@vellumai/assistant 0.8.6 → 0.8.7

package/src/runtime/routes/conversation-list-routes.ts

@@ -9,6 +9,7 @@
 
 import { z } from "zod";
 
+import { findConversation } from "../../daemon/conversation-store.js";
 import {
   type Confidence,
   getAttentionStateByConversationIds,
@@ -26,10 +27,12 @@ import {
   listConversations,
   listPinnedConversations,
 } from "../../memory/conversation-queries.js";
+import type { ConversationType } from "../../memory/conversation-types.js";
 import { getBindingsForConversations } from "../../memory/external-conversation-store.js";
 import { listGroups } from "../../memory/group-crud.js";
 import { UserError } from "../../util/errors.js";
 import { getLogger } from "../../util/logger.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
   buildConversationDetailResponse,
   serializeConversationSummary,
@@ -131,6 +134,12 @@ export const conversationSummarySchema = z.object({
   forkParent: forkParentSchema.optional(),
   archivedAt: z.number().optional(),
   inferenceProfile: z.string().optional(),
+  /**
+   * True when the agent loop is currently mid-turn for this conversation.
+   * Mirrors the in-memory `Conversation.isProcessing()` flag on the daemon
+   * — `false` for rows that are cold (not currently resident in memory).
+   */
+  isProcessing: z.boolean(),
 });
 
 const groupSummarySchema = z.object({
@@ -168,15 +177,48 @@ function resolveOrThrow(rawId: string): string {
 function handleListConversations({ queryParams = {} }: RouteHandlerArgs) {
   const limit = Number(queryParams.limit ?? 50);
   const offset = Number(queryParams.offset ?? 0);
-  const backgroundOnly = queryParams.conversationType === "background";
-
-  let rows = listConversations(limit, backgroundOnly, offset);
-  const totalCount = countConversations(backgroundOnly);
+  // "background" is the back-compat umbrella (background + scheduled); newer
+  // clients can pass "scheduled" to load only the Scheduled section. Absent
+  // defaults to the standard foreground list. Any other value is rejected so
+  // an unrecognized type surfaces as a 400 rather than being silently coerced
+  // to the foreground list (which would mask client/daemon version skew).
+  const rawConversationType = queryParams.conversationType;
+  let conversationType: ConversationType = "standard";
+  if (rawConversationType !== undefined && rawConversationType !== "") {
+    if (
+      rawConversationType === "background" ||
+      rawConversationType === "scheduled"
+    ) {
+      conversationType = rawConversationType;
+    } else {
+      throw new BadRequestError(
+        `Unknown conversationType "${rawConversationType}"; expected "background" or "scheduled".`,
+      );
+    }
+  }
+  // Defaults to `active` so sidebar restores no longer pull archived rows.
+  // The Archive page opts into `archived` to render only archived rows
+  // without dragging the entire live history through pagination first.
+  const archiveStatus =
+    queryParams.archiveStatus === "archived"
+      ? "archived"
+      : queryParams.archiveStatus === "all"
+        ? "all"
+        : "active";
+
+  let rows = listConversations(limit, conversationType, offset, archiveStatus);
+  const totalCount = countConversations(conversationType, archiveStatus);
 
