Add agent diagnostic snapshot contracts

[ANcpLua]

Summary

• Define the versioned protected agent-diagnostic snapshot and its value-free workflow-event summary, with branded identifiers, bounded variables/checks, privacy classifications, and closed outcomes.
• Give inspect_workflow_events a dedicated immediate-read input/output contract with optional protected-content retrieval; it no longer reuses graph or long-poll fields.
• Move get_active_workflow_run and record_diagnostic_snapshot input/output ownership into TypeSpec. Their unreleased wire names are normalized to snake_case.
• Generate compact, self-contained JSON Schema constants in Qyl.Api.Contracts.Mcp.ToolSchemas so NativeAOT consumers can advertise the exact owner schemas without reflection or hand-built shadows.
• Refresh the root and emitter lockfiles, move the build to .NET SDK 10.0.400 and NuGet.Packaging 7.9.0, extend TypeSpec event/SSE peer support through 0.85.x, and update the GenAI semantic-convention projection to f77b9235f2ad49fe95b61e9809ca82bb08ef9d47.

Consumer impact

• Contract revision: sha256:72545708596baccd.
• Intended stack order: semantic conventions 4.2.0, schema/contracts 7.1.0, qyl 1.2.0, then qyl.mcp 1.2.0.
• This lock refresh supersedes the standalone lock-maintenance work in deps: Lock file maintenance #19.

Validation

• ./build.sh Check with .NET SDK 10.0.400: all 15 targets passed.
• Packed npm consumer: 30 checks; clean install audit: 0 vulnerabilities.
• Packed NuGet consumer: 36 checks, including all four standalone tool schemas.
• Deterministic C#/TypeScript generation, public/full lint, contract fixtures, route verification, and semantic-key lockstep all passed.

Merged to main as 17e58bf1a44dc64dd0439f13f3d3dbaac09a9608; post-merge Nuke run 31826017660 passed. Package publication and downstream release-pin validation remain separate release steps.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (21)

• build/Build.cs is excluded by none and included by none
• build/_build.csproj is excluded by none and included by none
• build/global.json is excluded by none and included by none
• emit-config.tsp is excluded by none and included by none
• emitters/csharp/package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json and included by none
• emitters/csharp/src/emitter.ts is excluded by none and included by none
• emitters/ts-types/package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json and included by none
• emitters/ts-types/src/index.ts is excluded by none and included by none
• generated/openapi/qyl.openapi.json is excluded by !**/generated/** and included by none
• generated/otel-keys.gen.tsp is excluded by !**/generated/** and included by none
• index.tsp is excluded by none and included by none
• main.tsp is excluded by none and included by none
• models/diagnostics.tsp is excluded by none and included by none
• models/mcp-tools.tsp is excluded by none and included by none
• package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json and included by none
• package.json is excluded by none and included by none
• scripts/emit-mcp-tool-schemas.mjs is excluded by none and included by none
• scripts/probes/dotnet-smoke.cs is excluded by none and included by none
• scripts/probes/npm-smoke.mjs is excluded by none and included by none
• scripts/probes/npm-smoke.ts is excluded by none and included by none
• scripts/verify-contract-fixtures.mjs is excluded by none and included by none

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 2273cef9-7822-4d02-a037-5f9d4880aed4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ANcpLua]

@codex review