@vellumai/assistant 0.8.6 → 0.8.7-dev.202606052118.34cd356

package/src/runtime/routes/conversation-cli-routes.ts

@@ -9,6 +9,7 @@
 import { v4 as uuid } from "uuid";
 import { z } from "zod";
 
+import { findConversation } from "../../daemon/conversation-registry.js";
 import { clearAllConversations as clearAllActive } from "../../daemon/handlers/conversations.js";
 import { formatJson, formatMarkdown } from "../../export/formatter.js";
 import { ipcCall as ipcCallGateway } from "../../ipc/gateway-client.js";
@@ -23,6 +24,7 @@ import { listConversations } from "../../memory/conversation-queries.js";
 import { getBindingByConversation } from "../../memory/external-conversation-store.js";
 import { sendSlackReply } from "../../messaging/providers/slack/send.js";
 import { getLogger } from "../../util/logger.js";
+import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import { BadGatewayError, BadRequestError, NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
@@ -35,14 +37,26 @@ const log = getLogger("conversation-cli-routes");
 function handleListCli({ body = {} }: RouteHandlerArgs) {
   const limit =
     body.limit != null ? Number(body.limit) : Number.MAX_SAFE_INTEGER;
+  // CLI flag historically named `includeArchived`. Map onto the new
+  // `archiveStatus` enum: when set, fetch active + archived together so the
+  // user sees archived rows alongside live ones in the picker.
   const includeArchived = (body.includeArchived as boolean) ?? false;
 
-  const rows = listConversations(limit, false, 0, includeArchived);
+  const rows = listConversations(
+    limit,
+    "standard",
+    0,
+    includeArchived ? "all" : "active",
+  );
   return {
     conversations: rows.map((c) => ({
       id: c.id,
       title: c.title,
       updatedAt: c.updatedAt,
+      // `isProcessing` mirrors `Conversation.isProcessing()` from the
+      // in-memory daemon store — true when the agent loop is mid-turn.
+      // Rows not currently in memory (cold / evicted) report `false`.
+      isProcessing: findConversation(c.id)?.isProcessing() ?? false,
     })),
   };
 }
@@ -78,7 +92,6 @@ async function handleCreateCli({ body = {} }: RouteHandlerArgs) {
       conversation.id,
       message.role,
       textContentJson(message.content),
-      undefined,
       { skipIndexing: true },
     );
   }
@@ -111,10 +124,16 @@ function handleExportCli({ body = {} }: RouteHandlerArgs) {
     conversationId = all[0].id;
   }
 
-  // Support prefix matching
+  // Support prefix matching. `archiveStatus: "all"` preserves the pre-default
+  // behavior of letting `vellum export <prefix>` resolve an archived row.
   let conversation = getConversation(conversationId);
   if (!conversation) {
-    const all = listConversations(Number.MAX_SAFE_INTEGER);
+    const all = listConversations(
+      Number.MAX_SAFE_INTEGER,
+      "standard",
+      0,
+      "all",
+    );
     const match = all.find((c) => c.id.startsWith(conversationId!));
     if (match) {
       conversation = match;
@@ -143,8 +162,15 @@ function handleExportCli({ body = {} }: RouteHandlerArgs) {
 // clear (CLI)
 // ---------------------------------------------------------------------------
 
