@vellumai/assistant 0.8.6 → 0.8.7

package/src/runtime/routes/playground/__tests__/force-compact.test.ts

@@ -97,11 +97,12 @@ function findRoute() {
 // ---------------------------------------------------------------------------
 
 describe("playgroundForceCompact", () => {
-  test("exposes a single POST route with the expected endpoint + policy key", () => {
+  test("exposes a single POST route with the expected endpoint", () => {
     const route = findRoute();
     expect(route.endpoint).toBe("conversations/:id/playground/compact");
     expect(route.method).toBe("POST");
-    expect(route.policyKey).toBe("conversations/playground/compact");
+    // Intentionally unprotected — handler gates on assertPlaygroundEnabled()
+    expect(route.policy).toBeNull();
   });
 
   test("throws RouteError with conversation_not_found code when the conversation is missing", async () => {

package/src/runtime/routes/playground/__tests__/inject-failures.test.ts

@@ -45,10 +45,14 @@ mock.module("../helpers.js", () => ({
 import { RouteError } from "../../errors.js";
 import { ROUTES } from "../index.js";
 
-interface MockConversation {
-  readonly conversationId: string;
+interface MockCompactionCircuit {
   consecutiveCompactionFailures: number;
   compactionCircuitOpenUntil: number | null;
+}
+
+interface MockConversation {
+  readonly conversationId: string;
+  agentLoop: { compactionCircuit: MockCompactionCircuit };
   contextCompactedMessageCount: number;
   contextCompactedAt: number | null;
   sentMessages: ServerMessage[];
@@ -60,8 +64,12 @@ function makeConversation(id = "conv-playground-test"): MockConversation {
   const sentMessages: ServerMessage[] = [];
   return {
     conversationId: id,
-    consecutiveCompactionFailures: 0,
-    compactionCircuitOpenUntil: null,
+    agentLoop: {
+      compactionCircuit: {
+        consecutiveCompactionFailures: 0,
+        compactionCircuitOpenUntil: null,
+      },
+    },
     contextCompactedMessageCount: 0,
     contextCompactedAt: null,
     sentMessages,
@@ -109,9 +117,10 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
     })) as Record<string, unknown>;
     const afterNow = Date.now();
 
-    expect(conversation.consecutiveCompactionFailures).toBe(3);
-    expect(conversation.compactionCircuitOpenUntil).not.toBeNull();
-    const openUntil = conversation.compactionCircuitOpenUntil!;
+    const circuit = conversation.agentLoop.compactionCircuit;
+    expect(circuit.consecutiveCompactionFailures).toBe(3);
+    expect(circuit.compactionCircuitOpenUntil).not.toBeNull();
+    const openUntil = circuit.compactionCircuitOpenUntil!;
     expect(openUntil).toBeGreaterThanOrEqual(beforeNow + 60_000);
     expect(openUntil).toBeLessThanOrEqual(afterNow + 60_000);
 
@@ -128,16 +137,18 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
 
   test("clears the circuit and emits compaction_circuit_closed on circuitOpenForMs: 0", async () => {
     const conversation = makeConversation("conv-close");
-    conversation.compactionCircuitOpenUntil = Date.now() + 10_000;
-    conversation.consecutiveCompactionFailures = 3;
+    conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil =
+      Date.now() + 10_000;
+    conversation.agentLoop.compactionCircuit.consecutiveCompactionFailures = 3;
     _mockConversation = conversation;
 
     await invoke(conversation.conversationId, {
       circuitOpenForMs: 0,
     });
 
