Refine Rust architecture boundaries

apps/admin-api/src/dto.rs

@@ -0,0 +1,458 @@
+use crank_core::{
+    AgentId, AgentStatus, AuthConfig, AuthKind, ExecutionMode, ExportMode, GeneratedDraft,
+    InvocationLevel, InvocationSource, InvocationStatus, OperationSecurityLevel, OperationStatus,
+    PlatformApiKeyScope, Protocol, SecretKind, Target, UsagePeriod, WizardState, WorkspaceId,
+    WorkspaceStatus,
+};
+use crank_mapping::MappingSet;
+use crank_registry::{
+    PlatformApiKeyRecord, RegistryOperation, UsageAgentBreakdown, UsageOperationBreakdown,
+    UsageSummary, UsageTimelinePoint, WorkspaceMembershipRecord, WorkspaceRecord,
+};
+use crank_schema::Schema;
+use serde::{Deserialize, Serialize};
+use serde_json::Value;
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct LoginPayload {
+    pub email: String,
+    pub password: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct SessionResponse {
+    pub user: crank_core::User,
+    pub memberships: Vec<WorkspaceMembershipRecord>,
+    pub current_workspace_id: Option<String>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UpdateProfilePayload {
+    pub display_name: String,
+    pub email: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct ChangePasswordPayload {
+    pub current_password: String,
+    pub new_password: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UpdateCurrentWorkspacePayload {
+    pub workspace_id: String,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+pub struct OperationPayload {
+    pub name: String,
+    pub display_name: String,
+    #[serde(default = "default_operation_category")]
+    pub category: String,
+    pub protocol: Protocol,
+    #[serde(default)]
+    pub security_level: OperationSecurityLevel,
+    pub target: Target,
+    pub input_schema: Schema,
+    pub output_schema: Schema,
+    pub input_mapping: MappingSet,
+    pub output_mapping: MappingSet,
+    pub execution_config: crank_core::ExecutionConfig,
+    pub tool_description: crank_core::ToolDescription,
+    #[serde(default)]
+    pub wizard_state: Option<WizardState>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct NewVersionPayload {
+    #[serde(flatten)]
+    pub operation: OperationPayload,
+    #[serde(default)]
+    pub change_note: Option<String>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct PublishPayload {
+    pub version: u32,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct TestRunPayload {
+    pub version: u32,
+    pub input: Value,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct TestRunResult {
+    pub ok: bool,
+    pub mode: ExecutionMode,
+    pub request_preview: Value,
+    pub response_preview: Value,
+    pub errors: Vec<Value>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct AuthProfilePayload {
+    pub name: String,
+    pub kind: AuthKind,
+    pub config: AuthConfig,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UpstreamPayload {
+    pub name: String,
+    pub base_url: String,
+    #[serde(default)]
+    pub static_headers: Value,
+    #[serde(default)]
+    pub auth_profile_id: Option<String>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct SecretPayload {
+    pub name: String,
+    pub kind: SecretKind,
+    pub value: Value,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct RotateSecretPayload {
+    pub value: Value,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct WorkspacePayload {
+    pub slug: String,
+    pub display_name: String,
+    #[serde(default)]
+    pub settings: Value,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UpdateWorkspacePayload {
+    pub slug: Option<String>,
+    pub display_name: Option<String>,
+    pub status: Option<WorkspaceStatus>,
+    pub settings: Option<Value>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct AgentPayload {
+    pub slug: String,
+    pub display_name: String,
+    pub description: String,
+    #[serde(default)]
+    pub instructions: Value,
+    #[serde(default)]
+    pub tool_selection_policy: Value,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UpdateAgentPayload {
+    pub slug: String,
+    pub display_name: String,
