@vantageos/backend-doctor 0.1.0

package/fixtures/vp-by-tool-day158.csv

@@ -0,0 +1,190 @@
+table,outil,T2_verdict,T2_composant_cible,crud,operation_detail,search_mecanisme,surface,rbac_qui,scope_enforcement,namespace_ou_org,tokens_estime_contexte,doublon_alias,rbac_coherence_table,rbac_adjustment_needed,table_purpose,table_conserver_supprimer,statut_suppression
+agentEngine/wakeupPool::globals,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::internalState,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::payload,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::pendingCancelation,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::pendingCompletion,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::pendingStart,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::runStatus,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/wakeupPool::work,(aucun — component-owned agentEngine/wakeupPool),COMPONENT-OWNED,agentEngine/wakeupPool,n/a,,,component,n/a,n/a,component:agentEngine/wakeupPool,0,,n/a,n/a — non exposee MCP,Wakeup pool du agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::globals,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::internalState,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::payload,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::pendingCancelation,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::pendingCompletion,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::pendingStart,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::runStatus,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow/workpool::work,(aucun — component-owned agentEngine/workflow/workpool),COMPONENT-OWNED,agentEngine/workflow/workpool,n/a,,,component,n/a,n/a,component:agentEngine/workflow/workpool,0,,n/a,n/a — non exposee MCP,Workpool du workflow agent-engine,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+agentEngine/workflow::config,(aucun — component-owned agentEngine/workflow),COMPONENT-OWNED,agentEngine/workflow,n/a,,,component,n/a,n/a,component:agentEngine/workflow,0,,n/a,n/a — non exposee MCP,Workflow durable du agent-engine,"CONSERVER: table interne du component @convex-dev/workflow, geree par la librairie",
+agentEngine/workflow::events,(aucun — component-owned agentEngine/workflow),COMPONENT-OWNED,agentEngine/workflow,n/a,,,component,n/a,n/a,component:agentEngine/workflow,0,,n/a,n/a — non exposee MCP,Workflow durable du agent-engine,"CONSERVER: table interne du component @convex-dev/workflow, geree par la librairie",
+agentEngine/workflow::onCompleteFailures,(aucun — component-owned agentEngine/workflow),COMPONENT-OWNED,agentEngine/workflow,n/a,,,component,n/a,n/a,component:agentEngine/workflow,0,,n/a,n/a — non exposee MCP,Workflow durable du agent-engine,"CONSERVER: table interne du component @convex-dev/workflow, geree par la librairie",
+agentEngine/workflow::steps,(aucun — component-owned agentEngine/workflow),COMPONENT-OWNED,agentEngine/workflow,n/a,,,component,n/a,n/a,component:agentEngine/workflow,0,,n/a,n/a — non exposee MCP,Workflow durable du agent-engine,"CONSERVER: table interne du component @convex-dev/workflow, geree par la librairie",
+agentEngine/workflow::workflows,(aucun — component-owned agentEngine/workflow),COMPONENT-OWNED,agentEngine/workflow,n/a,,,component,n/a,n/a,component:agentEngine/workflow,0,,n/a,n/a — non exposee MCP,Workflow durable du agent-engine,"CONSERVER: table interne du component @convex-dev/workflow, geree par la librairie",
+agentEngine::agents,(aucun — component-owned agentEngine),COMPONENT-OWNED,agentEngine,n/a,,,component,n/a,n/a,component:agentEngine,0,,n/a,n/a — non exposee MCP,Moteur d'agents durable (sessions/jobs/agents),"CONSERVER: table interne du component @vantageos/agent-engine, geree par la librairie",
+agentEngine::callerStepInvocations,(aucun — component-owned agentEngine),COMPONENT-OWNED,agentEngine,n/a,,,component,n/a,n/a,component:agentEngine,0,,n/a,n/a — non exposee MCP,Moteur d'agents durable (sessions/jobs/agents),"CONSERVER: table interne du component @vantageos/agent-engine, geree par la librairie",
+agentEngine::durableJobs,(aucun — component-owned agentEngine),COMPONENT-OWNED,agentEngine,n/a,,,component,n/a,n/a,component:agentEngine,0,,n/a,n/a — non exposee MCP,Moteur d'agents durable (sessions/jobs/agents),"CONSERVER: table interne du component @vantageos/agent-engine, geree par la librairie",
+agentEngine::sessionEvents,(aucun — component-owned agentEngine),COMPONENT-OWNED,agentEngine,n/a,,,component,n/a,n/a,component:agentEngine,0,,n/a,n/a — non exposee MCP,Moteur d'agents durable (sessions/jobs/agents),"CONSERVER: table interne du component @vantageos/agent-engine, geree par la librairie",
+agentEngine::sessions,(aucun — component-owned agentEngine),COMPONENT-OWNED,agentEngine,n/a,,,component,n/a,n/a,component:agentEngine,0,,n/a,n/a — non exposee MCP,Moteur d'agents durable (sessions/jobs/agents),"CONSERVER: table interne du component @vantageos/agent-engine, geree par la librairie",
+agentEngine::toolApprovals,(aucun — component-owned agentEngine),COMPONENT-OWNED,agentEngine,n/a,,,component,n/a,n/a,component:agentEngine,0,,n/a,n/a — non exposee MCP,Moteur d'agents durable (sessions/jobs/agents),"CONSERVER: table interne du component @vantageos/agent-engine, geree par la librairie",
+briefingNotes,create_briefing_note,CORE,coeur,CREATE,insere 1 ligne briefingNotes,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),106,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,"Notes de decision org-scope, BM25",CONSERVER,
+briefingNotes,get_briefing_note,CORE,coeur,READ-GET,lit 1 briefing note par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,88,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),"Notes de decision org-scope, BM25",CONSERVER,
+briefingNotes,list_briefing_notes,CORE,coeur,READ-LIST,liste briefing notes filtrees topic/org,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,153,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),"Notes de decision org-scope, BM25",CONSERVER,
+briefingNotes,search_briefing_notes_by_keyword,CORE,coeur,SEARCH,BM25 Convex searchIndex sur content,BM25 keyword (Convex searchIndex search_content) | index Convex | pas de curseur (.take) | defaut:20 max:200,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,168,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),"Notes de decision org-scope, BM25",CONSERVER,
+briefingNotes,update_briefing_note,CORE,coeur,UPDATE,patch champs briefingNotes,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),97,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,"Notes de decision org-scope, BM25",CONSERVER,
+businessUnits,create_bu,COMPOSANT-FAIBLE,business-units,CREATE,insere 1 ligne businessUnits,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=orchestratorId),139,,INCOHERENT read=org write=identite+master,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Registre des business units ElPi Corp,CONSERVER,
