@aitne/daemon 0.1.3 → 0.1.4

package/dist/core/integration-lifecycle.js

@@ -1,7 +1,8 @@
 import { INTEGRATION_DESCRIPTORS, } from "@aitne/shared";
 import { readIntegrationState } from "../db/integrations-store.js";
+import { deleteRuntimeState, readRuntimeState, writeRuntimeState, } from "../db/runtime-state.js";
 import { createLogger } from "../logging.js";
-import { DELEGATED_SYNC_OBSERVER_NAME, hasActiveDelegatedSyncIntegration, } from "../observers/delegated-sync-worker.js";
+import { DELEGATED_SYNC_OBSERVER_NAME, hasActiveCadenceSyncIntegration, } from "../observers/delegated-sync-worker.js";
 import { GIT_DELEGATED_CRON_OBSERVER_NAME, hasActiveDelegatedGitLifecycleIntegration, } from "../observers/git-delegated-cron.js";
 import { purgeStaleSnapshotPartitions } from "../services/integrations/snapshot-partitions.js";
 const logger = createLogger("integration-lifecycle");
@@ -14,6 +15,15 @@ const logger = createLogger("integration-lifecycle");
  * with the PATCH route handler so the lifecycle module is a thin,
  * testable orchestrator.
  *
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §11.3 extends the same path to cover
+ * the new `native` boundary transitions (`direct ↔ native`,
+ * `delegated ↔ native`, `native ↔ disabled`). No new observer is started
+ * for `native` — the agent reaches the connector directly through the
+ * main backend's MCP — so the existing direct-flip observer gate is
+ * sufficient. Workdir re-materialization fires on every mode change so
+ * the per-session SKILL.*.md / task-flow variant is refreshed before the
+ * next turn.
+ *
  * Idempotent: re-running with the same `prev`/`next` does the same set
  * of starts/stops (which `ObserverManager.registerAndStart` /
  * `stopAndUnregister` themselves no-op when state already matches) and
@@ -39,10 +49,24 @@ export async function applyIntegrationModeChange(deps, key, prev, next) {
                 }
             }
             else {
-                const removed = await deps.observerManager.stopAndUnregister(observerName);
-                logger.info({ key, observerName, removed }, removed
-                    ? "Stopped observer after integration left direct mode"
-                    : "No observer to stop — already absent");
+                const result = await deps.observerManager.stopAndUnregister(observerName);
+                switch (result.status) {
+                    case "removed":
+                        logger.info({ key, observerName }, "Stopped observer after integration left direct mode");
+                        break;
+                    case "absent":
+                        logger.info({ key, observerName }, "No observer to stop — already absent");
+                        break;
+                    case "stop_failed":
+                        // Observer stayed in the registry; the next mode-change
+                        // cycle (or daemon shutdown's stopAll) will retry. We do
+                        // NOT throw here because the calling PATCH has already
+                        // committed the DB state — propagating would leave the
+                        // operator with a 5xx after the change is durable, which
+                        // is more confusing than the logged warning + retry.
+                        logger.warn({ key, observerName, err: result.error }, "Observer.stop failed during integration mode change — observer left registered for retry");
+                        break;
+                }
             }
         }
     }
@@ -100,35 +124,59 @@ async function applyGitDelegatedCronLifecycle(deps, key, next) {
         }
         return;
     }
-    const removed = await deps.observerManager.stopAndUnregister(GIT_DELEGATED_CRON_OBSERVER_NAME);
-    logger.info({ key, removed }, removed
-        ? "Stopped git delegated cron after last delegated integration left"
-        : "No git delegated cron to stop — already absent");
+    const result = await deps.observerManager.stopAndUnregister(GIT_DELEGATED_CRON_OBSERVER_NAME);
+    switch (result.status) {
+        case "removed":
+            logger.info({ key }, "Stopped git delegated cron after last delegated integration left");
+            break;
+        case "absent":
+            logger.info({ key }, "No git delegated cron to stop — already absent");
+            break;
+        case "stop_failed":
+            logger.warn({ key, err: result.error }, "Git delegated cron stop failed — left registered for retry by next mode change or daemon shutdown");
+            break;
+    }
 }
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §19.7 — stand the cadence-sync worker
+ * up when at least one cadence-eligible integration is in a mode that
+ * runs the worker (`delegated` or `native`); tear it down when the last
+ * one leaves. The worker symbol set still lives under
+ * `delegated-sync-worker` for one cycle; the predicate is `hasActive
+ * CadenceSyncIntegration` which covers both modes.
