feat: harden activity feed API (#838, #839, #840)

CLAUDE.md

@@ -94,7 +94,7 @@ src/synthorg/
   config/         # YAML company config loading and validation
   core/           # Shared domain models, base classes, resilience config
   engine/         # Orchestration, execution loops, task engine, coordination, checkpoint recovery, approval/review gates, stagnation detection, context budget, compaction, hybrid loop, workspace/ (git worktree isolation, merge orchestration, semantic conflict detection)
-  hr/             # Hiring, firing, onboarding, agent registry, performance tracking, activity timeline, career history, promotion/demotion
+  hr/             # Hiring, firing, onboarding, agent registry, performance tracking, activity timeline, activity event types, cost event redaction, career history, promotion/demotion
   memory/         # Pluggable MemoryBackend, retrieval pipeline, org memory, consolidation
   persistence/    # Pluggable PersistenceBackend, SQLite, settings + user repositories
   observability/  # Structured logging, correlation tracking, redaction, third-party logger taming, events/

docs/design/agents.md

@@ -305,7 +305,7 @@ Performance data is exposed via three API sub-routes on `/api/v1/agents/{name}`:
 | Sub-route | Response model | Description |
 |-----------|---------------|-------------|
 | `GET /performance` | `AgentPerformanceSummary` | Flat summary: tasks completed (total/7d/30d), success rate, cost per task, quality/collaboration scores, trend direction, plus raw window metrics and trend results |
-| `GET /activity` | `PaginatedResponse[ActivityEvent]` | Paginated chronological timeline merging lifecycle events, task metrics, cost records, tool invocations, and delegation records (most recent first) |
+| `GET /activity` | `PaginatedResponse[ActivityEvent]` | Paginated chronological timeline merging lifecycle events, task metrics, cost records, tool invocations, and delegation records (most recent first). Supports typed `ActivityEventType` enum filtering (invalid values return 400). Cost events are redacted for read-only roles. Response includes `degraded_sources` field for partial data detection |
 | `GET /history` | `ApiResponse[tuple[CareerEvent, ...]]` | Career-relevant lifecycle events (hired, fired, promoted, demoted, onboarded) in chronological order |
 
 The framework tracks detailed per-agent metrics:

docs/design/operations.md

@@ -1096,9 +1096,9 @@ future CLI tool are thin clients that call the API -- they contain no business l
 | `/api/v1/company` | CRUD company config |
 | `/api/v1/agents` | List, hire, fire, modify agents |
 | `GET /api/v1/agents/{name}/performance` | Agent performance metrics summary |
-| `GET /api/v1/agents/{name}/activity` | Paginated agent activity timeline (lifecycle, task, cost, tool, delegation events) |
+| `GET /api/v1/agents/{name}/activity` | Paginated agent activity timeline (lifecycle, task, cost, tool, delegation events); `degraded_sources` included in `PaginatedResponse` contract |
 | `GET /api/v1/agents/{name}/history` | Agent career history events |
-| `GET /api/v1/activities` | Org-wide activity feed (merges all agents, filterable by type/agent/time window) |
+| `GET /api/v1/activities` | Org-wide activity feed (merges all agents, enum-validated type filtering, cost event redaction for read-only roles, degraded source reporting) |
 | `/api/v1/departments` | Department management |
 | `/api/v1/projects` | Project CRUD |
 | `/api/v1/tasks` | Task management |