The repositories a query token scoped to this tenant may name.

Backs the fleet's list_repositories MCP tool. Every query tool needs a repository_id, but nothing else tells an agent which repositories exist or what their ids are -- this does. Enabled repositories only; a disabled repo has no servable index. queryable marks the ones whose current build is promoted (what the current-index pointer will actually serve), so the agent can tell "ready to ask" from "still indexing".

Authorization is the InternalQuery dependency alone: reaching here means the caller is the query fleet. The endpoint returns every repository of the named tenant, plus every cross-repo group (workspace) as a queryable target in the same shape -- the group's id in the repositoryId slot, exactly as its serving pointer uses it. Per-repo scoping -- when a token's repositories claim is not ["*"] -- is applied by the fleet against the claim it holds; this service token carries no such claim.

A kind field distinguishes a "repository" from a "workspace". It is the only addition to the existing repository rows, which are otherwise unchanged; groups are naturally absent when a tenant has none, so this stays dark until the first workspace is created.