Add workflow event inspection for agent diagnostics

[ANcpLua]

Summary

• Add the model-visible, read-only inspect_workflow_events tool for immutable workflow journal inspection.
• Use the dedicated InspectWorkflowEventsInput/Output contract from @ancplua/qyl-api-schema@7.1.0: immediate bounded reads with no graph cursors or long-poll controls.
• Return safe content_captured summaries first and retrieve protected evidence only through an explicit listed content_ref.
• Release qyl-mcp-server 1.2.0, align workspace consumers, and regenerate the tool manifest at contract revision sha256:72545708596baccd.

Stack

• Add agent diagnostic snapshot contracts qyl-api-schema#20 — merged and published as 7.1.0.
• Add agent diagnostic snapshot capture qyl#550 — merged to main at 510a7115.
• Add agent diagnostic telemetry vocabulary Qyl.OpenTelemetry.SemanticConventions#38 — related semantic-convention surface.

Validation

• npm ci
• npm run build
• npm test --workspace server — 68/68 passed.
• npm run smoke --workspace server
• npm run verify:pins against merged qyl main — 7.1.0 pins agree.
• npm run smoke:otlp against merged qyl main — official OTLP persistence, exact trace evidence, redaction, and the live content_captured summary → explicit protected-content round trip passed in 18 seconds.
• No retry or timeout limits were increased.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (17)

• dashboard/package.json is excluded by none and included by none
• package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json and included by none
• package.json is excluded by none and included by none
• server/README.md is excluded by none and included by none
• server/package.json is excluded by none and included by none
• server/smoke-test.mjs is excluded by none and included by none
• server/src/contract-validation.ts is excluded by none and included by none
• server/src/contracts.test.ts is excluded by none and included by none
• server/src/tool-annotations.test.ts is excluded by none and included by none
• server/src/workflow-data.test.ts is excluded by none and included by none
• server/src/workflow-data.ts is excluded by none and included by none
• server/src/workflow-tools.test.ts is excluded by none and included by none
• server/src/workflow-tools.ts is excluded by none and included by none
• server/tool-manifest.snapshot.json is excluded by none and included by none
• workbench/package.json is excluded by none and included by none
• workbench/smoke.mjs is excluded by none and included by none
• workbench/telemetry-smoke.mjs is excluded by none and included by none

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 3247ea2f-b35e-46be-a69f-a76547206556

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ANcpLua]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Another round soon, please!

Reviewed commit: c6c03eec02

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f448cc76c3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Regenerate the Bun lockfile with the contract bump

In environments that install with the repository-declared Bun package manager, bun.lock still records qyl-mcp-server 1.1.x and @ancplua/qyl-api-schema 7.0.0 for every workspace, even though these manifests now require 1.2.0/7.1.0. This makes the committed dependency graph non-reproducible and causes frozen Bun installs to reject it—bun install --help defines --frozen-lockfile as “Disallow changes to lockfile”—rather than installing the generated contracts needed by the new tool. Regenerate and commit bun.lock alongside package-lock.json.

AGENTS.md reference: AGENTS.md:L7-L7

Useful? React with 👍 / 👎.