@aitne/daemon 0.1.0

package/dist/api/routes/health.js

@@ -0,0 +1,257 @@
+import { resolve } from "node:path";
+import { Hono } from "hono";
+import { MANAGEMENT_FAILURE_NOTIFY_THRESHOLD_DEFAULT, formatSqliteDatetime, getAgentDayBoundsUtc, parseSqliteUtcMs, } from "@aitne/shared";
+import { getContextDir } from "../../config.js";
+import { CONTEXT_RELATIVE_PATHS } from "../../core/context-paths.js";
+import { checkAgentJournalHealth } from "../../core/retention.js";
+import { getDegradedMode } from "../../db/runtime-state.js";
+import { buildIntegrationHealthMap } from "../../core/integration-health.js";
+import { loadAllCurationDeclarations } from "../../core/skill-curation/declarations.js";
+import { readPendingTemplateUpgrades } from "../../core/template-versions.js";
+import { readReleaseAssetStatus } from "../../core/release-assets.js";
+import { aggregateAlerts, } from "../../core/alerts.js";
+import { createDefaultBangCommandRegistry } from "../../core/bang-commands/index.js";
+import { createLogger } from "../../logging.js";
+const logger = createLogger("health-api");
+const ROLLING_MONTHLY_COST_DAYS = 30;
+/**
+ * Best-effort signal extraction. Each block guards its own DB query so a
+ * single failure (e.g. a malformed row) does not blank the whole alerts
+ * payload — we'd rather show a partial list than zero alerts.
+ */
+function safeQuery(label, fn, fallback) {
+    try {
+        return fn();
+    }
+    catch (err) {
+        logger.warn({ err, label }, "Health alerts: signal query failed");
+        return fallback;
+    }
+}
+export function createHealthRoutes(deps) {
+    const app = new Hono();
+    const { db, config, getHealthData, getIntegrationStatus } = deps;
+    const builtInBangRegistry = createDefaultBangCommandRegistry();
+    const builtInCommandNames = builtInBangRegistry.list().map((c) => c.name);
+    app.get("/health", (c) => {
+        const healthData = getHealthData();
+        const integrations = getIntegrationStatus();
+        const messaging = deps.getMessagingStatus?.() ?? {};
+        const notificationDestinations = deps.getNotificationDestinations?.() ?? {
+            defaultPlatforms: [],
+            effectiveFallbackPlatforms: [],
+        };
+        const integrationDriftSync = deps.getIntegrationDriftSyncStatus?.() ?? {
+            workerRunning: false,
+            lastSuccessAt: null,
+            circuitState: "ok",
+            activeHours: { startHour: 4, endHour: 24 },
+            withinActiveHours: false,
+            cadences: {},
+            unrecognizedIntervalKeys: [],
+            ttlContractViolations: [],
+        };
+        let dbConnected = true;
+        let todaySessions = 0;
+        let todayCostUsd = 0;
+        let monthCostUsd = 0;
+        try {
+            const bounds = getAgentDayBoundsUtc(config.timezone, config.dayBoundaryHour);
+            const todayStats = db
+                .prepare("SELECT COUNT(*) as sessions, COALESCE(SUM(cost_usd), 0) as cost FROM agent_actions WHERE started_at >= ? AND started_at < ?")
+                .get(bounds.start, bounds.end);
+            todaySessions = todayStats.sessions;
+            todayCostUsd = todayStats.cost;
+            const monthStartMs = parseSqliteUtcMs(bounds.end)
+                - ROLLING_MONTHLY_COST_DAYS * 24 * 60 * 60 * 1000;
+            const monthStart = formatSqliteDatetime(new Date(monthStartMs));
+            const monthStats = db
+                .prepare("SELECT COALESCE(SUM(cost_usd), 0) as cost FROM agent_actions WHERE started_at >= ? AND started_at < ?")
+                .get(monthStart, bounds.end);
+            monthCostUsd = monthStats.cost;
+        }
+        catch (err) {
+            logger.error({ err }, "Health check DB query failed");
+            dbConnected = false;
+        }
+        // Agent-journal health: live read-only check for section counts and
+        // oversized sections so the dashboard can surface journal bloat without
+        // requiring the operator to watch structured logs. Pass `db` so
+        // degraded-mode returns the safe fallback (plan §5.3).