   // On the first page, ensure all pinned conversations are included
-  // even if they fall outside the paginated window.
-  if (offset === 0 && !backgroundOnly) {
-    const pinned = listPinnedConversations();
+  // even if they fall outside the paginated window. Pinned injection is
+  // skipped in archived/all views since the Archive page renders archived
+  // rows in archive-time order, not pin order.
+  if (
+    offset === 0 &&
+    conversationType === "standard" &&
+    archiveStatus === "active"
+  ) {
+    const pinned = listPinnedConversations(archiveStatus);
     const seen = new Set(rows.map((c) => c.id));
     const missing = pinned.filter((c) => !seen.has(c.id));
     if (missing.length > 0) {
@@ -199,6 +241,12 @@ function handleListConversations({ queryParams = {} }: RouteHandlerArgs) {
         attentionState: attentionStates.get(conversation.id),
         displayMeta: displayMeta.get(conversation.id),
         parentCache,
+        // Cold (evicted / never-loaded) rows aren't in the in-memory
+        // store, so `findConversation` returns `undefined` and they
+        // report `isProcessing: false` — by definition they aren't
+        // mid-turn since the agent loop only runs on resident convs.
+        isProcessing:
+          findConversation(conversation.id)?.isProcessing() ?? false,
       }),
     ),
     nextOffset,
@@ -307,7 +355,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "listConversations",
     endpoint: "conversations",
     method: "GET",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "List conversations",
     description:
       "Paginated list of conversations with attention state and display metadata.",
@@ -330,8 +381,16 @@ export const ROUTES: RouteDefinition[] = [
         type: "string",
         required: false,
         description:
-          'Filter by conversation type. Pass "background" to list only background/scheduled conversations.',
-        schema: { type: "string", enum: ["background"] },
+          'Filter by conversation type. Pass "background" to list background and scheduled conversations together (the back-compat umbrella), or "scheduled" to list only scheduled conversations.',
+        schema: { type: "string", enum: ["background", "scheduled"] },
+      },
+      {
+        name: "archiveStatus",
+        type: "string",
+        required: false,
+        description:
+          'Filter by archive state. Defaults to "active" (non-archived rows only). Pass "archived" to list only archived rows (for the Archive page) or "all" to include both.',
+        schema: { type: "string", enum: ["active", "archived", "all"] },
       },
     ],
     responseBody: listConversationsResponseSchema,
@@ -341,7 +400,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "recordConversationSeen",
     endpoint: "conversations/seen",
     method: "POST",
-    policyKey: "conversations/seen",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Record a seen signal",
     description: "Mark a conversation as seen, advancing the attention cursor.",
     tags: ["conversations"],
@@ -362,7 +424,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "markConversationUnread",
     endpoint: "conversations/unread",
     method: "POST",
-    policyKey: "conversations/unread",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Mark conversation unread",
     description: "Reset the seen cursor so the conversation appears unread.",
     tags: ["conversations"],
@@ -376,6 +441,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "getConversation",
     endpoint: "conversations/:id",
     method: "GET",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     pathParams: [{ name: "id", type: "uuid" }],
     summary: "Get conversation detail",
     description: "Retrieve a single conversation with full metadata.",

