@vellumai/assistant 0.8.5 → 0.8.7

package/src/runtime/routes/oauth-providers.ts

@@ -7,6 +7,7 @@
  */
 
 import { loadConfig } from "../../config/loader.js";
+import { getOAuthCallbackUrl } from "../../inbound/public-ingress-urls.js";
 import {
   deleteApp,
   deleteConnection,
@@ -25,6 +26,7 @@ import {
 } from "../../oauth/provider-serializer.js";
 import { isProviderVisible } from "../../oauth/provider-visibility.js";
 import { SEEDED_PROVIDER_KEYS } from "../../oauth/seed-providers.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
   BadRequestError,
   ConflictError,
@@ -84,13 +86,24 @@ function handleGetProvider({ pathParams = {} }: RouteHandlerArgs) {
     );
   }
 
-  if (!isProviderVisible(row, loadConfig())) {
+  const config = loadConfig();
+  if (!isProviderVisible(row, config)) {
     throw new NotFoundError(
       `No OAuth provider registered for "${providerKey}"`,
     );
   }
 
-  return { provider: serializeProviderFull(row) };
+  let oauthCallbackUrl: string | null = null;
+  try {
+    oauthCallbackUrl = getOAuthCallbackUrl(config);
+  } catch {
+    // Ingress not configured or disabled — callback URL unavailable
+  }
+
+  return {
+    provider: serializeProviderFull(row),
+    oauth_callback_url: oauthCallbackUrl,
+  };
 }
 
 function handleRegisterProvider({ body = {} }: RouteHandlerArgs) {
@@ -313,11 +326,14 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "oauth_providers_get",
     endpoint: "oauth/providers",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List OAuth providers",
     description:
       "List all registered OAuth providers with optional filtering.",
     tags: ["oauth"],
-    requirePolicyEnforcement: true,
     handler: handleListProviders,
     queryParams: [
       {
@@ -331,21 +347,26 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "oauth_providers_by_providerKey_get",
     endpoint: "oauth/providers/:providerKey",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get OAuth provider",
     description: "Get a single OAuth provider by key.",
     tags: ["oauth"],
-    requirePolicyEnforcement: true,
     handler: handleGetProvider,
   },
   {
     operationId: "oauth_providers_post",
     endpoint: "oauth/providers",
     method: "POST",
-    policyKey: "oauth/providers.register",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Register OAuth provider",
     description: "Register a new OAuth provider configuration.",
     tags: ["oauth"],
-    requirePolicyEnforcement: true,
     responseStatus: "201",
     handler: handleRegisterProvider,
   },
@@ -353,23 +374,27 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "oauth_providers_by_providerKey_patch",
     endpoint: "oauth/providers/:providerKey",
     method: "PATCH",
-    policyKey: "oauth/providers.update",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Update OAuth provider",
     description: "Update an existing custom OAuth provider configuration.",
     tags: ["oauth"],
-    requirePolicyEnforcement: true,
     handler: handleUpdateProvider,
   },
   {
     operationId: "oauth_providers_by_providerKey_delete",
     endpoint: "oauth/providers/:providerKey",
     method: "DELETE",
-    policyKey: "oauth/providers.delete",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Delete OAuth provider",
     description:
       "Delete a custom OAuth provider and optionally cascade-delete its apps and connections.",
     tags: ["oauth"],
-    requirePolicyEnforcement: true,
     handler: handleDeleteProvider,
   },
 ];

package/src/runtime/routes/platform-routes.ts

@@ -27,6 +27,7 @@ import {
 } from "../../security/secure-keys.js";
 import { buildAssistantEvent } from "../assistant-event.js";
 import { assistantEventHub } from "../assistant-event-hub.js";
+import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import {
   BadRequestError,
   InternalError,
@@ -287,6 +288,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "platform_status",
     endpoint: "platform/status",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Get platform deployment context and connection status",
     description:
       "Aggregates platform context, credentials, assistant ID, webhook secret, and Velay tunnel status.",
@@ -297,6 +302,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "platform_connect",
     endpoint: "platform/connect",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Connect to the Vellum Platform",
     description:
       "Checks existing credentials and emits the show_platform_login signal for connected clients to show a login UI.",
@@ -307,6 +316,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "platform_disconnect",
     endpoint: "platform/disconnect",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Disconnect from the Vellum Platform",
     description:
       "Deletes stored platform credentials and emits platform_disconnected signal to connected clients.",
@@ -317,6 +330,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "platform_callback_routes_register",
     endpoint: "platform/callback-routes/register",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Register a platform callback route",
     description:
       "Registers a callback route with the platform gateway for inbound provider webhooks.",
@@ -327,6 +344,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "platform_callback_routes_list",
     endpoint: "platform/callback-routes",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "List registered platform callback routes",
     description:
       "Lists all callback routes registered with the platform for this assistant.",