+businessUnits,delete_bu,COMPOSANT-FAIBLE,business-units,DELETE,supprime 1 business unit,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,70,,INCOHERENT read=org write=identite+master,"OK — fleet-interne, scope master approprie",Registre des business units ElPi Corp,CONSERVER,
+businessUnits,get_bu,COMPOSANT-FAIBLE,business-units,READ-GET,lit 1 business unit par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,70,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Registre des business units ElPi Corp,CONSERVER,
+businessUnits,list_bus,COMPOSANT-FAIBLE,business-units,READ-LIST,liste business units,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,110,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Registre des business units ElPi Corp,CONSERVER,
+businessUnits,update_bu,COMPOSANT-FAIBLE,business-units,UPDATE,patch champs business unit,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),110,,INCOHERENT read=org write=identite+master,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Registre des business units ElPi Corp,CONSERVER,
+chunks,(aucun — table orpheline hors schema),HORS-SCHEMA,orphelin-legacy,n/a,,,hors-MCP,n/a,n/a,n/a,0,,n/a,n/a — non exposee MCP,"Chunks RAG legacy (component app, hors schema.ts)","SUPPRIMER: orpheline hors schema.ts, aucune ref code, RAG reel vit sous le component rag",
+client_org_mapping,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,orgId,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Source de verite du scope multi-tenant (withOrgScope),CONSERVER,
+components,delete_component,COMPOSANT-FAIBLE,fleet-registry,DELETE,supprime 1 composant,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,71,,INCOHERENT read=org write=identite+master,"OK — fleet-interne, scope master approprie",Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",
+components,get_component,COMPOSANT-FAIBLE,fleet-registry,READ-GET,lit 1 composant par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,75,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",
+components,list_components,COMPOSANT-FAIBLE,fleet-registry,READ-LIST,liste composants filtres par type,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,113,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",
+components,register_component,COMPOSANT-FAIBLE,fleet-registry,CREATE,insere 1 ligne components (registry),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),95,,INCOHERENT read=org write=identite+master,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",
+components,search_components,COMPOSANT-FAIBLE,fleet-registry,SEARCH,alias deprecie de search_components_by_keyword,"substring scan (.collect()+.includes(), AUCUN index) | table entiere en memoire | pas de curseur | defaut:50 max:non-borne",MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,78,GARDER — supprimer search_components_by_keyword (usage flotte: search_components 4 / search_components_by_keyword 0),INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",
+components,search_components_by_keyword,COMPOSANT-FAIBLE,fleet-registry,SEARCH,scan substring nom/team (pas d'index),"substring scan (.collect()+.includes(), AUCUN index) | table entiere en memoire | pas de curseur | defaut:50 max:non-borne",MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,88,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: search_components)
+components,update_component,COMPOSANT-FAIBLE,fleet-registry,UPDATE,patch champs composant,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,80,,INCOHERENT read=org write=identite+master,"OK — fleet-interne, scope master approprie",Registre backup agents/skills/hooks fleet,"SUPPRIMER (a confirmer): doublon de VantageRegistry (source canonique composants), 0 donnee prod",
+credentialsAuditLog,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Audit append-only d'emission de bearer,CONSERVER,
+credentialsRateLimits,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Rate limit d'emission de credentials,CONSERVER,
+diary,create_diary,CORE,coeur,CREATE,alias de write_diary,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=author),97,SUPPRIMER — doublon; garder write_diary (usage flotte: create_diary 0 / write_diary 24),INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Journal quotidien des orchestrateurs,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: write_diary)
+diary,get_diary,CORE,coeur,READ-GET,lit 1 entree diary,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,75,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Journal quotidien des orchestrateurs,CONSERVER,
+diary,list_diaries,CORE,coeur,READ-LIST,liste entrees diary par orchestrateur,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,84,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Journal quotidien des orchestrateurs,CONSERVER,
+diary,write_diary,CORE,coeur,CREATE,insere/upsert entree diary du jour,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=orchestrator),90,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Journal quotidien des orchestrateurs,CONSERVER,
+errorLogs,get_error,AMBIGU,coeur,READ-GET,lit 1 erreur par id,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,78,,COHERENT(master),"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Log dedupe d'erreurs -> spawn auto-IRP,CONSERVER,
+errorLogs,list_errors,AMBIGU,coeur,READ-LIST,liste erreurs par deployment/severite,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,90,,COHERENT(master),"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Log dedupe d'erreurs -> spawn auto-IRP,CONSERVER,
+errorMonitorConfig,(aucun — hors surface MCP),COMPOSANT,deployment-monitoring,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,n/a — non exposee MCP,Config key/value du sous-systeme error-monitor,CONSERVER,
+errorMonitorFilterRules,(aucun — hors surface MCP),COMPOSANT,deployment-monitoring,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,n/a — non exposee MCP,Regles de filtrage de l'auto-IRP bot,CONSERVER,
+fixAttempts,add_fix_attempt,COMPOSANT,issue-tracking,CREATE,insere 1 ligne fixAttempts liee au pattern,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),100,,COHERENT(identite),CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Tentatives de fix (enfant de fixPatterns),CONSERVER,
+fixAttempts,create_fix_attempt,COMPOSANT,issue-tracking,CREATE,alias de add_fix_attempt,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),108,SUPPRIMER — doublon; garder add_fix_attempt (usage flotte: create_fix_attempt 0 / add_fix_attempt 2),COHERENT(identite),CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Tentatives de fix (enfant de fixPatterns),CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: add_fix_attempt)
+fixPatterns,check_fix,COMPOSANT,issue-tracking,RPC,alias de validate_fix,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,93,SUPPRIMER — doublon; garder validate_fix (usage flotte: check_fix 0 / validate_fix 2),INCOHERENT read=org write=identite+master,"OK — fleet-interne, scope master approprie",Base de connaissance root-cause (RAG),CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: validate_fix)
