) {
-        logger.error(`[${this.id}] Invalid embedding values (not numbers)`);
+        logger.error("LocalTransformersProvider: invalid embedding values (not numbers)", undefined, { providerId: this.id });
         return false;
       }
       return true;
     } catch (error51) {
-      logger.error(`[${this.id}] Local provider unavailable`, error51);
+      logger.error("LocalTransformersProvider: provider unavailable", error51, { providerId: this.id });
       return false;
     }
   }
@@ -95732,7 +95876,13 @@ async function withRetry(fn, config3, context2) {
       lastError2 = error51;
       if (attempt < config3.maxRetries) {
         const delay2 = getRetryDelay(attempt, config3);
-        logger.warn(`[EmbeddingProvider] ${context2} failed (attempt ${attempt + 1}/${config3.maxRetries + 1}), retrying in ${delay2}ms`, { error: lastError2.message });
+        logger.warn("EmbeddingProvider: operation failed, retrying", {
+          context: context2,
+          attempt: attempt + 1,
+          maxAttempts: config3.maxRetries + 1,
+          delayMs: delay2,
+          error: lastError2
+        });
         await sleep(delay2);
       }
     }
@@ -96048,7 +96198,7 @@ var init_provider = __esm(() => {
             return output;
           }, this.retryConfig, `[${this.id}] embedBatchDirect (${texts.length} texts)`), this.timeout, `[${this.id}] embedBatchDirect`);
         } catch (error51) {
-          logger.warn(`[${this.id}] Ollama batch endpoint unavailable, falling back to sequential embeds: ${error51.message}`);
+          logger.warn("EmbeddingProvider: Ollama batch endpoint unavailable, falling back to sequential embeds", { providerId: this.id, textCount: texts.length, error: error51 });
           const embeddings = [];
           let consecutiveFailures = 0;
           for (const text2 of texts) {
@@ -96087,11 +96237,11 @@ var init_provider = __esm(() => {
             });
             clearTimeout(timeoutId);
             if (!response.ok) {
-              logger.error(`[${this.id}] Ollama API returned ${response.status}`);
+              logger.error("EmbeddingProvider: Ollama API returned non-OK status", undefined, { providerId: this.id, status: response.status });
               return false;
             }
           } catch {
-            logger.error(`[${this.id}] Ollama service unreachable`, undefined, { baseURL: this.baseURL, timeoutMs: 2000 });
+            logger.error("EmbeddingProvider: Ollama service unreachable", undefined, { providerId: this.id, baseURL: this.baseURL, timeoutMs: 2000 });
             return false;
           }
         }
@@ -96101,16 +96251,16 @@ var init_provider = __esm(() => {
           if (Array.isArray(embedding)) {
             this.lastDimensionMismatch = new DimensionMismatchError(this.id, this.dimensions, embedding.length);
           }
-          logger.error(`[${this.id}] Invalid embedding dimensions`, undefined, { expected: this.dimensions, got: embedding.length });
+          logger.error("EmbeddingProvider: invalid embedding dimensions", undefined, { providerId: this.id, expected: this.dimensions, got: embedding.length });
           return false;
         }
         if (!embedding.every((v) => typeof v === "number" && !isNaN(v))) {
-          logger.error(`[${this.id}] Invalid embedding values (not numbers)`);
+          logger.error("EmbeddingProvider: invalid embedding values (not numbers)", undefined, { providerId: this.id });
           return false;
         }
         return true;
       } catch (error51) {
-        logger.error(`[${this.id}] Provider unavailable`, error51);
+        logger.error("EmbeddingProvider: provider unavailable", error51, { providerId: this.id });
         return false;
       }
     }
@@ -106967,7 +107117,7 @@ function getPrismaClient2() {
     const pg = _adapters.loadPg();
     const { PrismaPg } = _adapters.loadPrismaPg();
     const pool = new pg.Pool({ connectionString: databaseUrl, max: 10, idleTimeoutMillis: 30000, connectionTimeoutMillis: 5000 });
-    pool.on("error", (error51) => logger.error("Unexpected PG pool error", error51));
+    pool.on("error", (error51) => logger.error("prisma-client: unexpected PG pool error", error51, { poolMax: 10 }));
     prismaPool = pool;
     prismaInstance = new import_prisma.PrismaClient({ adapter: new PrismaPg(pool) });
     logger.info("Prisma Client initialized with PostgreSQL");
@@ -107276,7 +107426,10 @@ var init_config2 = __esm(() => {
     "local"
   ]);
   if (!SELECTABLE_PROVIDERS.has(selectedProvider)) {
-    logger.warn(`[EmbeddingConfig] selected provider "${selectedProvider}" has no runtime entry \u2014 falling back to priority order`, { source: process.env.EMBEDDING_PROVIDER ? "EMBEDDING_PROVIDER env" : "config.json embedding.provider" });
+    logger.warn("EmbeddingConfig: selected provider has no runtime entry, falling back to priority order", {
+      selectedProvider,
+      source: process.env.EMBEDDING_PROVIDER ? "EMBEDDING_PROVIDER env" : "config.json embedding.provider"
+    });
   }
   embeddingProviders = {
     google: (() => {
@@ -107316,7 +107469,12 @@ var init_config2 = __esm(() => {
       const envDimensions = Number.isInteger(rawEnvDimensions) && rawEnvDimensions > 0 ? rawEnvDimensions : undefined;
       const resolvedDimensions = resolveEmbeddingDimensions(model, file3?.dimensions, envDimensions);
       if (resolvedDimensions.correctedFrom !== undefined) {
-        logger.warn(`[ollama] config.json records embedding.dimensions ${resolvedDimensions.correctedFrom} for model ` + `"${model}", which emits ${resolvedDimensions.dimensions}. Using ${resolvedDimensions.dimensions}. ` + "Update embedding.dimensions in config.json (or set OLLAMA_EMBEDDING_DIMENSIONS) to silence this.");
+        logger.warn("EmbeddingConfig: ollama config.json dimensions mismatch corrected", {
+          provider: "ollama",
+          model,
+          configuredDimensions: resolvedDimensions.correctedFrom,
+          correctedDimensions: resolvedDimensions.dimensions
+        });
       }
       return {
         provider: "ollama",
@@ -107468,8 +107626,8 @@ class EmbeddingService {
         dimensions: this.provider.dimensions
       });
     } catch (error51) {
-      logger.error("Failed to initialize embedding service", error51);
-      logger.warn("Embedding service will use fallback mode");
+      logger.error("Failed to initialize embedding service", error51, { stage: "initialize" });
+      logger.warn("Embedding service will use fallback mode", { stage: "initialize" });
     }
   }
   async ensureInitialized() {
@@ -107551,7 +107709,7 @@ async function tryCreateProvider(config3, providerId, skipHealthCheck) {
   return { provider };
 }
 function refuseOnDimensionMismatch(providerId, mismatch) {
-  logger.error(`[${providerId}] Configured embedding provider failed with a dimension mismatch \u2014 refusing to ` + `fall through to another provider (that would silently degrade retrieval quality). ` + `configured dimensions ${mismatch.expected} \u2260 model output ${mismatch.got} \u2014 fix ` + "`embedding.dimensions` in config.json or OLLAMA_EMBEDDING_DIMENSIONS to match the model actually pulled.");
+  logger.error("EmbeddingProvider: configured provider failed with a dimension mismatch, refusing to fall through", mismatch, { providerId, configuredDimensions: mismatch.expected, modelDimensions: mismatch.got });
   throw mismatch;
 }
 async function createEmbeddingProvider(options = {}) {
@@ -107650,6 +107808,7 @@ Write the hypothetical implementation paragraph.`;
 }
 async function rewriteQuery(query, surface, opts = {}) {
   const res = await surface.object(rewritePrompt(query), QueryRewriteSchema, {
+    label: "query-rewrite",
     system: REWRITE_SYSTEM,
     timeoutMs: opts.timeoutMs
   });
@@ -107662,6 +107821,7 @@ async function rewriteQuery(query, surface, opts = {}) {
 }
 async function hyde(query, surface, embedFn, opts = {}) {
   const text2 = await surface.complete(hydePrompt(query), {
+    label: "hyde",
     system: HYDE_SYSTEM,
     timeoutMs: opts.timeoutMs
   });
@@ -107675,7 +107835,7 @@ async function hyde(query, surface, embedFn, opts = {}) {
     return vec;
   } catch (e) {
     logger.warn("hyde embed failed \u2014 skipping HyDE stream", {
-      error: e.message
+      error: e
     });
     return null;
   }
@@ -109403,7 +109563,7 @@ class KeywordSearchPg {
       `);
       this.trigramAvailable = true;
     } catch (error51) {
-      logger.warn("pg_trgm unavailable \u2014 trigram RRF stream disabled on PG", { err: error51.message });
+      logger.warn("pg_trgm unavailable \u2014 trigram RRF stream disabled on PG", { error: error51 });
       this.trigramAvailable = false;
     }
     logger.info("PostgreSQL keyword search initialized", {
@@ -109942,7 +110102,8 @@ var init_postgres_vector_store = __esm(() => {
         this.schemaDimensions = providerDimensions;
         const { rows } = await client.query(`SELECT tablename FROM pg_tables WHERE tablename = $1`, [this.tableName]);
         if (rows.length === 0) {
-          logger.warn(`Table ${this.tableName} not found. Creating fallback table.`, {
+          logger.warn("PostgresVectorStore: table not found, creating fallback table", {
+            tableName: this.tableName,
             note: 'Run "prisma migrate deploy" to create tables via migrations'
           });
           await this.createFallbackTable(client, providerDimensions);
@@ -109979,10 +110140,12 @@ var init_postgres_vector_store = __esm(() => {
           if (projects.length === 0)
             continue;
           const otherDim = tablename.match(/_([0-9]+)d$/)?.[1];
-          logger.warn(`[vector] Orphaned chunks detected: ${tablename} has data for projects not in ${this.tableName}. Embedding model likely changed from ${otherDim}d \u2192 ${currentDim}d. Reindex required.`, {
+          logger.warn("PostgresVectorStore: orphaned chunks detected, embedding model likely changed, reindex required", {
             currentTable: this.tableName,
             currentCount,
+            currentDim,
             orphanedTable: tablename,