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
-    expect(conversation.consecutiveCompactionFailures).toBe(3);
+    const circuit = conversation.agentLoop.compactionCircuit;
+    expect(circuit.compactionCircuitOpenUntil).toBeNull();
+    expect(circuit.consecutiveCompactionFailures).toBe(3);
 
     expect(conversation.sentMessages).toHaveLength(1);
     expect(conversation.sentMessages[0]).toEqual({
@@ -148,14 +159,18 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
 
   test("is a no-op on the event channel when circuitOpenForMs: 0 but the breaker is already closed", async () => {
     const conversation = makeConversation("conv-already-closed");
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
+    expect(
+      conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil,
+    ).toBeNull();
     _mockConversation = conversation;
 
     const body = (await invoke(conversation.conversationId, {
       circuitOpenForMs: 0,
     })) as Record<string, unknown>;
 
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
+    expect(
+      conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil,
+    ).toBeNull();
     expect(conversation.sentMessages).toHaveLength(0);
     expect(body.compactionCircuitOpenUntil).toBeNull();
     expect(body.isCircuitOpen).toBe(false);
@@ -175,7 +190,9 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
       expect((err as RouteError).statusCode).toBe(400);
     }
 
-    expect(conversation.consecutiveCompactionFailures).toBe(0);
+    expect(
+      conversation.agentLoop.compactionCircuit.consecutiveCompactionFailures,
+    ).toBe(0);
     expect(conversation.sentMessages).toHaveLength(0);
   });
 
@@ -193,7 +210,9 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
       expect((err as RouteError).statusCode).toBe(400);
     }
 
-    expect(conversation.compactionCircuitOpenUntil).toBeNull();
+    expect(
+      conversation.agentLoop.compactionCircuit.compactionCircuitOpenUntil,
+    ).toBeNull();
     expect(conversation.sentMessages).toHaveLength(0);
   });
 
@@ -210,7 +229,9 @@ describe("POST /v1/conversations/:id/playground/inject-compaction-failures", ()
       expect(err).toBeInstanceOf(RouteError);
       expect((err as RouteError).statusCode).toBe(400);
     }
-    expect(conversation.consecutiveCompactionFailures).toBe(0);
+    expect(
+      conversation.agentLoop.compactionCircuit.consecutiveCompactionFailures,
+    ).toBe(0);
   });
 
   test("response body includes the full CompactionStateResponse shape", async () => {

package/src/runtime/routes/playground/__tests__/reset-circuit.test.ts

@@ -69,8 +69,7 @@ function makeFakeConversation(
     ...overrides,
   };
   const sent: ServerMessage[] = [];
-  const fake = {
-    conversationId: "conv-abc",
+  const compactionCircuit = {
     get consecutiveCompactionFailures(): number {
       return state.consecutiveCompactionFailures;
     },
@@ -83,6 +82,10 @@ function makeFakeConversation(
     set compactionCircuitOpenUntil(value: number | null) {
       state.compactionCircuitOpenUntil = value;
     },
+  };
+  const fake = {
+    conversationId: "conv-abc",
+    agentLoop: { compactionCircuit },
     get contextCompactedMessageCount(): number {
       return state.contextCompactedMessageCount;
     },
@@ -113,7 +116,8 @@ describe("reset-circuit route — metadata", () => {
       "conversations/:id/playground/reset-compaction-circuit",
     );
     expect(route.method).toBe("POST");
-    expect(route.policyKey).toBe("conversations/playground/reset-circuit");
+    // Intentionally unprotected — handler gates on assertPlaygroundEnabled()
+    expect(route.policy).toBeNull();
     expect(route.tags).toContain("playground");
   });
 });

package/src/runtime/routes/playground/__tests__/state.test.ts

@@ -53,8 +53,14 @@ function makeFakeConversation(
     getMessages: () => messages,
     contextCompactedMessageCount: overrides.contextCompactedMessageCount ?? 0,
     contextCompactedAt: overrides.contextCompactedAt ?? null,
-    consecutiveCompactionFailures: overrides.consecutiveCompactionFailures ?? 0,
-    compactionCircuitOpenUntil: overrides.compactionCircuitOpenUntil ?? null,
+    agentLoop: {
+      compactionCircuit: {
+        consecutiveCompactionFailures:
+          overrides.consecutiveCompactionFailures ?? 0,
+        compactionCircuitOpenUntil:
+          overrides.compactionCircuitOpenUntil ?? null,
+      },
+    },
   } as unknown as Conversation;
 }
 
