Operational queue observations

20261011000700_command_center_queue_observations.sql adds a service-only read RPC. It returns one statement timestamp and whole-table aggregates for queues the actor's current global role permits. A settings grant is not a universal grant: support, audit, privacy, wallet and control counts require their own module permissions. Category commission proposals follow the existing taxonomy requester or settings reviewer read authority.

Each queue reports either verified counts or available: false with null counts and age. Missing source tables or required columns are unavailable; queried empty sources produce zero counts. Permission revocation and campus restrictions are evaluated against current persisted roles. Responses contain no member identifiers, proposal bodies, hold reasons or exported data.

Support observations describe pending publication, retry, processing, expired worker leases, recorded inbox rows and unavailable recipients. They do not establish external provider delivery. Privacy observations count open cases, overdue deadlines and active holds without treating a hold as completed work. Proposal observations distinguish pending review before expiry from pending records already past expiry. Audit observations distinguish pending, failed, unexpired ready and expired records.

The panel displays the observation timestamp, snapshot age and oldest pending age measured at the observation. It marks snapshots older than one minute as stale, clears old counts during refresh, and shows read failures. Refresh reads observations only; no replay, retry, review or execution controls are included.

Mount queueObservationsRoutes at /api/admin/queue-observations and render QueueObservationsPanel in the overview. Local SQL checks run with node scripts/db-queue-observations-checks.mjs; DEBELU_DB_RUNTIME can point to the pinned PGlite installation. Fixtures verify full counts beyond UI page sizes, permission isolation and revocation, scoped/browser denial, oldest age, and missing versus empty sources. These local checks do not certify hosted performance or full migration replay.