+    pub description: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct AgentBindingPayload {
+    pub operation_id: String,
+    pub operation_version: u32,
+    pub tool_name: String,
+    pub tool_title: String,
+    pub tool_description_override: Option<String>,
+    #[serde(default = "default_enabled")]
+    pub enabled: bool,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct CreatedAgentResponse {
+    pub agent_id: String,
+    pub workspace_id: String,
+    pub version: u32,
+    pub status: AgentStatus,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct PublishAgentResponse {
+    pub agent_id: String,
+    pub workspace_id: String,
+    pub published_version: u32,
+    pub published_at: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct AgentSummaryView {
+    pub id: String,
+    pub workspace_id: String,
+    pub slug: String,
+    pub display_name: String,
+    pub description: String,
+    pub status: AgentStatus,
+    pub current_draft_version: u32,
+    pub latest_published_version: Option<u32>,
+    pub created_at: String,
+    pub updated_at: String,
+    pub published_at: Option<String>,
+    pub operation_count: usize,
+    pub operation_ids: Vec<String>,
+    pub key_count: usize,
+    pub calls_today: u64,
+    pub mcp_endpoint: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct AgentMutationResult {
+    pub agent_id: String,
+    pub workspace_id: String,
+    pub updated_at: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct PlatformApiKeyPayload {
+    pub name: String,
+    pub scopes: Vec<PlatformApiKeyScope>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct CreatedPlatformApiKeyResponse {
+    pub api_key: PlatformApiKeyRecord,
+    pub secret: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct WorkspaceExportResponse {
+    pub workspace: WorkspaceRecord,
+    pub operations: Vec<OperationSummaryView>,
+    pub agents: Vec<AgentSummaryView>,
+    pub platform_api_keys: Vec<PlatformApiKeyRecord>,
+    pub exported_at: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct LogsQuery {
+    pub level: Option<InvocationLevel>,
+    pub search: Option<String>,
+    pub source: Option<InvocationSource>,
+    pub operation_id: Option<String>,
+    pub agent_id: Option<String>,
+    pub period: Option<UsagePeriod>,
+    pub limit: Option<u32>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UsageRequestQuery {
+    pub period: Option<UsagePeriod>,
+    pub source: Option<InvocationSource>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct UsageOverviewResponse {
+    pub summary: UsageSummary,
+    pub timeline: Vec<UsageTimelinePoint>,
+    pub operations: Vec<UsageOperationBreakdown>,
+    pub agents: Vec<UsageAgentBreakdown>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct ProtocolCapabilityView {
+    pub protocol: Protocol,
+    pub supports_execution_modes: Vec<ExecutionMode>,
+    pub supports_transport_behaviors: Vec<String>,
+    pub supports_auth_kinds: Vec<String>,
+    pub supports_upload_artifacts: Vec<String>,
+    pub supports_cursor_path: bool,
+    pub supports_done_path: bool,
+    pub supports_aggregation_mode: Vec<String>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct GenerateDraftPayload {
+    #[serde(default)]
+    pub sources: Vec<String>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct DraftGenerationResult {
+    pub generated_draft: GeneratedDraft,
+    pub input_schema: Schema,
+    pub output_schema: Schema,
+    pub input_mapping: MappingSet,
+    pub output_mapping: MappingSet,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct ImportQuery {
+    #[serde(default)]
+    pub mode: ImportMode,
+}
+
+#[derive(Clone, Copy, Debug, Default, Deserialize, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum ImportMode {
+    #[default]
+    Create,
+    Upsert,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct ExportQuery {
+    pub version: Option<u32>,
+    #[serde(default = "default_export_mode")]
+    pub mode: ExportMode,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+pub struct YamlOperationDocument {
+    pub format_version: String,
