@vellumai/assistant 0.8.6 → 0.8.7-dev.202606052118.34cd356

package/src/runtime/routes/watcher-routes.ts

@@ -16,6 +16,7 @@ import {
   listWatchers,
   updateWatcher,
 } from "../../watcher/watcher-store.js";
+import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import { BadRequestError, NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
@@ -192,6 +193,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "watcher_create",
     endpoint: "watchers/create",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     handler: handleWatcherCreate,
     summary: "Create a watcher",
     description: "Create a new watcher with a provider and action prompt.",
@@ -203,6 +208,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "watcher_list",
     endpoint: "watchers/list",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     handler: handleWatcherList,
     summary: "List watchers",
     description:
@@ -215,6 +224,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "watcher_update",
     endpoint: "watchers/update",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     handler: handleWatcherUpdate,
     summary: "Update a watcher",
     description: "Update an existing watcher's configuration.",
@@ -226,6 +239,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "watcher_delete",
     endpoint: "watchers/delete",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     handler: handleWatcherDelete,
     summary: "Delete a watcher",
     description: "Delete a watcher by ID.",
@@ -237,6 +254,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "watcher_digest",
     endpoint: "watchers/digest",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     handler: handleWatcherDigest,
     summary: "Get watcher event digest",
     description:

package/src/runtime/routes/webhook-routes.ts

@@ -10,6 +10,8 @@
  *     with the platform for this assistant.
  */
 
+import { z } from "zod";
+
 import { getIsPlatform } from "../../config/env-registry.js";
 import { getConfig } from "../../config/loader.js";
 import {
@@ -17,6 +19,7 @@ import {
   resolvePlatformCallbackRegistrationContext,
 } from "../../inbound/platform-callback-registration.js";
 import { getPublicBaseUrl } from "../../inbound/public-ingress-urls.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
   BadRequestError,
   InternalError,
@@ -24,6 +27,38 @@ import {
 } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
+// ---------------------------------------------------------------------------
+// Schemas
+// ---------------------------------------------------------------------------
+
+const WebhooksRegisterRequestSchema = z.object({
+  type: z.string(),
+  path: z.string().optional(),
+  source: z.string().optional(),
+});
+
+const WebhooksRegisterResponseSchema = z.object({
+  callbackUrl: z.string(),
+  type: z.string(),
+  path: z.string(),
+  mode: z.enum(["platform", "self-hosted"]),
+});
+type WebhooksRegisterResponse = z.infer<typeof WebhooksRegisterResponseSchema>;
+
+const WebhookCallbackRouteSchema = z.object({
+  id: z.string(),
+  assistant_id: z.string(),
+  type: z.string(),
+  callback_path: z.string(),
+  callback_url: z.string(),
+  source_identifier: z.string().nullable(),
+});
+
+const WebhooksListResponseSchema = z.object({
+  routes: z.array(WebhookCallbackRouteSchema),
+});
+type WebhooksListResponse = z.infer<typeof WebhooksListResponseSchema>;
+
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
@@ -48,7 +83,7 @@ function deriveWebhookPath(type: string): string {
 
 async function handleWebhooksRegister(
   args: RouteHandlerArgs,
-): Promise<unknown> {
+): Promise<WebhooksRegisterResponse> {
   const { type, path: pathOverride, source } = args.body ?? {};
 
   if (!type || typeof type !== "string") {
@@ -92,7 +127,9 @@ async function handleWebhooksRegister(
   };
 }
 