+ */
 async function applyDelegatedSyncLifecycle(deps, key, next) {
     if (!deps.buildDelegatedSyncWorker)
         return;
-    const shouldRun = hasActiveDelegatedSyncIntegration(deps.db, { key, state: next });
+    const shouldRun = hasActiveCadenceSyncIntegration(deps.db, { key, state: next });
     if (shouldRun) {
         if (deps.observerManager.has(DELEGATED_SYNC_OBSERVER_NAME))
             return;
         const worker = deps.buildDelegatedSyncWorker();
         if (!worker) {
-            logger.warn({ key }, "Cannot start delegated sync worker — builder returned null");
+            logger.warn({ key }, "Cannot start cadence sync worker — builder returned null");
             return;
         }
         try {
             await deps.observerManager.registerAndStart(worker);
         }
         catch (err) {
-            logger.error({ err, key }, "Failed to hot-start delegated sync worker after integration mode change");
+            logger.error({ err, key }, "Failed to hot-start cadence sync worker after integration mode change");
         }
         return;
     }
-    const removed = await deps.observerManager.stopAndUnregister(DELEGATED_SYNC_OBSERVER_NAME);
-    logger.info({ key, removed }, removed
-        ? "Stopped delegated sync worker after last delegated integration left sync"
-        : "No delegated sync worker to stop — already absent");
+    const result = await deps.observerManager.stopAndUnregister(DELEGATED_SYNC_OBSERVER_NAME);
+    switch (result.status) {
+        case "removed":
+            logger.info({ key }, "Stopped cadence sync worker after last cadence-eligible integration left");
+            break;
+        case "absent":
+            logger.info({ key }, "No cadence sync worker to stop — already absent");
+            break;
+        case "stop_failed":
+            logger.warn({ key, err: result.error }, "Cadence sync worker stop failed — left registered for retry by next mode change or daemon shutdown");
+            break;
+    }
 }
 /**
  * Decide whether an integration's observers should be started during the
@@ -150,4 +198,107 @@ export function shouldStartObserversFor(db, key) {
 export function isIntegrationDelegated(db, key) {
     return readIntegrationState(db, key).mode === "delegated";
 }
+/**
+ * True when the integration's data path is NOT the daemon poller — any of
+ * `delegated`, `native`, or `disabled` (INTEGRATION_NATIVE_MODE_DESIGN.md
+ * §5.6).
+ *
+ * Used by multi-provider surfaces that own polling for several integration
+ * kinds at once (e.g. {@link "../observers/mail-poller.js" MailPoller}). They
+ * must skip per-account when the integration governing that kind is not
+ * direct-mode — but cannot stop the whole observer because sibling kinds
+ * (iCloud, IMAP, Yahoo) belong to integrations whose mode is unrelated.
+ *
+ * Phase A fixed the pre-native bug where the per-account gate only checked
+ * `delegated`, leaving `disabled`-mode Gmail still being polled by the
+ * unified mail poller. Phase B1 extends the same predicate to recognise
+ * the new `native` mode.
+ */
+export function isIntegrationPollerless(db, key) {
+    const mode = readIntegrationState(db, key).mode;
+    return mode === "delegated" || mode === "native" || mode === "disabled";
+}
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §5.6 — true when the integration is
+ * currently in `native` mode. Used by route-gate logic, health builders,
+ * and the BackendRouter's native-fallback gate. Read once per call from
+ * `readIntegrationState`; callers that need the `nativeBackend` value
+ * should consult the full state via `readIntegrationState` directly.
+ */
+export function isIntegrationNative(db, key) {
+    return readIntegrationState(db, key).mode === "native";
+}
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §5.6 — true when the integration's
+ * data path is NOT the daemon (neither poller nor proxy) — `native` or
+ * `disabled`. Used by the API route gate to 410 daemon endpoints; the
+ * agent reaches the connector directly via the main backend's MCP (native)
+ * or not at all (disabled).
+ *
+ * Distinct from {@link isIntegrationDelegated} (`delegated` only) and
+ * {@link isIntegrationPollerless} (`delegated ∪ native ∪ disabled`).
+ */
+export function isIntegrationDaemonless(db, key) {
+    const mode = readIntegrationState(db, key).mode;
+    return mode === "native" || mode === "disabled";
+}
+// ── Flip-lock orchestration (§11.3.1) ───────────────────────────────────────
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §11.3.1 — per-key flip lock keyed in
+ * `runtime_state`. The PATCH handler acquires the lock before signalling
+ * the outgoing data path to stop and releases it after the audit row is
+ * written. A concurrent flip on the same key sees the lock and is rejected
+ * with 409; concurrent flips on different keys proceed independently.
