spine-framework 0.3.124 → 0.3.126

package/.framework/functions/_shared/resolve-credentials.ts

@@ -0,0 +1,102 @@
+// CIL[BEGIN chunk_id="resolve_credentials_module_header_1784200002" type="module_header" identity="imports" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve integration credentials from DB or environment variables"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide a single, auditable source for external API secrets"]
+// CIL[DOC-CONTEXT module="resolve_credentials" layer="infrastructure" related_files="[".framework/functions/integration-routes.ts",".framework/functions/integration-outbound.ts",".framework/functions/agent-runner.ts",".framework/functions/_shared/audit.ts"]"]
+// CIL[DOC-CONTRACT inputs="ctx, integration record, credential field name" outputs="{ value, source }" errors="missing_credential" side_effects="emits audit log"]
+// CIL[DOC-MICRO logic_summary="Reads integrations.credentials[field]. If source is env_var, reads process.env. Logs the source but never the secret value." notable_decisions="["Never logs the secret value.","Throws if neither DB nor env provides the credential.","Returns source so audit trail can show where the secret came from."]"]
+// CIL[DOC-CONFIDENCE pass="first" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="experimental"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/integration-routes.ts, .framework/functions/integration-outbound.ts, .framework/functions/agent-runner.ts, .framework/functions/_shared/audit.ts."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="Credential field must be defined in integrations.credentials."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="Helper used by broker and core LLM callers."]
+// CIL[DOC-VECTOR type="user_journey" content="Runtime credential resolution for outbound calls."]
+
+import { CoreContext } from './middleware'
+import { emitLog } from './audit'
+
+interface CredentialEntry {
+  source: 'value' | 'env_var'
+  value: string
+}
+
+export interface ResolvedCredential {
+  value: string
+  source: 'value' | 'env_var'
+}
+
+export async function resolveCredential(
+  ctx: CoreContext,
+  integration: any,
+  fieldName: string
+): Promise<ResolvedCredential> {
+  const credentials = integration?.credentials || {}
+  const entry = credentials[fieldName] as CredentialEntry | undefined
+
+  if (!entry || !entry.source) {
+    await emitLog(ctx, 'integration.credential_missing', { type: 'integration', id: integration?.id }, undefined, {
+      field: fieldName,
+      integration_id: integration?.id,
+      account_id: ctx.accountId
+    })
+    throw new Error(`Missing credential configuration for ${fieldName} on integration ${integration?.id}`)
+  }
+
+  if (entry.source === 'env_var') {
+    const envValue = process.env[entry.value]
+    if (!envValue) {
+      await emitLog(ctx, 'integration.credential_env_missing', { type: 'integration', id: integration?.id }, undefined, {
+        field: fieldName,
+        env_var: entry.value,
+        integration_id: integration?.id,
+        account_id: ctx.accountId
+      })
+      throw new Error(`Environment variable ${entry.value} for ${fieldName} is not set`)
+    }
+
+    await emitLog(ctx, 'integration.credential_resolved', { type: 'integration', id: integration?.id }, undefined, {
+      field: fieldName,
+      source: 'env_var',
+      env_var: entry.value,
+      integration_id: integration?.id,
+      account_id: ctx.accountId
+    })
+
+    return { value: envValue, source: 'env_var' }
+  }
+
+  if (!entry.value) {
+    await emitLog(ctx, 'integration.credential_empty', { type: 'integration', id: integration?.id }, undefined, {
+      field: fieldName,
+      source: 'value',
+      integration_id: integration?.id,
+      account_id: ctx.accountId
+    })
+    throw new Error(`Credential ${fieldName} on integration ${integration?.id} is empty`)
+  }
+
+  await emitLog(ctx, 'integration.credential_resolved', { type: 'integration', id: integration?.id }, undefined, {
+    field: fieldName,
+    source: 'value',
+    integration_id: integration?.id,
+    account_id: ctx.accountId
+  })
+
+  return { value: entry.value, source: 'value' }
+}
+
+export async function resolveCredentials(
+  ctx: CoreContext,
+  integration: any,
+  fieldNames: string[]
+): Promise<Record<string, ResolvedCredential>> {
+  const result: Record<string, ResolvedCredential> = {}
+  for (const fieldName of fieldNames) {
+    result[fieldName] = await resolveCredential(ctx, integration, fieldName)
+  }
+  return result
+}
+
+// CIL[END chunk_id="resolve_credentials_module_header_1784200002"]

package/.framework/functions/_shared/resolve-ids.ts

@@ -1,10 +1,43 @@
-// Slug-based ID resolution utilities
-// Custom app code must never hardcode UUIDs — IDs differ on every fresh install.
-// All functions that need entity IDs must call resolveIds() at request time.
 