+    pub kind: String,
+    pub operation: RegistryOperation,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct CreatedOperationResponse {
+    pub operation_id: String,
+    pub workspace_id: String,
+    pub version: u32,
+    pub status: OperationStatus,
+    pub updated_at: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct PublishResponse {
+    pub operation_id: String,
+    pub workspace_id: String,
+    pub published_version: u32,
+    pub published_at: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+pub struct UpdateOperationPayload {
+    pub display_name: String,
+    #[serde(default = "default_operation_category")]
+    pub category: String,
+    #[serde(default)]
+    pub security_level: OperationSecurityLevel,
+    pub target: Target,
+    pub input_schema: Schema,
+    pub output_schema: Schema,
+    pub input_mapping: MappingSet,
+    pub output_mapping: MappingSet,
+    pub execution_config: crank_core::ExecutionConfig,
+    pub tool_description: crank_core::ToolDescription,
+    #[serde(default)]
+    pub wizard_state: Option<WizardState>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct OperationUsageSummaryView {
+    pub calls_today: u64,
+    pub error_rate_pct: f64,
+    pub avg_latency_ms: u64,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct OperationAgentRefView {
+    pub agent_id: String,
+    pub agent_slug: String,
+    pub display_name: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct OperationSummaryView {
+    pub id: String,
+    pub workspace_id: String,
+    pub name: String,
+    pub display_name: String,
+    pub category: String,
+    pub protocol: Protocol,
+    pub security_level: OperationSecurityLevel,
+    pub target_url: String,
+    pub target_action: String,
+    pub status: OperationStatus,
+    pub current_draft_version: u32,
+    pub latest_published_version: Option<u32>,
+    pub created_at: String,
+    pub updated_at: String,
+    pub published_at: Option<String>,
+    pub usage_summary: OperationUsageSummaryView,
+    pub agent_refs: Vec<OperationAgentRefView>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct OperationDetailView {
+    pub id: String,
+    pub workspace_id: String,
+    pub name: String,
+    pub display_name: String,
+    pub category: String,
+    pub protocol: Protocol,
+    pub security_level: OperationSecurityLevel,
+    pub status: OperationStatus,
+    pub current_draft_version: u32,
+    pub latest_published_version: Option<u32>,
+    pub created_at: String,
+    pub updated_at: String,
+    pub published_at: Option<String>,
+    pub draft_version_ref: VersionRef,
+    pub published_version_ref: Option<VersionRef>,
+    pub agent_refs: Vec<OperationAgentRefView>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct VersionRef {
+    pub version: u32,
+    pub status: OperationStatus,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct OperationMutationResult {
+    pub operation_id: String,
+    pub workspace_id: String,
+    pub version: u32,
+    pub status: OperationStatus,
+    pub updated_at: String,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct ImportResponse {
+    pub operation_id: String,
+    pub workspace_id: String,
+    pub version: u32,
+    pub import_mode: ImportMode,
+    pub warnings: Vec<String>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+pub struct DescriptorUploadResponse {
+    pub descriptor_id: String,
+    pub version: u32,
+}
+
+fn default_operation_category() -> String {
+    "general".to_owned()
+}
+
+fn default_export_mode() -> ExportMode {
+    ExportMode::Portable
+}
+
+fn default_enabled() -> bool {
+    true
+}
+
+pub(crate) struct InvocationRecordRequest<'a> {
+    pub workspace_id: &'a WorkspaceId,
+    pub agent_id: Option<&'a AgentId>,
+    pub operation: &'a RegistryOperation,
+    pub request_id: Option<&'a str>,
+    pub source: InvocationSource,
+    pub level: InvocationLevel,
+    pub status: InvocationStatus,
+    pub message: String,
+    pub status_code: Option<u16>,
+    pub error_kind: Option<String>,
+    pub duration_ms: u64,
+    pub request_preview: Value,
+    pub response_preview: Value,
+}