+            orphanedDim: otherDim,
             affectedProjects: projects.map((p) => ({ projectId: p.project_id, chunks: p.n }))
           });
         }
@@ -110126,7 +110289,7 @@ var init_postgres_vector_store = __esm(() => {
           logger.warn("[postgres] Sub-batch embedding failed, falling back per-document", {
             subBatchIndex: Math.floor(i / EMBED_SUB_BATCH_SIZE),
             count: subBatch.length,
-            error: error51.message
+            error: error51
           });
         }
         if (embeddings) {
@@ -110138,7 +110301,7 @@ var init_postgres_vector_store = __esm(() => {
             logger.warn("[postgres] Sub-batch insert failed, falling back per-document", {
               subBatchIndex: Math.floor(i / EMBED_SUB_BATCH_SIZE),
               count: subBatch.length,
-              error: error51.message
+              error: error51
             });
           }
         }
@@ -110151,7 +110314,7 @@ var init_postgres_vector_store = __esm(() => {
             totalFailed++;
             logger.warn("[postgres] Skipping document due to embedding/insert error", {
               id: doc2.id,
-              error: singleError.message
+              error: singleError
             });
           }
         }
@@ -110817,7 +110980,9 @@ class SearchAnalyticsPg {
   }
   trackSearch(event) {
     this.trackSearchAsync(event).catch((err) => {
-      logger.error("Failed to track search event", err);
+      logger.error("Failed to track search event", err, {
+        projectId: event.projectId
+      });
     });
   }
   async trackSearchAsync(event) {
@@ -110842,7 +111007,9 @@ class SearchAnalyticsPg {
         event.score || null
       ]);
     } catch (error51) {
-      logger.error("Failed to track search event in PostgreSQL", error51);
+      logger.error("Failed to track search event in PostgreSQL", error51, {
+        projectId: event.projectId
+      });
     }
   }
   async recordQuery(query, projectId, resultsCount = 0, duration3 = 0, cacheHit = false) {
@@ -113443,7 +113610,11 @@ class GraphStorePg {
       `;
       return rows[0] ? rowToEdge(rows[0]) : null;
     } catch (error51) {
-      logger.error("Failed to create edge", error51);
+      logger.error("Failed to create edge", error51, {
+        sourceId: edge.sourceId,
+        targetId: edge.targetId,
+        relationType: edge.relationType
+      });
       return null;
     }
   }
@@ -114039,7 +114210,7 @@ class PgSynapseSessionStore {
       } catch (e) {
         this.hydrateFailedAt = Date.now();
         logger.warn("PgSynapseSessionStore hydrate failed (best-effort)", {
-          error: e.message
+          error: e
         });
       } finally {
         this.hydrating = null;
@@ -114174,7 +114345,7 @@ class PgSynapseSessionStore {
     const next = prev.then(fn).catch((e) => {
       logger.warn("PgSynapseSessionStore write failed (best-effort)", {
         key,
-        error: e.message
+        error: e
       });
     });
     this.inflight.set(key, next);
@@ -114280,7 +114451,7 @@ class SessionRegistry {
     try {
       this.store?.save(session);
     } catch (error51) {
-      logger.warn("[SessionRegistry] store save failed:", { error: error51.message });
+      logger.warn("SessionRegistry: store save failed", { sessionId: session.sessionId, error: error51 });
     }
     return session;
   }
@@ -114288,7 +114459,7 @@ class SessionRegistry {
     try {
       await this.store?.ensureReady();
     } catch (error51) {
-      logger.warn("[SessionRegistry] store ensureReady failed:", { error: error51.message });
+      logger.warn("SessionRegistry: store ensureReady failed", { error: error51 });
     }
   }
   async getAsync(sessionId, now2 = Date.now()) {
@@ -114309,7 +114480,7 @@ class SessionRegistry {
           session = loaded;
         }
       } catch (error51) {
-        logger.warn("[SessionRegistry] store load failed:", { error: error51.message });
+        logger.warn("SessionRegistry: store load failed", { sessionId, error: error51 });
       }
     }
     if (!session)
@@ -114319,7 +114490,7 @@ class SessionRegistry {
       try {
         this.store?.delete(sessionId);
       } catch (error51) {
-        logger.warn("[SessionRegistry] store delete (expired) failed:", { error: error51.message });
+        logger.warn("SessionRegistry: store delete (expired) failed", { sessionId, error: error51 });
       }
       return null;
     }
@@ -114341,7 +114512,7 @@ class SessionRegistry {
     try {
       this.store?.save(session);
     } catch (error51) {
-      logger.warn("[SessionRegistry] store save (updateTaskContext) failed:", { error: error51.message });
+      logger.warn("SessionRegistry: store save (updateTaskContext) failed", { sessionId, error: error51 });
     }
     return session;
   }
@@ -114368,7 +114539,7 @@ class SessionRegistry {
     try {
       this.store?.recordAccess(sessionId, memoryId, nextCount);
     } catch (error51) {
-      logger.warn("[SessionRegistry] store recordAccess failed:", { error: error51.message });
+      logger.warn("SessionRegistry: store recordAccess failed", { sessionId, memoryId, error: error51 });
     }
   }
   delete(sessionId) {
@@ -114376,7 +114547,7 @@ class SessionRegistry {
     try {
       this.store?.delete(sessionId);
     } catch (error51) {
-      logger.warn("[SessionRegistry] store delete failed:", { error: error51.message });
+      logger.warn("SessionRegistry: store delete failed", { sessionId, error: error51 });
     }
     return removed;
   }
@@ -114404,7 +114575,7 @@ function getSessionRegistry() {
       const { getSessionStore: getSessionStore2 } = (init_session_store(), __toCommonJS(exports_session_store));
       store2 = getSessionStore2();
     } catch (error51) {
-      logger.warn("[SessionRegistry] store init failed, falling back to MemorySessionStore:", { error: error51.message });
+      logger.warn("SessionRegistry: store init failed, falling back to MemorySessionStore", { error: error51 });
       const { MemorySessionStore: MemorySessionStore2 } = (init_session_store(), __toCommonJS(exports_session_store));
       store2 = new MemorySessionStore2;
     }
@@ -115221,19 +115392,22 @@ class LLMJudgeReranker {
     const tail = results.slice(k2);
     const prompt = buildPrompt(query, head);
     let verdict;
+    let verdictError;
     try {
-      const res = await this.llm.object(prompt, RerankVerdictSchema, { modelRole: "code" });
+      const res = await this.llm.object(prompt, RerankVerdictSchema, { label: "reranker", modelRole: "code" });
       verdict = res.ok ? res.value ?? null : null;
+      verdictError = res.ok ? undefined : res.error;
     } catch (e) {
       logger.warn("LLMJudgeReranker threw \u2014 degrading to input order", {
         query,
-        error: e.message
+        error: e
       });
       return results;
     }
     if (!verdict) {
       logger.warn("LLMJudgeReranker got {ok:false} \u2014 degrading to input order", {
-        query
+        query,
+        error: verdictError
       });
       return results;
     }
@@ -117079,7 +117253,7 @@ class TaskEnvelopeService {
         errors5.push("prime");
         logger.warn("synapse_task_begin: prime sub-step failed", {
           sessionId,
-          error: err instanceof Error ? err.message : String(err)
+          error: err
         });
       }
     }
@@ -117102,7 +117276,7 @@ class TaskEnvelopeService {
       errors5.push("search");
       logger.warn("synapse_task_begin: search sub-step failed", {
         sessionId,
-        error: err instanceof Error ? err.message : String(err)
+        error: err
       });
     }
     if (firstHitFile) {
@@ -117125,7 +117299,7 @@ class TaskEnvelopeService {
         errors5.push("prefetch");
         logger.warn("synapse_task_begin: prefetch sub-step failed", {
           sessionId,
-          error: err instanceof Error ? err.message : String(err)
+          error: err
         });
       }
     }
@@ -117136,7 +117310,7 @@ class TaskEnvelopeService {
         errors5.push("access");
         logger.warn("synapse_task_begin: access sub-step failed", {
           sessionId,
-          error: err instanceof Error ? err.message : String(err)
+          error: err
         });
       }
     }
@@ -117479,7 +117653,7 @@ async function applySynapseState(deps, baseResults, query, projectId, sessionId,
     logger.warn("Synapse session lookup failed \u2014 using stateless search", {
       sessionId,
       projectId,
-      error: error51.message
+      error: error51
     });
     return baseResults;
   }
@@ -117500,7 +117674,7 @@ async function applySynapseState(deps, baseResults, query, projectId, sessionId,
     logger.warn("Synapse processing failed \u2014 using stateless search", {
       sessionId,
       projectId,
-      error: error51.message
+      error: error51
     });
     return baseResults;
   }
@@ -118260,7 +118434,7 @@ class PgJobStore {
           } catch (e) {
             this.recovered = true;
             logger.warn("PgJobStore markStaleRunningFailed failed (best-effort)", {
-              error: e.message
+              error: e
             });
           }
         }
@@ -118286,7 +118460,7 @@ class PgJobStore {
         logger.info("PgJobStore hydrated", { rows: this.mirror.size });
       } catch (e) {
         logger.warn("PgJobStore hydrate failed (best-effort)", {
-          error: e.message
+          error: e
         });
       } finally {
         this.hydrating = null;
@@ -118309,7 +118483,7 @@ class PgJobStore {
     next.catch((e) => {
       logger.warn("PgJobStore.save failed (best-effort)", {
         jobId: job.jobId,
-        error: e.message
+        error: e
       });
     });
   }
@@ -118441,7 +118615,7 @@ class PgJobStore {
         }
       } catch (e) {
         logger.warn("PgJobStore markStaleRunningFailed failed (best-effort)", {
-          error: e.message
+          error: e
         });
       }
     })();
@@ -118631,7 +118805,13 @@ class IndexJobTracker {
       const stale = hbMs != null && hbMs < cutoff || hbMs == null && startedMs != null && startedMs < cutoff;