package/src/runtime/routes/playground/__tests__/force-compact.test.ts

@@ -97,11 +97,12 @@ function findRoute() {
 // ---------------------------------------------------------------------------
 
 describe("playgroundForceCompact", () => {
-  test("exposes a single POST route with the expected endpoint + policy key", () => {
+  test("exposes a single POST route with the expected endpoint", () => {
     const route = findRoute();
     expect(route.endpoint).toBe("conversations/:id/playground/compact");
     expect(route.method).toBe("POST");
-    expect(route.policyKey).toBe("conversations/playground/compact");
+    // Intentionally unprotected — handler gates on assertPlaygroundEnabled()
+    expect(route.policy).toBeNull();
   });
 
   test("throws RouteError with conversation_not_found code when the conversation is missing", async () => {

package/src/runtime/routes/playground/__tests__/inject-failures.test.ts

@@ -45,10 +45,14 @@ mock.module("../helpers.js", () => ({
 import { RouteError } from "../../errors.js";
 import { ROUTES } from "../index.js";
 
-interface MockConversation {
-  readonly conversationId: string;
+interface MockCompactionCircuit {
   consecutiveCompactionFailures: number;
   compactionCircuitOpenUntil: number | null;
+}
+
+interface MockConversation {
+  readonly conversationId: string;
+  agentLoop: { compactionCircuit: MockCompactionCircuit };
   contextCompactedMessageCount: number;
   contextCompactedAt: number | null;
   sentMessages: ServerMessage[];
@@ -60,8 +64,12 @@ function makeConversation(id = "conv-playground-test"): MockConversation {
   const sentMessages: ServerMessage[] = [];
   return {
     conversationId: id,
-    consecutiveCompactionFailures: 0,
-    compactionCircuitOpenUntil: null,
+    agentLoop: {
+      compactionCircuit: {
+        consecutiveCompactionFailures: 0,
+        compactionCircuitOpenUntil: null,
+      },
+    },
     contextCompactedMessageCount: 0,
     contextCompactedAt: null,
     sentMessages,
@@ -109,9 +117,10 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
     })) as Record<string, unknown>;
     const afterNow = Date.now();
 
-    expect(conversation.consecutiveCompactionFailures).toBe(3);
-    expect(conversation.compactionCircuitOpenUntil).not.toBeNull();
-    const openUntil = conversation.compactionCircuitOpenUntil!;
+    const circuit = conversation.agentLoop.compactionCircuit;
+    expect(circuit.consecutiveCompactionFailures).toBe(3);
+    expect(circuit.compactionCircuitOpenUntil).not.toBeNull();
+    const openUntil = circuit.compactionCircuitOpenUntil!;
     expect(openUntil).toBeGreaterThanOrEqual(beforeNow + 60_000);
     expect(openUntil).toBeLessThanOrEqual(afterNow + 60_000);
 
@@ -128,16 +137,18 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
 
   test("clears the circuit and emits compaction_circuit_closed on circuitOpenForMs: 0", async () => {
     const conversation = makeConversation("conv-close");
-    conversation.compactionCircuitOpenUntil = Date.now() + 10_000;
-    conversation.consecutiveCompactionFailures = 3;
+    conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil =
+      Date.now() + 10_000;
+    conversation.agentLoop.compactionCircuit.consecutiveCompactionFailures = 3;
     _mockConversation = conversation;
 
     await invoke(conversation.conversationId, {
       circuitOpenForMs: 0,
     });
 
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
-    expect(conversation.consecutiveCompactionFailures).toBe(3);
+    const circuit = conversation.agentLoop.compactionCircuit;
+    expect(circuit.compactionCircuitOpenUntil).toBeNull();
+    expect(circuit.consecutiveCompactionFailures).toBe(3);
 
     expect(conversation.sentMessages).toHaveLength(1);
     expect(conversation.sentMessages[0]).toEqual({
@@ -148,14 +159,18 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
 
   test("is a no-op on the event channel when circuitOpenForMs: 0 but the breaker is already closed", async () => {
     const conversation = makeConversation("conv-already-closed");
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
+    expect(
+      conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil,
+    ).toBeNull();
     _mockConversation = conversation;
 
     const body = (await invoke(conversation.conversationId, {
       circuitOpenForMs: 0,
     })) as Record<string, unknown>;
 