apps/admin-api/src/lib.rs

@@ -1,5 +1,6 @@
 pub mod app;
 pub mod auth;
+pub mod dto;
 pub mod error;
 pub mod import_guidance;
 pub mod rate_limit;

apps/admin-api/src/service.rs

@@ -4,28 +4,25 @@ use std::sync::Arc;
 
 use base64::{Engine as _, engine::general_purpose::URL_SAFE_NO_PAD};
 use crank_core::{
-    AgentId, AgentStatus, AuditSink, AuthConfig, AuthKind, AuthProfile, AuthProfileId,
-    CapabilityProfile, CommunityCapabilityProfile, EditionCapabilities, ExecutionMode, ExportMode,
-    GeneratedDraft, GeneratedDraftStatus, IdentityError, IdentityProvider, InvocationLevel,
-    InvocationLog, InvocationLogId, InvocationSource, InvocationStatus, MembershipRole,
-    NoopAuditSink, OperationId, OperationSecurityLevel, OperationStatus, OwnerOnlyPolicyEngine,
-    PlatformApiKey, PlatformApiKeyId, PlatformApiKeyScope, PlatformApiKeyStatus, PolicyEngine,
-    ProductEdition, Protocol, ResponseCachePolicy, SampleId, SecretKind, Target,
-    ToolQualityMappingRule, ToolQualityMappingSet, ToolQualitySchemaKind, ToolQualitySchemaNode,
-    UsagePeriod, WizardState, WorkspaceId, WorkspaceStatus,
+    AgentId, AuditSink, AuthProfile, AuthProfileId, CapabilityProfile, CommunityCapabilityProfile,
+    EditionCapabilities, ExecutionMode, GeneratedDraft, GeneratedDraftStatus, IdentityError,
+    IdentityProvider, InvocationLevel, InvocationLog, InvocationLogId, InvocationSource,
+    InvocationStatus, MembershipRole, NoopAuditSink, OperationId, OperationSecurityLevel,
+    OperationStatus, OwnerOnlyPolicyEngine, PlatformApiKey, PlatformApiKeyId, PlatformApiKeyScope,
+    PlatformApiKeyStatus, PolicyEngine, ProductEdition, Protocol, ResponseCachePolicy, SampleId,
+    Target, ToolQualityMappingRule, ToolQualityMappingSet, ToolQualitySchemaKind,
+    ToolQualitySchemaNode, UsagePeriod, WizardState, WorkspaceId,
 };
 use crank_mapping::{JsonPathRoot, MappingRule, MappingSet, infer_mapping_from_samples};
 use crank_registry::{
     AgentSummary, CreateInvocationLogRequest, CreatePlatformApiKeyRequest, ListInvocationLogsQuery,
     OperationAgentRef, OperationSampleMetadata, OperationSummary, OperationUsageSummary,
     PlatformApiKeyRecord, PostgresRegistry, RegistryOperation, SampleKind,
-    SaveSampleMetadataRequest, SaveWorkspaceUpstreamRequest, UsageAgentBreakdown, UsageBucket,
-    UsageOperationBreakdown, UsageSummary, UsageTimelinePoint, WorkspaceMembershipRecord,
-    WorkspaceRecord, WorkspaceUpstream, WorkspaceUpstreamId,
+    SaveSampleMetadataRequest, SaveWorkspaceUpstreamRequest, UsageBucket, WorkspaceUpstream,
+    WorkspaceUpstreamId,
 };
 use crank_runtime::{PreparedRequest, ResolvedAuth, RuntimeError, RuntimeExecutor, SecretCrypto};
 use crank_schema::{Schema, SchemaKind};
-use serde::{Deserialize, Serialize};
 use serde_json::{Value, json};
 use sha2::{Digest, Sha256};
 use time::{OffsetDateTime, format_description::well_known::Rfc3339};
@@ -67,441 +64,7 @@ pub struct AdminServiceBuilder {
     capability_profile: Option<Arc<dyn CapabilityProfile>>,
 }
 