       if (!stale)
         continue;
-      logger.warn(`indexJobTracker: reaping stale running job ${job.jobId} (heartbeatAt=${job.heartbeatAt?.toISOString() ?? "n/a"}, startedAt=${job.startedAt?.toISOString() ?? "n/a"}, staleMs=${staleMs})`, { jobId: job.jobId, projectId: job.projectId, staleMs });
+      logger.warn("indexJobTracker: reaping stale running job", {
+        jobId: job.jobId,
+        projectId: job.projectId,
+        staleMs,
+        heartbeatAt: job.heartbeatAt?.toISOString() ?? "n/a",
+        startedAt: job.startedAt?.toISOString() ?? "n/a"
+      });
       this.jobs.set(job.jobId, job);
       const reapedPrevStatus = job.status;
       this.setResult(job.jobId, undefined, "heartbeat stale (possible crash/OOM)");
@@ -118656,7 +118836,7 @@ class IndexJobTracker {
     try {
       this.store?.save(job);
     } catch (err) {
-      logger.warn(`indexJobTracker: job store write failed for ${jobId} on setResult`, { jobId, error: err?.message ?? String(err) });
+      logger.warn("indexJobTracker: job store write failed on setResult", { jobId, error: err });
     }
     if (prevStatus === "pending") {
       this.publishStateChange(job, prevStatus);
@@ -118686,7 +118866,7 @@ class IndexJobTracker {
       const survivors = remaining.slice(0, this.MAX_JOBS);
       const overflow = remaining.slice(this.MAX_JOBS);
       for (const job of overflow) {
-        logger.warn(`indexJobTracker: evicting non-terminal job ${job.jobId} (status=${job.status}) to honor MAX_JOBS cap \u2014 caller may lose visibility`, { jobId: job.jobId, projectId: job.projectId, status: job.status });
+        logger.warn("indexJobTracker: evicting non-terminal job to honor MAX_JOBS cap \u2014 caller may lose visibility", { jobId: job.jobId, projectId: job.projectId, status: job.status });
         this.jobs.delete(job.jobId);
       }
     }
@@ -118840,8 +119020,9 @@ class DiscoverStage {
       };
     } catch (err) {
       logger.warn("DiscoverStage: failed to stat/read file", {
+        projectId: ctx.projectId,
         relativePath,
-        error: err.message
+        error: err
       });
       throw new Error(`required_file_unreadable:${relativePath}:${err.message}`);
     }
@@ -121366,8 +121547,9 @@ class ParseStage {
         timestamp: Date.now()
       });
       logger.warn("ParseStage: failed to parse file", {
+        projectId: ctx.projectId,
         filePath: file3.relativePath,
-        error: err.message
+        error: err
       });
       if (err instanceof StructuralEtlParseError)
         throw err;
@@ -122603,7 +122785,7 @@ class ResolveStage {
         throw new Error("structural_repository_seed_failed", { cause: err });
       logger.warn("buildSymbolIndex: repo seed failed, in-batch only", {
         projectId,
-        error: err?.message
+        error: err
       });
     }
     const inBatch = new Map;
@@ -122766,7 +122948,7 @@ async function withDeadlockRetry(operation, options = {}) {
         attempt,
         maxAttempts,
         delayMs,
-        error: error51?.message?.slice(0, 120)
+        error: error51
       });
       await new Promise((resolve5) => setTimeout(resolve5, delayMs));
     }
@@ -123896,7 +124078,7 @@ var init_pipeline = __esm(() => {
           logger.warn("EtlPipeline: search-admission marker write failed", {
             projectId,
             jobId,
-            error: markerError.message.slice(0, 160)
+            error: markerError
           });
         }
         if (forceReindex) {
@@ -123908,7 +124090,7 @@ var init_pipeline = __esm(() => {
               logger.warn("EtlPipeline: embedding fingerprint stamp failed", {
                 projectId,
                 jobId,
-                error: stampError.message.slice(0, 160)
+                error: stampError
               });
             }
           }
@@ -125140,9 +125322,9 @@ class SymbolGraphService {
       return null;
     const workspace = graphSnapshot.workspace;
     const arch = await this.computeArchitectureMapSafe(graphSnapshot.architecture).catch((err) => {
-      logger.warn("getProjectMap: architecture map failed; skipping", {
+      logger.warn("SymbolGraphService: getProjectMap architecture map failed, skipping", {
         projectId,
-        error: err?.message?.slice(0, 160)
+        error: err
       });
       return null;
     });
@@ -125684,7 +125866,7 @@ class RelationExtractor {
     } catch (error51) {
       logger.warn("RelationExtractor: extraction failed", {
         memoryId,
-        error: error51.message
+        error: error51
       });
     }
     return edgesCreated;
@@ -126131,7 +126313,7 @@ class MemoryGraphService {
     } catch (error51) {
       logger.warn("Graph update failed after memory store", {
         memoryId,
-        error: error51.message
+        error: error51
       });
     }
   }
@@ -126147,7 +126329,7 @@ class MemoryGraphService {
     } catch (error51) {
       logger.warn("Graph cleanup failed after memory delete", {
         memoryId,
-        error: error51.message
+        error: error51
       });
     }
   }
@@ -126296,7 +126478,7 @@ async function consolidateWindow(candidates2, llm2, opts = {}) {
   if (!llm2.isEnabled())
     return null;
   const prompt = buildPrompt2(window2);
-  const result = await llm2.object(prompt, ConsolidatedBatchSchema);
+  const result = await llm2.object(prompt, ConsolidatedBatchSchema, { label: "memory-consolidation" });
   if (!result.ok || !result.value)
     return null;
   const batch = {
@@ -126397,7 +126579,7 @@ class MemoryConsolidationJob {
     } catch (error51) {
       logger.warn("Memory consolidation skipped", {
         trigger,
-        error: error51.message
+        error: error51
       });
     } finally {
       this.running = false;
@@ -126420,7 +126602,7 @@ class MemoryConsolidationJob {
       candidates2 = await Promise.resolve(repo.listConsolidationCandidates(staleSinceMs, 500));
     } catch (e) {
       logger.warn("consolidation: candidate list failed (decay)", {
-        error: e.message
+        error: e
       });
       return 0;
     }
@@ -126442,7 +126624,7 @@ class MemoryConsolidationJob {
       } catch (e) {
         logger.warn("consolidation: decay write failed", {
           id: row.id,
-          error: e.message
+          error: e
         });
       }
     }
@@ -126471,14 +126653,14 @@ class MemoryConsolidationJob {
           } catch (e) {
             logger.warn("consolidation: soft-delete failed", {
               id: row.id,
-              error: e.message
+              error: e
             });
           }
         }
       }
     } catch (e) {
       logger.warn("consolidation: prune scan failed", {
-        error: e.message
+        error: e
       });
     }
     return pruned;
@@ -126489,7 +126671,7 @@ class MemoryConsolidationJob {
       candidates2 = await Promise.resolve(repo.listConsolidationCandidates(staleSinceMs, 200));
     } catch (e) {
       logger.warn("consolidation: candidate list failed (merge)", {
-        error: e.message
+        error: e
       });
       return { merged: 0, batchesCreated: 0 };
     }
@@ -126515,7 +126697,7 @@ class MemoryConsolidationJob {
     } catch (e) {
       logger.warn("consolidation: merge insert failed", {
         batchId: batch.id,
-        error: e.message
+        error: e
       });
       return { merged: 0, batchesCreated: 0 };
     }
@@ -126528,7 +126710,7 @@ class MemoryConsolidationJob {
         logger.warn("consolidation: addSupercedesEdge failed", {
           newId,
           sourceId,
-          error: e.message
+          error: e
         });
       }
     }
@@ -126568,7 +126750,7 @@ class MemoryConsolidationJob {
       return result;
     } catch (e) {
       logger.warn("consolidation: promote (PG) failed", {
-        error: e.message
+        error: e
       });
       return 0;
     }
@@ -126607,19 +126789,22 @@ class SalienceJudge {
     }
     const prompt = buildPrompt3(trimmed, type);
     let verdict;
+    let verdictError;
     try {
-      const res = await this.llm.object(prompt, SalienceSchema);
+      const res = await this.llm.object(prompt, SalienceSchema, { label: "salience-judge" });
       verdict = res.ok ? res.value ?? null : null;
+      verdictError = res.ok ? undefined : res.error;
     } catch (e) {
       logger.warn("SalienceJudge threw \u2014 degrading to neutral default", {
         type,
-        error: e.message
+        error: e
       });
       return { salience: NEUTRAL_SALIENCE, source: "default" };
     }
     if (!verdict) {
       logger.warn("SalienceJudge got {ok:false} \u2014 degrading to neutral default", {
-        type
+        type,
+        error: verdictError
       });
       return { salience: NEUTRAL_SALIENCE, source: "default" };
     }
@@ -126834,7 +127019,8 @@ class MemoryController {
         }
       } catch (err) {
         logger.warn("Graph enrichment failed", {
-          error: err.message
+          projectId,
+          error: err
         });
       }
     }
@@ -127036,7 +127222,7 @@ class CodeCompressor {
             }
             const prompt = buildLlmCompressPrompt(content, language3, targetRatio, preservedElements);
             try {
-              const res = await this.llmCompleteFn(prompt, { timeoutMs, modelRole: "code" });
+              const res = await this.llmCompleteFn(prompt, { label: "code-compressor", timeoutMs, modelRole: "code" });
               if (res.ok && typeof res.value === "string" && res.value.trim().length > 0 && res.value.length <= content.length) {
                 compressed = res.value;
                 compressionSource = "llm";
@@ -127076,7 +127262,10 @@ class CodeCompressor {
       });
       return compressedContent;
     } catch (error51) {
-      logger.error("Code compression failed", error51);
+      logger.error("Code compression failed", error51, {
+        strategy: useStrategy,
+        originalLength: content.length
+      });
       return CompressedContent.identity(content);
     }
   }
@@ -127386,9 +127575,9 @@ class TokenMetrics {