-async function handleWebhooksList(_args: RouteHandlerArgs): Promise<unknown> {
+async function handleWebhooksList(
+  _args: RouteHandlerArgs,
+): Promise<WebhooksListResponse> {
   const context = await resolvePlatformCallbackRegistrationContext();
 
   if (!context.platformBaseUrl || !context.authHeader) {
@@ -146,20 +183,31 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "webhooks_register",
     endpoint: "webhooks/register",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Register a webhook callback URL",
     description:
       "Resolves a stable callback URL for a webhook type. On platform-managed assistants, registers the route with the platform gateway. On self-hosted assistants, uses the configured ingress.publicBaseUrl.",
     tags: ["webhooks"],
+    requestBody: WebhooksRegisterRequestSchema,
+    responseBody: WebhooksRegisterResponseSchema,
     handler: handleWebhooksRegister,
   },
   {
     operationId: "webhooks_list",
     endpoint: "webhooks",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List registered webhook callback routes",
     description:
       "Lists all webhook callback routes registered with the platform for this assistant.",
     tags: ["webhooks"],
+    responseBody: WebhooksListResponseSchema,
     handler: handleWebhooksList,
   },
 ];

package/src/runtime/routes/wipe-conversation-routes.ts

@@ -13,6 +13,7 @@ import {
 } from "../../memory/conversation-crud.js";
 import { enqueueMemoryJob } from "../../memory/jobs-store.js";
 import { deleteSchedule } from "../../schedule/schedule-store.js";
+import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import { NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
@@ -81,6 +82,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "wipe_conversation",
     endpoint: "conversations/wipe",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     handler: handleWipeConversation,
     summary: "Wipe a conversation",
     description:

package/src/runtime/routes/work-items-routes.ts

@@ -8,10 +8,8 @@
 import { z } from "zod";
 
 import type { Conversation } from "../../daemon/conversation.js";
-import {
-  findConversation,
-  getOrCreateConversation,
-} from "../../daemon/conversation-store.js";
+import { findConversation } from "../../daemon/conversation-registry.js";
+import { getOrCreateConversation } from "../../daemon/conversation-store.js";
 import type { ServerMessage } from "../../daemon/message-protocol.js";
 import { getMessages } from "../../memory/conversation-crud.js";
 import { check, classifyRisk } from "../../permissions/checker.js";
@@ -36,6 +34,7 @@ import {
 } from "../../work-items/work-item-store.js";
 import { buildAssistantEvent } from "../assistant-event.js";
 import { assistantEventHub } from "../assistant-event-hub.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
   BadRequestError,
   ConflictError,
@@ -414,7 +413,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "listWorkItems",
     endpoint: "work-items",
     method: "GET",
-    policyKey: "work-items",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List work items",
     description: "Return work items, optionally filtered by status.",
     tags: ["work-items"],
@@ -452,7 +454,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "getWorkItem",
     endpoint: "work-items/:id",
     method: "GET",
-    policyKey: "work-items",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get a work item",
     description: "Return a single work item by ID.",
     tags: ["work-items"],
@@ -469,7 +474,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "updateWorkItem",
     endpoint: "work-items/:id",
     method: "PATCH",
-    policyKey: "work-items",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Update a work item",
     description:
       "Partially update a work item's title, notes, status, or priority.",
@@ -523,7 +531,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "completeWorkItem",
     endpoint: "work-items/:id/complete",
     method: "POST",
-    policyKey: "work-items/complete",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Complete a work item",
     description: "Transition a work item from awaiting_review to done.",
     tags: ["work-items"],
@@ -552,7 +563,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "deleteWorkItem",
     endpoint: "work-items/:id",
     method: "DELETE",
-    policyKey: "work-items",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Delete a work item",
     description: "Permanently remove a work item.",
     tags: ["work-items"],
@@ -572,7 +586,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "approveWorkItemPermissions",
     endpoint: "work-items/:id/approve-permissions",
     method: "POST",
-    policyKey: "work-items/approve-permissions",
+    policy: {
+      requiredScopes: ["approval.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Approve tool permissions",
     description: "Pre-approve a set of tools for a work item before it runs.",
     tags: ["work-items"],
@@ -601,7 +618,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "preflightWorkItem",
     endpoint: "work-items/:id/preflight",
     method: "POST",
-    policyKey: "work-items/preflight",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Preflight check",
     description: "Check tool permissions needed before running a work item.",
     tags: ["work-items"],
@@ -628,7 +648,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "getWorkItemOutput",
     endpoint: "work-items/:id/output",
     method: "GET",
-    policyKey: "work-items/output",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get work item output",
     description: "Return the final output of a completed work item run.",
     tags: ["work-items"],
@@ -657,7 +680,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "cancelWorkItem",
     endpoint: "work-items/:id/cancel",
     method: "POST",
-    policyKey: "work-items/cancel",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Cancel a running work item",
     description: "Abort a running work item and set its status to cancelled.",
     tags: ["work-items"],
@@ -707,7 +733,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "runWorkItem",
     endpoint: "work-items/:id/run",
     method: "POST",
-    policyKey: "work-items/run",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Run a work item",
     description:
       "Execute the task associated with a work item. Returns immediately; execution happens in the background.",
@@ -797,17 +826,14 @@ export const ROUTES: RouteDefinition[] = [
                 taskConversation.taskRunId = taskRunId;
                 taskConversation.headlessLock = true;
               }
-              await taskConversation.processMessage(
-                message,
-                [],
-                (event) => {
+              await taskConversation.processMessage({
+                content: message,
+                attachments: [],
+                onEvent: (event) => {
                   publishEvent(event);
                 },
-                undefined,
-                undefined,
-                undefined,
-                { isInteractive: false },
-              );
+                isInteractive: false,
+              });
             },
           );
 