+        const contextDir = getContextDir(config, db);
+        const agentJournal = checkAgentJournalHealth(resolve(contextDir, CONTEXT_RELATIVE_PATHS.agent.journal));
+        // Management Mode (plan §5.4, §10): degraded mode when the primary
+        // vault is unreachable. The dashboard banner reads this field.
+        const degradedState = getDegradedMode(db);
+        const topLevelStatus = degradedState ? "degraded" : "ok";
+        // Messaging bang-commands (`!stop`/`!start`) — `autonomousState` carries
+        // the full enum from `EventDispatcher.isAutonomousAllowed()`, including
+        // `"user_paused"`. Older callers can keep reading the legacy `status` /
+        // `degraded` fields without change.
+        const autonomousState = deps.getAutonomousState?.() ?? null;
+        const integrationModes = buildIntegrationHealthMap(db, config.workspaceDir);
+        const templatesPendingRecord = readPendingTemplateUpgrades(db);
+        const releaseAssets = readReleaseAssetStatus(db);
+        // P22 §1.6 rule 5 — surface anchor / curation declaration misconfigurations
+        // so the dashboard banner can flag drift between SKILL.md and curation.json.
+        // Best-effort: a fresh checkout with no curation.json files returns an
+        // empty list (the loader yields zero diagnostics).
+        const skillCuration = safeQuery("skill_curation_health", () => {
+            const skillsRoot = resolve(config.workspaceDir, "agent-assets", "skills");
+            const all = loadAllCurationDeclarations(skillsRoot);
+            const misconfigured = [];
+            for (const entry of all) {
+                for (const d of entry.diagnostics) {
+                    misconfigured.push({ slug: entry.slug, code: d.code, message: d.message, level: d.level });
+                }
+            }
+            return { misconfigured };
+        }, { misconfigured: [] });
+        // Management Mode (docs/design/21-management-registry-and-entities.md
+        // §14.1) — surface the active count and the count of tasks whose
+        // consecutive-failure counter has reached the 3-strikes notify
+        // threshold so the dashboard banner can light up before the user
+        // checks the History tab. Best-effort read: a missing `managed_tasks`
+        // table on a fresh DB returns zero (never the entire `/health`
+        // payload's failure mode).
+        const managementTasks = safeQuery("managed_tasks_summary", () => {
+            const row = db
+                .prepare(`SELECT
+               COUNT(*) AS active,
+               COUNT(*) FILTER (WHERE consecutive_failures >= ?) AS failing_now
+             FROM managed_tasks`)
+                .get(MANAGEMENT_FAILURE_NOTIFY_THRESHOLD_DEFAULT);
+            return {
+                active: row.active ?? 0,
+                failingNow: row.failing_now ?? 0,
+            };
+        }, { active: 0, failingNow: 0 });
+        // ── Notifications Center inputs ────────────────────────────────────
+        // Each query is best-effort; a partial alerts list is more useful
+        // than a blank payload when one signal source fails.
+        const mailAccounts = safeQuery("mail_accounts", () => {
+            const rows = db
+                .prepare("SELECT id, kind, email, auth_status, active FROM mail_accounts")
+                .all();
+            return rows
+                .filter((r) => (r.kind === "gmail"
+                || r.kind === "outlook"
+                || r.kind === "yahoo"
+                || r.kind === "icloud")
+                && (r.auth_status === "healthy"
+                    || r.auth_status === "requires_consent"
+                    || r.auth_status === "degraded"))
+                .map((r) => ({
+                id: r.id,
+                kind: r.kind,
+                email: r.email,
+                authStatus: r.auth_status,
+                active: r.active === 1,
+            }));
+        }, []);
+        const backendSignals = safeQuery("backends", () => db
+            .prepare("SELECT id, enabled, auth_status, last_error FROM backends")
+            .all().map((r) => ({
+            id: r.id,
+            enabled: r.enabled === 1,
+            authStatus: r.auth_status,
+            lastError: r.last_error,
+            // CLI-installed flag lives on the in-memory backend list, not the
+            // db row. Probing requires PATH lookup; treat as installed here
+            // and surface CLI-missing warnings via the existing health card.
+            cliInstalled: true,
+        })), []);
+        const userCommands = safeQuery("user_bang_commands", () => {
+            const rows = db
+                .prepare("SELECT id, command FROM user_bang_commands WHERE enabled = 1")
+                .all();
+            return rows.map((r) => ({
+                id: r.id,
+                // The schema only stores `command` (with the leading `!`).