       }
       throw new Error("Model not found in models.dev");
     } catch (error51) {
-      logger.warn("Failed to fetch pricing from models.dev, using fallback", {
+      logger.warn("TokenMetrics: failed to fetch pricing from models.dev, using fallback", {
         modelId,
-        error: error51 instanceof Error ? error51.message : String(error51)
+        error: error51
       });
       const fallback = FALLBACK_PRICING2[modelId] || FALLBACK_PRICING2["gpt-4"];
       this.pricingCache.set(modelId, {
@@ -127726,7 +127915,7 @@ class ContextController {
           });
         }
       } catch (err) {
-        logger.warn("Graph prefilter failed", { query, error: err.message });
+        logger.warn("ContextController: graph prefilter failed", { projectId, query, error: err });
       }
     }
     const [searchResult, memories] = await Promise.all([
@@ -127880,9 +128069,11 @@ class ContextController {
       });
       return result.memories;
     } catch (error51) {
-      logger.warn("Memory search failed, continuing without memories", {
-        error: error51.message,
-        query: query.slice(0, 30)
+      logger.warn("ContextController: memory search failed, continuing without memories", {
+        projectId: opts.projectId,
+        sessionId: opts.sessionId,
+        query: query.slice(0, 30),
+        error: error51
       });
       return [];
     }
@@ -128063,7 +128254,7 @@ class PgCheckpointStore {
       } catch (e) {
         this.hydrateFailedAt = Date.now();
         logger.warn("PgCheckpointStore hydrate failed (best-effort)", {
-          error: e.message
+          error: e
         });
       } finally {
         this.hydrating = null;
@@ -128257,8 +128448,9 @@ class PgCheckpointStore {
       }
       return existing;
     } catch (e) {
-      logger.warn("countExistingMemoryIds failed (best-effort: assuming all exist)", {
-        error: e.message
+      logger.warn("PgCheckpointStore: countExistingMemoryIds failed (best-effort, assuming all exist)", {
+        memoryIdCount: memoryIds.length,
+        error: e
       });
       return memoryIds;
     }
@@ -128325,7 +128517,7 @@ class PgCheckpointStore {
     const next = prev.then(fn).catch((e) => {
       logger.warn("PgCheckpointStore write failed (best-effort)", {
         key,
-        error: e.message
+        error: e
       });
     });
     this.inflight.set(key, next);
@@ -128464,7 +128656,7 @@ class PgObservationStore {
       } catch (e) {
         this.hydrateFailedAt = Date.now();
         logger.warn("PgObservationStore hydrate failed (best-effort)", {
-          error: e.message
+          error: e
         });
       } finally {
         this.hydrating = null;
@@ -128515,7 +128707,7 @@ class PgObservationStore {
     const next = prev.then(fn).catch((e) => {
       logger.warn("PgObservationStore.insert failed (best-effort)", {
         id: key,
-        error: e.message
+        error: e
       });
     });
     this.inflight.set(key, next);
@@ -129995,7 +130187,7 @@ function warnSandboxUnavailable() {
     return;
   _warnedAboutNoSandbox = true;
   const missingTool = process.platform === "darwin" ? "sandbox-exec" : "docker";
-  logger.warn(`sandbox: MASSA_AI_EXECUTOR_SANDBOX=auto found no '${missingTool}' on this platform, ` + `so code is executing with best-effort containment and no OS-level isolation. ` + `Install '${missingTool}', or set MASSA_AI_EXECUTOR_SANDBOX=on to fail loudly instead of falling back.`, { missingTool, platform: process.platform, effectiveMode: "none" });
+  logger.warn("Sandbox: no sandbox tool found for auto mode, falling back to best-effort containment", { missingTool, platform: process.platform, effectiveMode: "none" });
 }
 function getSandboxMode() {
   const env6 = process.env.MASSA_AI_EXECUTOR_SANDBOX ?? "auto";
@@ -130910,7 +131102,10 @@ class ExecutorController {
         }
       };
     } catch (error51) {
-      logger.error("batch_execute failed", error51);
+      logger.error("batch_execute failed", error51, {
+        commandCount: commands.length,
+        concurrency: effectiveConcurrency
+      });
       return {
         success: false,
         error: `batch_execute failed: ${error51.message}`
@@ -132852,7 +133047,7 @@ class PgScheduledJobStore {
         logger.info("PgScheduledJobStore hydrated", { rows: this.mirror.size });
       } catch (e) {
         logger.warn("PgScheduledJobStore hydrate failed (best-effort)", {
-          error: e.message
+          error: e
         });
       } finally {
         this.hydrating = null;
@@ -132866,9 +133061,10 @@ class PgScheduledJobStore {
       try {
         await action();
       } catch (e) {
-        logger.warn(`PgScheduledJobStore.${operation} failed (best-effort)`, {
+        logger.warn("PgScheduledJobStore mutation failed (best-effort)", {
           id,
-          error: e.message
+          operation,
+          error: e
         });
       }
     };
@@ -133121,7 +133317,7 @@ class Scheduler {
     this.timer = setInterval(() => {
       this.tick().catch((e) => {
         logger.warn("Scheduler tick failed (swallowed)", {
-          error: e.message
+          error: e
         });
       });
     }, this.tickIntervalMs);
@@ -133236,7 +133432,7 @@ class Scheduler {
         logger.warn("Scheduler: job handler threw (caught)", {
           id: job.id,
           jobKind: job.jobKind,
-          error: errMsg
+          error: e
         });
       } finally {
         if (succeeded) {
@@ -133255,7 +133451,7 @@ class Scheduler {
         } catch (e) {
           logger.warn("Scheduler: persist after fire failed", {
             id: job.id,
-            error: e.message
+            error: e
           });
         }
         this.running.delete(job.jobKind);
@@ -133275,6 +133471,8 @@ class Scheduler {
         enabled: j.enabled,
         nextRunAt: j.nextRunAt,
         lastRunAt: j.lastRunAt,
+        lastSuccessAt: j.lastSuccessAt ?? null,
+        consecutiveFailures: j.consecutiveFailures ?? 0,
         due: j.enabled && j.nextRunAt <= now2,
         currentlyRunning: this.running.has(j.jobKind)
       }))
@@ -133857,7 +134055,7 @@ async function enrichWithLlm(candidates2, observations, surface) {
   const prompt = buildEnrichmentPrompt(candidates2, observations);
   let enrichment = null;
   try {
-    const res = await surface.object(prompt, ProposalEnrichmentSchema);
+    const res = await surface.object(prompt, ProposalEnrichmentSchema, { label: "auto-improve" });
     if (!res.ok || !res.value || !Array.isArray(res.value.items)) {
       return { candidates: candidates2, used: false };
     }
@@ -134053,7 +134251,7 @@ async function runOnce(job, projectId) {
   try {
     observations = job.observationStore.listRecent(projectId, job.maxWindow);
   } catch (e) {
-    logger.warn("auto-improve: listRecent failed", { projectId, error: e.message });
+    logger.warn("auto-improve: listRecent failed", { projectId, error: e });
     return noop2;
   }
   if (observations.length < 2)
@@ -134068,7 +134266,7 @@ async function runOnce(job, projectId) {
     if (res.used)
       source = "llm";
   } catch (e) {
-    logger.warn("auto-improve: enrichWithLlm threw (silent)", { projectId, error: e.message });
+    logger.warn("auto-improve: enrichWithLlm threw (silent)", { projectId, error: e });
   }
   const seen = new Set;
   const unique = candidates2.filter((c) => {
@@ -134116,7 +134314,7 @@ async function runOnce(job, projectId) {
       } catch (e) {
         if (e instanceof SearchServiceError)
           throw e;
-        logger.warn("proposal:auto-approved:threw", { id: r2.id, projectId, error: e.message });
+        logger.warn("proposal:auto-approved:threw", { id: r2.id, projectId, error: e });
       }
     }
     result.proposalsApplied = applied;
@@ -134145,7 +134343,7 @@ async function approve(job, id, projectId, source = "rule-based") {
     appliedMemoryId = await applyProposal(job, row);
   } catch (e) {
     const reason = e instanceof ApplyRejection ? e.reason : "apply-failed";
-    logger.warn("proposal:apply-failed", { id, projectId: row.projectId, reason, error: e.message });
+    logger.warn("proposal:apply-failed", { id, projectId: row.projectId, reason, error: e });
     return { ok: false, reason };
   }
   let updated;
@@ -134280,9 +134478,9 @@ class AutoImproveJob {
         return;
       this.newSinceRun = 0;
       this.lastRunAt = now2;
-      this.runOnce(projectId).catch((e) => logger.warn("auto-improve: runOnce failed (silent)", { projectId, error: e.message }));
+      this.runOnce(projectId).catch((e) => logger.warn("auto-improve: runOnce failed (silent)", { projectId, error: e }));
     } catch (e) {
-      logger.warn("auto-improve: maybeRun swallowed", { projectId, error: e.message });
+      logger.warn("auto-improve: maybeRun swallowed", { projectId, error: e });
     }
   }
   async runOnce(projectId) {
@@ -134382,13 +134580,13 @@ class ObservationConsolidationJob {
       this.runOnce(projectId).catch((e) => {
         logger.warn("observation consolidation: runOnce failed (silent)", {
           projectId,
-          error: e.message
+          error: e
         });
       });
     } catch (e) {
       logger.warn("observation consolidation: maybeRun swallowed", {
         projectId,
-        error: e.message
+        error: e
       });
     }
   }
@@ -134412,7 +134610,7 @@ class ObservationConsolidationJob {
     } catch (e) {
       logger.warn("observation consolidation: listRecent failed", {
         projectId,
-        error: e.message
+        error: e
       });
       return noop2;
     }
@@ -134423,7 +134621,7 @@ class ObservationConsolidationJob {
     const prompt = buildObservationPrompt(window2);
     let batch;
     try {
-      const res = await this.llm.object(prompt, ConsolidatedBatchSchema);
+      const res = await this.llm.object(prompt, ConsolidatedBatchSchema, { label: "observation-consolidation" });
       if (!res.ok || !res.value) {
         return noop2;
       }
@@ -134439,7 +134637,7 @@ class ObservationConsolidationJob {
     } catch (e) {