-async function handleClearCli(_args: RouteHandlerArgs) {
-  // Tear down in-memory conversation state before DB clear.
+async function handleClearCli({ headers = {} }: RouteHandlerArgs) {
+  const confirm = headers["x-confirm-destructive"];
+  if (confirm !== "clear-all-conversations") {
+    throw new BadRequestError(
+      "POST /v1/conversations/cli/clear permanently deletes ALL conversations, messages, and memory. " +
+        "To confirm, set header X-Confirm-Destructive: clear-all-conversations",
+    );
+  }
+
   const cleared = await clearAllActive();
   log.info(
     { cleared },
@@ -292,6 +318,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversation_list_cli",
     endpoint: "conversations/cli/list",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "List conversations (CLI)",
     description:
       "Simplified conversation list for CLI output — returns id, title, updatedAt.",
@@ -306,6 +336,7 @@ export const ROUTES: RouteDefinition[] = [
           id: z.string(),
           title: z.string().nullable(),
           updatedAt: z.number(),
+          isProcessing: z.boolean(),
         }),
       ),
     }),
@@ -315,6 +346,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversation_create_cli",
     endpoint: "conversations/cli/create",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Create a conversation (CLI)",
     description:
       "Create a new conversation with an optional title and seeded messages.",
@@ -335,6 +370,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversation_export_cli",
     endpoint: "conversations/cli/export",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Export a conversation (CLI)",
     description:
       "Export a conversation as markdown or JSON. Returns the formatted output string.",
@@ -353,10 +392,14 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversations_clear_cli",
     endpoint: "conversations/cli/clear",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Clear all conversations (CLI)",
     description:
       "Tear down all active conversations and clear the database. " +
-      "The confirmation prompt is handled client-side by the CLI.",
+      "Requires X-Confirm-Destructive: clear-all-conversations.",
     tags: ["conversations"],
     responseBody: z.object({
       cleared: z.number().int(),
@@ -367,6 +410,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversation_slack_detach_cli",
     endpoint: "conversations/cli/slack/detach",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Detach the assistant from a Slack thread (CLI)",
     description:
       "Stops Slack active-thread listening for a Slack thread. The CLI resolves current conversation defaults.",

package/src/runtime/routes/conversation-compaction-routes.ts

@@ -8,18 +8,31 @@
  *
  * # Scope
  *
- * Returns the set of `call_site = "compactionAgent"` rows in this
- * conversation that ran in the **window between the previous real LLM
- * call and the one identified by `callId`**, ordered chronologically.
- * This is the data the Inspector's "Compaction" tab shows when you
- * select a call in the rail: it answers "what did the compactor do to
- * my context before *this specific* call?" — not "what has the
- * compactor ever done in this conversation".
+ * Returns every `call_site = "compactionAgent"` row that ran in the
+ * **same agent turn** as the call identified by `callId`, ordered
+ * chronologically. This is the data the Inspector's "Compaction" tab
+ * shows when you select a call in the rail: it answers "what did the
+ * compactor do across this whole turn?" — regardless of where the
+ * selected call sits within the turn.
  *
- * The floor is resolved by walking back from the selected call to the
- * most recent non-`compactionAgent` row in the same conversation. When
- * the selected call is the *first* real call in the conversation,
- * there is no floor and every preceding compaction is in scope.
+ * Turn bounds are resolved by `getTurnTimeBounds` in
+ * `memory/conversation-crud.ts`, which walks the `messages` table to
+ * find the real user message that started the turn and the next real
+ * user message (or end-of-conversation) that ends it. Tool-result user
+ * messages are not turn boundaries. When the conversation has no other
+ * messages around the selected call, the window collapses to the
+ * call's own `createdAt` and every compaction strictly before it is
+ * returned — same as the legacy behavior.
+ *
+ * # Why turn-scoped, not call-scoped
+ *
+ * A single turn can run dozens of compactions (mid-loop proactive,
+ * convergence-reducer, and emergency cycles all flow through the same
+ * `compactionAgent` call site). Constraining the trail to the window
+ * between two adjacent calls hides most of that activity from the UI
+ * — especially for the call that *yields* on a budget-exhausted error,
+ * which has no compaction immediately before it but had several
+ * earlier in the same turn. The turn is the right unit of analysis.
  *
  * # Data model decision (in progress)
  *
@@ -39,9 +52,13 @@
 
 import { z } from "zod";
 
-import { getConversation } from "../../memory/conversation-crud.js";
+import {
+  getConversation,
+  getTurnTimeBounds,
+} from "../../memory/conversation-crud.js";
 import { getLlmRequestLogSource } from "../../memory/llm-request-log-source.js";
 import type { LogRow } from "../../memory/llm-request-log-store.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import { BadRequestError, NotFoundError } from "./errors.js";
 import {
   type LlmContextSummary,
@@ -196,20 +213,29 @@ async function handleGetCompactionTrail({
     );
   }
 