+fixPatterns,create_fix_pattern,COMPOSANT,issue-tracking,CREATE,insere 1 ligne fixPatterns,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),117,,INCOHERENT read=org write=identite+master,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Base de connaissance root-cause (RAG),CONSERVER,
+fixPatterns,get_fix_pattern,COMPOSANT,issue-tracking,READ-GET,lit 1 pattern par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,89,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Base de connaissance root-cause (RAG),CONSERVER,
+fixPatterns,link_issue_to_pattern,COMPOSANT,issue-tracking,RPC,ajoute issueId a linkedIssueIds,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,84,,INCOHERENT read=org write=identite+master,"OK — fleet-interne, scope master approprie",Base de connaissance root-cause (RAG),CONSERVER,
+fixPatterns,list_fix_patterns,COMPOSANT,issue-tracking,READ-LIST,liste patterns par projet,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,83,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Base de connaissance root-cause (RAG),CONSERVER,
+fixPatterns,search_fix_patterns,COMPOSANT,issue-tracking,SEARCH,alias deprecie de search_fix_patterns_by_semantic,"vectoriel cosine (embeddings RAG 1536d, namespace fixpatterns) | RAG namespace | pas de curseur | defaut:10 max:non-borne",MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,85,GARDER — supprimer search_fix_patterns_by_semantic (usage flotte: search_fix_patterns 3 / search_fix_patterns_by_semantic 0),INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Base de connaissance root-cause (RAG),CONSERVER,
+fixPatterns,search_fix_patterns_by_semantic,COMPOSANT,issue-tracking,SEARCH,vector RAG namespace fixpatterns + hydrate DB,"vectoriel cosine (embeddings RAG 1536d, namespace fixpatterns) | RAG namespace | pas de curseur | defaut:10 max:non-borne",MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,93,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Base de connaissance root-cause (RAG),CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: search_fix_patterns)
+fixPatterns,validate_fix,COMPOSANT,issue-tracking,RPC,patch validatedFix sur le pattern,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,89,,INCOHERENT read=org write=identite+master,"OK — fleet-interne, scope master approprie",Base de connaissance root-cause (RAG),CONSERVER,
+githubRepoMapping,add_repo_mapping,COMPOSANT,issue-tracking,CREATE,insere mapping repo<->orchestrateur,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,90,,INCOHERENT read=org write=master,"OK — fleet-interne, scope master approprie",Routage repo -> orchestrateur/projet,CONSERVER,
+githubRepoMapping,delete_repo_mapping,COMPOSANT,issue-tracking,DELETE,alias de remove_repo_mapping,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,88,SUPPRIMER — doublon; garder remove_repo_mapping (usage flotte: delete_repo_mapping 0 / remove_repo_mapping 1),INCOHERENT read=org write=master,"OK — fleet-interne, scope master approprie",Routage repo -> orchestrateur/projet,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: remove_repo_mapping)
+githubRepoMapping,get_repo_mapping,COMPOSANT,issue-tracking,READ-GET,lit 1 mapping par repo,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,83,,INCOHERENT read=org write=master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Routage repo -> orchestrateur/projet,CONSERVER,
+githubRepoMapping,list_repo_mappings,COMPOSANT,issue-tracking,READ-LIST,liste mappings repo GitHub,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,84,,INCOHERENT read=org write=master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Routage repo -> orchestrateur/projet,CONSERVER,
+githubRepoMapping,register_repo_mapping,COMPOSANT,issue-tracking,CREATE,alias de add_repo_mapping,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,100,SUPPRIMER — doublon; garder add_repo_mapping (usage flotte: register_repo_mapping 0 / add_repo_mapping 1),INCOHERENT read=org write=master,"OK — fleet-interne, scope master approprie",Routage repo -> orchestrateur/projet,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: add_repo_mapping)
+githubRepoMapping,remove_repo_mapping,COMPOSANT,issue-tracking,DELETE,supprime 1 mapping repo,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,80,,INCOHERENT read=org write=master,"OK — fleet-interne, scope master approprie",Routage repo -> orchestrateur/projet,CONSERVER,
+iframeEmbedSessions,(aucun — hors surface MCP),COMPOSANT-FAIBLE,iframe-embed,n/a,,,hors-MCP,fleet_interne,n/a,orgId,0,,n/a,n/a — non exposee MCP,Sessions de l'embed Gen UI iframe (SEP-1865),"SUPPRIMER (a confirmer): feature iframe embed non deployee, 0 donnee prod",
+issueStats,(aucun — hors surface MCP),COMPOSANT,issue-tracking,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,n/a — non exposee MCP,Metriques par repo du cluster issues,CONSERVER,
+issues,get_issue,COMPOSANT,issue-tracking,READ-GET,lit 1 issue par repo+numero,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,81,,COHERENT(master),"OK — fleet-interne, scope master approprie",Issues GitHub (dev-ops),CONSERVER,
+issues,issue_stats,COMPOSANT,issue-tracking,RPC,"agrege {open,fixed,closed,total} par repo",,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,71,,COHERENT(master),"OK — fleet-interne, scope master approprie",Issues GitHub (dev-ops),CONSERVER,
+issues,link_commit_to_issue,COMPOSANT,issue-tracking,RPC,ajoute commitSha a fixCommits,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,94,,COHERENT(master),"OK — fleet-interne, scope master approprie",Issues GitHub (dev-ops),CONSERVER,
+issues,list_issues,COMPOSANT,issue-tracking,READ-LIST,liste issues GitHub par orchestrateur,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,87,,COHERENT(master),"OK — fleet-interne, scope master approprie",Issues GitHub (dev-ops),CONSERVER,
+issues,update_issue_status,COMPOSANT,issue-tracking,TRANSITION,patch status issue uniquement,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,83,,COHERENT(master),"OK — fleet-interne, scope master approprie",Issues GitHub (dev-ops),CONSERVER,
+issues,verify_issue,COMPOSANT,issue-tracking,RPC,status -> verified + verifiedBy,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,84,,COHERENT(master),"OK — fleet-interne, scope master approprie",Issues GitHub (dev-ops),CONSERVER,
+kbUploads,generate_upload_url,AMBIGU,coeur,RPC,"mint URL upload Convex storage, orgId lie",,MCP-public,toutes_orgs(namespace-derived),"resolveOrgContext(in-handler, fail-closed AUTH_NO_ORG_ID)",namespace(derive orgId via oauthCtx),144,,COHERENT(org-derive),"OK — patron de reference (org derive de l'identite verifiee, fail-closed); a generaliser fleet-wide",Ownership des docs KB (auth-gating anti cross-tenant),CONSERVER,
+licenses,(aucun — hors surface MCP),COMPOSANT,licensing-selfhost,n/a,,,hors-MCP,fleet_interne,n/a,orgId,0,,n/a,n/a — non exposee MCP,Licences produit VantagePeers Self-host,"SUPPRIMER: appartient au produit Self-host (regle absolue CLAUDE.md), pas au Cloud multi-tenant",