-import { adminDb } from './db'
 
-// Resolve type IDs by (kind, slug) pairs
+
+
+
+
+
+
+
+// CIL[BEGIN chunk_id="resolveids_imports_1784020784" type="module_header" identity="imports" parent="none"]
+// CIL[DOC-MACRO purpose="Import database dependency for ID resolution"]
+// CIL[DOC-RESPONSIBILITY responsibility="Import adminDb for database queries"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/functions/_shared/schema-utils.ts\",\".framework/src/components/layout/Sidebar.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="adminDb" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Import database connection for ID resolution utilities" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/_shared/schema-utils.ts, .framework/src/components/layout/Sidebar.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/src/pages/admin/TypeDetailPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+import { adminDb } from './db'
+// CIL[END chunk_id="resolveids_imports_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolvetypeids_1784020784" type="function" identity="resolveTypeIds" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve multiple type IDs by kind and slug"]
+// CIL[DOC-RESPONSIBILITY responsibility="Batch resolve type identifiers from database"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/src/pages/admin/RolesPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="Record<string, string>" errors="type not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Batch queries types table, validates all requested types exist" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: custom/apps/portal/pages/ContentPage.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/src/pages/admin/RolesPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolveTypeIds(
   pairs: Array<{ kind: string; slug: string }>
 ): Promise<Record<string, string>> {
@@ -31,14 +64,100 @@ export async function resolveTypeIds(
 
   return result
 }
-
-// Resolve a single type ID — throws if not found
+// CIL[END chunk_id="resolveids_resolvetypeids_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolvetypeid_1784020784" type="function" identity="resolveTypeId" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve single type ID by kind and slug"]
+// CIL[DOC-RESPONSIBILITY responsibility="Get type identifier from kind and slug"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/functions/_shared/schema-utils.ts\",\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="type ID" errors="type not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Convenience wrapper around resolveTypeIds for single type" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 15. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/functions/_shared/schema-utils.ts, custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 15. Total affected: 15."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolveTypeId(kind: string, slug: string): Promise<string> {
   const ids = await resolveTypeIds([{ kind, slug }])
   return ids[`${kind}/${slug}`]
 }
+// CIL[END chunk_id="resolveids_resolvetypeid_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_typerecord_1784020784" type="interface" identity="TypeRecord" parent="none"]
+// CIL[DOC-MACRO purpose="Define type record interface with schemas"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide structure for type with design and validation schemas"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/schema-utils.ts\",\".framework/src/components/layout/Sidebar.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="TypeRecord interface" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Interface containing type metadata and schemas" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/schema-utils.ts, .framework/src/components/layout/Sidebar.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/src/pages/admin/IntegrationsPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+export interface TypeRecord {
+  id: string
+  slug: string
+  kind: string
+  design_schema: Record<string, any>
+  validation_schema: Record<string, any>
+  is_active: boolean
+}
+// CIL[END chunk_id="resolveids_typerecord_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolvetyperecord_1784020784" type="function" identity="resolveTypeRecord" parent="none"]
+// CIL[DOC-LEARNING topic="runtime-type:generic/type_resolution" content="resolveTypeRecord fetches a type row by kind and slug or by id, returning the full design_schema and validation_schema. It is used by admin-data create and pipeline.ts to stamp new records."]
+// CIL[DOC-NOTE type="design_schema_caveat" content="If the type slug is not found or is inactive, record creation fails with a 400 error. Always seed types before creating records."]
+// CIL[DOC-MACRO purpose="Resolve complete type record with schemas"]
+// CIL[DOC-RESPONSIBILITY responsibility="Get type metadata and validation schemas"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/functions/_shared/schema-utils.ts\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="TypeRecord" errors="type not found/inactive" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Queries types table, validates active status, returns full record" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/functions/_shared/schema-utils.ts, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/pages/admin/IntegrationsPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+export async function resolveTypeRecord(kind: string, slug: string): Promise<TypeRecord> {
+  const { data, error } = await adminDb
+    .from('types')
+    .select('id, slug, kind, design_schema, validation_schema, is_active')
+    .eq('kind', kind)
+    .eq('slug', slug)
+    .single()
+
+  if (error || !data) throw new Error(`Type not found: ${kind}/${slug}`)
+  if (!data.is_active) throw new Error(`Type is inactive: ${kind}/${slug}`)
 
