@obsunified/collector 2.2.0 → 2.2.3

package/src/plugins/autosre-routes.ts

@@ -4,6 +4,8 @@ import type {
 	ChangeEventKind,
 	CohortAttributionVerdict,
 	EvidenceEntityKind,
+	GrantCallbackDelivery,
+	GrantDeliveryResult,
 	InvestigationFindingInput,
 	JsonValue,
 	RemediationActionKind,
@@ -11,11 +13,18 @@ import type {
 	RemediationProposalStatus,
 	RemediationStateSpec,
 } from "@obsunified/types";
+import {
+	ChangeEventKindSchema,
+	EvidencePredicateSchema,
+	RemediationActionKindSchema,
+} from "@obsunified/types";
 import { AgentAutonomyLevel } from "@obsunified/types/constants";
 import type { CollectorPlugin } from "../framework/collector";
+import type { CollectorEnv } from "../framework/env";
 import {
 	computeChangeBlastRadius,
 	getChangeEvent,
+	InvalidTimestampError,
 	listChangeEvents,
 	recordChangeEvent,
 } from "../lib/autosre-change-correlation";
@@ -39,36 +48,27 @@ import {
 	evaluateRemediationWatchdogs,
 	failRemediationProposal,
 	getIncidentInvestigation,
+	getRemediationCallback,
 	getRemediationProposal,
 	listIncidentInvestigations,
 	listRemediationProposals,
 	openOrDeduplicateIncident,
 	proposeRemediationAction,
 	RemediationGateError,
+	recordCallbackDelivery,
 	rejectRemediationProposal,
 } from "../lib/autosre-remediation-gate";
+import { sha256Hex } from "../lib/hash";
 import { sqlDbFor } from "../lib/sql-db";
+import { assertSafeWebhookUrl } from "../lib/webhook-url";
 import { getProjectId } from "./_context";
 import { readJsonObject } from "./_json";
 
-const CHANGE_KINDS = new Set<ChangeEventKind>([
-	"deploy",
-	"rollback",
-	"feature_flag",
-	"config_change",
-	"prompt_rollout",
-	"agent_version",
-	"schema_migration",
-	"infra_scale",
-]);
-
-const REMEDIATION_ACTION_KINDS = new Set<RemediationActionKind>([
-	"open_code_pr",
-	"toggle_feature_flag",
-	"rollback_deploy",
-	"apply_config",
-	"promote_agent_prompt",
-]);
+const CHANGE_KINDS = new Set<string>(ChangeEventKindSchema.options);
+
+const REMEDIATION_ACTION_KINDS = new Set<string>(
+	RemediationActionKindSchema.options,
+);
 
 const parseLimit = (raw: string | undefined, fallback = 50): number => {
 	const parsed = Number.parseInt(raw ?? String(fallback), 10);
@@ -85,9 +85,11 @@ const isAgentAutonomyLevel = (value: unknown): value is AgentAutonomyLevel =>
  * require an authenticated human dashboard session (`obs_session` cookie) and
  * reject programmatic agent/MCP bearer tokens (`403 Forbidden`).
  */
-function requireHumanDashboardSession(c: {
+async function requireHumanDashboardSession(c: {
 	req: { header: (name: string) => string | undefined };
-}): { ok: true; sessionActor: string } | { ok: false; message: string } {
+}): Promise<
+	{ ok: true; sessionActor: string } | { ok: false; message: string }
+> {
 	const authHeader = c.req.header("Authorization");
 	if (authHeader) {
 		return {
@@ -98,23 +100,139 @@ function requireHumanDashboardSession(c: {
 	}
 	const cookieHeader = c.req.header("Cookie") ?? "";
 	const match = cookieHeader.match(/(?:^|;\s*)obs_session=([^;]*)/);
-	if (!match || !match[1]) {
+	if (!match?.[1]) {
 		return {
 			ok: false,
 			message:
 				"Human approval requires an authenticated human dashboard session (obs_session cookie).",
 		};
 	}
-	const explicitActor = c.req.header("X-Obs-User-Actor")?.trim();
-	const rawSession = decodeURIComponent(match[1]);
-	const sessionActor =
-		explicitActor || `dashboard_session:${rawSession.slice(0, 24)}`;
+	// The recorded approver is derived from the session itself. Client-supplied
+	// identities (X-Obs-User-Actor, body.approvedByUserId) are never trusted:
+	// they would let any session holder attribute an approval to someone else.
+	// Only a hash prefix is stored so the cookie value never reaches the DB.
+	let rawSession = match[1];
+	try {
+		rawSession = decodeURIComponent(rawSession);
+	} catch {
+		// keep the raw value; it is only hashed
+	}
+	const sessionActor = `dashboard_session:${(await sha256Hex(rawSession)).slice(0, 16)}`;
 	return { ok: true, sessionActor };
 }
 
