[lbedner]

Fixes from a night of testing Illiana in chat and on calls.

Behaviour fixed

• A turn waited 30 seconds on SQLite. Her app map (a memory module) asked whether the caller is an admin while the prompt's render held SQLite's write lock (BEGIN IMMEDIATE), and the lookup opened a second session, so every turn, typed or on a call, waited out the lock and went without the map. The render now settles who is asking before it opens its session; caller_is_admin is unchanged. This was also the silence on calls the voice model filled with "can you hear me?".
• A pie card drew blank. A doughnut's legend items carry index, not datasetIndex, and the legend filter threw. Fixed as Steward fixed it (legendShows, legendPosition).
• The trace paired results by tool name. Parallel calls to one tool finish in any order, so Overseer and the chat showed Auth's question with Documents' answer. Results are now matched by call id, and a drawn card rides the call that drew it.

Illiana

• Cards: draw_card is in the default grant. Its description says when to draw and which kind (a kind asked for wins over the one the numbers pick), and that an error drew nothing, so she must fix it and call again. A table takes up to 50 rows, plus the value-only columns a model keeps writing. A card opened larger sits on the page's black.
• Code mode, as the finance assistant: on for the default agent (PydanticAI with a database). The sandbox rules moved from the finance prompt to chat/code_mode.py and follow any agent's persona while code mode is on, in the prompt's stable head.
• Persona: names errors, requests, storage and the Redis key families (ontology(kind="keys")), and gives a figure only from a tool she called for it. It was applied to a stored row only when that row still held the old default.

Tools

• storage: the buckets, or one level of one. Registered with the storage component and granted.
• query: one read-only statement through Overseer's Database > Query safeguards, audited. An admin's MCP client can opt in through MCP_TOOLS; no agent is granted it (per-domain aggregates replace free SQL for agents: Each domain says what it holds: typed aggregates an agent reads, never rows #1807). Both share db_query.attempt.

Observability

• A live call logs who ended it (page, provider or error) and how long it ran. Tonight's drop was Gemini Live's 1011 Internal error.
• A memory warning says how high: "Memory at 87% on ...".

Filed along the way

• Voices say the stack's names right: one pronunciation list #1806 pronunciation list for voices
• Each domain says what it holds: typed aggregates an agent reads, never rows #1807 per-domain aggregates
• A stage for a call: Illiana in the middle, what she shows appearing as she talks #1808 a stage for calls

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[github-actions]

Illiana's review of a5e0f1c

No new findings against the known debt.

What this change touches

• Parts: service:ai, service:ai.chat, service:finance.detection, shared:system
• Depended on by: service:documents, service:finance, service:meetings
• In no part: 15 files

Earlier reviews

Illiana's review of `b0f3c13`

I wouldn’t merge this as it is: the shared dependency risks breaking the caller’s unit of work and can silently create a separate session when one is omitted. Since this shared code is depended on by document, finance, and meeting services, I’d fix the session ownership before merging.

Takes its session · service.takes-session · warn

This change opens a session inside a service that may already be running within a caller’s session. Have the caller provide the session so the work stays together.

• app/services/shared/deps.py:99

Session is required · service.required-session · warn

The optional session lets a missing argument quietly take a different path. Make the session mandatory so callers must supply it explicitly.

• app/services/shared/deps.py:99

What this change touches

• Parts: service:ai, service:ai.chat, service:finance.detection, shared:shared, shared:system
• Depended on by: service:documents, service:finance, service:meetings
• In no part: 16 files