+mandates,accept_mandate,AMBIGU,coeur,TRANSITION,statut mandate -> accepted,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),83,,INCOHERENT read=org write=identite+public,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Mandats de service payant inter-orchestrateur,CONSERVER,
+mandates,check_mandate_spending,AMBIGU,coeur,RPC,alias de validate_mandate_spending,,MCP-public,toutes_orgs,AUCUN(public_no_scope_check),aucun,91,SUPPRIMER — doublon; garder validate_mandate_spending (usage flotte: check_mandate_spending 0 / validate_mandate_spending 0),INCOHERENT read=org write=identite+public,"OK — sans etat, aucun acces donnee",Mandats de service payant inter-orchestrateur,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: validate_mandate_spending)
+mandates,create_mandate,AMBIGU,coeur,CREATE,insere 1 ligne mandates (budget),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=requestedBy),88,,INCOHERENT read=org write=identite+public,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Mandats de service payant inter-orchestrateur,CONSERVER,
+mandates,get_mandate,AMBIGU,coeur,READ-GET,lit 1 mandate par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,89,,INCOHERENT read=org write=identite+public,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Mandats de service payant inter-orchestrateur,CONSERVER,
+mandates,list_mandates,AMBIGU,coeur,READ-LIST,liste mandates filtres,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,88,,INCOHERENT read=org write=identite+public,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Mandats de service payant inter-orchestrateur,CONSERVER,
+mandates,settle_mandate,AMBIGU,coeur,TRANSITION,cloture mandate + finalCost,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),89,,INCOHERENT read=org write=identite+public,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Mandats de service payant inter-orchestrateur,CONSERVER,
+mandates,update_mandate,AMBIGU,coeur,UPDATE,patch champs mandate,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),90,,INCOHERENT read=org write=identite+public,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Mandats de service payant inter-orchestrateur,CONSERVER,
+mandates,validate_mandate_spending,AMBIGU,coeur,RPC,"calcule solde vs limites, sans ecriture",,MCP-public,toutes_orgs,AUCUN(public_no_scope_check),aucun,83,,INCOHERENT read=org write=identite+public,"OK — sans etat, aucun acces donnee",Mandats de service payant inter-orchestrateur,CONSERVER,
+mcpTenants,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,orgId,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Routage bearer -> deploiement Convex (VIP),CONSERVER,
+memories,export_okf_bundle,CORE,coeur,RPC,exporte namespace en tarball OKF signe,,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),70,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,get_episode,CORE,coeur,READ-GET,lit episode via memories:getMemory,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,95,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,get_memory,CORE,coeur,READ-GET,lit 1 memoire par memoryId,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,79,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,hybrid_search,CORE,coeur,SEARCH,fusion RRF vector+BM25 via RAG,hybrid RRF (fusion vector+BM25 RAG) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),158,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,import_okf_bundle,CORE,coeur,RPC,"importe bundle OKF, dedup par contenu",,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceWrite),namespace(arg=targetNamespace),89,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,list_episodes,CORE,coeur,READ-LIST,liste episodes via memories:listMemories,,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),75,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,list_memories,CORE,coeur,READ-LIST,liste memories filtrees namespace/type,,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),85,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,recall,CORE,coeur,SEARCH,"vector search RAG, seuil score 0.15",vectoriel cosine (embeddings RAG 1536d text-embedding-3-small) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),149,GARDER — supprimer search_memories_by_semantic (usage flotte: recall 310 / search_memories_by_semantic 0),INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,search_episodes_by_keyword,CORE,coeur,SEARCH,BM25 RAG sur episodes (memories),BM25 keyword (RAG) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),100,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,search_episodes_by_semantic,CORE,coeur,SEARCH,vector RAG sur episodes (memories),vectoriel cosine (embeddings RAG 1536d) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),101,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,search_memories_by_keyword,CORE,coeur,SEARCH,BM25 full-text RAG sur content memories,BM25 keyword (RAG) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),96,SUPPRIMER — doublon; garder text_search (usage flotte: search_memories_by_keyword 0 / text_search 48),INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: text_search)
+memories,search_memories_by_semantic,CORE,coeur,SEARCH,alias de recall (vector cosine RAG),vectoriel cosine (embeddings RAG 1536d) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),95,SUPPRIMER — doublon; garder recall (usage flotte: search_memories_by_semantic 0 / recall 310),INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: recall)
+memories,soft_delete_document,CORE,coeur,DELETE,marque isLatest=false sur tous les chunks docId,,MCP-public,toutes_orgs(namespace-derived),"resolveOrgContext(in-handler, fail-closed AUTH_NO_ORG_ID)",namespace(derive orgId via oauthCtx),115,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,"OK — patron de reference (org derive de l'identite verifiee, fail-closed); a generaliser fleet-wide",Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,soft_delete_memory,CORE,coeur,DELETE,"marque isLatest=false, conserve la ligne",,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,81,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,store_document_chunked,CORE,coeur,CREATE,"extrait texte, chunk ~512tok, insere memories",,MCP-public,toutes_orgs(namespace-derived),"resolveOrgContext(in-handler, fail-closed AUTH_NO_ORG_ID)",namespace(derive orgId via oauthCtx),198,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,"OK — patron de reference (org derive de l'identite verifiee, fail-closed); a generaliser fleet-wide",Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,store_episode,CORE,coeur,CREATE,insere episode dans memories (type=episode),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),106,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,store_memory,CORE,coeur,CREATE,insere 1 ligne memories + embedding RAG,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),92,,INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memories,text_search,CORE,coeur,SEARCH,alias de search_memories_by_keyword (BM25 RAG),BM25 keyword (RAG) | RAG namespace | pas de curseur | defaut:10 max:non-borne,MCP-public,toutes_orgs(scope-filtered),bearer_scope_profile(checkNamespaceRead),namespace(arg=namespace),151,GARDER — supprimer search_memories_by_keyword (usage flotte: text_search 48 / search_memories_by_keyword 0),INCOHERENT read=ns+org write=identite+master+ns+org-derive,CORRIGER: lier le namespace a l'orgId verifie; refuser un namespace cross-org (namespace fourni = risque de fuite),Memoire typee multi-tenant (produit central) + RAG,CONSERVER,