+                // Strip it for the `name` field; the conflict detector matches
+                // on `command` anyway.
+                name: r.command.startsWith("!") ? r.command.slice(1) : r.command,
+                command: r.command,
+            }));
+        }, []);
+        const gmailMode = integrationModes.gmail?.mode;
+        const gmailDelegated = gmailMode === "delegated";
+        const delegationUpgradeAvailable = integrationModes.gmail?.mode === "direct"
+            || integrationModes.google_calendar?.mode === "direct";
+        const googleStatus = integrations.google;
+        const now = new Date();
+        const alerts = aggregateAlerts({
+            now,
+            degradedMode: degradedState,
+            missingContextFiles: healthData.missingContextFiles,
+            mailAccounts,
+            gmailDelegated,
+            templatesPending: templatesPendingRecord?.pending ?? [],
+            docsAssetConflicts: releaseAssets?.docs?.conflicts.map((conflict) => conflict.path) ?? [],
+            skillConflicts: releaseAssets?.skills?.builtinShadowedUserSkills ?? [],
+            builtInCommandNames,
+            userCommands,
+            backends: backendSignals,
+            todayCostUsd,
+            monthCostUsd,
+            dailyCapUsd: config.autonomousDailyCostCapUsd,
+            monthlyCapUsd: config.autonomousMonthlyCostCapUsd,
+            googleConfigured: googleStatus?.configured ?? false,
+            googleConnected: googleStatus?.connected ?? false,
+            delegationUpgradeAvailable,
+        });
+        return c.json({
+            status: topLevelStatus,
+            degraded: degradedState
+                ? {
+                    reason: degradedState.reason,
+                    path: degradedState.path,
+                    since: degradedState.since,
+                }
+                : null,
+            autonomousState,
+            uptime: healthData.uptime,
+            lastTickAt: deps.getLastTickAt?.() ?? Date.now(),
+            eventBusSize: healthData.eventBusSize,
+            activeSessions: healthData.activeSessions,
+            todaySessions,
+            todayCostUsd,
+            monthCostUsd,
+            dbConnected,
+            contextFilesOk: healthData.contextFilesOk,
+            missingContextFiles: healthData.missingContextFiles,
+            connectedPlatforms: healthData.connectedPlatforms,
+            messaging,
+            notificationDestinations,
+            registeredObservers: healthData.registeredObservers,
+            integrations,
+            // Integration delegation framework — registry-keyed sibling field
+            // (§4.11). The legacy `integrations` field above is preserved
+            // verbatim so the dashboard's existing service-health cards keep
+            // working; Phase 5 owns the atomic cutover when it rewrites the
+            // dashboard's per-integration cards. Until then both fields
+            // coexist intentionally.
+            integrationModes,
+            integrationDriftSync,
+            agentJournal,
+            // Template upgrade check (course 4 — future format changes). The
+            // daemon diffs shipped template versions against user-side file
+            // frontmatter at startup and persists the result in runtime_state.
+            templatesPending: templatesPendingRecord,
+            releaseAssets,
+            // Notifications Center (see docs/design/20-notifications-center.md).
+            // Severity-sorted; clients render verbatim.
+            alerts,
+            // docs/design/21-management-registry-and-entities.md §14.1 (P8)
+            // — `{active, failingNow}`. The dashboard's settings/management
+            // page and the Notifications Center both subscribe to this field.
+            managementTasks,
+            // P22 §1.6 — anchor + declaration misconfigurations across skills.
+            // Empty list = healthy. The dashboard surfaces non-empty arrays as
+            // a banner on `/settings/self-learning`.