       logger.warn("observation consolidation: llm.object threw (silent)", {
         projectId,
-        error: e.message
+        error: e
       });
       return noop2;
     }
@@ -134468,7 +134666,7 @@ class ObservationConsolidationJob {
     } catch (e) {
       logger.warn("observation consolidation: summary insert failed", {
         batchId: batch.id,
-        error: e.message
+        error: e
       });
       return noop2;
     }
@@ -134745,8 +134943,9 @@ var init_models_dev_client = __esm(() => {
           path: cachePath
         });
       } catch (error51) {
-        logger.warn("Failed to save local pricing cache", {
-          error: error51.message
+        logger.warn("ModelsDevClient: failed to save local pricing cache", {
+          path: cachePath,
+          error: error51
         });
       }
     }
@@ -134968,7 +135167,7 @@ var init_models_dev_client = __esm(() => {
           return value;
         }
       }
-      logger.warn(`Model pricing not found: ${modelId}`);
+      logger.warn("ModelsDevClient: model pricing not found", { modelId });
       return null;
     }
     async searchModels(query) {
@@ -135072,8 +135271,9 @@ var init_models_dev_client = __esm(() => {
           logger.debug("Local pricing cache file deleted");
         }
       } catch (error51) {
-        logger.warn("Failed to delete local pricing cache", {
-          error: error51.message
+        logger.warn("ModelsDevClient: failed to delete local pricing cache", {
+          path: cachePath,
+          error: error51
         });
       }
     }
@@ -135729,9 +135929,10 @@ class SearchSessionHook {
       });
     } catch (err) {
       logger.warn("SearchSessionHook: store failed (best-effort)", {
-        error: err.message,
         projectId,
-        query: query.slice(0, 60)
+        sessionId,
+        query: query.slice(0, 60),
+        error: err
       });
     }
   }
@@ -135807,8 +136008,10 @@ class CoRetrievalHook {
       peers = await this.findPeers(memoryId, projectId, sessionId);
     } catch (err) {
       logger.warn("CoRetrievalHook: peer lookup failed", {
-        error: err.message,
-        memoryId
+        projectId,
+        sessionId,
+        memoryId,
+        error: err
       });
       return;
     }
@@ -152854,6 +153057,7 @@ async function fetchAndConvertOne(url2, deps, opts = {}) {
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       logger.error("fetch_and_index indexChunk failed", err, {
+        projectId,
         url: url2,
         chunkId: chunk.id
       });
@@ -153044,6 +153248,7 @@ class WebController {
         return s.value;
       const msg = s.reason instanceof Error ? s.reason.message : String(s.reason);
       logger.error("fetch_and_index job rejected", s.reason, {
+        projectId,
         url: batch[i].url
       });
       return { kind: "error", url: batch[i].url, error: msg };
@@ -177750,7 +177955,7 @@ class ListCheckpointsTool {
       };
       return serializeToolResponse(responseData, { format, fields });
     } catch (error51) {
-      logger.error("Failed to list checkpoints", error51);
+      logger.error("Failed to list checkpoints", error51, { taskId, projectId });
       return {
         success: false,
         error: `Failed to list checkpoints: ${error51.message}`
@@ -178053,7 +178258,8 @@ class CompactSnapshotTool {
           });
         } catch (e) {
           logger.warn("compact_snapshot: persist failed (non-fatal)", {
-            error: e.message
+            sessionId,
+            error: e
           });
           persistedId = undefined;
         }
@@ -178778,7 +178984,7 @@ class ProjectRootCache {
         return workspace.project_path;
       }
     } catch (error51) {
-      logger.warn("Failed to look up project root", { projectId, error: error51.message });
+      logger.warn("ProjectRootCache: failed to look up project root", { projectId, error: error51 });
     }
     return null;
   }
@@ -179285,7 +179491,7 @@ class OperationLogRepositoryPg {
         op: input.op,
         projectId,
         result: input.result,
-        error: err.message
+        error: err
       });
     }
   }
@@ -179500,9 +179706,11 @@ class HookService {
         });
         this.bridge.maybeRun(obs.projectId);
       } catch (e) {
-        logger.warn("observation persist failed", {
+        logger.warn("HookService: observation persist failed", {
           id: obs.id,
-          error: e.message
+          projectId: obs.projectId,
+          sessionId: obs.sessionId,
+          error: e
         });
       }
     });
@@ -179650,7 +179858,7 @@ class BootstrapService {
       } catch (e) {
         logger.warn("bootstrap: marker check threw (continuing)", {
           projectId,
-          error: e.message
+          error: e
         });
       }
     } else if (!cfg.refreshEnabled) {
@@ -179698,7 +179906,7 @@ class BootstrapService {
     } catch (e) {
       logger.warn("bootstrap: storeSeeds failed (silent)", {
         projectId,
-        error: e.message
+        error: e
       });
       return { ...noopResult("insert-failed"), signalCount, source };
     }
@@ -179851,7 +180059,7 @@ async function summarizeWithLlm(signals, surface, maxSeedMemories) {
     return { ok: false, reason: "llm disabled" };
   const prompt = buildSummarizePrompt(signals, maxSeedMemories);
   try {
-    const res = await surface.object(prompt, SeedMemoriesSchema, { modelRole: "code" });
+    const res = await surface.object(prompt, SeedMemoriesSchema, { label: "bootstrap-seed", modelRole: "code" });
     if (!res.ok || !res.value) {
       return { ok: false, reason: res.error || "llm returned no value" };
     }
@@ -180454,7 +180662,7 @@ function formatMemoryContent(record2) {
 }
 async function polishSummary(surface, input) {
   const prompt = buildPolishPrompt(input);
-  const res = await surface.object(prompt, HandoffSummarySchema);
+  const res = await surface.object(prompt, HandoffSummarySchema, { label: "handoff-summary" });
   if (!res.ok || !res.value || !res.value.summary)
     return null;
   return res.value.summary;
@@ -180664,7 +180872,10 @@ var memoryRoutes = new Elysia({ prefix: "/api/v1/memory" }).post("/store", async
   try {
     return await getStoreMemoryTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to initialize StoreMemoryTool", error51);
+    logger.error("Failed to initialize StoreMemoryTool", error51, {
+      projectId: body.projectId,
+      sessionId: body.sessionId
+    });
     return {
       success: false,
       error: `Memory service unavailable: ${error51.message}`
@@ -180701,7 +180912,10 @@ var memoryRoutes = new Elysia({ prefix: "/api/v1/memory" }).post("/store", async
   try {
     return await getSearchMemoriesTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to initialize SearchMemoriesTool", error51);
+    logger.error("Failed to initialize SearchMemoriesTool", error51, {
+      projectId: body.projectId,
+      sessionId: body.sessionId
+    });
     return {
       success: false,
       error: `Memory service unavailable: ${error51.message}`
@@ -180736,7 +180950,9 @@ var memoryRoutes = new Elysia({ prefix: "/api/v1/memory" }).post("/store", async
   try {
     return await getUpdateMemoryTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to initialize UpdateMemoryTool", error51);
+    logger.error("Failed to initialize UpdateMemoryTool", error51, {
+      id: body.id
+    });
     return {
       success: false,
       error: `Memory service unavailable: ${error51.message}`
@@ -180762,7 +180978,9 @@ var memoryRoutes = new Elysia({ prefix: "/api/v1/memory" }).post("/store", async
   try {
     return await getDeleteMemoryTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to initialize DeleteMemoryTool", error51);
+    logger.error("Failed to initialize DeleteMemoryTool", error51, {
+      id: body.id
+    });
     return {
       success: false,
       error: `Memory service unavailable: ${error51.message}`
@@ -180803,7 +181021,10 @@ var memoryRoutes = new Elysia({ prefix: "/api/v1/memory" }).post("/store", async
       data: { memories: rows.map(formatRow), total, limit, offset }
     };
   } catch (error51) {
-    logger.error("Failed to list memories", error51);
+    logger.error("Failed to list memories", error51, {
+      projectId: body.projectId,
+      sessionId: body.sessionId
+    });
     return {
       success: false,
       error: `Failed to list memories: ${error51.message}`
@@ -180873,7 +181094,10 @@ var checkpointRoutes = new Elysia({ prefix: "/api/v1/checkpoints" }).post("/list
   try {
     return await getListCheckpointsTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to list checkpoints", error51);
+    logger.error("Failed to list checkpoints", error51, {
+      taskId: body.taskId,
+      projectId: body.projectId
+    });
     return {
       success: false,
       error: `Checkpoint service unavailable: ${error51.message}`
@@ -180897,7 +181121,10 @@ var checkpointRoutes = new Elysia({ prefix: "/api/v1/checkpoints" }).post("/list
   try {
     return await getCreateCheckpointTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to create checkpoint", error51);
+    logger.error("Failed to create checkpoint", error51, {
+      taskId: body.taskId,
+      projectId: body.projectId
+    });
     return {
       success: false,
       error: `Checkpoint service unavailable: ${error51.message}`
@@ -180938,7 +181165,10 @@ var checkpointRoutes = new Elysia({ prefix: "/api/v1/checkpoints" }).post("/list
   try {
     return await getRestoreCheckpointTool().handle(body);
   } catch (error51) {
-    logger.error("Failed to restore checkpoint", error51);
+    logger.error("Failed to restore checkpoint", error51, {
+      checkpointId: body.checkpointId,
+      taskId: body.taskId
+    });
     return {
       success: false,
       error: `Checkpoint service unavailable: ${error51.message}`
@@ -180958,8 +181188,10 @@ var checkpointRoutes = new Elysia({ prefix: "/api/v1/checkpoints" }).post("/list
     description: "Restore a saved checkpoint and return its state plus integrity checks."