package/src/runtime/routes/conversation-management-routes.ts

@@ -49,6 +49,7 @@ import { enqueueMemoryJob } from "../../memory/jobs-store.js";
 import { deleteSchedule } from "../../schedule/schedule-store.js";
 import { UserError } from "../../util/errors.js";
 import { getLogger } from "../../util/logger.js";
+import { ACTOR_PRINCIPALS, LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import { buildConversationDetailResponse } from "../services/conversation-serializer.js";
 import {
   publishConversationListAndMetadataChanged,
@@ -432,7 +433,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "createConversation",
     endpoint: "conversations",
     method: "POST",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Create a conversation",
     description: "Create or get an existing conversation by key.",
     tags: ["conversations"],
@@ -466,7 +470,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "forkConversation",
     endpoint: "conversations/fork",
     method: "POST",
-    policyKey: "conversations/fork",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Fork a conversation",
     description:
       "Create a copy of a conversation, optionally truncated at a specific message.",
@@ -487,7 +494,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "switchConversation",
     endpoint: "conversations/switch",
     method: "POST",
-    policyKey: "conversations/switch",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Switch active conversation",
     description: "Set the active conversation for the current session.",
     tags: ["conversations"],
@@ -510,7 +520,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "setConversationInferenceProfile",
     endpoint: "conversations/:id/inference-profile",
     method: "PUT",
-    policyKey: "conversations/inference-profile",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Set conversation inference profile",
     description:
       "Override the LLM inference profile for a single conversation. " +
@@ -542,7 +555,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "renameConversation",
     endpoint: "conversations/:id/name",
     method: "PATCH",
-    policyKey: "conversations/name",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Rename a conversation",
     description: "Update the display name of a conversation.",
     tags: ["conversations"],
@@ -557,7 +573,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "clearAllConversations",
     endpoint: "conversations",
     method: "DELETE",
-    policyKey: "conversations/clear-all",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Clear all conversations",
     description: "Permanently delete ALL conversations, messages, and memory.",
     tags: ["conversations"],
@@ -568,7 +587,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "wipeConversation",
     endpoint: "conversations/:id/wipe",
     method: "POST",
-    policyKey: "conversations/wipe",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: LOCAL_PRINCIPALS,
+    },
     summary: "Wipe a conversation",
     description:
       "Delete all messages in a conversation and revert associated memory changes.",
@@ -586,7 +608,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "deleteConversation",
     endpoint: "conversations/:id",
     method: "DELETE",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Delete a conversation",
     description: "Permanently delete a single conversation and its messages.",
     tags: ["conversations"],
@@ -598,7 +623,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "archiveConversation",
     endpoint: "conversations/:id/archive",
     method: "POST",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Archive a conversation",
     description: "Move a conversation to the archived state.",
     tags: ["conversations"],
@@ -613,7 +641,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "unarchiveConversation",
     endpoint: "conversations/:id/unarchive",
     method: "POST",
-    policyKey: "conversations",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Unarchive a conversation",
     description:
       "Restore an archived conversation back to the default sidebar.",
@@ -629,7 +660,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "cancelConversationGeneration",
     endpoint: "conversations/:id/cancel",
     method: "POST",
-    policyKey: "conversations/cancel",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Cancel generation",
     description: "Abort the in-progress assistant response for a conversation.",
     tags: ["conversations"],
@@ -646,7 +680,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "undoLastMessage",
     endpoint: "conversations/:id/undo",
     method: "POST",
-    policyKey: "conversations/undo",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Undo last message",
     description:
       "Remove the most recent user+assistant message pair from the conversation.",
@@ -662,7 +699,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "regenerateResponse",
     endpoint: "conversations/:id/regenerate",
     method: "POST",
-    policyKey: "conversations/regenerate",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Regenerate response",
     description:
       "Re-run the assistant for the last user message in a conversation.",
@@ -675,7 +715,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "reorderConversations",
     endpoint: "conversations/reorder",
     method: "POST",
-    policyKey: "conversations/reorder",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Reorder conversations",
     description: "Batch-update display order and pin state for conversations.",
     tags: ["conversations"],

package/src/runtime/routes/conversation-query-routes.ts

@@ -20,6 +20,7 @@
 
 import { z } from "zod";
 
+import { LlmContextResponseSchema } from "../../api/responses/llm-context-response.js";
 import {
   deepMergeOverwrite,
   fillContextDefaultsForMissingKeys,
@@ -71,6 +72,7 @@ import { type LogRow } from "../../memory/llm-request-log-store.js";
 import { getMemoryRecallLogByMessageIds } from "../../memory/memory-recall-log-store.js";
 import { getMemoryV2ActivationLogByMessageIds } from "../../memory/memory-v2-activation-log-store.js";
 import { MEMORY_V2_CONSOLIDATION_SOURCE } from "../../memory/v2/constants.js";
+import { getMemoryV3SelectionForInspector } from "../../memory/v3/selection-log-store.js";
 import {
   createConnection,
   listConnections,
@@ -107,6 +109,7 @@ type LlmContextRouteResult = Omit<LlmContextNormalizationResult, "summary"> & {
 };
 
 import { MANAGED_PROFILE_NAMES } from "../../config/seed-inference-profiles.js";
+import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 
 const RESERVED_PROFILE_NAMES = new Set([
   "__proto__",
@@ -877,13 +880,11 @@ function handleGetMessageContent({
   return result;
 }
 