+            skillCuration,
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=health.js.map

package/dist/api/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/api/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,2CAA2C,EAC3C,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EACL,eAAe,GAGhB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC;;;;GAIG;AACH,SAAS,SAAS,CAAI,KAAa,EAAE,EAAW,EAAE,QAAW;IAC3D,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAClE,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;IACjE,MAAM,mBAAmB,GAAG,gCAAgC,EAAE,CAAC;IAC/D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1E,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC;QACpD,MAAM,wBAAwB,GAAG,IAAI,CAAC,2BAA2B,EAAE,EAAE,IAAI;YACvE,gBAAgB,EAAE,EAAE;YACpB,0BAA0B,EAAE,EAAE;SAC/B,CAAC;QACF,MAAM,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI;YACrE,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1C,iBAAiB,EAAE,KAAK;YACxB,QAAQ,EAAE,EAAE;YACZ,wBAAwB,EAAE,EAAE;YAC5B,qBAAqB,EAAE,EAAE;SAC1B,CAAC;QAEF,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7E,MAAM,UAAU,GAAG,EAAE;iBAClB,OAAO,CACN,6HAA6H,CAC9H;iBACA,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAuC,CAAC;YACvE,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC;YACpC,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC;YAE/B,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC;kBAC7C,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YACpD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,EAAE;iBAClB,OAAO,CACN,uGAAuG,CACxG;iBACA,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAqB,CAAC;YACnD,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACtD,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;QAED,oEAAoE;QACpE,wEAAwE;QACxE,gEAAgE;QAChE,uDAAuD;QACvD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,uBAAuB,CAC1C,OAAO,CAAC,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAC1D,CAAC;QAEF,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,aAAa,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzD,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,oCAAoC;QACpC,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,IAAI,CAAC;QAE5D,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5E,MAAM,sBAAsB,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAEjD,4EAA4E;QAC5E,6EAA6E;QAC7E,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,aAAa,GAAG,SAAS,CAG7B,uBAAuB,EACvB,GAAG,EAAE;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,aAAa,GAAuF,EAAE,CAAC;YAC7G,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACxB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;oBAClC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7F,CAAC;YACH,CAAC;YACD,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC,EACD,EAAE,aAAa,EAAE,EAAE,EAAE,CACtB,CAAC;QAEF,sEAAsE;QACtE,iEAAiE;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,sEAAsE;QACtE,+DAA+D;QAC/D,2BAA2B;QAC3B,MAAM,eAAe,GAAG,SAAS,CAC/B,uBAAuB,EACvB,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CACN;;;gCAGoB,CACrB;iBACA,GAAG,CAAC,2CAA2C,CAGjD,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC;gBACvB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC;aACjC,CAAC;QACJ,CAAC,EACD,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAC7B,CAAC;QAEF,sEAAsE;QACtE,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,YAAY,GAAG,SAAS,CAC5B,eAAe,EACf,GAAG,EAAE;YACH,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN,gEAAgE,CACjE;iBACA,GAAG,EAMJ,CAAC;YACH,OAAO,IAAI;iBACR,MAAM,CAAC,CAAC,CAAC,EAGR,EAAE,CACF,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO;mBACd,CAAC,CAAC,IAAI,KAAK,SAAS;mBACpB,CAAC,CAAC,IAAI,KAAK,OAAO;mBAClB,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;mBACtB,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS;uBAC1B,CAAC,CAAC,WAAW,KAAK,kBAAkB;uBACpC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CACnC;iBACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;aACvB,CAAC,CAAC,CAAC;QACR,CAAC,EACD,EAAE,CACH,CAAC;QAEF,MAAM,cAAc,GAAG,SAAS,CAC9B,UAAU,EACV,GAAG,EAAE,CAED,EAAE;aACC,OAAO,CACN,2DAA2D,CAC5D;aACA,GAAG,EAMP,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACZ,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,kEAAkE;YAClE,gEAAgE;YAChE,iEAAiE;YACjE,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC,EACL