+memoryEmbeddings,(aucun — table orpheline hors schema),HORS-SCHEMA,orphelin-legacy,n/a,,,hors-MCP,n/a,n/a,n/a,0,,n/a,n/a — non exposee MCP,"Embeddings RAG legacy (component app, hors schema.ts)","SUPPRIMER: RAG legacy hors schema.ts, aucune ref code (RAG reel sous component rag)",
+memorySearch,(aucun — table orpheline hors schema),HORS-SCHEMA,orphelin-legacy,n/a,,,hors-MCP,n/a,n/a,n/a,0,,n/a,n/a — non exposee MCP,"Index recherche RAG legacy (component app, hors schema.ts)","SUPPRIMER: RAG legacy hors schema.ts, aucune ref code (RAG reel sous component rag)",
+messageReceipts,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,namespace,0,,n/a,n/a — non exposee MCP,Accuses de lecture (enfant de messages),CONSERVER,
+messages,check_messages,CORE,coeur,READ-LIST,renvoie enveloppe messages non lus,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,83,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,delete_message,CORE,coeur,DELETE,supprime 1 message par id,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),85,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,get_message,CORE,coeur,READ-GET,lit 1 message par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,106,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,list_broadcast_status,CORE,coeur,READ-LIST,statut lecture d'un message broadcast,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,85,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,list_messages,CORE,coeur,READ-LIST,liste messages filtres channel/from/day,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,76,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,mark_as_read,CORE,coeur,TRANSITION,insere messageReceipt readAt=now,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),81,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,search_messages_by_keyword,CORE,coeur,SEARCH,BM25 Convex searchIndex sur content,BM25 keyword (Convex searchIndex search_content) | index Convex | pas de curseur (.take) | defaut:20 max:200,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,95,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+messages,send_message,CORE,coeur,RPC,insere message + receipts par destinataire,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=from),93,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Messagerie inter-orchestrateur/client tenant-scopee,CONSERVER,
+missionTemplates,get_mission_template,CORE,coeur,READ-GET,lit 1 template par nom,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,75,,INCOHERENT read=org write=identite+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Templates de mission (IRP),CONSERVER,
+missionTemplates,instantiate_template_into_mission,CORE,coeur,RPC,"lit template, cree mission+tasks depuis steps",,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,102,,INCOHERENT read=org write=identite+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Templates de mission (IRP),CONSERVER,
+missionTemplates,update_mission_template,CORE,coeur,UPDATE,upsert template (create-if-absent),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),94,,INCOHERENT read=org write=identite+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Templates de mission (IRP),CONSERVER,
+missions,create_mission,CORE,coeur,CREATE,insere 1 ligne missions,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),101,,INCOHERENT read=org write=identite+master,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Conteneur de travail org-scope,CONSERVER,
+missions,get_mission,CORE,coeur,READ-GET,lit 1 mission par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,78,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Conteneur de travail org-scope,CONSERVER,
+missions,list_missions,CORE,coeur,READ-LIST,liste missions filtrees project/pilot/status,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,92,,INCOHERENT read=org write=identite+master,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Conteneur de travail org-scope,CONSERVER,
+missions,update_mission,CORE,coeur,UPDATE,patch champs mission (statut/pilot/etc),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=pilot),83,,INCOHERENT read=org write=identite+master,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Conteneur de travail org-scope,CONSERVER,
+missions,update_mission_status,CORE,coeur,TRANSITION,patch status mission uniquement,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,80,,INCOHERENT read=org write=identite+master,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Conteneur de travail org-scope,CONSERVER,
+monitoredDeployments,add_deployment,COMPOSANT,deployment-monitoring,CREATE,insere 1 ligne monitoredDeployments,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,112,,COHERENT(master),"OK — fleet-interne, scope master approprie",Registre des deploiements Convex surveilles,CONSERVER,
+monitoredDeployments,delete_deployment,COMPOSANT,deployment-monitoring,DELETE,alias de remove_deployment,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,81,SUPPRIMER — doublon; garder remove_deployment (usage flotte: delete_deployment 0 / remove_deployment 1),COHERENT(master),"OK — fleet-interne, scope master approprie",Registre des deploiements Convex surveilles,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: remove_deployment)
+monitoredDeployments,register_deployment,COMPOSANT,deployment-monitoring,CREATE,alias de add_deployment,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,121,SUPPRIMER — doublon; garder add_deployment (usage flotte: register_deployment 0 / add_deployment 1),COHERENT(master),"OK — fleet-interne, scope master approprie",Registre des deploiements Convex surveilles,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: add_deployment)
+monitoredDeployments,remove_deployment,COMPOSANT,deployment-monitoring,DELETE,supprime 1 deployment surveille,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,74,,COHERENT(master),"OK — fleet-interne, scope master approprie",Registre des deploiements Convex surveilles,CONSERVER,
+n/a,validate_okf_bundle,N/A,hors-table(stateless),RPC,"verifie conformite bundle OKF, sans import",,MCP-public,toutes_orgs,AUCUN(public_no_scope_check),aucun,94,,COHERENT(public),"OK — sans etat, aucun acces donnee","Outils stateless sans table (validators, whoami)",CONSERVER,
+n/a,validate_task_payload,N/A,hors-table(stateless),RPC,"linter statique payload create_task, sans DB",,MCP-public,toutes_orgs,AUCUN(public_no_scope_check),aucun,104,,COHERENT(public),"OK — sans etat, aucun acces donnee","Outils stateless sans table (validators, whoami)",CONSERVER,
+n/a,whoami,N/A,hors-table(stateless),RPC,renvoie scope resolu du caller,,MCP-public,toutes_orgs,AUCUN(public_no_scope_check),aucun,95,,COHERENT(public),"OK — sans etat, aucun acces donnee","Outils stateless sans table (validators, whoami)",CONSERVER,