@@ -74,7 +80,8 @@ async function invokeRoute(id = "conv-abc") {
 describe("GET conversations/:id/playground/compaction-state", () => {
   test("registers the expected route definition", () => {
     const route = findRoute();
-    expect(route.policyKey).toBe("conversations/playground/state");
+    // Intentionally unprotected — handler gates on assertPlaygroundEnabled()
+    expect(route.policy).toBeNull();
     expect(route.tags).toEqual(["playground"]);
   });
 

package/src/runtime/routes/playground/force-compact.ts

@@ -22,7 +22,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundForceCompact",
     endpoint: "conversations/:id/playground/compact",
     method: "POST",
-    policyKey: "conversations/playground/compact",
+    policy: null,
     summary: "Force compaction on a conversation (dev-only playground)",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],

package/src/runtime/routes/playground/helpers.ts

@@ -96,7 +96,6 @@ export async function addPlaygroundMessage(
     conversationId,
     role,
     contentJson,
-    undefined,
     options,
   );
   return { id: persisted.id };

package/src/runtime/routes/playground/inject-failures.ts

@@ -42,7 +42,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundInjectCompactionFailures",
     endpoint: "conversations/:id/playground/inject-compaction-failures",
     method: "POST",
-    policyKey: "conversations/playground/inject-failures",
+    policy: null,
     summary:
       "Directly mutate compaction circuit-breaker state (dev-only playground)",
     tags: ["playground"],
@@ -62,15 +62,16 @@ export const ROUTES: RouteDefinition[] = [
         throw new BadRequestError(parsed.error.message);
       }
       const { consecutiveFailures, circuitOpenForMs } = parsed.data;
+      const circuit = conversation.agentLoop.compactionCircuit;
 
       if (consecutiveFailures !== undefined) {
-        conversation.consecutiveCompactionFailures = consecutiveFailures;
+        circuit.consecutiveCompactionFailures = consecutiveFailures;
       }
 
       if (circuitOpenForMs !== undefined) {
         if (circuitOpenForMs === 0) {
-          if (conversation.compactionCircuitOpenUntil !== null) {
-            conversation.compactionCircuitOpenUntil = null;
+          if (circuit.compactionCircuitOpenUntil !== null) {
+            circuit.compactionCircuitOpenUntil = null;
             conversation.sendToClient({
               type: "compaction_circuit_closed",
               conversationId: conversation.conversationId,
@@ -78,7 +79,7 @@ export const ROUTES: RouteDefinition[] = [
           }
         } else {
           const openUntil = Date.now() + circuitOpenForMs;
-          conversation.compactionCircuitOpenUntil = openUntil;
+          circuit.compactionCircuitOpenUntil = openUntil;
           conversation.sendToClient({
             type: "compaction_circuit_open",
             conversationId: conversation.conversationId,
@@ -116,7 +117,10 @@ export interface CompactionStateResponse {
 function buildCompactionState(
   conversation: Conversation,
 ): CompactionStateResponse {
-  const ctxConfig = resolveCallSiteConfig("mainAgent", getConfig().llm).contextWindow;
+  const ctxConfig = resolveCallSiteConfig(
+    "mainAgent",
+    getConfig().llm,
+  ).contextWindow;
   const maxInputTokens = ctxConfig.maxInputTokens;
   const compactThresholdRatio = ctxConfig.compactThreshold;
   const isCompactionEnabled = ctxConfig.enabled;
@@ -124,7 +128,8 @@ function buildCompactionState(
 
   const messages = conversation.getMessages();
   const estimatedInputTokens = estimatePromptTokens(messages);
-  const circuitOpenUntil = conversation.compactionCircuitOpenUntil;
+  const circuit = conversation.agentLoop.compactionCircuit;
+  const circuitOpenUntil = circuit.compactionCircuitOpenUntil;
   const isCircuitOpen =
     circuitOpenUntil !== null && Date.now() < circuitOpenUntil;
 