 export const autosreRoutesPlugin: CollectorPlugin = {
 	name: "autosre-routes",
 	register(app, runtime) {
+		/**
+		 * Grant handoff: the plaintext grant token exists only in the response of
+		 * the request that mints it (propose with an autonomous grant, or human
+		 * approve). Incidents do not store a webhook, so the caller may pass
+		 * `webhookUrl` (+ optional `secret`) in that same request and the token is
+		 * pushed to the runner over the SSRF-guarded, HMAC-signed incident webhook.
+		 * Without a `webhookUrl` the token is simply returned in the response.
+		 *
+		 * A `webhookUrl` (+ `secret`) given to `propose` for a proposal that is
+		 * parked for human approval is persisted on the proposal and used when
+		 * the approve request carries none. A callback on the approve request
+		 * wins over the stored one. The stored callback is cleared on approve
+		 * or reject, and only its host is ever returned by GET.
+		 */
+		const deliverGrant = async (
+			env: CollectorEnv | undefined,
+			db: ReturnType<typeof sqlDbFor>,
+			projectId: string,
+			body: Record<string, unknown>,
+			proposal: {
+				id: string;
+				incidentId: string;
+				environment: string;
+				status: string;
+				grantToken?: string;
+			},
+			/** Callback persisted at propose time; used when the request has none. */
+			stored?: { url: string; secret?: string } | null,
+		) => {
+			const bodyUrl =
+				typeof body.webhookUrl === "string" ? body.webhookUrl.trim() : "";
+			const target = bodyUrl
+				? {
+						url: bodyUrl,
+						secret: typeof body.secret === "string" ? body.secret : undefined,
+					}
+				: (stored ?? null);
+			const notAttempted: GrantDeliveryResult = {
+				attempted: false,
+				delivered: false,
+				attempts: 0,
+				host: null,
+			};
+			if (!target || !proposal.grantToken) {
+				return { webhookDelivery: undefined, grantDelivery: notAttempted };
+			}
+			if (proposal.status !== "grant_issued") {
+				return { webhookDelivery: undefined, grantDelivery: notAttempted };
+			}
+			let host: string | null = null;
+			try {
+				host = new URL(target.url).host || null;
+			} catch {
+				host = null;
+			}
+			const webhookDelivery = await dispatchIncidentWebhook(
+				db,
+				projectId,
+				proposal.incidentId,
+				{
+					url: target.url,
+					secret: target.secret,
+					environment: proposal.environment,
+					allowPrivateNetworks: env?.ALERT_WEBHOOK_ALLOW_PRIVATE === "true",
+					logger: runtime.logger,
+					grant: {
+						proposalId: proposal.id,
+						status: proposal.status,
+						grantToken: proposal.grantToken,
+					},
+				},
+			);
+			// Error text is surfaced to the human: strip anything URL-shaped and
+			// the secret so neither the query string nor the HMAC key can leak.
+			let error = webhookDelivery.error
+				? webhookDelivery.error.replace(
+						/\b[a-z][a-z0-9+.-]*:\/\/\S+/gi,
+						"<url>",
+					)
+				: undefined;
+			if (error && target.secret) {
+				error = error.split(target.secret).join("<redacted>");
+			}
+			const record = await recordCallbackDelivery(
+				db,
+				projectId,
+				proposal.environment,
+				proposal.id,
+				{
+					delivered: webhookDelivery.delivered,
+					attempts: webhookDelivery.attempts,
+					error,
+				},
+			);
+			(
+				proposal as { callbackDelivery?: GrantCallbackDelivery | null }
+			).callbackDelivery = record;
+			const grantDelivery: GrantDeliveryResult = {
+				attempted: true,
+				delivered: webhookDelivery.delivered,
+				attempts: webhookDelivery.attempts,
+				host,
+				...(webhookDelivery.delivered
+					? {}
+					: { error: error ?? "unknown error" }),
+			};
+			return { webhookDelivery, grantDelivery };
+		};
+
 		// 1. Change Ingestion (Ingest Auth /v1/changes)
 		app.post("/v1/changes", async (c) => {
 			const projectId = getProjectId(c);
@@ -122,7 +240,8 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			if (!body) {
 				return c.json({ error: "Invalid JSON body" }, 400);
 			}
-			const rawKind = typeof body.kind === "string" ? body.kind.trim() : "deploy";
+			const rawKind =
+				typeof body.kind === "string" ? body.kind.trim() : "deploy";
 			const normalizedKind = (
 				rawKind === "agent_prompt_release" ? "prompt_rollout" : rawKind
 			) as ChangeEventKind;
@@ -181,47 +300,58 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 						? body.actor
 						: null;
 