-  // Resolve the window floor — the most recent non-`compactionAgent`
-  // call before the selected one. `null` means the selected call is the
-  // first real call in the conversation, so every preceding compaction
-  // is in scope. The store function applies the strict-`>` predicate
-  // (or drops it entirely on null), so the selected call's own
-  // `createdAt` is the only ceiling we pass.
-  const afterCreatedAt = await source.getPreviousNonCompactionCallCreatedAt(
-    conversationId,
-    selectedCall.createdAt,
-  );
+  // Resolve the turn window from the `messages` table — every
+  // compaction between the user message that started this turn and the
+  // next real user message (or end-of-conversation) is in scope.
+  //
+  // `getCompactionLogsBetween` uses strict `>` / `<` predicates, so we
+  // shift the inclusive bounds by 1ms to capture rows landing on the
+  // boundaries themselves (e.g. an emergency compaction that fires the
+  // same millisecond as the assistant message terminating the turn).
+  //
+  // When `getTurnTimeBounds` returns `null` (the only-message case), the
+  // turn-bound contract isn't established. Fall back to the selected
+  // call's own `createdAt` as the ceiling and an open floor — the same
+  // shape the route exposed before turn-scoping, so callers don't see
+  // a regression on conversations with a single message.
+  const turnBounds = getTurnTimeBounds(conversationId, selectedCall.createdAt);
+  const afterCreatedAt: number | null =
+    turnBounds !== null ? turnBounds.startTime - 1 : null;
+  const beforeCreatedAt: number =
+    turnBounds !== null ? turnBounds.endTime + 1 : selectedCall.createdAt;
   const logs = await source.getCompactionLogsBetween(
     conversationId,
     afterCreatedAt,
-    selectedCall.createdAt,
+    beforeCreatedAt,
   );
 
   return {
@@ -227,10 +253,13 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversations_compaction_trail_get",
     endpoint: "conversations/:id/compaction",
     method: "GET",
-    policyKey: "conversations/compaction",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get the compaction trail leading up to an LLM call",
     description:
-      "Return the chronological list of compaction events that ran in this conversation in the open window between the previous non-`compactionAgent` LLM call and the call identified by `callId`. Projected from `llm_request_logs` rows where `call_site = \"compactionAgent\"`. When the selected call is the first real call in the conversation, every preceding compaction is in scope. Drives the Inspector's Compaction tab.",
+      "Return the chronological list of compaction events that ran in the same agent turn as the call identified by `callId`. Turn bounds are walked from the `messages` table (real user messages — tool-result user messages are not boundaries). Projected from `llm_request_logs` rows where `call_site = \"compactionAgent\"`. When the conversation has no other messages around the selected call, every compaction strictly before the call's `createdAt` is in scope. Drives the Inspector's Compaction tab.",
     tags: ["conversations"],
     pathParams: [
       {

package/src/runtime/routes/conversation-list-routes.ts

@@ -9,6 +9,7 @@
 
 import { z } from "zod";
 
+import { findConversation } from "../../daemon/conversation-registry.js";
 import {
   type Confidence,
   getAttentionStateByConversationIds,
@@ -26,10 +27,12 @@ import {
   listConversations,
   listPinnedConversations,
 } from "../../memory/conversation-queries.js";
+import type { ConversationType } from "../../memory/conversation-types.js";
 import { getBindingsForConversations } from "../../memory/external-conversation-store.js";
 import { listGroups } from "../../memory/group-crud.js";
 import { UserError } from "../../util/errors.js";
 import { getLogger } from "../../util/logger.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
   buildConversationDetailResponse,
   serializeConversationSummary,
@@ -131,6 +134,12 @@ export const conversationSummarySchema = z.object({
   forkParent: forkParentSchema.optional(),
   archivedAt: z.number().optional(),
   inferenceProfile: z.string().optional(),
+  /**
+   * True when the agent loop is currently mid-turn for this conversation.
+   * Mirrors the in-memory `Conversation.isProcessing()` flag on the daemon
+   * — `false` for rows that are cold (not currently resident in memory).
+   */
+  isProcessing: z.boolean(),
 });
 