@@ -136,7 +141,7 @@ function buildCompactionState(
     messageCount: messages.length,
     contextCompactedMessageCount: conversation.contextCompactedMessageCount,
     contextCompactedAt: conversation.contextCompactedAt,
-    consecutiveCompactionFailures: conversation.consecutiveCompactionFailures,
+    consecutiveCompactionFailures: circuit.consecutiveCompactionFailures,
     compactionCircuitOpenUntil: circuitOpenUntil,
     isCircuitOpen,
     isCompactionEnabled,

package/src/runtime/routes/playground/reset-circuit.ts

@@ -35,7 +35,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundResetCompactionCircuit",
     endpoint: "conversations/:id/playground/reset-compaction-circuit",
     method: "POST",
-    policyKey: "conversations/playground/reset-circuit",
+    policy: null,
     summary: "Clear compaction circuit-breaker state (dev-only playground)",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],
@@ -48,9 +48,10 @@ export const ROUTES: RouteDefinition[] = [
         throwConversationNotFound(id);
       }
 
-      conversation.consecutiveCompactionFailures = 0;
-      if (conversation.compactionCircuitOpenUntil !== null) {
-        conversation.compactionCircuitOpenUntil = null;
+      const circuit = conversation.agentLoop.compactionCircuit;
+      circuit.consecutiveCompactionFailures = 0;
+      if (circuit.compactionCircuitOpenUntil !== null) {
+        circuit.compactionCircuitOpenUntil = null;
         conversation.sendToClient({
           type: "compaction_circuit_closed",
           conversationId: conversation.conversationId,
@@ -64,15 +65,19 @@ export const ROUTES: RouteDefinition[] = [
 
 function buildCompactionState(conversation: Conversation) {
   const config = getConfig();
-  const contextWindow = resolveCallSiteConfig("mainAgent", config.llm).contextWindow;
+  const contextWindow = resolveCallSiteConfig(
+    "mainAgent",
+    config.llm,
+  ).contextWindow;
   const messages = conversation.getMessages();
   const estimatedInputTokens = estimatePromptTokens(messages);
   const maxInputTokens = contextWindow.maxInputTokens;
   const compactThresholdRatio = contextWindow.compactThreshold;
   const thresholdTokens = Math.floor(maxInputTokens * compactThresholdRatio);
+  const circuit = conversation.agentLoop.compactionCircuit;
   const isCircuitOpen =
-    conversation.compactionCircuitOpenUntil !== null &&
-    Date.now() < conversation.compactionCircuitOpenUntil;
+    circuit.compactionCircuitOpenUntil !== null &&
+    Date.now() < circuit.compactionCircuitOpenUntil;
 
   return {
     estimatedInputTokens,
@@ -82,8 +87,8 @@ function buildCompactionState(conversation: Conversation) {
     messageCount: messages.length,
     contextCompactedMessageCount: conversation.contextCompactedMessageCount,
     contextCompactedAt: conversation.contextCompactedAt,
-    consecutiveCompactionFailures: conversation.consecutiveCompactionFailures,
-    compactionCircuitOpenUntil: conversation.compactionCircuitOpenUntil,
+    consecutiveCompactionFailures: circuit.consecutiveCompactionFailures,
+    compactionCircuitOpenUntil: circuit.compactionCircuitOpenUntil,
     isCircuitOpen,
     isCompactionEnabled: contextWindow.enabled,
   };