   }
 }).post("/delete", ({ body, set: set3 }) => {
+  let checkpointId;
   try {
     const { id } = body;
+    checkpointId = id;
     const existed = getCheckpointManager().deleteCheckpoint(id);
     if (!existed) {
       set3.status = 404;
@@ -180968,7 +181200,7 @@ var checkpointRoutes = new Elysia({ prefix: "/api/v1/checkpoints" }).post("/list
     set3.status = 200;
     return { success: true, data: { ok: true } };
   } catch (error51) {
-    logger.error("Failed to delete checkpoint", error51);
+    logger.error("Failed to delete checkpoint", error51, { checkpointId });
     set3.status = 500;
     return {
       success: false,
@@ -182566,7 +182798,10 @@ var hookRoutes = new Elysia({ prefix: "/api/v1/hook" }).post("/", async ({ body,
       return { status: e.code, error: e.message };
     }
     const err = e;
-    logger.error("hook ingestion failed", err);
+    logger.error("hook ingestion failed", err, {
+      projectId: body.projectId,
+      event: body.event
+    });
     set3.status = 500;
     return { status: 500, error: `hook service unavailable: ${err.message}` };
   }
@@ -182605,7 +182840,9 @@ var hookRoutes = new Elysia({ prefix: "/api/v1/hook" }).post("/", async ({ body,
       return { status: e.code, error: e.message };
     }
     const err = e;
-    logger.error("hook batch ingestion failed", err);
+    logger.error("hook batch ingestion failed", err, {
+      count: (body.events ?? []).length
+    });
     set3.status = 500;
     return { status: 500, error: `hook service unavailable: ${err.message}` };
   }
@@ -182684,7 +182921,7 @@ var bootstrapRoutes = new Elysia({ prefix: "/api/v1/bootstrap" }).post("/", asyn
     return { success: true, data: result };
   } catch (e) {
     const err = e;
-    logger.error("bootstrap failed", err);
+    logger.error("bootstrap failed", err, { projectId, projectPath: projectPath2 });
     set3.status = 500;
     return { success: false, error: `bootstrap failed: ${err.message}` };
   }
@@ -182758,7 +182995,7 @@ var handoffRoutes = new Elysia({ prefix: "/api/v1/handoff" }).post("/begin", asy
   } catch (e) {
     rethrowCanonicalHandoffError(e);
     const err = e;
-    logger.error("handoff begin failed", err);
+    logger.error("handoff begin failed", err, { projectId: b.projectId });
     set3.status = 500;
     return { success: false, error: `handoff begin failed: ${err.message}` };
   }
@@ -182794,7 +183031,7 @@ var handoffRoutes = new Elysia({ prefix: "/api/v1/handoff" }).post("/begin", asy
   } catch (e) {
     rethrowCanonicalHandoffError(e);
     const err = e;
-    logger.error("handoff accept failed", err);
+    logger.error("handoff accept failed", err, { id: b.id, projectId: b.projectId });
     set3.status = 500;
     return { success: false, error: `handoff accept failed: ${err.message}` };
   }
@@ -182825,7 +183062,7 @@ var handoffRoutes = new Elysia({ prefix: "/api/v1/handoff" }).post("/begin", asy
   } catch (e) {
     rethrowCanonicalHandoffError(e);
     const err = e;
-    logger.error("handoff cancel failed", err);
+    logger.error("handoff cancel failed", err, { id: b.id, projectId: b.projectId });
     set3.status = 500;
     return { success: false, error: `handoff cancel failed: ${err.message}` };
   }
@@ -182859,7 +183096,7 @@ var handoffRoutes = new Elysia({ prefix: "/api/v1/handoff" }).post("/begin", asy
   } catch (e) {
     rethrowCanonicalHandoffError(e);
     const err = e;
-    logger.error("handoff list failed", err);
+    logger.error("handoff list failed", err, { projectId: b.projectId, targetAgent: b.targetAgent });
     set3.status = 500;
     return { success: false, error: `handoff list failed: ${err.message}` };
   }
@@ -182941,7 +183178,7 @@ var handoffRoutes = new Elysia({ prefix: "/api/v1/handoff" }).post("/begin", asy
   } catch (e) {
     rethrowCanonicalHandoffError(e);
     const err = e;
-    logger.error("handoff update failed", err);
+    logger.error("handoff update failed", err, { id: params.id, projectId: query.projectId });
     set3.status = 500;
     return { success: false, error: `handoff update failed: ${err.message}` };
   }
@@ -182974,7 +183211,7 @@ var handoffRoutes = new Elysia({ prefix: "/api/v1/handoff" }).post("/begin", asy
   } catch (e) {
     rethrowCanonicalHandoffError(e);
     const err = e;
-    logger.error("handoff delete failed", err);
+    logger.error("handoff delete failed", err, { id: params.id, projectId: query.projectId });
     set3.status = 500;
     return { success: false, error: `handoff delete failed: ${err.message}` };
   }
@@ -183045,7 +183282,7 @@ var proposalRoutes = new Elysia({ prefix: "/api/v1/proposal" }).post("/list", as
     if (e instanceof SearchServiceError)
       throw e;
     const err = e;
-    logger.error("proposal list failed", err);
+    logger.error("proposal list failed", err, { projectId: b.projectId });
     set3.status = 500;
     return { success: false, error: `proposal list failed: ${err.message}` };
   }
@@ -183076,7 +183313,7 @@ var proposalRoutes = new Elysia({ prefix: "/api/v1/proposal" }).post("/list", as
     if (e instanceof SearchServiceError)
       throw e;
     const err = e;
-    logger.error("proposal approve failed", err);
+    logger.error("proposal approve failed", err, { id: b.id, projectId: b.projectId });
     set3.status = 500;
     return { success: false, error: `proposal approve failed: ${err.message}` };
   }
@@ -183109,7 +183346,7 @@ var proposalRoutes = new Elysia({ prefix: "/api/v1/proposal" }).post("/list", as
     if (e instanceof SearchServiceError)
       throw e;
     const err = e;
-    logger.error("proposal reject failed", err);
+    logger.error("proposal reject failed", err, { id: b.id, projectId: b.projectId });
     set3.status = 500;
     return { success: false, error: `proposal reject failed: ${err.message}` };
   }
@@ -183173,7 +183410,7 @@ var proposalRoutes = new Elysia({ prefix: "/api/v1/proposal" }).post("/list", as
       return { status: validationStatus, error: e.message };
     }
     const err = e;
-    logger.error("proposal create failed", err);
+    logger.error("proposal create failed", err, { projectId, kind });
     set3.status = 500;
     return { success: false, error: `proposal create failed: ${err.message}` };
   }
@@ -183246,7 +183483,7 @@ var proposalRoutes = new Elysia({ prefix: "/api/v1/proposal" }).post("/list", as
       return { status: validationStatus, error: e.message };
     }
     const err = e;
-    logger.error("proposal update failed", err);
+    logger.error("proposal update failed", err, { id: params.id, projectId: query.projectId });
     set3.status = 500;
     return { success: false, error: `proposal update failed: ${err.message}` };
   }
@@ -183295,7 +183532,7 @@ var proposalRoutes = new Elysia({ prefix: "/api/v1/proposal" }).post("/list", as
     if (e instanceof SearchServiceError)
       throw e;
     const err = e;
-    logger.error("proposal delete failed", err);
+    logger.error("proposal delete failed", err, { id: params.id, projectId: query.projectId });
     set3.status = 500;
     return { success: false, error: `proposal delete failed: ${err.message}` };
   }
@@ -183707,8 +183944,8 @@ var dashboardRoutes = new Elysia({ prefix: "/api/v1" }).get("/scheduler/status",
         enabled: j.enabled,
         nextRunAt: j.nextRunAt,
         lastRunAt: j.lastRunAt,
-        lastSuccessAt: null,
-        consecutiveFailures: 0,
+        lastSuccessAt: j.lastSuccessAt,
+        consecutiveFailures: j.consecutiveFailures,
         due: j.due,
         currentlyRunning: j.currentlyRunning
       }))
@@ -183778,6 +184015,198 @@ function deploymentUnavailableMessage(what) {
   return `model-registry is unavailable in this deployment: ${what} was not found under ` + `${import.meta.dirname} (searched up ${MAX_LEVELS2} levels). This route requires a ` + `massa-ai source checkout.`;
 }
 
+// src/routes/profiles.ts
+var PROFILE_DETAIL = {
+  tags: ["profiles"]
+};
+function isNamedError(e) {
+  return e instanceof Error && typeof e.name === "string";
+}
+function statusFor(err) {
+  switch (err.name) {
+    case "UnknownProfileError":
+      return 400;
+    case "NoHostsDetectedError":
+      return 404;
+    default:
+      break;
+  }
+  if (err instanceof LockError)
+    return 409;
+  if (err instanceof InstallStateError)
+    return 500;
+  return 500;
+}
+function errorBody(err) {
+  return { success: false, error: { code: err.name, message: err.message } };
+}
+function validHost(value) {
+  if (value === undefined)
+    return;
+  if (typeof value === "string" && isHost(value))
+    return value;
+  return;
+}
+var profileRoutes = new Elysia({ prefix: "/api/v1/profiles" }).get("/", ({ query, set: set3 }) => {
+  const hostParam = query.host;
+  if (hostParam !== undefined && !isHost(hostParam)) {
+    set3.status = 400;
+    return { success: false, error: { code: "InvalidHostError", message: `unknown host "${hostParam}"` } };
+  }
+  try {
+    const inventory = listProfiles(hostParam ? { hosts: [hostParam] } : {});
+    set3.status = 200;
+    return { success: true, data: inventory };
+  } catch (e) {
+    const err = isNamedError(e) ? e : { name: "Error", message: String(e) };
+    set3.status = statusFor(err);
+    return errorBody(err);
+  }
+}, {
+  query: t.Object({ host: t.Optional(t.String()) }),
+  detail: {
+    ...PROFILE_DETAIL,
+    summary: "List shipped profiles + per-host active profile",
+    description: "Returns the shipped profile names, per-host active profile (from recorded install-state, falling back to 'balanced' when unrecorded), and per-host bundle version. Available profile names come from on-disk variant directories only; the registry is never consulted."
+  }
+}).post("/switch", ({ body, set: set3 }) => {
+  const { profile, host, dryRun } = body;
+  if (host !== undefined && !isHost(host)) {
+    set3.status = 400;
+    return { success: false, error: { code: "InvalidHostError", message: `unknown host "${host}"` } };
+  }
+  try {
+    syncGeneratedVariants({ sourceRoot: getDeploymentRoot() });
+    const report = switchProfile({ profile, host: validHost(host), dryRun });
+    set3.status = 200;
+    return { success: true, data: report };
+  } catch (e) {
+    const err = isNamedError(e) ? e : { name: "Error", message: String(e) };
+    set3.status = statusFor(err);
+    return errorBody(err);
+  }
+}, {
+  body: t.Object({
+    profile: t.String({ description: "Target profile name" }),
+    host: t.Optional(t.String({ description: "Limit the switch to a single host" })),
+    dryRun: t.Optional(t.Boolean({ description: "Print the per-host plan; change nothing" }))
+  }),
+  detail: {
+    ...PROFILE_DETAIL,
+    summary: "Switch installed agents to a profile",
+    description: "Mutates the machine this server runs on: replaces the active installed agent files for every detected, supported host with the chosen profile's variant, and reports per host: switched / skipped (reason) / failed (reason). A session restart is required for the change to take effect. Local trust model \u2014 same as the executor routes."