package/src/runtime/routes/workspace-commit-routes.ts

@@ -7,6 +7,7 @@ import { z } from "zod";
 
 import { getWorkspaceDir } from "../../util/platform.js";
 import { getWorkspaceGitService } from "../../workspace/git-service.js";
+import { GATEWAY_PRINCIPALS } from "../auth/route-policy.js";
 import { BadRequestError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
@@ -28,6 +29,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_commit",
     endpoint: "admin/workspace-commit",
     method: "POST",
+    policy: {
+      requiredScopes: ["internal.write"],
+      allowedPrincipalTypes: GATEWAY_PRINCIPALS,
+    },
     summary: "Commit workspace changes",
     description:
       "Create a git commit in the workspace directory with all pending changes.",

package/src/runtime/routes/workspace-routes.test.ts

@@ -283,6 +283,48 @@ describe("GET /v1/workspace/tree", () => {
       expect(lastDirIdx).toBeLessThan(firstFileIdx);
     }
   });
+
+  test("includeDirSizes=true returns recursive byte size for directories", () => {
+    const result = handler({ queryParams: { includeDirSizes: "true" } }) as {
+      entries: Array<{ name: string; type: string; size: number | null }>;
+    };
+    const subdirEntry = result.entries.find((e) => e.name === "subdir");
+    expect(subdirEntry).toBeDefined();
+    expect(subdirEntry!.type).toBe("directory");
+    // subdir/nested.txt contains "nested content" (14 bytes) — the only file
+    // under subdir/, so the recursive size equals exactly that file's size.
+    expect(subdirEntry!.size).toBe("nested content".length);
+  });
+
+  test("includeDirSizes=true preserves accurate file sizes", () => {
+    const result = handler({ queryParams: { includeDirSizes: "true" } }) as {
+      entries: Array<{ name: string; type: string; size: number | null }>;
+    };
+    const fileEntry = result.entries.find((e) => e.name === "hello.txt");
+    expect(fileEntry).toBeDefined();
+    expect(fileEntry!.size).toBe("Hello, world!".length);
+  });
+
+  test("includeDirSizes omitted preserves null size for directories", () => {
+    const result = handler({ queryParams: {} }) as {
+      entries: Array<{ type: string; size: number | null }>;
+    };
+    const dirEntry = result.entries.find((e) => e.type === "directory");
+    expect(dirEntry).toBeDefined();
+    expect(dirEntry!.size).toBeNull();
+  });
+
+  test("includeDirSizes=true returns 0 for empty directory", () => {
+    const emptyDir = join(testWorkspaceDir, "empty-for-size");
+    mkdirSync(emptyDir, { recursive: true });
+
+    const result = handler({ queryParams: { includeDirSizes: "true" } }) as {
+      entries: Array<{ name: string; size: number | null }>;
+    };
+    const emptyEntry = result.entries.find((e) => e.name === "empty-for-size");
+    expect(emptyEntry).toBeDefined();
+    expect(emptyEntry!.size).toBe(0);
+  });
 });
 