-// Resolve link type IDs by slug
+  return {
+    id: data.id,
+    slug: data.slug,
+    kind: data.kind,
+    design_schema: data.design_schema || {},
+    validation_schema: data.validation_schema || {},
+    is_active: data.is_active,
+  }
+}
+// CIL[END chunk_id="resolveids_resolvetyperecord_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolvelinktypeids_1784020784" type="function" identity="resolveLinkTypeIds" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve multiple link type IDs by slug"]
+// CIL[DOC-RESPONSIBILITY responsibility="Batch resolve link type identifiers from database"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/functions/_shared/schema-utils.ts\",\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="Record<string, string>" errors="link type not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Batch queries link_types table, validates all requested types exist" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, .framework/migrations/025_retype_threads_messages.sql, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/functions/_shared/schema-utils.ts, custom/apps/cortex/functions/custom_cil-embeddings.ts, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolveLinkTypeIds(slugs: string[]): Promise<Record<string, string>> {
   if (slugs.length === 0) return {}
 
@@ -60,14 +179,40 @@ export async function resolveLinkTypeIds(slugs: string[]): Promise<Record<string
 
   return result
 }
-
-// Resolve a single link type ID — throws if not found
+// CIL[END chunk_id="resolveids_resolvelinktypeids_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolvelinktypeid_1784020784" type="function" identity="resolveLinkTypeId" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve single link type ID by slug"]
+// CIL[DOC-RESPONSIBILITY responsibility="Get link type identifier from slug"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/migrations/025_retype_threads_messages.sql\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/schema-utils.ts\",\".framework/src/components/layout/Sidebar.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="link type ID" errors="link type not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Convenience wrapper around resolveLinkTypeIds for single type" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/migrations/025_retype_threads_messages.sql, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/schema-utils.ts, .framework/src/components/layout/Sidebar.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolveLinkTypeId(slug: string): Promise<string> {
   const ids = await resolveLinkTypeIds([slug])
   return ids[slug]
 }
-
-// Resolve account ID by slug
+// CIL[END chunk_id="resolveids_resolvelinktypeid_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolveaccountid_1784020784" type="function" identity="resolveAccountId" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve account ID by slug"]
+// CIL[DOC-RESPONSIBILITY responsibility="Get account identifier from slug"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/functions/_shared/schema-utils.ts\",\".framework/src/components/layout/Sidebar.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="account ID" errors="account not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Queries accounts table by slug to get ID" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/_shared/schema-utils.ts, .framework/src/components/layout/Sidebar.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/src/pages/admin/TypeDetailPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolveAccountId(slug: string): Promise<string> {
   const { data, error } = await adminDb
     .from('accounts')
@@ -78,8 +223,21 @@ export async function resolveAccountId(slug: string): Promise<string> {
   if (error || !data) throw new Error(`Account not found: ${slug}`)
   return data.id
 }
-
-// Resolve AI agent ID by name
+// CIL[END chunk_id="resolveids_resolveaccountid_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolveagentid_1784020784" type="function" identity="resolveAgentId" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve AI agent ID by name"]
+// CIL[DOC-RESPONSIBILITY responsibility="Get active AI agent identifier from name"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/functions/_shared/schema-utils.ts\",\".framework/src/components/layout/Sidebar.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="agent ID" errors="agent not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Queries ai_agents table by name and active status" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/_shared/schema-utils.ts, .framework/src/components/layout/Sidebar.tsx, .framework/migrations/025_retype_threads_messages.sql, .framework/src/pages/admin/TypeDetailPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolveAgentId(name: string): Promise<string> {
   const { data, error } = await adminDb
     .from('ai_agents')
@@ -91,8 +249,21 @@ export async function resolveAgentId(name: string): Promise<string> {
   if (error || !data) throw new Error(`AI agent not found: ${name}`)
   return data.id
 }
-
-// Resolve prompt config ID by slug
+// CIL[END chunk_id="resolveids_resolveagentid_1784020784"]
+// CIL[BEGIN chunk_id="resolveids_resolvepromptconfigid_1784020784" type="function" identity="resolvePromptConfigId" parent="none"]
+// CIL[DOC-MACRO purpose="Resolve prompt config ID by slug"]
+// CIL[DOC-RESPONSIBILITY responsibility="Get active prompt config identifier from slug"]
+// CIL[DOC-CONTEXT module="resolve-ids" layer="shared" related_files="[\".framework/functions/_shared/schema-utils.ts\",\".framework/src/components/layout/Sidebar.tsx\",\".framework/migrations/025_retype_threads_messages.sql\",\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="prompt config ID" errors="prompt config not found" side_effects="database query"]
+// CIL[DOC-MICRO logic_summary="Queries prompt_configs table by slug and active status" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 4. Direct calls: 0. Related files: .framework/functions/_shared/schema-utils.ts, .framework/src/components/layout/Sidebar.tsx, .framework/migrations/025_retype_threads_messages.sql, custom/apps/cortex/functions/custom_cil-embeddings.ts, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 4. Total affected: 4."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export async function resolvePromptConfigId(slug: string): Promise<string> {
   const { data, error } = await adminDb
     .from('prompt_configs')
@@ -104,3 +275,4 @@ export async function resolvePromptConfigId(slug: string): Promise<string> {
   if (error || !data) throw new Error(`Prompt config not found: ${slug}`)
   return data.id
 }
+// CIL[END chunk_id="resolveids_resolvepromptconfigid_1784020784"]