package/src/runtime/routes/playground/seed-conversation.ts

@@ -45,7 +45,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundSeedConversation",
     endpoint: "playground/seed-conversation",
     method: "POST",
-    policyKey: "playground/seed-conversation",
+    policy: null,
     summary: "Create a synthetic seeded conversation for compaction testing",
     tags: ["playground"],
     requestBody: SeedBodySchema,

package/src/runtime/routes/playground/seeded-conversations.ts

@@ -19,7 +19,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundListSeededConversations",
     endpoint: "playground/seeded-conversations",
     method: "GET",
-    policyKey: "playground/seeded-conversations/list",
+    policy: null,
     summary: "List conversations created by the seed-conversation endpoint",
     tags: ["playground"],
     handler: () => {
@@ -34,7 +34,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundDeleteSeededConversation",
     endpoint: "playground/seeded-conversations/:id",
     method: "DELETE",
-    policyKey: "playground/seeded-conversations/delete-one",
+    policy: null,
     summary: "Delete a single seeded conversation (prefix-gated)",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],
@@ -56,7 +56,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundDeleteAllSeededConversations",
     endpoint: "playground/seeded-conversations",
     method: "DELETE",
-    policyKey: "playground/seeded-conversations/delete-all",
+    policy: null,
     summary: "Delete every seeded playground conversation (prefix-gated)",
     tags: ["playground"],
     handler: () => {

package/src/runtime/routes/playground/state.ts

@@ -36,7 +36,8 @@ export function buildCompactionStateResponse(conversation: Conversation) {
   const maxInputTokens = cfg.maxInputTokens;
   const compactThresholdRatio = cfg.compactThreshold;
   const thresholdTokens = Math.floor(maxInputTokens * compactThresholdRatio);
-  const compactionCircuitOpenUntil = conversation.compactionCircuitOpenUntil;
+  const circuit = conversation.agentLoop.compactionCircuit;
+  const compactionCircuitOpenUntil = circuit.compactionCircuitOpenUntil;
   return {
     estimatedInputTokens,
     maxInputTokens,
@@ -45,7 +46,7 @@ export function buildCompactionStateResponse(conversation: Conversation) {
     messageCount: messages.length,
     contextCompactedMessageCount: conversation.contextCompactedMessageCount,
     contextCompactedAt: conversation.contextCompactedAt,
-    consecutiveCompactionFailures: conversation.consecutiveCompactionFailures,
+    consecutiveCompactionFailures: circuit.consecutiveCompactionFailures,
     compactionCircuitOpenUntil,
     isCircuitOpen:
       compactionCircuitOpenUntil !== null &&
@@ -59,7 +60,7 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "playgroundGetCompactionState",
     endpoint: "conversations/:id/playground/compaction-state",
     method: "GET",
-    policyKey: "conversations/playground/state",
+    policy: null,
     summary: "Read current compaction state for a conversation",
     tags: ["playground"],
     pathParams: [{ name: "id", type: "uuid" }],

package/src/runtime/routes/plugins-routes.ts

@@ -21,11 +21,11 @@
  * Every route declares `policyKey: "plugins"` + `requirePolicyEnforcement:
  * true`. The HTTP router enforces via `enforcePolicy()` against the
  * `plugins:GET` / `plugins/search:GET` / `plugins:DELETE` registry
- * entries in `runtime/auth/route-policy.ts`. The IPC adapter exposes
- * the same policies to the gateway IPC proxy, whose own policy table
- * (`gateway/src/auth/ipc-route-policy.ts`) holds the matching entries
- * for `plugins_list` / `plugins_search` / `plugins_uninstall`. Reads
- * require `settings.read`; uninstall requires `settings.write`.
+ * entries in `runtime/auth/route-policy.ts`. The same registry is the
+ * source of truth for the IPC path too: the IPC route adapter resolves
+ * each route's policy and ships it in `get_route_schema`, which the
+ * gateway's IPC proxy reads from its in-memory cache. Reads require
+ * `settings.read`; uninstall requires `settings.write`.
  */
 