 const groupSummarySchema = z.object({
@@ -168,15 +177,48 @@ function resolveOrThrow(rawId: string): string {
 function handleListConversations({ queryParams = {} }: RouteHandlerArgs) {
   const limit = Number(queryParams.limit ?? 50);
   const offset = Number(queryParams.offset ?? 0);
-  const backgroundOnly = queryParams.conversationType === "background";
-
-  let rows = listConversations(limit, backgroundOnly, offset);
-  const totalCount = countConversations(backgroundOnly);
+  // "background" is the back-compat umbrella (background + scheduled); newer
+  // clients can pass "scheduled" to load only the Scheduled section. Absent
+  // defaults to the standard foreground list. Any other value is rejected so
+  // an unrecognized type surfaces as a 400 rather than being silently coerced
+  // to the foreground list (which would mask client/daemon version skew).
+  const rawConversationType = queryParams.conversationType;
+  let conversationType: ConversationType = "standard";
+  if (rawConversationType !== undefined && rawConversationType !== "") {
+    if (
+      rawConversationType === "background" ||
+      rawConversationType === "scheduled"
+    ) {
+      conversationType = rawConversationType;
+    } else {
+      throw new BadRequestError(
+        `Unknown conversationType "${rawConversationType}"; expected "background" or "scheduled".`,
+      );
+    }
+  }
+  // Defaults to `active` so sidebar restores no longer pull archived rows.
+  // The Archive page opts into `archived` to render only archived rows
+  // without dragging the entire live history through pagination first.
+  const archiveStatus =
+    queryParams.archiveStatus === "archived"
+      ? "archived"
+      : queryParams.archiveStatus === "all"
+        ? "all"
+        : "active";
+
+  let rows = listConversations(limit, conversationType, offset, archiveStatus);
+  const totalCount = countConversations(conversationType, archiveStatus);
 
   // On the first page, ensure all pinned conversations are included
-  // even if they fall outside the paginated window.
-  if (offset === 0 && !backgroundOnly) {
-    const pinned = listPinnedConversations();
+  // even if they fall outside the paginated window. Pinned injection is
+  // skipped in archived/all views since the Archive page renders archived
+  // rows in archive-time order, not pin order.
+  if (
+    offset === 0 &&
+    conversationType === "standard" &&
+    archiveStatus === "active"
+  ) {
+    const pinned = listPinnedConversations(archiveStatus);
     const seen = new Set(rows.map((c) => c.id));
     const missing = pinned.filter((c) => !seen.has(c.id));
     if (missing.length > 0) {
@@ -199,6 +241,12 @@ function handleListConversations({ queryParams = {} }: RouteHandlerArgs) {
         attentionState: attentionStates.get(conversation.id),
         displayMeta: displayMeta.get(conversation.id),
         parentCache,
+        // Cold (evicted / never-loaded) rows aren't in the in-memory
+        // store, so `findConversation` returns `undefined` and they
+        // report `isProcessing: false` — by definition they aren't
+        // mid-turn since the agent loop only runs on resident convs.
+        isProcessing:
+          findConversation(conversation.id)?.isProcessing() ?? false,
       }),
     ),
     nextOffset,
@@ -307,7 +355,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "listConversations",
     endpoint: "conversations",
     method: "GET",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List conversations",
     description:
       "Paginated list of conversations with attention state and display metadata.",
@@ -330,8 +381,16 @@ export const ROUTES: RouteDefinition[] = [
         type: "string",
         required: false,
         description:
-          'Filter by conversation type. Pass "background" to list only background/scheduled conversations.',
-        schema: { type: "string", enum: ["background"] },
+          'Filter by conversation type. Pass "background" to list background and scheduled conversations together (the back-compat umbrella), or "scheduled" to list only scheduled conversations.',
+        schema: { type: "string", enum: ["background", "scheduled"] },
+      },
+      {
+        name: "archiveStatus",
+        type: "string",
+        required: false,
+        description:
+          'Filter by archive state. Defaults to "active" (non-archived rows only). Pass "archived" to list only archived rows (for the Archive page) or "all" to include both.',
+        schema: { type: "string", enum: ["active", "archived", "all"] },
       },
     ],
     responseBody: listConversationsResponseSchema,
@@ -341,7 +400,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "recordConversationSeen",
     endpoint: "conversations/seen",
     method: "POST",
-    policyKey: "conversations/seen",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Record a seen signal",
     description: "Mark a conversation as seen, advancing the attention cursor.",
     tags: ["conversations"],
@@ -362,7 +424,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "markConversationUnread",
     endpoint: "conversations/unread",
     method: "POST",
-    policyKey: "conversations/unread",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Mark conversation unread",
     description: "Reset the seen cursor so the conversation appears unread.",
     tags: ["conversations"],
@@ -376,6 +441,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "getConversation",
     endpoint: "conversations/:id",
     method: "GET",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     pathParams: [{ name: "id", type: "uuid" }],
     summary: "Get conversation detail",
     description: "Retrieve a single conversation with full metadata.",