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
+    expect(
+      conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil,
+    ).toBeNull();
     expect(conversation.sentMessages).toHaveLength(0);
     expect(body.compactionCircuitOpenUntil).toBeNull();
     expect(body.isCircuitOpen).toBe(false);
@@ -175,7 +190,9 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
       expect((err as RouteError).statusCode).toBe(400);
     }
 
-    expect(conversation.consecutiveCompactionFailures).toBe(0);
+    expect(
+      conversation.agentLoop.compactionCircuit.consecutiveCompactionFailures,
+    ).toBe(0);
     expect(conversation.sentMessages).toHaveLength(0);
   });
 
@@ -193,7 +210,9 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
       expect((err as RouteError).statusCode).toBe(400);
     }
 
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
+    expect(
+      conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil,
+    ).toBeNull();
     expect(conversation.sentMessages).toHaveLength(0);
   });
 
@@ -210,7 +229,9 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
       expect(err).toBeInstanceOf(RouteError);
       expect((err as RouteError).statusCode).toBe(400);
     }
-    expect(conversation.consecutiveCompactionFailures).toBe(0);
+    expect(
+      conversation.agentLoop.compactionCircuit.consecutiveCompactionFailures,
+    ).toBe(0);
   });
 
   test("response body includes the full CompactionStateResponse shape", async () => {

package/src/runtime/routes/playground/__tests__/reset-circuit.test.ts

@@ -69,8 +69,7 @@ function makeFakeConversation(
     ...overrides,
   };
   const sent: ServerMessage[] = [];
-  const fake = {
-    conversationId: "conv-abc",
+  const compactionCircuit = {
     get consecutiveCompactionFailures(): number {
       return state.consecutiveCompactionFailures;
     },
@@ -83,6 +82,10 @@ function makeFakeConversation(
     set compactionCircuitOpenUntil(value: number | null) {
       state.compactionCircuitOpenUntil = value;
     },
+  };
+  const fake = {
+    conversationId: "conv-abc",
+    agentLoop: { compactionCircuit },
     get contextCompactedMessageCount(): number {
       return state.contextCompactedMessageCount;
     },
@@ -113,7 +116,8 @@ describe("reset-circuit route — metadata", () => {
       "conversations/:id/playground/reset-compaction-circuit",
     );
     expect(route.method).toBe("POST");
-    expect(route.policyKey).toBe("conversations/playground/reset-circuit");
+    // Intentionally unprotected — handler gates on assertPlaygroundEnabled()
+    expect(route.policy).toBeNull();
     expect(route.tags).toContain("playground");
   });
 });

package/src/runtime/routes/playground/__tests__/state.test.ts

@@ -53,8 +53,14 @@ function makeFakeConversation(
     getMessages: () => messages,
     contextCompactedMessageCount: overrides.contextCompactedMessageCount ?? 0,
     contextCompactedAt: overrides.contextCompactedAt ?? null,
-    consecutiveCompactionFailures: overrides.consecutiveCompactionFailures ?? 0,
-    compactionCircuitOpenUntil: overrides.compactionCircuitOpenUntil ?? null,
+    agentLoop: {
+      compactionCircuit: {
+        consecutiveCompactionFailures:
+          overrides.consecutiveCompactionFailures ?? 0,
+        compactionCircuitOpenUntil:
+          overrides.compactionCircuitOpenUntil ?? null,
+      },
+    },
   } as unknown as Conversation;
 }
 
@@ -74,7 +80,8 @@ async function invokeRoute(id = "conv-abc") {
 describe("GET conversations/:id/playground/compaction-state", () => {
   test("registers the expected route definition", () => {
     const route = findRoute();
-    expect(route.policyKey).toBe("conversations/playground/state");
+    // Intentionally unprotected — handler gates on assertPlaygroundEnabled()
+    expect(route.policy).toBeNull();
     expect(route.tags).toEqual(["playground"]);
   });
 

package/src/runtime/routes/playground/force-compact.ts

@@ -22,7 +22,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundForceCompact",
     endpoint: "conversations/:id/playground/compact",
     method: "POST",
-    policyKey: "conversations/playground/compact",
+    policy: null,
     summary: "Force compaction on a conversation (dev-only playground)",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],

package/src/runtime/routes/playground/helpers.ts

@@ -96,7 +96,6 @@ export async function addPlaygroundMessage(
     conversationId,
     role,
     contentJson,
-    undefined,
     options,
   );
   return { id: persisted.id };

