@aitne/daemon 0.1.7 → 0.1.8

package/dist/api/routes/integrations/index.js

@@ -0,0 +1,70 @@
+import { Hono } from "hono";
+import { registerCrudRoutes } from "./crud.js";
+import { registerExecRoutes } from "./exec.js";
+import { registerProbeRoutes } from "./probe.js";
+/**
+ * Integration Delegation Framework — `/api/integrations` routes.
+ *
+ * Surface:
+ *   - `GET /api/integrations` — list every registered integration with its
+ *     descriptor metadata and current state.
+ *   - `GET /api/integrations/:key/recent-proxy-calls` — last N delegated
+ *     proxy invocations for the dashboard's IntegrationCard.
+ *   - `GET /api/integrations/proxy-models/:backend` — registered + pinned
+ *     proxy-model options for the dashboard's model dropdown.
+ *   - `PATCH /api/integrations/:key` — change a single integration's mode.
+ *     Runs the full lifecycle: validate → flip-lock acquire → §14.7 probe →
+ *     DB update → `integrations.md` re-render → running-session
+ *     re-materialisation → audit row → flip-lock release.
+ *   - `POST /api/integrations/:key/exec` — cross-backend delegated proxy
+ *     (DELEGATED-MODE-V2-DESIGN.md §11 / `docs/design/14-integration-delegation.md` §14.4.5).
+ *   - `POST /api/integrations/:key/probe` — descriptor + cached + live
+ *     probe paths (`docs/design/14-integration-delegation.md` §14.7).
+ *
+ * The historical `POST /api/integrations/:key/invoke` RPC chokepoint was
+ * retired 2026-05-01 as part of the /exec-only migration. The dormant
+ * stub file `invoke.ts` was removed in the api-route-decomposition.md
+ * PR-5 follow-up (commented-out handler body lives in git history; the
+ * `runDelegatedTool()` internals it relied on remain wired through
+ * `delegated-sync-worker` for hourly drift detection). Future
+ * reactivation should land back at the same `RiskTier.Autonomous`
+ * classification preserved in `risk-classifier.ts`.
+ *
+ * Observer gating, the route-410 middleware (`integration-route-gate.ts`),
+ * skill / task-flow variant selection, and the connector probe are all
+ * production paths.
+ *
+ * Mode model. `IntegrationMode = "direct" | "delegated" | "native" | "disabled"`.
+ *   - `direct` — daemon poller + `/api/<integration>/*` daemon routes.
+ *   - `delegated` — `delegated-sync-worker` cadences + `/exec` proxy.
+ *   - `native` — main backend reaches the integration via its own native
+ *     MCP / connector; daemon does no polling. Per-tick data acquisition
+ *     for routines (morning / evening / hourly / weekly / monthly) runs in a
+ *     separate pre-pass session on the `routine.fetch_window` ProcessKey
+ *     and POSTs observations to `/api/observations`. See
+ *     [`docs/design/appendices/routine-data-acquisition.md`](../../../../../docs/design/appendices/routine-data-acquisition.md)
+ *     for the per-routine × per-integration acquisition contract.
+ *   - `disabled` — silence. Routes 410 with `X-Integration-Mode: disabled`.
+ *
+ * User-managed connectors (`descriptor.userManagedConnector === true`,
+ * today `outlook_mail` / `outlook_calendar`) skip the descriptor-driven
+ * variant gates: there is no daemon-shipped `SKILL.<mode>.<backend>.md`
+ * for them, and routine-side acquisition flows through the per-integration
+ * partial (RDAD §6.8) rather than a variant fan-out.
+ *
+ * Risk tier: Approve (dashboard-only mutation, registered in
+ * `risk-classifier.ts`).
+ *
+ * Registration order matches the original handler declaration order so
+ * Hono route-match precedence is byte-identical to the pre-split file
+ * (file-split-plan R2). Verify with
+ * `app.routes.map(r => r.path)` before/after when in doubt.
+ */
+export function createIntegrationRoutes(deps) {
+    const app = new Hono();
+    registerCrudRoutes(app, deps);
+    registerExecRoutes(app, deps);
+    registerProbeRoutes(app, deps);
+    return app;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/routes/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/routes/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAqB;IAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/integrations/integrations/crud.d.ts