package/src/runtime/routes/conversation-management-routes.ts

@@ -49,6 +49,7 @@ import { enqueueMemoryJob } from "../../memory/jobs-store.js";
 import { deleteSchedule } from "../../schedule/schedule-store.js";
 import { UserError } from "../../util/errors.js";
 import { getLogger } from "../../util/logger.js";
+import { ACTOR_PRINCIPALS, LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import { buildConversationDetailResponse } from "../services/conversation-serializer.js";
 import {
   publishConversationListAndMetadataChanged,
@@ -432,7 +433,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "createConversation",
     endpoint: "conversations",
     method: "POST",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Create a conversation",
     description: "Create or get an existing conversation by key.",
     tags: ["conversations"],
@@ -466,7 +470,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "forkConversation",
     endpoint: "conversations/fork",
     method: "POST",
-    policyKey: "conversations/fork",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Fork a conversation",
     description:
       "Create a copy of a conversation, optionally truncated at a specific message.",
@@ -487,7 +494,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "switchConversation",
     endpoint: "conversations/switch",
     method: "POST",
-    policyKey: "conversations/switch",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Switch active conversation",
     description: "Set the active conversation for the current session.",
     tags: ["conversations"],
@@ -510,7 +520,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "setConversationInferenceProfile",
     endpoint: "conversations/:id/inference-profile",
     method: "PUT",
-    policyKey: "conversations/inference-profile",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Set conversation inference profile",
     description:
       "Override the LLM inference profile for a single conversation. " +
@@ -542,7 +555,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "renameConversation",
     endpoint: "conversations/:id/name",
     method: "PATCH",
-    policyKey: "conversations/name",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Rename a conversation",
     description: "Update the display name of a conversation.",
     tags: ["conversations"],
@@ -557,7 +573,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "clearAllConversations",
     endpoint: "conversations",
     method: "DELETE",
-    policyKey: "conversations/clear-all",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Clear all conversations",
     description: "Permanently delete ALL conversations, messages, and memory.",
     tags: ["conversations"],
@@ -568,7 +587,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "wipeConversation",
     endpoint: "conversations/:id/wipe",
     method: "POST",
-    policyKey: "conversations/wipe",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Wipe a conversation",
     description:
       "Delete all messages in a conversation and revert associated memory changes.",
@@ -586,7 +608,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "deleteConversation",
     endpoint: "conversations/:id",
     method: "DELETE",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Delete a conversation",
     description: "Permanently delete a single conversation and its messages.",
     tags: ["conversations"],
@@ -598,7 +623,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "archiveConversation",
     endpoint: "conversations/:id/archive",
     method: "POST",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Archive a conversation",
     description: "Move a conversation to the archived state.",
     tags: ["conversations"],
@@ -613,7 +641,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "unarchiveConversation",
     endpoint: "conversations/:id/unarchive",
     method: "POST",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Unarchive a conversation",
     description:
       "Restore an archived conversation back to the default sidebar.",
@@ -629,7 +660,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "cancelConversationGeneration",
     endpoint: "conversations/:id/cancel",
     method: "POST",
-    policyKey: "conversations/cancel",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Cancel generation",
     description: "Abort the in-progress assistant response for a conversation.",
     tags: ["conversations"],
@@ -646,7 +680,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "undoLastMessage",
     endpoint: "conversations/:id/undo",
     method: "POST",
-    policyKey: "conversations/undo",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Undo last message",
     description:
       "Remove the most recent user+assistant message pair from the conversation.",
@@ -662,7 +699,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "regenerateResponse",
     endpoint: "conversations/:id/regenerate",
     method: "POST",
-    policyKey: "conversations/regenerate",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Regenerate response",
     description:
       "Re-run the assistant for the last user message in a conversation.",
@@ -675,7 +715,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "reorderConversations",
     endpoint: "conversations/reorder",
     method: "POST",
-    policyKey: "conversations/reorder",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Reorder conversations",
     description: "Batch-update display order and pin state for conversations.",
     tags: ["conversations"],