-			const changeEvent = await recordChangeEvent(db, projectId, {
-				id: typeof body.id === "string" ? body.id : undefined,
-				environment:
-					typeof body.environment === "string" ? body.environment : undefined,
-				kind: normalizedKind,
-				source:
-					body.source === "inferred_telemetry" ||
-					body.source === "autosre_remediation"
-						? body.source
-						: "explicit_api",
-				targetNodeId:
-					typeof body.targetNodeId === "string" ? body.targetNodeId : undefined,
-				serviceName,
-				namespace,
-				version: typeof body.version === "string" ? body.version : null,
-				previousVersion:
-					typeof body.previousVersion === "string"
-						? body.previousVersion
-						: null,
-				commitSha: typeof body.commitSha === "string" ? body.commitSha : null,
-				previousCommitSha:
-					typeof body.previousCommitSha === "string"
-						? body.previousCommitSha
-						: null,
-				configDigest:
-					typeof body.configDigest === "string" ? body.configDigest : null,
-				summary,
-				actorId,
-				repositoryUrl,
-				pullRequestUrl,
-				causedByActionId:
-					typeof body.causedByActionId === "string"
-						? body.causedByActionId
-						: null,
-				agentRunId:
-					typeof body.agentRunId === "string" ? body.agentRunId : null,
-				touchedPaths,
-				attributes,
-				occurredAt:
-					typeof body.occurredAt === "string" ? body.occurredAt : undefined,
-			});
+			let changeEvent: Awaited<ReturnType<typeof recordChangeEvent>>;
+			try {
+				changeEvent = await recordChangeEvent(db, projectId, {
+					id: typeof body.id === "string" ? body.id : undefined,
+					environment:
+						typeof body.environment === "string" ? body.environment : undefined,
+					kind: normalizedKind,
+					source:
+						body.source === "inferred_telemetry" ||
+						body.source === "autosre_remediation" ||
+						body.source === "ci_webhook"
+							? body.source
+							: "explicit_api",
+					targetNodeId:
+						typeof body.targetNodeId === "string"
+							? body.targetNodeId
+							: undefined,
+					serviceName,
+					namespace,
+					version: typeof body.version === "string" ? body.version : null,
+					previousVersion:
+						typeof body.previousVersion === "string"
+							? body.previousVersion
+							: null,
+					commitSha: typeof body.commitSha === "string" ? body.commitSha : null,
+					previousCommitSha:
+						typeof body.previousCommitSha === "string"
+							? body.previousCommitSha
+							: null,
+					configDigest:
+						typeof body.configDigest === "string" ? body.configDigest : null,
+					summary,
+					actorId,
+					repositoryUrl,
+					pullRequestUrl,
+					causedByActionId:
+						typeof body.causedByActionId === "string"
+							? body.causedByActionId
+							: null,
+					agentRunId:
+						typeof body.agentRunId === "string" ? body.agentRunId : null,
+					touchedPaths,
+					attributes,
+					occurredAt:
+						typeof body.occurredAt === "string" ? body.occurredAt : undefined,
+				});
+			} catch (err) {
+				if (err instanceof InvalidTimestampError) {
+					return c.json({ error: err.message }, 400);
+				}
+				throw err;
+			}
 