+ *
+ * Stored shape: `{ acquiredAt: ISO, processId: number, byKey: <key> }`.
+ * The lock is not strictly necessary on a single-process daemon (Node is
+ * single-threaded and Better-SQLite3 is synchronous), but the PATCH
+ * handler interleaves `await` boundaries while running the live probe and
+ * the optional cancel-delegated-tick drain — so concurrent flips ARE
+ * possible at the JavaScript-microtask level. The lock makes that race
+ * explicit instead of relying on call-site ordering.
+ */
+const FLIP_LOCK_PREFIX = "integration_flip_lock:";
+function flipLockKey(key) {
+    return `${FLIP_LOCK_PREFIX}${key}`;
+}
+/**
+ * Attempt to acquire the flip lock for `key`. Returns `{ ok: true }` on
+ * success and `{ ok: false, current }` when the lock is already held —
+ * the PATCH handler maps the latter to HTTP 409. Stale locks older than
+ * `STALE_LOCK_MS` are silently reclaimed: the PATCH handler's drain step
+ * has a 5s timeout, so a holder older than ~30s is a crashed/abandoned
+ * process and not a live competitor.
+ */
+const STALE_LOCK_MS = 30_000;
+export function acquireIntegrationFlipLock(db, key, now = Date.now()) {
+    const existing = readRuntimeState(db, flipLockKey(key));
+    if (existing) {
+        const acquiredMs = Date.parse(existing.acquiredAt);
+        const isStale = Number.isFinite(acquiredMs) && now - acquiredMs > STALE_LOCK_MS;
+        if (!isStale) {
+            return { ok: false, current: existing };
+        }
+        logger.warn({ key, lock: existing, ageMs: now - acquiredMs }, "Reclaiming stale integration flip lock");
+    }
+    const lock = {
+        acquiredAt: new Date(now).toISOString(),
+        processId: process.pid,
+        byKey: key,
+    };
+    writeRuntimeState(db, flipLockKey(key), lock);
+    return { ok: true, lock };
+}
+export function releaseIntegrationFlipLock(db, key) {
+    deleteRuntimeState(db, flipLockKey(key));
+}
+/**
+ * Read-only inspection helper — used by tests and the §15 risk-register
+ * defensive check on `POST /api/observations` ("reject rows whose
+ * `(source, refs.<id>)` already has a newer row written under a different
+ * mode within the lock window"). Returns null when no lock is held.
+ */
+export function readIntegrationFlipLock(db, key) {
+    return readRuntimeState(db, flipLockKey(key));
+}
 //# sourceMappingURL=integration-lifecycle.js.map

package/dist/core/integration-lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration-lifecycle.js","sourceRoot":"","sources":["../../src/core/integration-lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,GAGxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,gCAAgC,EAChC,yCAAyC,GAC1C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAE/F,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAgDrD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAA8B,EAC9B,GAAmB,EACnB,IAAsB,EACtB,IAAsB;IAEtB,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IAExC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,YAAY,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,6GAA6G,CAC9G,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACxD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,EAC1B,4DAA4D,CAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;gBAC3E,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,EAC9B,OAAO;oBACL,CAAC,CAAC,qDAAqD;oBACvD,CAAC,CAAC,sCAAsC,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACxB,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,MAAM,2BAA2B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,8BAA8B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtD,kEAAkE;IAClE,kEAAkE;IAClE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,WAAW;IACX,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,mEAAmE;IACnE,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,gEAAgE;IAChE,qEAAqE;IACrE,2CAA2C;IAC3C,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,uBAAuB,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,mGAAmG,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,IAA8B,EAC9B,GAAmB,EACnB,IAAsB;IAEtB,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO;IAC9C,IAAI,CAAC,IAAI,CAAC,6BAA6B;QAAE,OAAO;IAEhD,MAAM,SAAS,GAAG,yCAAyC,CAAC,IAAI,CAAC,EAAE,EAAE;QACnE,GAAG;QACH,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,gCAAgC,CAAC;YAAE,OAAO;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CACzC,IAAI,CAAC,6BAA6B,EAAE,CACrC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAC1D,gCAAgC,CACjC,CAAC;IACF,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,OAAO,EAAE,EAChB,OAAO;QACL,CAAC,CAAC,kEAAkE;QACpE,CAAC,CAAC,gDAAgD,CACrD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,IAA8B,EAC9B,GAAmB,EACnB,IAAsB;IAEtB,IAAI,CAAC,IAAI,CAAC,wBAAwB;QAAE,OAAO;IAE3C,MAAM,SAAS,GAAG,iCAAiC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAAE,OAAO;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,4DAA4D,CAC7D,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAC1D,4BAA4B,CAC7B,CAAC;IACF,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,OAAO,EAAE,EAChB,OAAO;QACL,CAAC,CAAC,0EAA0E;QAC5E,CAAC,CAAC,mDAAmD,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAqB,EACrB,GAAmB;IAEnB,OAAO,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAqB,EACrB,GAAmB;IAEnB,OAAO,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