 // ===========================================================================

package/src/runtime/routes/workspace-routes.ts

@@ -4,6 +4,7 @@
  * Do not store secrets here — use the credential store or protected/ directory.
  */
 import {
+  type Dirent,
   existsSync,
   mkdirSync,
   readdirSync,
@@ -18,6 +19,7 @@ import { basename, dirname, join } from "node:path";
 import { z } from "zod";
 
 import { getWorkspaceDir } from "../../util/platform.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import { publishSoundsConfigUpdated } from "../sync/resource-sync-events.js";
 import {
   BadRequestError,
@@ -33,13 +35,77 @@ import {
   resolveWorkspacePath,
 } from "./workspace-utils.js";
 
-interface TreeEntry {
-  name: string;
-  path: string;
-  type: "file" | "directory";
-  size: number | null;
-  mimeType: string | null;
-  modifiedAt: string;
+const workspaceTreeEntrySchema = z.object({
+  name: z.string(),
+  path: z.string(),
+  type: z.enum(["file", "directory"]),
+  size: z.number().nullable(),
+  mimeType: z.string().nullable(),
+  modifiedAt: z.string(),
+});
+
+type TreeEntry = z.infer<typeof workspaceTreeEntrySchema>;
+
+// Total number of filesystem entries we're willing to traverse when computing
+// recursive directory sizes for a single tree listing. The budget is shared
+// across every directory in the response so a giant `repos/` checkout cannot
+// starve the request — once exhausted, remaining directories report `size:
+// null` (caller renders an unknown-size placeholder). 50k is generous for
+// typical workspaces (sounds, db, logs) while bailing fast on multi-repo
+// trees.
+const DIR_SIZE_TOTAL_ENTRY_BUDGET = 50_000;
+
+interface DirSizeBudget {
+  remaining: number;
+}
+
+/**
+ * Recursively sum the byte size of every regular file under `absPath`,
+ * sharing a single entry budget across all directories in the same listing.
+ *
+ * Returns:
+ * - the total size in bytes when the entire subtree was traversed within
+ *   budget
+ * - `null` if the shared budget was exhausted before completion (the caller
+ *   surfaces that as an unknown size in the UI)
+ *
+ * Symlinks are not followed. We rely on `withFileTypes` so we never `stat`
+ * directories purely to discover their type.
+ */
+function computeDirSize(absPath: string, budget: DirSizeBudget): number | null {
+  if (budget.remaining <= 0) return null;
+
+  let total = 0;
+  const stack: string[] = [absPath];
+
+  while (stack.length > 0) {
+    const dir = stack.pop()!;
+
+    let dirents: Dirent[];
+    try {
+      dirents = readdirSync(dir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+
+    for (const entry of dirents) {
+      if (budget.remaining <= 0) return null;
+      budget.remaining -= 1;
+
+      if (entry.isDirectory()) {
+        stack.push(join(dir, entry.name));
+      } else if (entry.isFile()) {
+        try {
+          total += statSync(join(dir, entry.name)).size;
+        } catch {
+          // unreadable file — skip, do not abort the whole computation
+        }
+      }
+      // symlinks, sockets, fifos, etc. are intentionally ignored
+    }
+  }
+
+  return total;
 }
 
 const SOUNDS_WORKSPACE_PATH = "data/sounds";
@@ -75,6 +141,7 @@ function publishSoundsConfigUpdatedForPaths(
 function handleWorkspaceTree({ queryParams }: RouteHandlerArgs) {
   const requestedPath = queryParams?.path ?? "";
   const showHidden = queryParams?.showHidden === "true";
+  const includeDirSizes = queryParams?.includeDirSizes === "true";
   const resolved = resolveWorkspacePath(requestedPath, {
     allowHidden: showHidden,
   });
@@ -86,6 +153,12 @@ function handleWorkspaceTree({ queryParams }: RouteHandlerArgs) {
     const dirents = readdirSync(resolved, { withFileTypes: true });
     const workspaceDir = getWorkspaceDir();
 