-const CONVERSATION_KINDS = [
-  "user",
-  "background",
-  "background_memory_consolidation",
-  "scheduled",
-] as const;
-type ConversationKind = (typeof CONVERSATION_KINDS)[number];
+type ConversationKind =
+  | "user"
+  | "background"
+  | "background_memory_consolidation"
+  | "scheduled";
 
 function resolveConversationKind(
   source: string,
@@ -921,6 +922,12 @@ async function handleGetLlmContext({ pathParams = {} }: RouteHandlerArgs) {
   // turn finishes — see `assistant/src/memory/conversation-crud.ts`.
   const conversationTotalEstimatedCostUsd =
     conversation?.totalEstimatedCost ?? null;
+  const memoryV3Selection = message
+    ? await getMemoryV3SelectionForInspector(
+        message.conversationId,
+        memoryV2Activation?.turn ?? null,
+      )
+    : null;
   return {
     messageId,
     conversationKind,
@@ -928,6 +935,7 @@ async function handleGetLlmContext({ pathParams = {} }: RouteHandlerArgs) {
     logs: logs.map(normalizeLlmContextLog),
     memoryRecall: memoryRecallLog ?? null,
     memoryV2Activation: memoryV2Activation ?? null,
+    memoryV3Selection,
   };
 }
 
@@ -953,6 +961,7 @@ async function handleGetConversationLlmContext({
         logs: [],
         memoryRecall: null,
         memoryV2Activation: null,
+        memoryV3Selection: null,
       };
     }
     throw new BadRequestError(
@@ -971,6 +980,7 @@ async function handleGetConversationLlmContext({
         logs: [],
         memoryRecall: null,
         memoryV2Activation: null,
+        memoryV3Selection: null,
       };
     }
     throw new NotFoundError(`Conversation ${conversationId} not found`);
@@ -993,6 +1003,7 @@ async function handleGetConversationLlmContext({
     logs: logs.map(normalizeLlmContextLog),
     memoryRecall: null,
     memoryV2Activation: null,
+    memoryV3Selection: null,
   };
 }
 