 import { z } from "zod";
@@ -44,11 +44,8 @@ import {
   PluginNotInstalledError,
   uninstallPlugin,
 } from "../../cli/lib/uninstall-plugin.js";
-import {
-  BadRequestError,
-  InternalError,
-  NotFoundError,
-} from "./errors.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
+import { BadRequestError, InternalError, NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 // ---------------------------------------------------------------------------
@@ -166,9 +163,9 @@ function matchesQuery(plugin: PluginView, needle: string): boolean {
 // Handler — list installed
 // ---------------------------------------------------------------------------
 
-function handleListPlugins({
-  queryParams = {},
-}: RouteHandlerArgs): { plugins: PluginView[] } {
+function handleListPlugins({ queryParams = {} }: RouteHandlerArgs): {
+  plugins: PluginView[];
+} {
   const q = queryParams.q?.trim();
   const installed = listInstalledPlugins();
   const projected = installed.map(projectPlugin);
@@ -260,8 +257,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "plugins_list",
     endpoint: "plugins",
     method: "GET",
-    policyKey: "plugins",
-    requirePolicyEnforcement: true,
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List installed plugins",
     description:
       "Return one entry per directory under `<workspaceDir>/plugins/`, sorted alphabetically. Matches the CLI's `assistant plugins list`. Supports `?q=<text>` for case-insensitive substring matching across plugin id, name, and description.",
@@ -281,8 +280,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "plugins_search",
     endpoint: "plugins/search",
     method: "GET",
-    policyKey: "plugins",
-    requirePolicyEnforcement: true,
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Search the plugin catalog",
     description:
       "List installable plugins from the canonical `vellum-ai/vellum-assistant` catalog at `experimental/plugins/`. The query is an ECMAScript regex matched case-insensitively against the directory name (e.g. `memory`, `^simple`). Empty query returns every entry. Mirrors the CLI's `assistant plugins search`.",
@@ -308,8 +309,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "plugins_uninstall",
     endpoint: "plugins/:name",
     method: "DELETE",
-    policyKey: "plugins",
-    requirePolicyEnforcement: true,
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Uninstall a plugin",
     description:
       "Remove the directory at `<workspaceDir>/plugins/<name>/`. Mirrors the CLI's `assistant plugins uninstall <name>` (without the interactive confirmation — the API caller is responsible for any prompt). The plugin name is sanitized by the same regex the CLI uses; `../escape`-style values, hidden names, and absolute paths return 400. Missing plugins return 404. The assistant must be restarted to drop the plugin from the running runtime.",