"integration-lifecycle.js","sourceRoot":"","sources":["../../src/core/integration-lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,GAGxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,gCAAgC,EAChC,yCAAyC,GAC1C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAE/F,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAgDrD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAA8B,EAC9B,GAAmB,EACnB,IAAsB,EACtB,IAAsB;IAEtB,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IAExC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,YAAY,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,6GAA6G,CAC9G,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACxD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,EAC1B,4DAA4D,CAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;gBAC1E,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,KAAK,SAAS;wBACZ,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,qDAAqD,CACtD,CAAC;wBACF,MAAM;oBACR,KAAK,QAAQ;wBACX,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,EACrB,sCAAsC,CACvC,CAAC;wBACF,MAAM;oBACR,KAAK,aAAa;wBAChB,wDAAwD;wBACxD,yDAAyD;wBACzD,uDAAuD;wBACvD,uDAAuD;wBACvD,yDAAyD;wBACzD,qDAAqD;wBACrD,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EACxC,0FAA0F,CAC3F,CAAC;wBACF,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACxB,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,MAAM,2BAA2B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,8BAA8B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtD,kEAAkE;IAClE,kEAAkE;IAClE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,WAAW;IACX,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,mEAAmE;IACnE,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,gEAAgE;IAChE,qEAAqE;IACrE,2CAA2C;IAC3C,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,uBAAuB,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,mGAAmG,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,IAA8B,EAC9B,GAAmB,EACnB,IAAsB;IAEtB,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO;IAC9C,IAAI,CAAC,IAAI,CAAC,6BAA6B;QAAE,OAAO;IAEhD,MAAM,SAAS,GAAG,yCAAyC,CAAC,IAAI,CAAC,EAAE,EAAE;QACnE,GAAG;QACH,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,gCAAgC,CAAC;YAAE,OAAO;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CACzC,IAAI,CAAC,6BAA6B,EAAE,CACrC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CACzD,gCAAgC,CACjC,CAAC;IACF,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,SAAS;YACZ,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,kEAAkE,CACnE,CAAC;YACF,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,gDAAgD,CACjD,CAAC;YACF,MAAM;QACR,KAAK,aAAa;YAChB,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAC1B,mGAAmG,CACpG,CAAC;YACF,MAAM;IACV,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,2BAA2B,CACxC,IAA8B,EAC9B,GAAmB,EACnB,IAAsB;IAEtB,IAAI,CAAC,IAAI,CAAC,wBAAwB;QAAE,OAAO;IAE3C,MAAM,SAAS,GAAG,+BAA+B,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAAE,OAAO;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,0DAA0D,CAC3D,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CACzD,4BAA4B,CAC7B,CAAC;IACF,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,SAAS;YACZ,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,0EAA0E,CAC3E,CAAC;YACF,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,iDAAiD,CAClD,CAAC;YACF,MAAM;QACR,KAAK,aAAa;YAChB,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAC1B,oGAAoG,CACrG,CAAC;YACF,MAAM;IACV,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAqB,EACrB,GAAmB;IAEnB,OAAO,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAqB,EACrB,GAAmB;IAEnB,OAAO,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAqB,EACrB,GAAmB;IAEnB,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAqB,EACrB,GAAmB;IAEnB,OAAO,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAqB,EACrB,GAAmB;IAEnB,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU,CAAC;AAClD,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAQlD,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO,GAAG,gBAAgB,GAAG,GAAG,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,MAAM,UAAU,0BAA0B,CACxC,EAAqB,EACrB,GAAmB,EACnB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,EAAE,EACF,WAAW,CAAC,GAAG,CAAC,CACjB,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,UAAU,GAAG,aAAa,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,UAAU,EAAE,EAChD,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA8B;QACtC,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,KAAK,EAAE,GAAG;KACX,CAAC;IACF,iBAAiB,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,EAAqB,EACrB,GAAmB;IAEnB,kBAAkB,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAqB,EACrB,GAAmB;IAEnB,OAAO,gBAAgB,CAA4B,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/core/integration-main-backend.d.ts

@@ -1,5 +1,14 @@
 import type Database from "better-sqlite3";
 import { type BackendId, type IntegrationKey } from "@aitne/shared";
+/**
+ * Read the currently-configured main backend id from
+ * `backend_global_defaults.default_backend`. Returns null when the row is
+ * absent (fresh installs before setup) or carries a value that does not
+ * match `BackendId` — both treated by callers as "no main backend known
+ * yet". A single source of truth so the integrations PATCH route and the
+ * main-backend cascade agree on the value.
