ReadonlyconfigReadonlyserviceStable, human-readable name for the service. Must be set explicitly on each subclass
because this.constructor.name gets mangled by minification in production builds,
which breaks tracing/observability span names.
ProtectedloggerExtract an entityId from params for job_executions tracking. Override in subclasses when applicable.
Derive a deduplication key from the params. Return null to skip deduplication (every call enqueues).
Enqueue this job for async processing via Vercel Queues. Checks for deduplication via job_executions before sending.
Optionaloptions: PerformLaterOptionsRun the job with status tracking. Used by the queue handler. Errors propagate (not caught by safe()) so the RetryHandler can decide.
ProtectedspanOptional hook for subclasses to attach extra non-PII span attributes derived from params.
The returned attributes appear on the service.${serviceName} span (and, for jobs,
on job.enqueue.* and job.run.* spans too).
Safe ID-like keys on params (e.g. patientId, templateIds, limit, cursor) are
already auto-extracted via toSpanAttributes("service.input", params) — you don't need
to enumerate them here. Use this hook for derived/computed attributes (counts, flags,
computed names) or for fields you've explicitly verified safe but that aren't in the
global allowlist. Hook output overrides auto-extracted attributes on key collision.
Safe by default: returns {} when not overridden. Only declare keys you've confirmed
are non-PII. Never include emails, names, dob, free-text, etc.
ProtectedspanOptional hook for subclasses to attach extra non-PII span attributes derived from the
successful service result. Only called when run resolves successfully; on error, the
span is marked via markSpanError instead.
Safe by default: returns {} when not overridden. Only declare keys you've confirmed
are non-PII (e.g. counts, status flags, computed summaries). Never include emails,
names, dob, free-text, etc.
Generic patient-level chart review: runs the v2 tool-using
AgentQuestionRunnerover the patient's EMR/charts. Fire-and-forget — it does NOT touch sessionaudit_status(session-note validations have their ownRunSessionNoteValidationJobbablewhich owns that lifecycle).