+    // Shared budget across every directory in this listing. When opted out,
+    // we never construct one, so directories report `size: null` as before.
+    const dirSizeBudget: DirSizeBudget | undefined = includeDirSizes
+      ? { remaining: DIR_SIZE_TOTAL_ENTRY_BUDGET }
+      : undefined;
+
     const entries: TreeEntry[] = [];
     for (const entry of dirents) {
       if (!showHidden && entry.name.startsWith(".")) continue;
@@ -102,11 +175,14 @@ function handleWorkspaceTree({ queryParams }: RouteHandlerArgs) {
       const isDir = stats.isDirectory();
       const relativePath = fullPath.slice(workspaceDir.length + 1);
 
+      const dirSize =
+        isDir && dirSizeBudget ? computeDirSize(fullPath, dirSizeBudget) : null;
+
       entries.push({
         name: entry.name,
         path: relativePath,
         type: isDir ? "directory" : "file",
-        size: isDir ? null : stats.size,
+        size: isDir ? dirSize : stats.size,
         mimeType: isDir ? null : Bun.file(fullPath).type,
         modifiedAt: stats.mtime.toISOString(),
       });
@@ -416,6 +492,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_tree",
     endpoint: "workspace/tree",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List workspace directory",
     description: "Return directory entries for a workspace path.",
     tags: ["workspace"],
@@ -428,10 +508,17 @@ export const ROUTES: RouteDefinition[] = [
         name: "showHidden",
         description: "Include dotfiles (true/false)",
       },
+      {
+        name: "includeDirSizes",
+        description:
+          "Compute recursive byte size for each directory entry (true/false). Budget-bounded — large subtrees may return size: null.",
+      },
     ],
     responseBody: z.object({
       path: z.string(),
-      entries: z.array(z.unknown()).describe("Directory entry objects"),
+      entries: z
+        .array(workspaceTreeEntrySchema)
+        .describe("Directory entry objects"),
     }),
     handler: handleWorkspaceTree,
   },
@@ -439,6 +526,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_file",
     endpoint: "workspace/file",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get workspace file metadata",
     description:
       "Return file metadata and inline text content (if small enough).",
@@ -468,6 +559,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_write",
     endpoint: "workspace/write",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Write workspace file",
     description: "Create or overwrite a file in the workspace.",
     tags: ["workspace"],
@@ -489,6 +584,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_mkdir",
     endpoint: "workspace/mkdir",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Create workspace directory",
     description: "Create directories recursively in the workspace.",
     tags: ["workspace"],
@@ -504,6 +603,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_rename",
     endpoint: "workspace/rename",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Rename workspace entry",
     description: "Rename or move a file or directory in the workspace.",
     tags: ["workspace"],
@@ -521,6 +624,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_delete",
     endpoint: "workspace/delete",
     method: "POST",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Delete workspace entry",
     description: "Delete a file or directory from the workspace.",
     tags: ["workspace"],
@@ -536,6 +643,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "workspace_file_content",
     endpoint: "workspace/file/content",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get workspace file content",
     description: "Return raw file bytes with HTTP range support.",
     tags: ["workspace"],
@@ -552,6 +663,10 @@ export const ROUTES: RouteDefinition[] = [
         description: "Allow hidden files (true/false)",
       },
     ],
+    responseBody: {
+      contentType: "application/octet-stream",
+      schema: { type: "string", format: "binary" },
+    },
     responseStatus: ({ headers }) => (headers?.["range"] ? "206" : "200"),
     additionalResponses: {
       "416": { description: "Range Not Satisfiable" },