 			return c.json({ changeEvent, change: changeEvent }, 201);
 		});
@@ -254,23 +384,27 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			const rawKind = c.req.query("kind");
 			const normalizedKind =
 				rawKind === "agent_prompt_release" ? "prompt_rollout" : rawKind;
-			if (
-				normalizedKind &&
-				!CHANGE_KINDS.has(normalizedKind as ChangeEventKind)
-			) {
+			if (normalizedKind && !CHANGE_KINDS.has(normalizedKind)) {
 				return c.json({ error: `Invalid kind: ${rawKind}` }, 400);
 			}
-			const changes = await listChangeEvents(db, {
-				projectId,
-				environment: c.req.query("environment") || undefined,
-				serviceName:
-					c.req.query("serviceName") || c.req.query("service") || undefined,
-				targetNodeId: c.req.query("targetNodeId") || undefined,
-				kind: normalizedKind || undefined,
-				since: c.req.query("since") || undefined,
-				limit: parseLimit(c.req.query("limit"), 50),
-			});
-			return c.json({ changes });
+			try {
+				const changes = await listChangeEvents(db, {
+					projectId,
+					environment: c.req.query("environment") || undefined,
+					serviceName:
+						c.req.query("serviceName") || c.req.query("service") || undefined,
+					targetNodeId: c.req.query("targetNodeId") || undefined,
+					kind: normalizedKind || undefined,
+					since: c.req.query("since") || undefined,
+					limit: parseLimit(c.req.query("limit"), 50),
+				});
+				return c.json({ changes });
+			} catch (err) {
+				if (err instanceof InvalidTimestampError) {
+					return c.json({ error: err.message }, 400);
+				}
+				throw err;
+			}
 		});
 
 		app.get("/internal/changes/:id/blast-radius", async (c) => {
@@ -394,10 +528,13 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 				typeof body.leaseDurationSeconds === "number" &&
 				Number.isFinite(body.leaseDurationSeconds)
 					? body.leaseDurationSeconds
-					: typeof body.leaseDurationMs === "number" &&
-							Number.isFinite(body.leaseDurationMs)
-						? Math.ceil(body.leaseDurationMs / 1000)
-						: undefined;
+					: typeof body.ttlSeconds === "number" &&
+							Number.isFinite(body.ttlSeconds)
+						? body.ttlSeconds
+						: typeof body.leaseDurationMs === "number" &&
+								Number.isFinite(body.leaseDurationMs)
+							? Math.ceil(body.leaseDurationMs / 1000)
+							: undefined;
 			const result = await acquireIncidentLease(db, projectId, incidentId, {
 				environment:
 					typeof body.environment === "string" ? body.environment : undefined,
@@ -424,9 +561,12 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			const result = await dispatchIncidentWebhook(db, projectId, incidentId, {
 				url: webhookUrl,
 				secret: typeof body?.secret === "string" ? body.secret : undefined,
-				allowPrivateNetworks: Boolean(
-					body?.allowPrivateNetworks ?? body?.allowPrivateWebhookTargets,
-				),
+				environment:
+					typeof body?.environment === "string" ? body.environment : undefined,
+				// Operator-level setting only: a request body must never be able to
+				// turn off the SSRF guard.
+				allowPrivateNetworks: c.env?.ALERT_WEBHOOK_ALLOW_PRIVATE === "true",
+				logger: runtime.logger,
 			});
 			return c.json(result, result.delivered ? 200 : 502);
 		});
@@ -497,9 +637,33 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 				);
 			}
 
+			if (body.causalChain !== undefined && !Array.isArray(body.causalChain)) {
+				return c.json({ error: "causalChain must be an array" }, 400);
+			}
+			for (const [i, triple] of (
+				(body.causalChain as unknown[] | undefined) ?? []
+			).entries()) {
+				const predicate =
+					triple && typeof triple === "object"
+						? (triple as Record<string, unknown>).predicate
+						: undefined;
+				if (!EvidencePredicateSchema.safeParse(predicate).success) {
+					return c.json(
+						{
+							error: `causalChain[${i}].predicate is not a known evidence predicate: ${String(predicate)}`,
+						},
+						400,
+					);
+				}
+			}
+
 			const db = sqlDbFor(c.env);
 			const input: InvestigationFindingInput = {
 				id: typeof body.id === "string" ? body.id : undefined,
+				idempotencyKey:
+					typeof body.idempotencyKey === "string" && body.idempotencyKey.trim()
+						? body.idempotencyKey.trim()
+						: undefined,
 				environment:
 					typeof body.environment === "string" ? body.environment : undefined,
 				incidentId:
@@ -548,11 +712,16 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 							(id): id is string => typeof id === "string",
 						)
 					: [],
+				codeReferences: Array.isArray(body.codeReferences)
+					? (body.codeReferences as InvestigationFindingInput["codeReferences"])
+					: undefined,
 				agentRunId:
 					typeof body.agentRunId === "string" ? body.agentRunId : null,
 			};
 