+ */
+export declare function readMainBackend(db: Database.Database): BackendId | null;
 export interface DelegationCompatReport {
     key: IntegrationKey;
     /** User's explicit delegated backend choice (preserved across main switches). */
@@ -33,4 +42,35 @@ export interface DelegationCompatReport {
  * in the daemon log without burning an owner notification.
  */
 export declare function checkDelegatedCompatForNewMain(db: Database.Database, newMainBackendId: BackendId): DelegationCompatReport[];
+export interface NativeCascadeEntry {
+    key: IntegrationKey;
+    /** The native-backend binding that just became invalid. */
+    priorNativeBackend: BackendId;
+    /** The new main backend that triggered the cascade. */
+    newMainBackend: BackendId;
+}
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §11.4 — main-backend change cascade.
+ *
+ * When the operator switches the main backend, every `native` integration
+ * whose `nativeBackend` no longer matches is **flipped to `disabled`** and
+ * a setup-required entry is returned to the caller. The caller is
+ * responsible for:
+ *
+ *   - writing an `agent_actions` audit row of type
+ *     `integration.native_unbound` per entry (carrying `priorNativeBackend`
+ *     and `newMainBackend` so the forensic chain survives the schema's
+ *     `superRefine` clearing `nativeBackend` once `mode !== "native"`);
+ *   - firing a notification telling the user their native integration is
+ *     now disabled until they re-configure;
+ *   - calling the integration mode-change side-effects callback (the
+ *     workdir re-materialisation + observer-stop logic).
+ *
+ * Returns the entries that were flipped so the caller can build the audit
+ * + notification batch atomically.
+ *
+ * No silent re-routing. Native is an explicit contract — the user must
+ * confirm the new backend binding via the setup wizard.
+ */
+export declare function cascadeNativeBindingsOnMainSwitch(db: Database.Database, newMainBackendId: BackendId): NativeCascadeEntry[];
 //# sourceMappingURL=integration-main-backend.d.ts.map

package/dist/core/integration-main-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration-main-backend.d.ts","sourceRoot":"","sources":["../../src/core/integration-main-backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,cAAc,EAEpB,MAAM,eAAe,CAAC;AAMvB,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,cAAc,CAAC;IACpB,iFAAiF;IACjF,gBAAgB,EAAE,SAAS,CAAC;IAC5B,oFAAoF;IACpF,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,gBAAgB,EAAE,SAAS,GAC1B,sBAAsB,EAAE,CAiC1B"}
+{"version":3,"file":"integration-main-backend.d.ts","sourceRoot":"","sources":["../../src/core/integration-main-backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAIL,KAAK,SAAS,EACd,KAAK,cAAc,EAEpB,MAAM,eAAe,CAAC;AASvB;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,SAAS,GAAG,IAAI,CAgBvE;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,cAAc,CAAC;IACpB,iFAAiF;IACjF,gBAAgB,EAAE,SAAS,CAAC;IAC5B,oFAAoF;IACpF,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,gBAAgB,EAAE,SAAS,GAC1B,sBAAsB,EAAE,CAiC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,cAAc,CAAC;IACpB,2DAA2D;IAC3D,kBAAkB,EAAE,SAAS,CAAC;IAC9B,uDAAuD;IACvD,cAAc,EAAE,SAAS,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,iCAAiC,CAC/C,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,gBAAgB,EAAE,SAAS,GAC1B,kBAAkB,EAAE,CA6CtB"}

package/dist/core/integration-main-backend.js

@@ -1,7 +1,32 @@
-import { INTEGRATION_KEYS, backendHasIntegrationConnector, } from "@aitne/shared";
-import { readIntegrations } from "../db/integrations-store.js";
+import { INTEGRATION_KEYS, backendHasIntegrationConnector, isBackendId, } from "@aitne/shared";
+import { readIntegrations, updateIntegrationState, } from "../db/integrations-store.js";
 import { createLogger } from "../logging.js";
 const logger = createLogger("integration-main-backend");
+/**
+ * Read the currently-configured main backend id from
+ * `backend_global_defaults.default_backend`. Returns null when the row is
+ * absent (fresh installs before setup) or carries a value that does not
+ * match `BackendId` — both treated by callers as "no main backend known
+ * yet". A single source of truth so the integrations PATCH route and the
+ * main-backend cascade agree on the value.