+  }
+});
+
+// src/routes/config.ts
+init_dist();
+init_inference_providers();
+var CONFIG_DETAIL = {
+  tags: ["config"]
+};
+function defaultEmbedBatchSize(provider) {
+  const spec = typeof provider === "string" && LOCAL_INFERENCE_IDS.includes(provider) ? INFERENCE_PROVIDERS[provider] : INFERENCE_PROVIDERS.ollama;
+  return spec.embedBatchSize;
+}
+var SENSITIVE_FIELDS = {
+  database: ["url"],
+  embedding: ["apiKey"],
+  llm: ["apiKey"],
+  security: ["apiKey"]
+};
+function getFieldByPath(config3, section, field3) {
+  const sec = config3[section];
+  if (!sec || typeof sec !== "object")
+    return;
+  const parts = field3.split(".");
+  let val = sec;
+  for (const p of parts) {
+    if (val && typeof val === "object")
+      val = val[p];
+    else
+      return;
+  }
+  return val;
+}
+var configRoutes = new Elysia({ prefix: "/api/v1/config" }).get("/", ({ set: set3 }) => {
+  const config3 = loadConfig();
+  const masked = maskSensitive(config3);
+  const restart = restartNeededSections(config3);
+  const shipped = maskSensitive(defaultMassaAiConfig);
+  const defaults2 = {
+    ...shipped,
+    embedding: {
+      ...shipped.embedding,
+      contextWindow: INFERENCE_ROLE_DEFAULTS.embedding.contextWindow,
+      batchSize: defaultEmbedBatchSize(config3.embedding?.provider)
+    }
+  };
+  set3.status = 200;
+  return {
+    success: true,
+    data: { config: masked, restartNeededSections: restart, defaults: defaults2 }
+  };
+}, {
+  detail: {
+    ...CONFIG_DETAIL,
+    summary: "Get current config with sensitive fields masked",
+    description: "Returns the current config.json with security.apiKey, llm.apiKey, embedding.apiKey, and database.url masked to '***'. Includes restartNeededSections \u2014 the subset of [database, embedding, llm, security] present in the config \u2014 and defaults, the shipped default config (also masked) the Config tab falls back to for any field the persisted file omits. defaults.embedding.contextWindow and defaults.embedding.batchSize are derived rather than shipped: they come from the role table and the resolved provider's seam entry, because defaultMassaAiConfig deliberately leaves both unset (PDM-12)."
+  }
+}).get("/reveal", ({ query, set: set3 }) => {
+  const section = query.section;
+  const field3 = query.field;
+  if (!section || !field3) {
+    set3.status = 400;
+    return { success: false, error: "section and field query params are required" };
+  }
+  const allowed = SENSITIVE_FIELDS[section];
+  if (!allowed || !allowed.includes(field3)) {
+    set3.status = 400;
+    return { success: false, error: `field "${section}.${field3}" is not a sensitive field` };
+  }
+  const config3 = loadConfig();
+  const value = getFieldByPath(config3, section, field3);
+  set3.status = 200;
+  return { success: true, data: { section, field: field3, value: value ?? "" } };
+}, {
+  query: t.Object({
+    section: t.String(),
+    field: t.String()
+  }),
+  detail: {
+    ...CONFIG_DETAIL,
+    summary: "Reveal a single sensitive config field (unmasked)",
+    description: "Returns the unmasked value for one sensitive field (database.url, embedding.apiKey, llm.apiKey, security.apiKey). Requires API key. Only sensitive fields can be revealed."
+  }
+}).put("/", ({ body, set: set3 }) => {
+  const result = savePartialConfig(body);
+  if (!result.success) {
+    set3.status = 400;
+    return {
+      success: false,
+      error: "validation failed",
+      details: result.details
+    };
+  }
+  const masked = maskSensitive(result.config);
+  set3.status = 200;
+  return {
+    success: true,
+    data: {
+      config: masked,
+      restartNeededSections: result.restartNeededSections,
+      changedRestartSections: result.changedRestartSections
+    }
+  };
+}, {
+  body: t.Object({}, { additionalProperties: true }),
+  detail: {
+    ...CONFIG_DETAIL,
+    summary: "Update config sections (partial, validated, atomic)",
+    description: "Accepts one or more top-level config sections. Validates each provided section, backs up to config.json.bak.<timestamp>, merges shallowly per top-level key, writes atomically. Returns the updated masked config + restartNeededSections. A sensitive field equal to '***' preserves the existing value."
+  }
+});
+
 // src/routes/model-registry.ts
 init_config();
 import fs28 from "fs";
@@ -183795,19 +184224,6 @@ function profilesLib() {
   }
   return _profilesLib;
 }
-function getRegistryHostDefaults() {
-  try {
-    const root2 = getDeploymentRoot();
-    if (!root2)
-      return;
-    const lib = profilesLib();
-    const result = lib.loadEffectiveRegistry({ overlayPath: OVERLAY_PATH });
-    const hostDefaults = result?.registry?.hostDefaults;
-    return hostDefaults && typeof hostDefaults === "object" ? hostDefaults : undefined;
-  } catch {
-    return;
-  }
-}
 var _generatorLib = null;
 function generatorLib() {
   if (!_generatorLib) {
@@ -183823,21 +184239,46 @@ function generatorLib() {
 async function loadAgentsInventory() {
   try {
     const gen = generatorLib();
-    const charters = await gen.loadAllCharters();
-    return { agents: charters.map((c) => ({ name: c.name, charterTier: c.modelTier })) };
+    const names = await gen.scanCharterNames();
+    return { agents: names.map((name26) => ({ name: name26 })) };
   } catch (e) {
     return { agents: [], agentsError: e.message };
   }
 }
+var ALLOWED_OVERLAY_KEYS = new Set(["models", "profiles"]);
+var LEGACY_OVERLAY_KEYS = new Set(["tiers", "hostDefaults", "workflowTiers", "agentTiers"]);
+function isPlainObj(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function overlayShapeViolations(overlay) {
+  const violations = [];
+  for (const key of Object.keys(overlay)) {
+    if (ALLOWED_OVERLAY_KEYS.has(key))
+      continue;
+    violations.push(LEGACY_OVERLAY_KEYS.has(key) ? `overlay key "${key}" is a v1 registry key removed in v2 \u2014 only "models" and "profiles" are supported overlay sections` : `overlay has unknown top-level key "${key}" \u2014 only "models" and "profiles" are supported`);
+  }
+  if (isPlainObj(overlay.profiles)) {
+    for (const [name26, val] of Object.entries(overlay.profiles)) {
+      if (!isPlainObj(val)) {
+        violations.push(`overlay.profiles.${name26} must be an object, got ${JSON.stringify(val)}`);
+      }
+    }
+  }
+  if (isPlainObj(overlay.models)) {
+    for (const [id, val] of Object.entries(overlay.models)) {
+      if (val !== null && !isPlainObj(val)) {
+        violations.push(`overlay.models.${id} must be an object or null (tombstone), got ${JSON.stringify(val)}`);
+      }
+    }
+  }
+  return violations;
+}
 var REGISTRY_DETAIL = {
   tags: ["model-registry"]
 };
 var OVERLAY_PATH = path42.join(configDir("massa-ai"), "model-profiles.json");
 var ZERO_OVERLAY_OVERRIDE_BREAKDOWN = {
-  hostDefaults: 0,
-  workflowTiers: 0,
-  agentTiers: 0,
-  tiers: 0,
+  models: 0,
   profiles: 0
 };
 var modelRegistryRoutes = new Elysia({ prefix: "/api/v1/model-registry" }).get("/", async ({ set: set3 }) => {
@@ -183858,6 +184299,7 @@ var modelRegistryRoutes = new Elysia({ prefix: "/api/v1/model-registry" }).get("
       overlayOverrideCount: result.overlayOverrideCount ?? 0,
       overlayOverrideBreakdown: result.overlayOverrideBreakdown ?? ZERO_OVERLAY_OVERRIDE_BREAKDOWN,
       ...result.overlayError ? { overlayError: result.overlayError } : {},
+      ...result.v1BackupPath ? { v1BackupPath: result.v1BackupPath } : {},
       agents,
       ...agentsError ? { agentsError } : {}
     }
@@ -183866,7 +184308,7 @@ var modelRegistryRoutes = new Elysia({ prefix: "/api/v1/model-registry" }).get("
   detail: {
     ...REGISTRY_DETAIL,
     summary: "Get effective registry (builtin + overlay) with source attribution",
-    description: "Returns the merged registry (builtin + overlay), source attribution (builtin, overlay, tombstoned), overlayOverrideCount (APCR-01.10 \u2014 count of overlay entries surviving normalization, so an operator can see how much of the registry their overlay is overriding), overlayOverrideBreakdown (WUT-17 \u2014 the same count broken down per category: hostDefaults, workflowTiers, agentTiers, tiers, profiles), overlayError if the overlay is corrupted, and agents (design D-3, APUX-03 \u2014 {name, charterTier} for every charter under skills/agents/, best-effort with agentsError on failure) (200 status, never fails)."
+    description: "Returns the merged v2 registry (builtin + overlay: models catalog + profiles, each profile carrying a per-host default cell and optional per-agent overrides), source attribution (builtin, overlay, tombstoned), overlayOverrideCount (count of overlay entries surviving normalization, so an operator can see how much of the registry their overlay is overriding), overlayOverrideBreakdown (the same count broken down per category: models, profiles), overlayError if the overlay is corrupted, and agents (spec AC6 \u2014 {name} for every charter under skills/agents/, from a directory scan, best-effort with agentsError on failure) (200 status, never fails)."