-			const finding = await recordInvestigationFinding(db, projectId, input);
+			const finding = await recordInvestigationFinding(db, projectId, input, {
+				logger: runtime.logger,
+			});
 			return c.json({ finding, id: finding.id }, 201);
 		});
 
@@ -615,6 +784,40 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			}
 		});
 
+		// Lightweight existence check so callers can validate counterfactual
+		// prerequisites before persisting a finding.
+		app.get("/internal/evals/runs/:id", async (c) => {
+			const projectId = getProjectId(c);
+			const runId = c.req.param("id");
+			const db = sqlDbFor(c.env);
+			const row = await db
+				.prepare(
+					`SELECT id, eval_case_id, service_version, commit_sha,
+					        pass_count, fail_count
+					 FROM eval_runs WHERE project_id = ? AND id = ? LIMIT 1`,
+				)
+				.bind(projectId, runId)
+				.first<{
+					id: string;
+					eval_case_id: string | null;
+					service_version: string | null;
+					commit_sha: string | null;
+					pass_count: number | null;
+					fail_count: number | null;
+				}>();
+			if (!row) return c.json({ error: "Eval run not found" }, 404);
+			return c.json({
+				run: {
+					id: row.id,
+					evalCaseId: row.eval_case_id,
+					serviceVersion: row.service_version,
+					commitSha: row.commit_sha,
+					passCount: Number(row.pass_count ?? 0),
+					failCount: Number(row.fail_count ?? 0),
+				},
+			});
+		});
+
 		// 6. Remediation Proposals, Human Approval, Claim Grant, Watchdog
 		app.get("/internal/remediations", async (c) => {
 			const projectId = getProjectId(c);
@@ -687,6 +890,22 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 				: "autonomous_write";
 
 			const db = sqlDbFor(c.env);
+			const callbackUrl =
+				typeof body.webhookUrl === "string" ? body.webhookUrl.trim() : "";
+			if (callbackUrl) {
+				try {
+					assertSafeWebhookUrl(callbackUrl, {
+						allowPrivateNetworks: c.env?.ALERT_WEBHOOK_ALLOW_PRIVATE === "true",
+					});
+				} catch (err) {
+					return c.json(
+						{
+							error: `webhookUrl rejected: ${err instanceof Error ? err.message : String(err)}`,
+						},
+						400,
+					);
+				}
+			}
 			const input: RemediationProposalInput = {
 				environment:
 					typeof body.environment === "string" ? body.environment : undefined,
@@ -701,12 +920,32 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			};
 
 			try {
-				const proposal = await proposeRemediationAction(db, projectId, input);
+				const proposal = await proposeRemediationAction(db, projectId, input, {
+					logger: runtime.logger,
+					callback: callbackUrl
+						? {
+								url: callbackUrl,
+								secret:
+									typeof body.secret === "string" && body.secret
+										? body.secret
+										: undefined,
+							}
+						: undefined,
+				});
+				const { webhookDelivery, grantDelivery } = await deliverGrant(
+					c.env,
+					db,
+					projectId,
+					body,
+					proposal,
+				);
 				return c.json(
 					{
 						proposal,
 						...proposal,
 						grantToken: proposal.grantToken ?? null,
+						grantDelivery,
+						...(webhookDelivery ? { webhookDelivery } : {}),
 					},
 					201,
 				);
@@ -721,7 +960,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 		});
 
 		app.post("/internal/remediations/:id/approve", async (c) => {
-			const sessionCheck = requireHumanDashboardSession(c);
+			const sessionCheck = await requireHumanDashboardSession(c);
 			if (!sessionCheck.ok) {
 				return c.json(
 					{ error: "Forbidden", message: sessionCheck.message },
@@ -735,17 +974,17 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 				{};
 			const environment =
 				typeof body.environment === "string" ? body.environment : undefined;
-			const approvedByUserId =
-				typeof body.approvedByUserId === "string" &&
-				body.approvedByUserId.trim()
-					? body.approvedByUserId.trim()
-					: typeof body.approvedBySession === "string" &&
-							body.approvedBySession.trim()
-						? body.approvedBySession.trim()
-						: sessionCheck.sessionActor;
+			const approvedByUserId = sessionCheck.sessionActor;
 