-#[derive(Clone, Debug, Deserialize)]
-pub struct LoginPayload {
-    pub email: String,
-    pub password: String,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct SessionResponse {
-    pub user: crank_core::User,
-    pub memberships: Vec<WorkspaceMembershipRecord>,
-    pub current_workspace_id: Option<String>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UpdateProfilePayload {
-    pub display_name: String,
-    pub email: String,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct ChangePasswordPayload {
-    pub current_password: String,
-    pub new_password: String,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UpdateCurrentWorkspacePayload {
-    pub workspace_id: String,
-}
-
-#[derive(Clone, Debug, Deserialize, Serialize)]
-pub struct OperationPayload {
-    pub name: String,
-    pub display_name: String,
-    #[serde(default = "default_operation_category")]
-    pub category: String,
-    pub protocol: Protocol,
-    #[serde(default)]
-    pub security_level: OperationSecurityLevel,
-    pub target: Target,
-    pub input_schema: Schema,
-    pub output_schema: Schema,
-    pub input_mapping: MappingSet,
-    pub output_mapping: MappingSet,
-    pub execution_config: crank_core::ExecutionConfig,
-    pub tool_description: crank_core::ToolDescription,
-    #[serde(default)]
-    pub wizard_state: Option<WizardState>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct NewVersionPayload {
-    #[serde(flatten)]
-    pub operation: OperationPayload,
-    #[serde(default)]
-    pub change_note: Option<String>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct PublishPayload {
-    pub version: u32,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct TestRunPayload {
-    pub version: u32,
-    pub input: Value,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct TestRunResult {
-    pub ok: bool,
-    pub mode: ExecutionMode,
-    pub request_preview: Value,
-    pub response_preview: Value,
-    pub errors: Vec<Value>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct AuthProfilePayload {
-    pub name: String,
-    pub kind: AuthKind,
-    pub config: AuthConfig,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UpstreamPayload {
-    pub name: String,
-    pub base_url: String,
-    #[serde(default)]
-    pub static_headers: Value,
-    #[serde(default)]
-    pub auth_profile_id: Option<String>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct SecretPayload {
-    pub name: String,
-    pub kind: SecretKind,
-    pub value: Value,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct RotateSecretPayload {
-    pub value: Value,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct WorkspacePayload {
-    pub slug: String,
-    pub display_name: String,
-    #[serde(default)]
-    pub settings: Value,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UpdateWorkspacePayload {
-    pub slug: Option<String>,
-    pub display_name: Option<String>,
-    pub status: Option<WorkspaceStatus>,
-    pub settings: Option<Value>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct AgentPayload {
-    pub slug: String,
-    pub display_name: String,
-    pub description: String,
-    #[serde(default)]
-    pub instructions: Value,
-    #[serde(default)]
-    pub tool_selection_policy: Value,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UpdateAgentPayload {
-    pub slug: String,
-    pub display_name: String,
-    pub description: String,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct AgentBindingPayload {
-    pub operation_id: String,
-    pub operation_version: u32,
-    pub tool_name: String,
-    pub tool_title: String,
-    pub tool_description_override: Option<String>,
-    #[serde(default = "default_enabled")]
-    pub enabled: bool,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct CreatedAgentResponse {
-    pub agent_id: String,
-    pub workspace_id: String,
-    pub version: u32,
-    pub status: AgentStatus,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct PublishAgentResponse {
-    pub agent_id: String,
-    pub workspace_id: String,
-    pub published_version: u32,
-    pub published_at: String,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct AgentSummaryView {
-    pub id: String,
-    pub workspace_id: String,
-    pub slug: String,
-    pub display_name: String,
-    pub description: String,
-    pub status: AgentStatus,
-    pub current_draft_version: u32,
-    pub latest_published_version: Option<u32>,
-    pub created_at: String,
-    pub updated_at: String,
-    pub published_at: Option<String>,
-    pub operation_count: usize,
-    pub operation_ids: Vec<String>,
-    pub key_count: usize,
-    pub calls_today: u64,
-    pub mcp_endpoint: String,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct AgentMutationResult {
-    pub agent_id: String,
-    pub workspace_id: String,
-    pub updated_at: String,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct PlatformApiKeyPayload {
-    pub name: String,
-    pub scopes: Vec<PlatformApiKeyScope>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct CreatedPlatformApiKeyResponse {
-    pub api_key: PlatformApiKeyRecord,
-    pub secret: String,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct WorkspaceExportResponse {
-    pub workspace: WorkspaceRecord,
-    pub operations: Vec<OperationSummaryView>,
-    pub agents: Vec<AgentSummaryView>,
-    pub platform_api_keys: Vec<PlatformApiKeyRecord>,
-    pub exported_at: String,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct LogsQuery {
-    pub level: Option<InvocationLevel>,
-    pub search: Option<String>,
-    pub source: Option<InvocationSource>,
-    pub operation_id: Option<String>,
-    pub agent_id: Option<String>,
-    pub period: Option<UsagePeriod>,