package/src/runtime/routes/playground/inject-failures.ts

@@ -42,7 +42,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundInjectCompactionFailures",
     endpoint: "conversations/:id/playground/inject-compaction-failures",
     method: "POST",
-    policyKey: "conversations/playground/inject-failures",
+    policy: null,
     summary:
       "Directly mutate compaction circuit-breaker state (dev-only playground)",
     tags: ["playground"],
@@ -62,15 +62,16 @@ export const ROUTES: RouteDefinition[] = [
         throw new BadRequestError(parsed.error.message);
       }
       const { consecutiveFailures, circuitOpenForMs } = parsed.data;
+      const circuit = conversation.agentLoop.compactionCircuit;
 
       if (consecutiveFailures !== undefined) {
-        conversation.consecutiveCompactionFailures = consecutiveFailures;
+        circuit.consecutiveCompactionFailures = consecutiveFailures;
       }
 
       if (circuitOpenForMs !== undefined) {
         if (circuitOpenForMs === 0) {
-          if (conversation.compactionCircuitOpenUntil !== null) {
-            conversation.compactionCircuitOpenUntil = null;
+          if (circuit.compactionCircuitOpenUntil !== null) {
+            circuit.compactionCircuitOpenUntil = null;
             conversation.sendToClient({
               type: "compaction_circuit_closed",
               conversationId: conversation.conversationId,
@@ -78,7 +79,7 @@ export const ROUTES: RouteDefinition[] = [
           }
         } else {
           const openUntil = Date.now() + circuitOpenForMs;
-          conversation.compactionCircuitOpenUntil = openUntil;
+          circuit.compactionCircuitOpenUntil = openUntil;
           conversation.sendToClient({
             type: "compaction_circuit_open",
             conversationId: conversation.conversationId,
@@ -116,7 +117,10 @@ export interface CompactionStateResponse {
 function buildCompactionState(
   conversation: Conversation,
 ): CompactionStateResponse {
-  const ctxConfig = resolveCallSiteConfig("mainAgent", getConfig().llm).contextWindow;
+  const ctxConfig = resolveCallSiteConfig(
+    "mainAgent",
+    getConfig().llm,
+  ).contextWindow;
   const maxInputTokens = ctxConfig.maxInputTokens;
   const compactThresholdRatio = ctxConfig.compactThreshold;
   const isCompactionEnabled = ctxConfig.enabled;
@@ -124,7 +128,8 @@ function buildCompactionState(
 
   const messages = conversation.getMessages();
   const estimatedInputTokens = estimatePromptTokens(messages);
-  const circuitOpenUntil = conversation.compactionCircuitOpenUntil;
+  const circuit = conversation.agentLoop.compactionCircuit;
+  const circuitOpenUntil = circuit.compactionCircuitOpenUntil;
   const isCircuitOpen =
     circuitOpenUntil !== null && Date.now() < circuitOpenUntil;
 
@@ -136,7 +141,7 @@ function buildCompactionState(
     messageCount: messages.length,
     contextCompactedMessageCount: conversation.contextCompactedMessageCount,
     contextCompactedAt: conversation.contextCompactedAt,
-    consecutiveCompactionFailures: conversation.consecutiveCompactionFailures,
+    consecutiveCompactionFailures: circuit.consecutiveCompactionFailures,
     compactionCircuitOpenUntil: circuitOpenUntil,
     isCircuitOpen,
     isCompactionEnabled,

package/src/runtime/routes/playground/reset-circuit.ts

@@ -35,7 +35,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundResetCompactionCircuit",
     endpoint: "conversations/:id/playground/reset-compaction-circuit",
     method: "POST",
-    policyKey: "conversations/playground/reset-circuit",
+    policy: null,
     summary: "Clear compaction circuit-breaker state (dev-only playground)",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],
@@ -48,9 +48,10 @@ export const ROUTES: RouteDefinition[] = [
         throwConversationNotFound(id);
       }
 