+oauthClients,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",2e impl OAuth 2.1 DCR (doublon oauth_clients),"SUPPRIMER (a confirmer): doublon OAuth 2.1 DCR de oauth_clients, consolider sur oauth_* (0 donnee prod)",
+oauthTokens,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Tokens OAuth 2.1 DCR (doublon oauth_access_tokens),"SUPPRIMER (a confirmer): doublon de oauth_access_tokens, consolider sur oauth_* (0 donnee prod)",
+oauth_access_tokens,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Tokens d'acces OAuth — gate chaque appel MCP,CONSERVER,
+oauth_audit_log,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Audit des mutations de scope admin,CONSERVER,
+oauth_authorization_codes,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Codes d'autorisation OAuth (courts),CONSERVER,
+oauth_clients,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Clients OAuth DCR (integrations externes),CONSERVER,
+oauth_refresh_tokens,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Refresh tokens OAuth,CONSERVER,
+oauth_scope_profiles,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Profils de scope/permissions OAuth,CONSERVER,
+okfDurableExportEntries,(aucun — hors surface MCP),AMBIGU,coeur,n/a,,,hors-MCP,toutes_orgs(scope-filtered),n/a,namespace,0,,n/a,n/a — non exposee MCP,Sortie serialisee de l'export OKF,CONSERVER,
+okfDurableExportProgress,(aucun — hors surface MCP),AMBIGU,coeur,n/a,,,hors-MCP,toutes_orgs(scope-filtered),n/a,namespace,0,,n/a,n/a — non exposee MCP,Progression du job d'export OKF durable,CONSERVER,
+profiles,get_profile,CORE,coeur,READ-GET,lit 1 profil orchestrateur,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,70,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Identite des orchestrateurs (infra fleet),CONSERVER,
+profiles,list_peers,CORE,coeur,READ-LIST,liste profils pairs actifs,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,81,,INCOHERENT read=org write=identite,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Identite des orchestrateurs (infra fleet),CONSERVER,
+profiles,set_summary,CORE,coeur,UPDATE,upsert resume dynamique du profil,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=orchestratorId),92,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Identite des orchestrateurs (infra fleet),CONSERVER,
+profiles,update_profile,CORE,coeur,UPDATE,upsert profil (identite + specialite),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=orchestratorId),89,,INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Identite des orchestrateurs (infra fleet),CONSERVER,
+profiles,update_summary,CORE,coeur,UPDATE,alias de set_summary (profiles:updateDynamic),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=orchestratorId),99,SUPPRIMER — doublon; garder set_summary (usage flotte: update_summary 0 / set_summary 64),INCOHERENT read=org write=identite,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Identite des orchestrateurs (infra fleet),CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: set_summary)
+rag/workpool::globals,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::internalState,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::payload,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::pendingCancelation,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::pendingCompletion,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::pendingStart,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::runStatus,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag/workpool::work,(aucun — component-owned rag/workpool),COMPONENT-OWNED,rag/workpool,n/a,,,component,n/a,n/a,component:rag/workpool,0,,n/a,n/a — non exposee MCP,Workpool interne du component rag,"CONSERVER: table interne du component @convex-dev/workpool, geree par la librairie",
+rag::chunks,(aucun — component-owned rag),COMPONENT-OWNED,rag,n/a,,,component,n/a,n/a,component:rag,0,,n/a,n/a — non exposee MCP,Store RAG (namespaces/entries/chunks/content),"CONSERVER: table interne du component @convex-dev/rag, geree par la librairie",
+rag::content,(aucun — component-owned rag),COMPONENT-OWNED,rag,n/a,,,component,n/a,n/a,component:rag,0,,n/a,n/a — non exposee MCP,Store RAG (namespaces/entries/chunks/content),"CONSERVER: table interne du component @convex-dev/rag, geree par la librairie",
+rag::entries,(aucun — component-owned rag),COMPONENT-OWNED,rag,n/a,,,component,n/a,n/a,component:rag,0,,n/a,n/a — non exposee MCP,Store RAG (namespaces/entries/chunks/content),"CONSERVER: table interne du component @convex-dev/rag, geree par la librairie",
+rag::namespaces,(aucun — component-owned rag),COMPONENT-OWNED,rag,n/a,,,component,n/a,n/a,component:rag,0,,n/a,n/a — non exposee MCP,Store RAG (namespaces/entries/chunks/content),"CONSERVER: table interne du component @convex-dev/rag, geree par la librairie",
+recurringTasks,create_recurring_task,CORE,coeur,CREATE,insere 1 ligne recurringTasks (cron),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),93,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Generateur cron de taches,CONSERVER,
+recurringTasks,delete_recurring_task,CORE,coeur,DELETE,supprime 1 tache recurrente,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,76,,INCOHERENT read=org write=identite+master+org,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Generateur cron de taches,CONSERVER,
+recurringTasks,get_recurring_task,CORE,coeur,READ-GET,lit 1 tache recurrente par id,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,112,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Generateur cron de taches,CONSERVER,
+recurringTasks,list_recurring_tasks,CORE,coeur,READ-LIST,liste taches recurrentes,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,85,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Generateur cron de taches,CONSERVER,
+recurringTasks,pause_recurring_task,CORE,coeur,TRANSITION,isActive -> false,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,74,,INCOHERENT read=org write=identite+master+org,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Generateur cron de taches,CONSERVER,
+recurringTasks,resume_recurring_task,CORE,coeur,TRANSITION,isActive -> true,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,72,,INCOHERENT read=org write=identite+master+org,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Generateur cron de taches,CONSERVER,
+recurringTasks,update_recurring_task,CORE,coeur,UPDATE,patch champs recurringTasks,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,90,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Generateur cron de taches,CONSERVER,
+taskClosureConfig,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,global,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Config du gate de cloture/facturation,CONSERVER,