@@ -1080,7 +1091,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "model_get",
     endpoint: "model",
     method: "GET",
-    policyKey: "model",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get current model config",
     description:
       "Return the active LLM model ID, provider, and available models.",
@@ -1091,7 +1105,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "model_image_gen_set",
     endpoint: "model/image-gen",
     method: "PUT",
-    policyKey: "model/image-gen",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Set image generation model",
     description: "Change the active image generation model.",
     tags: ["config"],
@@ -1102,7 +1119,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_embeddings_get",
     endpoint: "config/embeddings",
     method: "GET",
-    policyKey: "config/embeddings",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get embedding config",
     description:
       "Return the active embedding provider, model, and available options.",
@@ -1113,7 +1133,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_embeddings_set",
     endpoint: "config/embeddings",
     method: "PUT",
-    policyKey: "config/embeddings",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Set embedding config",
     description: "Change the embedding provider and optionally model.",
     tags: ["config"],
@@ -1127,7 +1150,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_get",
     endpoint: "config",
     method: "GET",
-    policyKey: "config",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get full config",
     description: "Return the raw settings.json configuration object.",
     tags: ["config"],
@@ -1137,7 +1163,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_patch",
     endpoint: "config",
     method: "PATCH",
-    policyKey: "config",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Patch config",
     description:
       "Deep-merge a partial JSON object into the settings.json configuration.",
@@ -1148,7 +1177,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_set",
     endpoint: "config/set",
     method: "POST",
-    policyKey: "config/set",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Set a single config path",
     description:
       "Assign a value at a dotted config path with direct-replacement semantics " +
@@ -1161,7 +1193,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_allowlist_validate",
     endpoint: "config/allowlist/validate",
     method: "GET",
-    policyKey: "config/allowlist/validate",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Validate secret-allowlist.json regex patterns",
     description:
       "Compile each regex pattern in secret-allowlist.json and return any " +
@@ -1173,7 +1208,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_schema_get",
     endpoint: "config/schema",
     method: "GET",
-    policyKey: "config/schema",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get config JSON Schema",
     description:
       "Return the JSON Schema for the assistant config, optionally scoped to a dotted-path sub-schema (e.g. ?path=calls).",
@@ -1191,7 +1229,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "config_llm_profiles_replace",
     endpoint: "config/llm/profiles/:name",
     method: "PUT",
-    policyKey: "config",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Replace an inference profile",
     description:
       "Replace the settings-UI-managed leaves of a single llm.profiles entry while preserving non-UI leaves.",
@@ -1202,7 +1243,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversations_search",
     endpoint: "conversations/search",
     method: "GET",
-    policyKey: "conversations/search",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Search conversations",
     description:
       "Full-text search across conversation titles and message content.",
@@ -1235,7 +1279,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "messages_content_get",
     endpoint: "messages/:id/content",
     method: "GET",
-    policyKey: "messages/content",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get message content",
     description: "Return the full content of a single message by ID.",
     tags: ["messages"],
@@ -1252,7 +1299,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "conversations_llm_context_get",
     endpoint: "conversations/llm-context",
     method: "GET",
-    policyKey: "conversations/llm-context",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get LLM context for a conversation",
     description:
       "Returns normalized LLM request/response logs for an entire conversation.",
@@ -1271,41 +1321,32 @@ export const ROUTES: RouteDefinition[] = [
         description: "Internal conversation identifier.",
       },
     ],
-    responseBody: z.object({
-      conversationKey: z.string().nullable().optional(),
-      conversationId: z.string().nullable(),
-      conversationKind: z.enum(CONVERSATION_KINDS),
-      conversationTotalEstimatedCostUsd: z.number().nullable(),
-      logs: z.array(z.unknown()),
-      memoryRecall: z.object({}).passthrough().nullable(),
-      memoryV2Activation: z.object({}).passthrough().nullable(),
-    }),
+    responseBody: LlmContextResponseSchema,
     handler: handleGetConversationLlmContext,
   },
   {
     operationId: "messages_llm_context_get",
     endpoint: "messages/:id/llm-context",
     method: "GET",
-    policyKey: "messages/llm-context",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get LLM context for a message",
     description:
       "Return request/response logs and memory recall data for a specific message.",
     tags: ["messages"],
-    responseBody: z.object({
-      messageId: z.string(),
-      conversationKind: z.enum(CONVERSATION_KINDS),
-      conversationTotalEstimatedCostUsd: z.number().nullable(),
-      logs: z.array(z.unknown()),
-      memoryRecall: z.object({}).passthrough().nullable(),
-      memoryV2Activation: z.object({}).passthrough().nullable(),
-    }),
+    responseBody: LlmContextResponseSchema,
     handler: handleGetLlmContext,
   },
   {
     operationId: "llm_request_logs_payload_get",
     endpoint: "llm-request-logs/:id/payload",
     method: "GET",
-    policyKey: "llm-request-logs/payload",
+    policy: {
+      requiredScopes: ["chat.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Get raw payload for a single LLM request log",
     description:
       "Return the full request and response payloads for a specific log entry.",
@@ -1321,7 +1362,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "messages_queued_delete",
     endpoint: "messages/queued/:id",
     method: "DELETE",
-    policyKey: "messages/queued",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Delete a queued message",
     description:
       "Remove a pending message from the conversation queue before it is processed.",
@@ -1340,7 +1384,10 @@ export const ROUTES: RouteDefinition[] = [
     operationId: "messages_queued_steer",
     endpoint: "messages/queued/:id/steer",
     method: "POST",
-    policyKey: "messages/queued",
+    policy: {
+      requiredScopes: ["chat.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
     summary: "Steer to a queued message",
     description:
       "Promote a queued message to the head of the queue and abort the current generation so it is processed next.",