-    pub limit: Option<u32>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UsageRequestQuery {
-    pub period: Option<UsagePeriod>,
-    pub source: Option<InvocationSource>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct UsageOverviewResponse {
-    pub summary: UsageSummary,
-    pub timeline: Vec<UsageTimelinePoint>,
-    pub operations: Vec<UsageOperationBreakdown>,
-    pub agents: Vec<UsageAgentBreakdown>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct ProtocolCapabilityView {
-    pub protocol: Protocol,
-    pub supports_execution_modes: Vec<ExecutionMode>,
-    pub supports_transport_behaviors: Vec<String>,
-    pub supports_auth_kinds: Vec<String>,
-    pub supports_upload_artifacts: Vec<String>,
-    pub supports_cursor_path: bool,
-    pub supports_done_path: bool,
-    pub supports_aggregation_mode: Vec<String>,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct GenerateDraftPayload {
-    #[serde(default)]
-    pub sources: Vec<String>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct DraftGenerationResult {
-    pub generated_draft: GeneratedDraft,
-    pub input_schema: Schema,
-    pub output_schema: Schema,
-    pub input_mapping: MappingSet,
-    pub output_mapping: MappingSet,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct ImportQuery {
-    #[serde(default)]
-    pub mode: ImportMode,
-}
-
-#[derive(Clone, Copy, Debug, Default, Deserialize, Serialize)]
-#[serde(rename_all = "snake_case")]
-pub enum ImportMode {
-    #[default]
-    Create,
-    Upsert,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct ExportQuery {
-    pub version: Option<u32>,
-    #[serde(default = "default_export_mode")]
-    pub mode: ExportMode,
-}
-
-#[derive(Clone, Debug, Deserialize, Serialize)]
-pub struct YamlOperationDocument {
-    pub format_version: String,
-    pub kind: String,
-    pub operation: RegistryOperation,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct CreatedOperationResponse {
-    pub operation_id: String,
-    pub workspace_id: String,
-    pub version: u32,
-    pub status: OperationStatus,
-    pub updated_at: String,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct PublishResponse {
-    pub operation_id: String,
-    pub workspace_id: String,
-    pub published_version: u32,
-    pub published_at: String,
-}
-
-#[derive(Clone, Debug, Deserialize)]
-pub struct UpdateOperationPayload {
-    pub display_name: String,
-    #[serde(default = "default_operation_category")]
-    pub category: String,
-    #[serde(default)]
-    pub security_level: OperationSecurityLevel,
-    pub target: Target,
-    pub input_schema: Schema,
-    pub output_schema: Schema,
-    pub input_mapping: MappingSet,
-    pub output_mapping: MappingSet,
-    pub execution_config: crank_core::ExecutionConfig,
-    pub tool_description: crank_core::ToolDescription,
-    #[serde(default)]
-    pub wizard_state: Option<WizardState>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct OperationUsageSummaryView {
-    pub calls_today: u64,
-    pub error_rate_pct: f64,
-    pub avg_latency_ms: u64,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct OperationAgentRefView {
-    pub agent_id: String,
-    pub agent_slug: String,
-    pub display_name: String,
-}
-
-struct InvocationRecordRequest<'a> {
-    workspace_id: &'a WorkspaceId,
-    agent_id: Option<&'a AgentId>,
-    operation: &'a RegistryOperation,
-    request_id: Option<&'a str>,
-    source: InvocationSource,
-    level: InvocationLevel,
-    status: InvocationStatus,
-    message: String,
-    status_code: Option<u16>,
-    error_kind: Option<String>,
-    duration_ms: u64,
-    request_preview: Value,
-    response_preview: Value,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct OperationSummaryView {
-    pub id: String,
-    pub workspace_id: String,
-    pub name: String,
-    pub display_name: String,
-    pub category: String,
-    pub protocol: Protocol,
-    pub security_level: OperationSecurityLevel,
-    pub target_url: String,
-    pub target_action: String,
-    pub status: OperationStatus,
-    pub current_draft_version: u32,
-    pub latest_published_version: Option<u32>,
-    pub created_at: String,
-    pub updated_at: String,
-    pub published_at: Option<String>,
-    pub usage_summary: OperationUsageSummaryView,
-    pub agent_refs: Vec<OperationAgentRefView>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct OperationDetailView {
-    pub id: String,
-    pub workspace_id: String,
-    pub name: String,
-    pub display_name: String,
-    pub category: String,
-    pub protocol: Protocol,
-    pub security_level: OperationSecurityLevel,
-    pub status: OperationStatus,
-    pub current_draft_version: u32,
-    pub latest_published_version: Option<u32>,
-    pub created_at: String,
-    pub updated_at: String,
-    pub published_at: Option<String>,
-    pub draft_version_ref: VersionRef,
-    pub published_version_ref: Option<VersionRef>,
-    pub agent_refs: Vec<OperationAgentRefView>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct VersionRef {
-    pub version: u32,
-    pub status: OperationStatus,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct OperationMutationResult {
-    pub operation_id: String,
-    pub workspace_id: String,
-    pub version: u32,
-    pub status: OperationStatus,
-    pub updated_at: String,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct ImportResponse {
-    pub operation_id: String,
-    pub workspace_id: String,
-    pub version: u32,
-    pub import_mode: ImportMode,
-    pub warnings: Vec<String>,
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct DescriptorUploadResponse {
-    pub descriptor_id: String,
-    pub version: u32,
-}
-
-fn default_operation_category() -> String {
-    "general".to_owned()
-}
+pub use crate::dto::*;
 