+ */
+export function readMainBackend(db) {
+    let row;
+    try {
+        row = db
+            .prepare("SELECT default_backend FROM backend_global_defaults WHERE singleton = 1")
+            .get();
+    }
+    catch {
+        // Table missing (test harnesses without the multi-backend schema) —
+        // surface as "unknown" so callers can degrade safely.
+        return null;
+    }
+    const raw = row?.default_backend;
+    if (typeof raw !== "string")
+        return null;
+    return isBackendId(raw) ? raw : null;
+}
 /**
  * §4.12.4 "Backend change while delegated" — read-only detection.
  *
@@ -56,4 +81,66 @@ export function checkDelegatedCompatForNewMain(db, newMainBackendId) {
     }
     return reports;
 }
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §11.4 — main-backend change cascade.
+ *
+ * When the operator switches the main backend, every `native` integration
+ * whose `nativeBackend` no longer matches is **flipped to `disabled`** and
+ * a setup-required entry is returned to the caller. The caller is
+ * responsible for:
+ *
+ *   - writing an `agent_actions` audit row of type
+ *     `integration.native_unbound` per entry (carrying `priorNativeBackend`
+ *     and `newMainBackend` so the forensic chain survives the schema's
+ *     `superRefine` clearing `nativeBackend` once `mode !== "native"`);
+ *   - firing a notification telling the user their native integration is
+ *     now disabled until they re-configure;
+ *   - calling the integration mode-change side-effects callback (the
+ *     workdir re-materialisation + observer-stop logic).
+ *
+ * Returns the entries that were flipped so the caller can build the audit
+ * + notification batch atomically.
+ *
+ * No silent re-routing. Native is an explicit contract — the user must
+ * confirm the new backend binding via the setup wizard.
+ */
+export function cascadeNativeBindingsOnMainSwitch(db, newMainBackendId) {
+    const integrations = readIntegrations(db);
+    const flipped = [];
+    const now = new Date().toISOString();
+    for (const key of INTEGRATION_KEYS) {
+        const state = integrations[key];
+        if (state.mode !== "native")
+            continue;
+        const priorNativeBackend = state.nativeBackend;
+        if (!priorNativeBackend) {
+            // Defensive — superRefine guarantees nativeBackend exists in native
+            // mode. A row missing it indicates registry drift; flip to disabled
+            // and log so the operator notices.
+            logger.warn({ key }, "native integration carried no nativeBackend — flipping to disabled (registry drift)");
+        }
+        if (priorNativeBackend === newMainBackendId)
+            continue;
+        updateIntegrationState(db, key, {
+            mode: "disabled",
+            deniedTools: state.deniedTools ?? [],
+            lastChangedAt: now,
+        });
+        flipped.push({
+            key,
+            // Cast safe because we just checked truthiness above and the only
+            // un-truthy branch logs and falls through to here with a synthetic
+            // value (`unknown` would be misleading); we mirror what the audit
+            // row needs.