 			const db = sqlDbFor(c.env);
 			try {
+				// Read before approving: the approve UPDATE clears the stored callback.
+				const storedCallback = await getRemediationCallback(
+					db,
+					projectId,
+					proposalId,
+					environment,
+				);
 				const proposal = await approveRemediationProposal(
 					db,
 					projectId,
@@ -755,10 +994,20 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 						approvedByUserId,
 					},
 				);
+				const { webhookDelivery, grantDelivery } = await deliverGrant(
+					c.env,
+					db,
+					projectId,
+					body,
+					proposal,
+					storedCallback,
+				);
 				return c.json({
 					proposal,
 					...proposal,
 					grantToken: proposal.grantToken ?? null,
+					grantDelivery,
+					...(webhookDelivery ? { webhookDelivery } : {}),
 				});
 			} catch (err) {
 				const message = err instanceof Error ? err.message : String(err);
@@ -771,7 +1020,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 		});
 
 		app.post("/internal/remediations/:id/reject", async (c) => {
-			const sessionCheck = requireHumanDashboardSession(c);
+			const sessionCheck = await requireHumanDashboardSession(c);
 			if (!sessionCheck.ok) {
 				return c.json(
 					{ error: "Forbidden", message: sessionCheck.message },
@@ -785,8 +1034,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 				{};
 			const environment =
 				typeof body.environment === "string" ? body.environment : undefined;
-			const reason =
-				typeof body.reason === "string" ? body.reason : undefined;
+			const reason = typeof body.reason === "string" ? body.reason : undefined;
 
 			const db = sqlDbFor(c.env);
 			try {
@@ -837,6 +1085,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 						grantToken,
 						runnerId:
 							typeof body.runnerId === "string" ? body.runnerId : undefined,
+						logger: runtime.logger,
 					},
 				);
 				return c.json({ claimed: true, proposal, ...proposal });
@@ -846,7 +1095,10 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 					err instanceof RemediationGateError
 						? (err.statusCode as 400 | 403 | 404 | 409 | 410)
 						: 409;
-				return c.json({ claimed: false, error: message, reason: message }, status);
+				return c.json(
+					{ claimed: false, error: message, reason: message },
+					status,
+				);
 			}
 		});
 
@@ -856,6 +1108,10 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			const body =
 				(await readJsonObject<Record<string, unknown>>(c).catch(() => null)) ??
 				{};
+			const runnerId =
+				typeof body.runnerId === "string" && body.runnerId.trim()
+					? body.runnerId.trim()
+					: "autosre-runner";
 			const db = sqlDbFor(c.env);
 			try {
 				const proposal = await completeRemediationProposal(
@@ -867,6 +1123,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 							typeof body.environment === "string"
 								? body.environment
 								: undefined,
+						runnerId,
 						resultingChangeId:
 							typeof body.resultingChangeId === "string"
 								? body.resultingChangeId
@@ -894,6 +1151,10 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			const body =
 				(await readJsonObject<Record<string, unknown>>(c).catch(() => null)) ??
 				{};
+			const runnerId =
+				typeof body.runnerId === "string" && body.runnerId.trim()
+					? body.runnerId.trim()
+					: "autosre-runner";
 			const db = sqlDbFor(c.env);
 			try {
 				const proposal = await failRemediationProposal(
@@ -905,6 +1166,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 							typeof body.environment === "string"
 								? body.environment
 								: undefined,
+						runnerId,
 						failureReason:
 							typeof body.failureReason === "string"
 								? body.failureReason
@@ -916,7 +1178,7 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 				const message = err instanceof Error ? err.message : String(err);
 				const status =
 					err instanceof RemediationGateError
-						? (err.statusCode as 400 | 404)
+						? (err.statusCode as 400 | 404 | 409)
 						: 400;
 				return c.json({ error: message }, status);
 			}
@@ -927,12 +1189,16 @@ export const autosreRoutesPlugin: CollectorPlugin = {
 			const body =
 				(await readJsonObject<Record<string, unknown>>(c).catch(() => null)) ??
 				{};
+			// Scoped to the caller's project; the clock is never client-controlled
+			// and the traffic floor can only be raised, never lowered, by a caller.
 			const summary = await evaluateRemediationWatchdogs(db, {
-				nowIso: typeof body.nowIso === "string" ? body.nowIso : undefined,
+				projectId: getProjectId(c),
 				minComparableRequests:
-					typeof body.minComparableRequests === "number"
-						? body.minComparableRequests
+					typeof body.minComparableRequests === "number" &&
+					Number.isFinite(body.minComparableRequests)
+						? Math.max(50, body.minComparableRequests)
 						: undefined,
+				logger: runtime.logger,
 			});
 			return c.json({ summary, ...summary });
 		});