   }
 }).put("/", ({ body, set: set3 }) => {
   const root2 = getDeploymentRoot();
@@ -183876,6 +184318,15 @@ var modelRegistryRoutes = new Elysia({ prefix: "/api/v1/model-registry" }).get("
   }
   const lib = profilesLib();
   const overlay = body;
+  const shapeViolations = overlayShapeViolations(overlay);
+  if (shapeViolations.length > 0) {
+    set3.status = 400;
+    return {
+      success: false,
+      error: "validation failed",
+      details: shapeViolations
+    };
+  }
   const builtin = lib.loadRegistry(lib.DEFAULT_REGISTRY_PATH);
   const merged = lib.mergeOverlay(builtin, overlay);
   try {
@@ -183916,7 +184367,7 @@ var modelRegistryRoutes = new Elysia({ prefix: "/api/v1/model-registry" }).get("
   detail: {
     ...REGISTRY_DETAIL,
     summary: "Write overlay (full-replace, validated, atomic)",
-    description: "Accepts the full overlay object. Validates the merged result (builtin + overlay) via validateRegistry(). On success, writes atomically to ~/.config/massa-ai/model-profiles.json and returns the updated effective registry, including overlayOverrideCount (APCR-01.10) and overlayOverrideBreakdown (WUT-17, per-category). On failure, returns 400 with all violations."
+    description: "Accepts the full v2 overlay object ({models?, profiles?} only \u2014 a v1 top-level key (tiers/hostDefaults/workflowTiers/agentTiers) or any other unknown key is rejected outright with 400 before merging). Validates the merged result (builtin + overlay) via validateRegistry(). On success, writes atomically to ~/.config/massa-ai/model-profiles.json and returns the updated effective registry, including overlayOverrideCount and overlayOverrideBreakdown (per-category: models, profiles). On failure, returns 400 with all violations."
   }
 }).post("/regenerate", ({ set: set3 }) => {
   const root2 = getDeploymentRoot();
@@ -184006,201 +184457,6 @@ function writeOverlayAtomically(overlayPath, data) {
   }
 }
 
-// src/routes/profiles.ts
-var PROFILE_DETAIL = {
-  tags: ["profiles"]
-};
-function isNamedError(e) {
-  return e instanceof Error && typeof e.name === "string";
-}
-function statusFor(err) {
-  switch (err.name) {
-    case "UnknownProfileError":
-      return 400;
-    case "NoHostsDetectedError":
-      return 404;
-    default:
-      break;
-  }
-  if (err instanceof LockError)
-    return 409;
-  if (err instanceof InstallStateError)
-    return 500;
-  return 500;
-}
-function errorBody(err) {
-  return { success: false, error: { code: err.name, message: err.message } };
-}
-function validHost(value) {
-  if (value === undefined)
-    return;
-  if (typeof value === "string" && isHost(value))
-    return value;
-  return;
-}
-var profileRoutes = new Elysia({ prefix: "/api/v1/profiles" }).get("/", ({ query, set: set3 }) => {
-  const hostParam = query.host;
-  if (hostParam !== undefined && !isHost(hostParam)) {
-    set3.status = 400;
-    return { success: false, error: { code: "InvalidHostError", message: `unknown host "${hostParam}"` } };
-  }
-  try {
-    const inventory = listProfiles({
-      ...hostParam ? { hosts: [hostParam] } : {},
-      hostDefaults: getRegistryHostDefaults()
-    });
-    set3.status = 200;
-    return { success: true, data: inventory };
-  } catch (e) {
-    const err = isNamedError(e) ? e : { name: "Error", message: String(e) };
-    set3.status = statusFor(err);
-    return errorBody(err);
-  }
-}, {
-  query: t.Object({ host: t.Optional(t.String()) }),
-  detail: {
-    ...PROFILE_DETAIL,
-    summary: "List shipped profiles + per-host active profile",
-    description: "Returns the shipped profile names, per-host active profile (from recorded state; the registry's declared per-host default shown when unrecorded, falling back to 'balanced' when the registry is unreachable), and per-host bundle version. Available profile names come from on-disk variant directories only; the registry is consulted only for that unrecorded-host default."
-  }
-}).post("/switch", ({ body, set: set3 }) => {
-  const { profile, host, dryRun } = body;
-  if (host !== undefined && !isHost(host)) {
-    set3.status = 400;
-    return { success: false, error: { code: "InvalidHostError", message: `unknown host "${host}"` } };
-  }
-  try {
-    syncGeneratedVariants({ sourceRoot: getDeploymentRoot() });
-    const report = switchProfile({ profile, host: validHost(host), dryRun });
-    set3.status = 200;
-    return { success: true, data: report };
-  } catch (e) {
-    const err = isNamedError(e) ? e : { name: "Error", message: String(e) };
-    set3.status = statusFor(err);
-    return errorBody(err);
-  }
-}, {
-  body: t.Object({
-    profile: t.String({ description: "Target profile name" }),
-    host: t.Optional(t.String({ description: "Limit the switch to a single host" })),
-    dryRun: t.Optional(t.Boolean({ description: "Print the per-host plan; change nothing" }))
-  }),
-  detail: {
-    ...PROFILE_DETAIL,
-    summary: "Switch installed agents to a profile",
-    description: "Mutates the machine this server runs on: replaces the active installed agent files for every detected, supported host with the chosen profile's variant, and reports per host: switched / skipped (reason) / failed (reason). A session restart is required for the change to take effect. Local trust model \u2014 same as the executor routes."
-  }
-});
-
-// src/routes/config.ts
-init_dist();
-init_inference_providers();
-var CONFIG_DETAIL = {
-  tags: ["config"]
-};
-function defaultEmbedBatchSize(provider) {
-  const spec = typeof provider === "string" && LOCAL_INFERENCE_IDS.includes(provider) ? INFERENCE_PROVIDERS[provider] : INFERENCE_PROVIDERS.ollama;
-  return spec.embedBatchSize;
-}
-var SENSITIVE_FIELDS = {
-  database: ["url"],
-  embedding: ["apiKey"],
-  llm: ["apiKey"],
-  security: ["apiKey"]
-};
-function getFieldByPath(config3, section, field3) {
-  const sec = config3[section];
-  if (!sec || typeof sec !== "object")
-    return;
-  const parts = field3.split(".");
-  let val = sec;
-  for (const p of parts) {
-    if (val && typeof val === "object")
-      val = val[p];
-    else
-      return;
-  }
-  return val;
-}
-var configRoutes = new Elysia({ prefix: "/api/v1/config" }).get("/", ({ set: set3 }) => {
-  const config3 = loadConfig();
-  const masked = maskSensitive(config3);
-  const restart = restartNeededSections(config3);
-  const shipped = maskSensitive(defaultMassaAiConfig);
-  const defaults2 = {
-    ...shipped,
-    embedding: {
-      ...shipped.embedding,
-      contextWindow: INFERENCE_ROLE_DEFAULTS.embedding.contextWindow,
-      batchSize: defaultEmbedBatchSize(config3.embedding?.provider)
-    }
-  };
-  set3.status = 200;
-  return {
-    success: true,
-    data: { config: masked, restartNeededSections: restart, defaults: defaults2 }
-  };
-}, {
-  detail: {
-    ...CONFIG_DETAIL,
-    summary: "Get current config with sensitive fields masked",
-    description: "Returns the current config.json with security.apiKey, llm.apiKey, embedding.apiKey, and database.url masked to '***'. Includes restartNeededSections \u2014 the subset of [database, embedding, llm, security] present in the config \u2014 and defaults, the shipped default config (also masked) the Config tab falls back to for any field the persisted file omits. defaults.embedding.contextWindow and defaults.embedding.batchSize are derived rather than shipped: they come from the role table and the resolved provider's seam entry, because defaultMassaAiConfig deliberately leaves both unset (PDM-12)."
-  }
-}).get("/reveal", ({ query, set: set3 }) => {
-  const section = query.section;
-  const field3 = query.field;
-  if (!section || !field3) {
-    set3.status = 400;
-    return { success: false, error: "section and field query params are required" };
-  }
-  const allowed = SENSITIVE_FIELDS[section];
-  if (!allowed || !allowed.includes(field3)) {
-    set3.status = 400;
-    return { success: false, error: `field "${section}.${field3}" is not a sensitive field` };
-  }
-  const config3 = loadConfig();
-  const value = getFieldByPath(config3, section, field3);
-  set3.status = 200;
-  return { success: true, data: { section, field: field3, value: value ?? "" } };
-}, {
-  query: t.Object({
-    section: t.String(),
-    field: t.String()
-  }),
-  detail: {
-    ...CONFIG_DETAIL,
-    summary: "Reveal a single sensitive config field (unmasked)",
-    description: "Returns the unmasked value for one sensitive field (database.url, embedding.apiKey, llm.apiKey, security.apiKey). Requires API key. Only sensitive fields can be revealed."
-  }
-}).put("/", ({ body, set: set3 }) => {
-  const result = savePartialConfig(body);
-  if (!result.success) {
-    set3.status = 400;
-    return {
-      success: false,
-      error: "validation failed",
-      details: result.details
-    };
-  }
-  const masked = maskSensitive(result.config);
-  set3.status = 200;
-  return {
-    success: true,
-    data: {
-      config: masked,
-      restartNeededSections: result.restartNeededSections,
-      changedRestartSections: result.changedRestartSections
-    }
-  };
-}, {
-  body: t.Object({}, { additionalProperties: true }),
-  detail: {
-    ...CONFIG_DETAIL,
-    summary: "Update config sections (partial, validated, atomic)",
-    description: "Accepts one or more top-level config sections. Validates each provided section, backs up to config.json.bak.<timestamp>, merges shallowly per top-level key, writes atomically. Returns the updated masked config + restartNeededSections. A sensitive field equal to '***' preserves the existing value."
-  }
-});
-
 // src/routes/model-registry-stream.ts
 init_config();
 init_dist();
@@ -184293,7 +184549,7 @@ function installActiveProfiles(controller2, closedRef) {
         ...r2.error ? { error: r2.error } : {}
       }));
     }
-    const inventory = listProfiles({ hostDefaults: getRegistryHostDefaults() });
+    const inventory = listProfiles();
     for (const hostEntry of inventory.hosts) {
       if (closedRef.closed)
         return;