fix(FN-4853): finalize docs changeset and restore workspace build gate

Fusion-Task-Id: FN-4853
Fusion-Task-Lineage: aaad0ff7-714c-4c82-a1e7-c9a725db90cb

.changeset/fn-4853-fix-agents-startup-hang.md

@@ -0,0 +1,5 @@
+---
+"@runfusion/fusion": patch
+---
+
+Speed up Agents API boot-path loading by replacing per-request pending approval row scans with an aggregated pending-count query per requester agent. This keeps `/api/agents` responsive on large approval histories and reduces time spent on the initial "Loading agents..." state.

docs/architecture.md

@@ -224,6 +224,7 @@ Provisioning note: durable `fn_agent_create` / `fn_agent_delete` approvals use `
 - `create(input: ApprovalRequestCreateInput)` — inserts a `pending` request and appends a `created` audit event
 - `get(id)` — returns one request or `null`
 - `list(input?: ApprovalRequestListInput)` — filters by `status`, `requesterActorId`, `taskId`, `runId`; ordered `createdAt DESC, id DESC`; paginated by `limit`/`offset`
+- `getPendingCountsByActor()` — single-pass SQL aggregate (`status='pending'` grouped by `requesterActorId`) used by `/api/agents` pending-approval counters without materializing full request rows
 - `decide(requestId, status, input: ApprovalRequestDecisionInput)` — applies `pending -> approved|denied`, stamps `decidedAt`, appends `approved`/`denied` audit event
 - `markCompleted(requestId, input: ApprovalRequestCompletionInput)` — applies `approved -> completed`, stamps `completedAt`, appends `completed` audit event
 - `getAuditHistory(requestId)` — returns append-only audit rows ordered `createdAt ASC, rowid ASC`

packages/core/src/index.ts

@@ -1131,6 +1131,5 @@ export {
 } from "./secrets-store.js";
 export type {
   SecretScope,
-  SecretAccessPolicy,
   SecretRecord,
 } from "./secrets-store.js";