,EAAE,CACH,CAAC;QAEF,MAAM,YAAY,GAAG,SAAS,CAG5B,oBAAoB,EACpB,GAAG,EAAE;YACH,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN,8DAA8D,CAC/D;iBACA,GAAG,EAA4C,CAAC;YACnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,2DAA2D;gBAC3D,+DAA+D;gBAC/D,uBAAuB;gBACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;gBAChE,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC,CAAC;QACN,CAAC,EACD,EAAE,CACH,CAAC;QAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC;QAC/C,MAAM,cAAc,GAAG,SAAS,KAAK,WAAW,CAAC;QACjD,MAAM,0BAA0B,GAC9B,gBAAgB,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ;eACtC,gBAAgB,CAAC,eAAe,EAAE,IAAI,KAAK,QAAQ,CAAC;QAEzD,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;QAEzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAY,eAAe,CAAC;YACtC,GAAG;YACH,YAAY,EAAE,aAAa;YAC3B,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,YAAY;YACZ,cAAc;YACd,gBAAgB,EAAE,sBAAsB,EAAE,OAAO,IAAI,EAAE;YACvD,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;YACzF,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,yBAAyB,IAAI,EAAE;YACtE,mBAAmB;YACnB,YAAY;YACZ,QAAQ,EAAE,cAAc;YACxB,YAAY;YACZ,YAAY;YACZ,WAAW,EAAE,MAAM,CAAC,yBAAyB;YAC7C,aAAa,EAAE,MAAM,CAAC,2BAA2B;YACjD,gBAAgB,EAAE,YAAY,EAAE,UAAU,IAAI,KAAK;YACnD,eAAe,EAAE,YAAY,EAAE,SAAS,IAAI,KAAK;YACjD,0BAA0B;SAC3B,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,aAAa;gBACrB,CAAC,CAAC;oBACE,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,KAAK,EAAE,aAAa,CAAC,KAAK;iBAC3B;gBACH,CAAC,CAAC,IAAI;YACR,eAAe;YACf,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAChD,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,aAAa;YACb,YAAY;YACZ,YAAY;YACZ,WAAW;YACX,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;YACjD,SAAS;YACT,wBAAwB;YACxB,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,YAAY;YACZ,kEAAkE;YAClE,8DAA8D;YAC9D,iEAAiE;YACjE,gEAAgE;YAChE,4DAA4D;YAC5D,yBAAyB;YACzB,gBAAgB;YAChB,oBAAoB;YACpB,YAAY;YACZ,iEAAiE;YACjE,gEAAgE;YAChE,mEAAmE;YACnE,gBAAgB,EAAE,sBAAsB;YACxC,aAAa;YACb,qEAAqE;YACrE,4CAA4C;YAC5C,MAAM;YACN,gEAAgE;YAChE,gEAAgE;YAChE,kEAAkE;YAClE,eAAe;YACf,mEAAmE;YACnE,mEAAmE;YACnE,yCAAyC;YACzC,aAAa;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/integrations-reconcile.d.ts

@@ -0,0 +1,33 @@
+import { Hono } from "hono";
+import type { ApiDependencies } from "../server.js";
+/**
+ * `POST /api/integrations/:key/reconcile` (INTEGRATION-DRIFT-DETECTION-PLAN.md
+ * §6).
+ *
+ * The handler validates the request,
+ * normalises payloads server-side (so LLM-driven callers can omit
+ * `contentHash` and the daemon-side hash always wins), runs the pure
+ * reconcile primitive, applies drift side effects inside the same SQLite
+ * transaction, writes one `agent_actions` audit row per call, and returns
+ * the diff.
+ *
+ * Risk tier: **Autonomous** (registered at `risk-classifier.ts:419`). The
+ * plan's §6.0 walk-through ("Autonomous tenable: a fabricating agent can
+ * pollute diffs but cannot launder a write as agent-attributed") is the
+ * rationale; the LLM-driven path is gated by the window-key allowlist
+ * below + per-call audit row. The endpoint mutates `integration_snapshots`
+ * and writes an audit row, and Phase 2's drift-effects also insert
+ * `agent_schedule` rows + emit on the EventBus inside the same transaction.
+ *
+ * Defense layers, in order:
+ *   1. Daemon-internal callers (CalendarPoller, DelegatedSyncWorker,
+ *      ImminentEventScheduler) call `reconcile()` directly. They bypass
+ *      this route entirely; their inputs come from already-trusted poll
+ *      paths.
+ *   2. LLM agents POST to this endpoint with a window-key from the
+ *      `RECONCILE_WINDOW_KEY_ALLOWLIST` below. Any other key returns 400.
+ *   3. Per-call audit row (`action_type='reconcile'`) lets operators spot
+ *      fabrication via `/api/observations/stats` `bySource`.
+ */
+export declare function createIntegrationReconcileRoutes(deps: ApiDependencies): Hono;
+//# sourceMappingURL=integrations-reconcile.d.ts.map

package/dist/api/routes/integrations-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations-reconcile.d.ts","sourceRoot":"","sources":["../../../src/api/routes/integrations-reconcile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AASpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,eAAe,GACpB,IAAI,CAgKN"}