+tasks,add_task_dependency,CORE,coeur,RPC,ajoute id a dependsOn via tasks:update,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),88,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,billing_summary_by_project,CORE,coeur,RPC,agrege actualMinutes par projet/periode,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,237,,INCOHERENT read=org write=identite+master+org,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Unite de travail + gate de facturation,CONSERVER,
+tasks,block_task,CORE,coeur,TRANSITION,statut -> blocked + raison,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),91,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,bulk_complete_tasks,CORE,coeur,RPC,complete N tasks par filtre (dry-run defaut),,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,341,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Unite de travail + gate de facturation,CONSERVER,
+tasks,checkout_task,CORE,coeur,TRANSITION,claim atomique todo -> in_progress,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),87,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,complete_task,CORE,coeur,TRANSITION,todo/in_progress -> done + completionNote,,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),102,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,create_task,CORE,coeur,CREATE,"insere 1 ligne tasks, status initial",,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=createdBy),92,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,create_task_dependency,CORE,coeur,RPC,alias de add_task_dependency (dependsOn),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),97,SUPPRIMER — doublon; garder add_task_dependency (usage flotte: create_task_dependency 0 / add_task_dependency 142),INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,SUPPRIMÉ @ PR#1169 303cd48 day159 (survivor: add_task_dependency)
+tasks,delete_task,CORE,coeur,DELETE,supprime 1 tache (createdBy ou system),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),77,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,get_task,CORE,coeur,READ-GET,lit 1 tache par id (string non-typed),,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,105,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Unite de travail + gate de facturation,CONSERVER,
+tasks,improvisation_digest,CORE,coeur,RPC,scan tasks+messages+memories sans footer VP-Sources,,MCP-public,fleet_interne,bearer_scope_profile(isMasterScope),global,173,,INCOHERENT read=org write=identite+master+org,"REVOIR: master contourne le scope tenant sur une table client-facing; confirmer admin-only, jamais un token client",Unite de travail + gate de facturation,CONSERVER,
+tasks,list_tasks,CORE,coeur,READ-LIST,liste tasks filtrees org/status/assignee,,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,143,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Unite de travail + gate de facturation,CONSERVER,
+tasks,list_tasks_by_mission,CORE,coeur,READ-LIST,"liste tasks d'une mission, pagine",,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,90,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Unite de travail + gate de facturation,CONSERVER,
+tasks,search_tasks_by_keyword,CORE,coeur,SEARCH,BM25 Convex searchIndex sur title,BM25 keyword (Convex searchIndex search_title) | index Convex | pas de curseur (.take) | defaut:20 max:200,MCP-public,toutes_orgs(in-handler-filtered),"filterByOrgScope(in-handler, post-query)",orgId/allowedOrchestrators,90,,INCOHERENT read=org write=identite+master+org,OK lecture org-scopee; requete indexee sur orgId au lieu d'un filtre post-query (perf),Unite de travail + gate de facturation,CONSERVER,
+tasks,start_task,CORE,coeur,TRANSITION,"todo -> in_progress, verifie dependances",,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),77,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+tasks,update_task,CORE,coeur,UPDATE,patch champs tasks (titre/statut/etc),,MCP-public,toutes_orgs(identity-gated),bearer_scope_profile(checkFromAllowed),clerkUserId/orchestratorId(arg=callerOrchestrator),84,,INCOHERENT read=org write=identite+master+org,CORRIGER: scoper l'ecriture sur orgId (withOrgScope); aujourd'hui basee sur l'arg orchestrateur fourni = aucune frontiere tenant,Unite de travail + gate de facturation,CONSERVER,
+userBearerTokens,(aucun — hors surface MCP),CORE,coeur,n/a,,,hors-MCP,fleet_interne,n/a,clerkUserId,0,,n/a,"n/a — primitive d'auth, non exposee MCP (applique le scope pour les autres)",Echange bearer Clerk JWT (webapp/extension),CONSERVER,
+vp_migrations,(aucun — table orpheline hors schema),HORS-SCHEMA,orphelin-legacy,n/a,,,hors-MCP,n/a,n/a,n/a,0,,n/a,n/a — non exposee MCP,"Table de migration legacy (component app, hors schema.ts)","SUPPRIMER: table migration legacy hors schema.ts, aucune ref code",
+TOTAL,,,,,,,,,,,10721,,,,,,

package/fixtures/vp-convex/.github/workflows/npm-publish.yml

@@ -0,0 +1,163 @@
+name: Publish to npm
+
+# Two trigger paths:
+#   1. release.published — fires when a GitHub release is published. The release
+#      body MUST contain `ETA_APPROVED_TASK_ID=k<32hex>` and
+#      `ETA_APPROVED_COMMIT_SHA=<7-40 hex>` (one per line, case-insensitive keys).
+#      Both tokens are extracted and feed the SAME verification steps as the
+#      workflow_dispatch path — release.published is NOT a trusted bypass.
+#   2. workflow_dispatch — manual path with Eta-approval inputs. Mirrors the
+#      Day 82 npm publish protocol (ETA_APPROVED_TASK_ID + ETA_APPROVED_COMMIT_SHA)
+#      so orchestrators can get OIDC --provenance attestation without publishing
+#      from a local sandbox (which refuses --provenance with "Automatic provenance
+#      generation not supported for provider: null").
+#
+# Validation order (BOTH paths):
+#   a. checked-out SHA == resolved ETA_APPROVED_COMMIT_SHA (single source of truth)
+#   b. Feature D HTTP action /api/eta/verify-publish-token verifies the VP task
+#      exists, is closed by eta with [ETA-APPROVED] marker, is ≤60 min old,
+#      and cites the same SHA. Same gate as the local enforce-eta-approval hook.
+#   c. Only then build + publish.
+
+on:
+  release:
+    types: [published]
+
+  workflow_dispatch:
+    inputs:
+      eta_approved_task_id:
+        description: 'VP task id closed by Eta with [ETA-APPROVED] marker (e.g. k177qvth538kvc8txt38zsdzzd88m7j8)'
+        required: true
+        type: string
+      eta_approved_commit_sha:
+        description: 'Git HEAD SHA at the time Eta issued the APPROVED verdict (must match workflow checkout)'
+        required: true
+        type: string
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: npm
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout (workflow_dispatch — at the Eta-approved SHA)
+        if: github.event_name == 'workflow_dispatch'
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.eta_approved_commit_sha }}
+
+      - name: Checkout (release — at the release tag)
+        if: github.event_name == 'release'
+        uses: actions/checkout@v4
+
+      - name: Extract Eta-approval tokens from release body (release only)
+        id: extract_release_tokens
+        if: github.event_name == 'release'
+        env:
+          RELEASE_BODY: ${{ github.event.release.body }}
+        run: |
+          set -eu
+          # Case-insensitive line-anchored regex match for the two tokens.