-      conversation.consecutiveCompactionFailures = 0;
-      if (conversation.compactionCircuitOpenUntil !== null) {
-        conversation.compactionCircuitOpenUntil = null;
+      const circuit = conversation.agentLoop.compactionCircuit;
+      circuit.consecutiveCompactionFailures = 0;
+      if (circuit.compactionCircuitOpenUntil !== null) {
+        circuit.compactionCircuitOpenUntil = null;
         conversation.sendToClient({
           type: "compaction_circuit_closed",
           conversationId: conversation.conversationId,
@@ -64,15 +65,19 @@ export const ROUTES: RouteDefinition[] = [
 
 function buildCompactionState(conversation: Conversation) {
   const config = getConfig();
-  const contextWindow = resolveCallSiteConfig("mainAgent", config.llm).contextWindow;
+  const contextWindow = resolveCallSiteConfig(
+    "mainAgent",
+    config.llm,
+  ).contextWindow;
   const messages = conversation.getMessages();
   const estimatedInputTokens = estimatePromptTokens(messages);
   const maxInputTokens = contextWindow.maxInputTokens;
   const compactThresholdRatio = contextWindow.compactThreshold;
   const thresholdTokens = Math.floor(maxInputTokens * compactThresholdRatio);
+  const circuit = conversation.agentLoop.compactionCircuit;
   const isCircuitOpen =
-    conversation.compactionCircuitOpenUntil !== null &&
-    Date.now() < conversation.compactionCircuitOpenUntil;
+    circuit.compactionCircuitOpenUntil !== null &&
+    Date.now() < circuit.compactionCircuitOpenUntil;
 
   return {
     estimatedInputTokens,
@@ -82,8 +87,8 @@ function buildCompactionState(conversation: Conversation) {
     messageCount: messages.length,
     contextCompactedMessageCount: conversation.contextCompactedMessageCount,
     contextCompactedAt: conversation.contextCompactedAt,
-    consecutiveCompactionFailures: conversation.consecutiveCompactionFailures,
-    compactionCircuitOpenUntil: conversation.compactionCircuitOpenUntil,
+    consecutiveCompactionFailures: circuit.consecutiveCompactionFailures,
+    compactionCircuitOpenUntil: circuit.compactionCircuitOpenUntil,
     isCircuitOpen,
     isCompactionEnabled: contextWindow.enabled,
   };

package/src/runtime/routes/playground/seed-conversation.ts

@@ -45,7 +45,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundSeedConversation",
     endpoint: "playground/seed-conversation",
     method: "POST",
-    policyKey: "playground/seed-conversation",
+    policy: null,
     summary: "Create a synthetic seeded conversation for compaction testing",
     tags: ["playground"],
     requestBody: SeedBodySchema,

package/src/runtime/routes/playground/seeded-conversations.ts

@@ -19,7 +19,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundListSeededConversations",
     endpoint: "playground/seeded-conversations",
     method: "GET",
-    policyKey: "playground/seeded-conversations/list",
+    policy: null,
     summary: "List conversations created by the seed-conversation endpoint",
     tags: ["playground"],
     handler: () => {
@@ -34,7 +34,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundDeleteSeededConversation",
     endpoint: "playground/seeded-conversations/:id",
     method: "DELETE",
-    policyKey: "playground/seeded-conversations/delete-one",
+    policy: null,
     summary: "Delete a single seeded conversation (prefix-gated)",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],
@@ -56,7 +56,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundDeleteAllSeededConversations",
     endpoint: "playground/seeded-conversations",
     method: "DELETE",
-    policyKey: "playground/seeded-conversations/delete-all",
+    policy: null,
     summary: "Delete every seeded playground conversation (prefix-gated)",
     tags: ["playground"],
     handler: () => {

package/src/runtime/routes/playground/state.ts

@@ -36,7 +36,8 @@ export function buildCompactionStateResponse(conversation: Conversation) {
   const maxInputTokens = cfg.maxInputTokens;
   const compactThresholdRatio = cfg.compactThreshold;
   const thresholdTokens = Math.floor(maxInputTokens * compactThresholdRatio);
-  const compactionCircuitOpenUntil = conversation.compactionCircuitOpenUntil;
+  const circuit = conversation.agentLoop.compactionCircuit;
+  const compactionCircuitOpenUntil = circuit.compactionCircuitOpenUntil;
   return {
     estimatedInputTokens,
     maxInputTokens,
@@ -45,7 +46,7 @@ export function buildCompactionStateResponse(conversation: Conversation) {
     messageCount: messages.length,
     contextCompactedMessageCount: conversation.contextCompactedMessageCount,
     contextCompactedAt: conversation.contextCompactedAt,
-    consecutiveCompactionFailures: conversation.consecutiveCompactionFailures,
+    consecutiveCompactionFailures: circuit.consecutiveCompactionFailures,
     compactionCircuitOpenUntil,
     isCircuitOpen:
       compactionCircuitOpenUntil !== null &&
@@ -59,7 +60,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundGetCompactionState",
     endpoint: "conversations/:id/playground/compaction-state",
     method: "GET",
-    policyKey: "conversations/playground/state",
+    policy: null,
     summary: "Read current compaction state for a conversation",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],