+            priorNativeBackend: (priorNativeBackend ?? newMainBackendId),
+            newMainBackend: newMainBackendId,
+        });
+        logger.warn({
+            key,
+            priorNativeBackend,
+            newMainBackend: newMainBackendId,
+        }, "native integration cascaded to disabled on main-backend change");
+    }
+    return flipped;
+}
 //# sourceMappingURL=integration-main-backend.js.map

package/dist/core/integration-main-backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration-main-backend.js","sourceRoot":"","sources":["../../src/core/integration-main-backend.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,8BAA8B,GAI/B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAUxD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,EAAqB,EACrB,gBAA2B;IAE3B,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAA6B,EAAE,CAAC;IAE7C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAqB,YAAY,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAEzC,MAAM,UAAU,GAAG,8BAA8B,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,uBAAuB;QACvB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT;gBACE,GAAG;gBACH,gBAAgB;gBAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,EACD,qJAAqJ,CACtJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,yDAAyD;YACzD,oEAAoE;YACpE,wDAAwD;YACxD,gBAAgB,EAAE,KAAK,CAAC,gBAA6B;YACrD,qBAAqB,EAAE,UAAU;SAClC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"integration-main-backend.js","sourceRoot":"","sources":["../../src/core/integration-main-backend.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,WAAW,GAIZ,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,EAAqB;IACnD,IAAI,GAA6C,CAAC;IAClD,IAAI,CAAC;QACH,GAAG,GAAG,EAAE;aACL,OAAO,CACN,yEAAyE,CAC1E;aACA,GAAG,EAA8C,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,sDAAsD;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,EAAE,eAAe,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,EAAqB,EACrB,gBAA2B;IAE3B,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAA6B,EAAE,CAAC;IAE7C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAqB,YAAY,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAEzC,MAAM,UAAU,GAAG,8BAA8B,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,uBAAuB;QACvB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT;gBACE,GAAG;gBACH,gBAAgB;gBAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,EACD,qJAAqJ,CACtJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,yDAAyD;YACzD,oEAAoE;YACpE,wDAAwD;YACxD,gBAAgB,EAAE,KAAK,CAAC,gBAA6B;YACrD,qBAAqB,EAAE,UAAU;SAClC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,iCAAiC,CAC/C,EAAqB,EACrB,gBAA2B;IAE3B,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,kBAAkB,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,oEAAoE;YACpE,oEAAoE;YACpE,mCAAmC;YACnC,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,kBAAkB,KAAK,gBAAgB;YAAE,SAAS;QAEtD,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE;YAC9B,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,aAAa,EAAE,GAAG;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,aAAa;YACb,kBAAkB,EAAE,CAAC,kBAAkB,IAAI,gBAAgB,CAAc;YACzE,cAAc,EAAE,gBAAgB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CACT;YACE,GAAG;YACH,kBAAkB;YAClB,cAAc,EAAE,gBAAgB;SACjC,EACD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/management-md.d.ts

@@ -25,23 +25,6 @@ import { type IntegrationsRecord } from "../db/integrations-store.js";
  * parser produce identical bytes on the next render (no churn).
  */
 export declare function getManagementMdPath(dataDir: string): string;
-export declare function getLegacyManagementMdPath(dataDir: string): string;
-export type LegacyManagementMdMigrationResult = {
-    migrated: true;
-    from: string;
-    to: string;
-} | {
-    migrated: false;
-    from: string;
-    to: string;
-    reason: "legacy_missing" | "target_exists";
-};
-/**
- * One-shot compatibility migration for installs that predate the
- * `integrations.md` rename. If both files exist, keep `integrations.md` as
- * authoritative and leave the legacy file untouched for manual inspection.
- */
-export declare function migrateLegacyManagementMd(dataDir: string): LegacyManagementMdMigrationResult;
 /**
  * SETUP-FLOW-REDESIGN-PLAN §6.2 — declarative "where do the user's notes
  * live" routing for the agent. The body is regenerated from the
@@ -57,6 +40,57 @@ export interface NoteSourcesInput {
     externalObsidianWatch: boolean;
 }
 export declare function renderNoteSourcesSection(integrations: IntegrationsRecord, notes: NoteSourcesInput): string;
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §7.3 — render the full per-session
+ * routing table that the per-backend instruction file (`CLAUDE.md` /
+ * `AGENTS.md` / `GEMINI.md`) and the hourly_check / DM task-flow files
+ * substitute in for the `<integration-routing-table>` placeholder.
+ *
+ * Always renders every registered integration, even when all rows are
+ * `direct`, so the agent's mental model converges on "read the routing
+ * table first, then dispatch." Disabled rows appear as `(disabled)` so
+ * the agent can answer "do I have Gmail?" honestly even when the audit
+ * surface is suppressed.
+ *
+ * Pure function — no I/O, no DB reads. Callers pass the integration
+ * snapshot they want rendered (typically from `readIntegrations(db)`).
+ */
+export declare function renderIntegrationRoutingTable(integrations: IntegrationsRecord): string;
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §6.5.2 — the actionable variant of
+ * the routing table. Identical rendering for `direct` / `delegated` /
+ * `native` rows; `disabled` rows are filtered out entirely so the
+ * task-flow's "for each integration" loop has zero iterations for them.
+ *
+ * This is what the hourly_check and DM task-flow files iterate over;
+ * the full {@link renderIntegrationRoutingTable} is for the instruction
+ * file's read-only audit summary.
+ */
+export declare function renderIntegrationRoutingTableActionable(integrations: IntegrationsRecord): string;
+/**
+ * INTEGRATION_NATIVE_MODE_DESIGN.md §7.3 / §6.5.2 — substitute the two
+ * angle-bracket placeholders documented in the design with their
+ * rendered tables. The placeholders are deliberately literal strings
+ * (not `{handlebars}` template tokens) so they survive the existing
+ * `resolveTemplate` pass in `prompt-utils.ts` (which only touches
+ * `{…}` braces) without escaping. Substitution is idempotent — running
+ * the helper twice on already-substituted text is a no-op because the
+ * placeholder strings have already been replaced.