+          TASK_ID=$(printf '%s\n' "$RELEASE_BODY" | grep -iEo '^[[:space:]]*ETA_APPROVED_TASK_ID[[:space:]]*=[[:space:]]*k[0-9a-f]{32}[[:space:]]*$' | head -n1 | sed -E 's/^[[:space:]]*[Ee][Tt][Aa]_[Aa][Pp][Pp][Rr][Oo][Vv][Ee][Dd]_[Tt][Aa][Ss][Kk]_[Ii][Dd][[:space:]]*=[[:space:]]*//' | tr -d '[:space:]' || true)
+          SHA=$(printf '%s\n' "$RELEASE_BODY" | grep -iEo '^[[:space:]]*ETA_APPROVED_COMMIT_SHA[[:space:]]*=[[:space:]]*[0-9a-f]{7,40}[[:space:]]*$' | head -n1 | sed -E 's/^[[:space:]]*[Ee][Tt][Aa]_[Aa][Pp][Pp][Rr][Oo][Vv][Ee][Dd]_[Cc][Oo][Mm][Mm][Ii][Tt]_[Ss][Hh][Aa][[:space:]]*=[[:space:]]*//' | tr -d '[:space:]' || true)
+          if [ -z "${TASK_ID:-}" ]; then
+            echo "::error::Release body missing or malformed ETA_APPROVED_TASK_ID (expected line: ETA_APPROVED_TASK_ID=k<32hex>)."
+            exit 1
+          fi
+          if [ -z "${SHA:-}" ]; then
+            echo "::error::Release body missing or malformed ETA_APPROVED_COMMIT_SHA (expected line: ETA_APPROVED_COMMIT_SHA=<7-40 hex>)."
+            exit 1
+          fi
+          echo "Extracted ETA_APPROVED_TASK_ID    : ${TASK_ID}"
+          echo "Extracted ETA_APPROVED_COMMIT_SHA : ${SHA}"
+          echo "task_id=${TASK_ID}" >> "$GITHUB_OUTPUT"
+          echo "sha=${SHA}" >> "$GITHUB_OUTPUT"
+
+      - name: Resolve Eta-approval tokens (event-agnostic)
+        id: resolve_tokens
+        run: |
+          set -eu
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            TASK_ID='${{ inputs.eta_approved_task_id }}'
+            SHA='${{ inputs.eta_approved_commit_sha }}'
+          else
+            TASK_ID='${{ steps.extract_release_tokens.outputs.task_id }}'
+            SHA='${{ steps.extract_release_tokens.outputs.sha }}'
+          fi
+          if [ -z "${TASK_ID}" ] || [ -z "${SHA}" ]; then
+            echo "::error::Unresolved Eta-approval tokens (event=${{ github.event_name }})."
+            exit 1
+          fi
+          echo "task_id=${TASK_ID}" >> "$GITHUB_OUTPUT"
+          echo "sha=${SHA}" >> "$GITHUB_OUTPUT"
+
+      - name: Verify checked-out SHA matches Eta-approved SHA
+        env:
+          EXPECTED_SHA: ${{ steps.resolve_tokens.outputs.sha }}
+        run: |
+          set -eu
+          ACTUAL_SHA=$(git rev-parse HEAD)
+          echo "Actual HEAD     : ${ACTUAL_SHA}"
+          echo "Eta APPROVED SHA: ${EXPECTED_SHA}"
+          # For release path, the body SHA may be the 7-char short form. Accept
+          # exact match OR prefix match (expected is a prefix of actual).
+          if [ "${ACTUAL_SHA}" != "${EXPECTED_SHA}" ] && [ "${ACTUAL_SHA#${EXPECTED_SHA}}" = "${ACTUAL_SHA}" ]; then
+            echo "::error::SHA mismatch — checkout resolved ${ACTUAL_SHA} but Eta approved ${EXPECTED_SHA}."
+            exit 1
+          fi
+          echo "OK — SHA in lockstep with Eta verdict."
+
+      - name: Verify Eta approval via VP HTTP action
+        env:
+          CONVEX_URL: https://compassionate-goldfinch-737.convex.cloud
+          ETA_TASK: ${{ steps.resolve_tokens.outputs.task_id }}
+          ETA_SHA: ${{ steps.resolve_tokens.outputs.sha }}
+        run: |
+          set -eu
+          BODY=$(jq -nc --arg t "$ETA_TASK" --arg s "$ETA_SHA" '{taskId:$t, expectedSha:$s}')
+          RESP=$(curl -sS -X POST "${CONVEX_URL}/api/eta/verify-publish-token" \
+            -H "Content-Type: application/json" \
+            -d "$BODY")
+          echo "Response: $RESP"
+          APPROVED=$(echo "$RESP" | jq -r '.approved // false')
+          if [ "$APPROVED" != "true" ]; then
+            REASON=$(echo "$RESP" | jq -r '.reason // "unknown"')
+            echo "::error::Eta approval rejected by Feature D — reason: ${REASON}"
+            exit 1
+          fi
+          echo "OK — Eta approval token valid."
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install dependencies
+        working-directory: mcp-server
+        # NOT `npm ci`. The root package.json declares `workspaces: ["apps/*",
+        # "mcp-server"]`, so npm resolves mcp-server as a workspace CHILD and
+        # looks for the lockfile at the workspace ROOT — which has only
+        # `bun.lock`. `mcp-server/package-lock.json` is therefore ignored, and
+        # `npm ci` dies with EUSAGE ("can only install with an existing
+        # package-lock.json"). Measured with a control: the ONLY difference
+        # between failure and success is the presence of the root package.json.
+        # Committing a root package-lock.json would fix `npm ci` (verified: 320
+        # entries, both `npm ci` paths exit 0) but `.gitignore:5` deliberately
+        # ignores package-lock.json — bun.lock is this repo's source of truth.
+        # Flipping that is a policy call, not a workflow patch. See task
+        # k1760430nv0z96ptzjg00685e18a9avz.
+        run: npm install --no-audit --no-fund
+
+      - name: Build
+        working-directory: mcp-server
+        run: npm run build
+
+      - name: Publish (with OIDC provenance attestation)
+        working-directory: mcp-server
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npm publish --provenance --access public

package/fixtures/vp-convex/.pin

@@ -0,0 +1 @@
+f62c9e6fe0dbc96ffbdd8cc3e31bd4db501a3d6b