package/.framework/functions/_shared/retry-deliveries.ts

@@ -0,0 +1,104 @@
+// CIL[BEGIN chunk_id="retry_deliveries_module_header_1784200007" type="module_header" identity="imports" parent="none"]
+// CIL[DOC-MACRO purpose="Retry pending webhook deliveries from the shared ledger"]
+// CIL[DOC-RESPONSIBILITY responsibility="Poll webhook_deliveries and re-execute due outbound (and eventually inbound) records"]
+// CIL[DOC-CONTEXT module="retry-deliveries" layer="shared" related_files="[".framework/functions/integration-outbound.ts",".framework/functions/_shared/principal.ts",".framework/migrations/051_integration_broker.sql"]"]
+// CIL[DOC-CONTRACT inputs="ctx" outputs="{ outbound_retried, outbound_succeeded, outbound_failed, errors }" errors="none" side_effects="HTTP calls, webhook_deliveries updates"]
+// CIL[DOC-MICRO logic_summary="Queries pending, due deliveries and calls the corresponding broker action for each." notable_decisions="["Inbound retry is left as a TODO until integration-routes supports delivery_id reuse.","Outbout retries reuse the existing delivery row by passing delivery_id to integration-outbound.execute."]"]
+// CIL[DOC-CONFIDENCE pass="first" score="0.85" flags="none"]
+// CIL[DOC-STABILITY stability="experimental"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: shared. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/integration-outbound.ts, .framework/functions/_shared/principal.ts, .framework/migrations/051_integration_broker.sql."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="Only processes outbound deliveries in this pass."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="Called by system-cron on each tick."]
+// CIL[DOC-VECTOR type="user_journey" content="System automatically retries failed or pending outbound webhook calls."]
+
+import { adminDb } from './db'
+import { SYSTEM_PRINCIPAL } from './principal'
+import { execute as executeOutbound } from '../integration-outbound'
+
+interface RetrySummary {
+  outbound_retried: number
+  outbound_succeeded: number
+  outbound_failed: number
+  inbound_retried: number
+  inbound_succeeded: number
+  inbound_failed: number
+  errors: string[]
+}
+
+export async function retryPendingDeliveries(ctx: any): Promise<RetrySummary> {
+  const summary: RetrySummary = {
+    outbound_retried: 0,
+    outbound_succeeded: 0,
+    outbound_failed: 0,
+    inbound_retried: 0,
+    inbound_succeeded: 0,
+    inbound_failed: 0,
+    errors: []
+  }
+
+  const now = new Date().toISOString()
+
+  const { data: dueDeliveries, error } = await adminDb
+    .from('webhook_deliveries')
+    .select('*')
+    .eq('status', 'pending')
+    .lt('attempt_count', 10)
+    .or(`next_attempt_at.is.null,next_attempt_at.lte.${now}`)
+    .limit(100)
+
+  if (error) {
+    console.error('[retry-deliveries] Failed to fetch pending deliveries:', error)
+    summary.errors.push(error.message)
+    return summary
+  }
+
+  if (!dueDeliveries || dueDeliveries.length === 0) {
+    return summary
+  }
+
+  const retryCtx = {
+    ...ctx,
+    db: adminDb,
+    accountId: null,
+    appId: null,
+    principal: SYSTEM_PRINCIPAL,
+    query: {}
+  }
+
+  for (const delivery of dueDeliveries) {
+    try {
+      if (delivery.direction === 'outbound') {
+        summary.outbound_retried++
+
+        retryCtx.accountId = delivery.account_id
+
+        await executeOutbound(retryCtx, { delivery_id: delivery.id })
+
+        summary.outbound_succeeded++
+      } else {
+        // Inbound retry: not yet implemented. Reprocessing requires the
+        // original x-api-key or an internal bypass; integration-routes
+        // must be updated to accept delivery_id.
+        summary.inbound_retried++
+        console.warn(`[retry-deliveries] Inbound delivery retry not implemented: ${delivery.id}`)
+        summary.inbound_failed++
+      }
+    } catch (err: any) {
+      console.error(`[retry-deliveries] Delivery ${delivery.id} failed:`, err)
+      summary.errors.push(`${delivery.id}: ${err.message || String(err)}`)
+
+      if (delivery.direction === 'outbound') {
+        summary.outbound_failed++
+      } else {
+        summary.inbound_failed++
+      }
+    }
+  }
+
+  return summary
+}
+
+// CIL[END chunk_id="retry_deliveries_module_header_1784200007"]