package/src/runtime/routes/profiler-routes.ts

@@ -37,6 +37,7 @@ import {
 } from "../../daemon/profiler-run-store.js";
 import { getLogger } from "../../util/logger.js";
 import { getProfilerRunDir } from "../../util/platform.js";
+import { GATEWAY_PRINCIPALS } from "../auth/route-policy.js";
 import { createTarGz, MAX_ARCHIVE_BYTES } from "./archive-utils.js";
 import {
   BadRequestError,
@@ -232,11 +233,14 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "profiler_runs_get",
     endpoint: "profiler/runs",
     method: "GET",
+    policy: {
+      requiredScopes: ["internal.write"],
+      allowedPrincipalTypes: GATEWAY_PRINCIPALS,
+    },
     summary: "List profiler runs",
     description:
       "Enumerate all profiler run directories with manifest metadata, sorted newest-first.",
     tags: ["profiler"],
-    requirePolicyEnforcement: true,
     handler: handleListRuns,
     responseBody: z.object({
       runs: z.array(
@@ -257,11 +261,14 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "profiler_runs_by_runId_get",
     endpoint: "profiler/runs/:runId",
     method: "GET",
+    policy: {
+      requiredScopes: ["internal.write"],
+      allowedPrincipalTypes: GATEWAY_PRINCIPALS,
+    },
     summary: "Get profiler run detail",
     description:
       "Return manifest metadata, Bun-generated markdown summary, and current retention state for a single profiler run.",
     tags: ["profiler"],
-    requirePolicyEnforcement: true,
     handler: handleGetRun,
     responseBody: z.object({
       runId: z.string(),
@@ -284,11 +291,14 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "profiler_runs_by_runId_export_post",
     endpoint: "profiler/runs/:runId/export",
     method: "POST",
+    policy: {
+      requiredScopes: ["internal.write"],
+      allowedPrincipalTypes: GATEWAY_PRINCIPALS,
+    },
     summary: "Export profiler run",
     description:
       "Package a single profiler run directory as a tar.gz bundle, subject to the same archive size limits used by runtime log exports.",
     tags: ["profiler"],
-    requirePolicyEnforcement: true,
     handler: handleExportRun,
     responseHeaders: ({ pathParams = {} }) => ({
       "Content-Type": "application/gzip",
@@ -299,11 +309,14 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "profiler_runs_by_runId_delete",
     endpoint: "profiler/runs/:runId",
     method: "DELETE",
+    policy: {
+      requiredScopes: ["internal.write"],
+      allowedPrincipalTypes: GATEWAY_PRINCIPALS,
+    },
     summary: "Delete profiler run",
     description:
       "Delete a completed profiler run and recalculate disk-budget state. Rejects deletion of the currently active run.",
     tags: ["profiler"],
-    requirePolicyEnforcement: true,
     handler: handleDeleteRun,
     responseBody: z.object({
       deleted: z.boolean(),

package/src/runtime/routes/ps-routes.ts

@@ -15,6 +15,7 @@ import { getConfig } from "../../config/loader.js";
 import { resolveQdrantUrl } from "../../memory/qdrant-client.js";
 import { getLogger } from "../../util/logger.js";
 import { getEmbedWorkerPidPath } from "../../util/platform.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import type { RouteDefinition } from "./types.js";
 
 const log = getLogger("ps-routes");
@@ -110,6 +111,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "ps",
     endpoint: "ps",
     method: "GET",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     handler: getProcessStatus,
     summary: "Process status",
     description:

package/src/runtime/routes/publish-routes.ts

@@ -28,6 +28,7 @@ import {
 import { deployHtmlToVercel } from "../../services/vercel-deploy.js";
 import { credentialBroker } from "../../tools/credentials/broker.js";
 import { getLogger } from "../../util/logger.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import { NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
@@ -174,7 +175,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "apps_publish",
     endpoint: "apps/:id/publish",
     method: "POST",
-    policyKey: "apps/publish",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     handler: handlePublish,
     summary: "Publish app to Vercel",
     description:
@@ -192,7 +196,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "apps_unpublish",
     endpoint: "apps/:id/unpublish",
     method: "POST",
-    policyKey: "apps/unpublish",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     handler: handleUnpublish,
     summary: "Unpublish app from Vercel",
     description: "Mark the active Vercel deployment as inactive.",
@@ -206,7 +213,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "apps_publish_status",
     endpoint: "apps/:id/publish-status",
     method: "GET",
-    policyKey: "apps/publish-status",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     handler: handlePublishStatus,
     summary: "Get app publish status",
     description: "Return the current Vercel deployment state for an app.",

package/src/runtime/routes/question-routes.ts

@@ -29,6 +29,7 @@ import {
   type QuestionPromptResult,
 } from "../../permissions/question-prompter.js";
 import { getLogger } from "../../util/logger.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import * as pendingInteractions from "../pending-interactions.js";
 import { BadRequestError, NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
@@ -248,6 +249,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "question_response",
     endpoint: "question-response",
     method: "POST",
+    policy: {
+      requiredScopes: ["approval.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     handler: handleQuestionResponse,
     requireGuardian: true,
     summary: "Resolve a pending ask-question prompt",