+ *
+ * Callers:
+ *   - `prompts.getTaskFlow` substitutes after `applyIntegrationModeFilter`
+ *     so the rendered template carries the final per-session table
+ *     before `resolveTemplate` fills `{context}` and `{event_data[*]}`.
+ *   - `skills-compiler.materializeClaudeSession` /
+ *     `materializeCliSession` substitute inside the rendered profile
+ *     body before writing `CLAUDE.md` / `AGENTS.md` / `GEMINI.md`.
+ *
+ * Returns `content` unchanged when neither placeholder is present so
+ * call sites can apply this unconditionally without measuring impact.
+ */
+export declare const INTEGRATION_ROUTING_TABLE_PLACEHOLDER = "<integration-routing-table>";
+export declare const INTEGRATION_ROUTING_TABLE_ACTIONABLE_PLACEHOLDER = "<integration-routing-table-actionable>";
+export declare function substituteIntegrationRoutingTables(content: string, integrations: IntegrationsRecord | Partial<Record<IntegrationKey, IntegrationState>>): string;
 export declare function renderManagementMd(integrations: IntegrationsRecord, notes?: NoteSourcesInput): string;
 export interface ParsedCurrentStateRow {
     key: string;

package/dist/core/management-md.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"management-md.d.ts","sourceRoot":"","sources":["../../src/core/management-md.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,cAAc,EAEnB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,6BAA6B,CAAC;AASrC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC5C;IACE,QAAQ,EAAE,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,GAAG,eAAe,CAAC;CAC5C,CAAC;AAEN;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,GACd,iCAAiC,CAqBnC;AA6ED;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,kBAAkB,EAChC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAqBR;AAqED,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,kBAAkB,EAChC,KAAK,GAAE,gBAGN,GACA,MAAM,CAYR;AAID,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChE,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAiD3D;AAqGD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,kBAAkB,EAChC,KAAK,CAAC,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAS7B;AAID,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,YAAY,EAAE,kBAAkB,CAAC;IACjC,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,YAAY,CAAC,EAAE,MAAM,EACrB,KAAK,CAAC,EAAE,gBAAgB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CA+DjC;AAyBD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,cAAc,CAAC;IACpB,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,MAAM,GACnB;IAAE,QAAQ,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,gBAAgB,EAAE,CAAA;CAAE,CA+BlE;AA2BD,MAAM,WAAW,yBAAyB;IACxC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACtC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,gBAAgB,CAAC;CACzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA6F3B"}
+{"version":3,"file":"management-md.d.ts","sourceRoot":"","sources":["../../src/core/management-md.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAML,KAAK,SAAS,EACd,KAAK,cAAc,EAEnB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,6BAA6B,CAAC;AAQrC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAmFD;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,kBAAkB,EAChC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAqBR;AAuED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,kBAAkB,GAC/B,MAAM,CAYR;AAED;;;;;;;;;GASG;AACH,wBAAgB,uCAAuC,CACrD,YAAY,EAAE,kBAAkB,GAC/B,MAAM,CAoBR;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,qCAAqC,gCAAgC,CAAC;AACnF,eAAO,MAAM,gDAAgD,2CACnB,CAAC;AAE3C,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,EACf,YAAY,EACR,kBAAkB,GAClB,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,GACpD,MAAM,CA4BR;AAsED,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,kBAAkB,EAChC,KAAK,GAAE,gBAGN,GACA,MAAM,CAYR;AAID,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,yEAAyE;IACzE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChE,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gFAAgF;IAChF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAmE3D;AAqGD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,kBAAkB,EAChC,KAAK,CAAC,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAS7B;AAID,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,YAAY,EAAE,kBAAkB,CAAC;IACjC,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,YAAY,CAAC,EAAE,MAAM,EACrB,KAAK,CAAC,EAAE,gBAAgB,GACvB,OAAO,CAAC,sBAAsB,CAAC,CA4DjC;AAyBD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,cAAc,CAAC;IACpB,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,MAAM,GACnB;IAAE,QAAQ,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,gBAAgB,EAAE,CAAA;CAAE,CA2ClE;AAuCD,MAAM,WAAW,yBAAyB;IACxC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACtC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,gBAAgB,CAAC;CACzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA6F3B"}