 impl AdminService {
     #[cfg(test)]
@@ -1538,10 +1101,6 @@ fn latest_sample_ref(
         .cloned()
 }
 
-fn default_export_mode() -> ExportMode {
-    ExportMode::Portable
-}
-
 fn demo_revops_agent_payload() -> AgentPayload {
     AgentPayload {
         slug: "revops-copilot".to_owned(),
@@ -1706,10 +1265,6 @@ fn demo_rest_output_sample() -> Value {
     demo_rest_response_sample()
 }
 
-fn default_enabled() -> bool {
-    true
-}
-
 fn new_prefixed_id(prefix: &str) -> String {
     format!("{prefix}_{}", Uuid::now_v7().simple())
 }

apps/admin-api/src/service/operations.rs

@@ -5,7 +5,9 @@ use crank_core::{
 use crank_registry::{
     CreateVersionRequest, OperationVersionRecord, PublishRequest, RegistryOperation,
 };
-use crank_runtime::{RuntimeError, RuntimeOperation, RuntimeRequestContext};
+use crank_runtime::{
+    RuntimeError, RuntimeExecutionRequest, RuntimeOperation, RuntimeRequestContext,
+};
 use serde_json::{Value, json};
 use time::OffsetDateTime;
 use tracing::{info, instrument};
@@ -468,11 +470,10 @@ impl AdminService {
         match match resolved_auth {
             Ok(resolved_auth) => {
                 self.runtime
-                    .execute_with_auth_and_context(
-                        &runtime,
-                        &payload.input,
-                        resolved_auth.as_ref(),
-                        Some(&runtime_request_context),
+                    .execute_request(
+                        RuntimeExecutionRequest::new(&runtime, &payload.input)
+                            .with_optional_auth(resolved_auth.as_ref())
+                            .with_context(&runtime_request_context),
                     )
                     .await
             }