v11.6.0

Contract 11.6.0 (#49). The revision is sha256:d926c3c6ab829cbf (11.5.0: sha256:3605ae27d2edf632). It is identical in content to v11.6.0-rc.1, which ran the qyl Collector (qyl #669) and the qyl.mcp drafts (qyl.mcp #148, #150) green in CI.

• Write base: ResourceBase (id, created_at, updated_at, etag), Idempotency-Key on create, a required If-Match on PATCH and DELETE, 412/428, and 201 with Location and ETag.
• Resources: annotations on a trace, span or session, and saved queries (create, update, delete, :run; a duplicate name returns 409).
• Credentials: key roles ingest/read/write/delete, the QylWriteKeyAuth and QylDeleteKeyAuth schemes, and the scopes qyl:read, qyl:write and qyl:delete.
• Read side:
  • a cursor on every paged list;
  • trace filters (start_time, end_time, service_name, errors_only);
  • time ranges for sessions and logs, and session_id for logs;
  • models for the three metric tools;
  • fetch_telemetry as an object keyed on view;
  • ToolError with 16 stable codes.
• Packaging: the npm package now ships models/metrics.tsp, which index.tsp imports (SCH-1, #47). 11.5.0 lacked it.

A consumer that adopts this release changes the revision it advertises, so the qyl Collector must deploy and serve it before qyl.mcp adopts it.