@@ -0,0 +1,16 @@
+import type { Hono } from "hono";
+import type { ApiDependencies } from "../../server.js";
+/**
+ * Register the integration CRUD routes:
+ *   - `GET    /integrations`
+ *   - `GET    /integrations/:key/recent-proxy-calls`
+ *   - `GET    /integrations/proxy-models/:backend`
+ *   - `PATCH  /integrations/:key`
+ *
+ * PATCH body lives in `./crud-patch.ts:handleIntegrationPatch` because the
+ * full lifecycle (validate / flip-lock / probe-cache / re-materialise /
+ * audit) is ~700 lines and would push this file past the ~800-line soft
+ * ceiling.
+ */
+export declare function registerCrudRoutes(app: Hono, deps: ApiDependencies): void;
+//# sourceMappingURL=crud.d.ts.map

package/dist/api/routes/integrations/integrations/crud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/crud.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAcjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAuJzE"}

package/dist/api/routes/integrations/integrations/crud.js

@@ -0,0 +1,158 @@
+import { BACKEND_IDS, INTEGRATION_DESCRIPTORS, INTEGRATION_KEYS, isIntegrationKey, } from "@aitne/shared";
+import { readIntegrations } from "../../../db/integrations-store.js";
+import { listProxyModelOptions, resolveCanonicalDelegatedModel, } from "../../../core/backends/proxy-model-registry.js";
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { handleIntegrationPatch } from "./crud-patch.js";
+/**
+ * Register the integration CRUD routes:
+ *   - `GET    /integrations`
+ *   - `GET    /integrations/:key/recent-proxy-calls`
+ *   - `GET    /integrations/proxy-models/:backend`
+ *   - `PATCH  /integrations/:key`
+ *
+ * PATCH body lives in `./crud-patch.ts:handleIntegrationPatch` because the
+ * full lifecycle (validate / flip-lock / probe-cache / re-materialise /
+ * audit) is ~700 lines and would push this file past the ~800-line soft
+ * ceiling.
+ */
+export function registerCrudRoutes(app, deps) {
+    const { db } = deps;
+    app.get("/integrations", (c) => {
+        const state = readIntegrations(db);
+        const integrations = INTEGRATION_KEYS.map((key) => {
+            const descriptor = INTEGRATION_DESCRIPTORS[key];
+            return {
+                key: descriptor.key,
+                displayName: descriptor.displayName,
+                supportedModes: descriptor.supportedModes,
+                directSetup: descriptor.directSetup ?? null,
+                backendConnectors: descriptor.backendConnectors,
+                skillsTouched: descriptor.skillsTouched,
+                taskFlowsTouched: descriptor.taskFlowsTouched,
+                observersTouched: descriptor.observersTouched,
+                apiRoutesTouched: descriptor.apiRoutesTouched,
+                userManagedConnector: descriptor.userManagedConnector ?? false,
+                state: state[key],
+            };
+        });
+        return c.json({ integrations });
+    });
+    // DELEGATED-PROXY-API-DESIGN.md §7 — last N delegated-proxy invocations for
+    // an integration. Drives the IntegrationCard's "Recent calls" collapsible
+    // table so the user can spot slow / failing connectors without leaving the
+    // /connections page. Daemon-side filter (rather than dashboard reading the
+    // generic cost table and post-filtering) because:
+    //   - integrationKey lives inside `detail` JSON; SQLite-side JSON1 extract
+    //     keeps the response payload small and skips the parent-event noise.
+    //   - cost.ts dashboards already aggregate; a per-integration debug view
+    //     belongs alongside the integration's other state for cohesion.
+    //
+    // Limit defaults to 50 (the design's stated cap), bounded at 200 so a
+    // typo-driven `?limit=99999` cannot DoS the response.
+    app.get("/integrations/:key/recent-proxy-calls", (c) => {
+        const key = c.req.param("key");
+        if (!isIntegrationKey(key)) {
+            return respondWithAgentError(c, 404, [
+                composeIssue("integrations.unknown_integration", {
+                    field: "key",
+                    received: key,
+                }),
+            ], { legacyFields: { key } });
+        }
+        const rawLimit = c.req.query("limit");
+        let limit = 50;
+        if (rawLimit !== undefined) {
+            const parsed = Number.parseInt(rawLimit, 10);
+            if (!Number.isFinite(parsed) || parsed < 1) {
+                return respondWithAgentError(c, 400, [
+                    composeIssue("integrations.invalid_limit", {
+                        field: "limit",
+                        received: rawLimit,
+                    }),
+                ], {
+                    legacyFields: {
+                        message: "limit must be a positive integer (default 50, max 200)",
+                    },
+                });
+            }
+            limit = Math.min(parsed, 200);
+        }
+        const rows = db
+            .prepare(`SELECT id, started_at, completed_at, model_used, backend,
+                cost_usd, tokens_input, tokens_output, duration_ms,
+                num_turns, result, error, detail
+           FROM agent_actions
+          WHERE action_type = 'delegated_proxy.invoke'
+            AND json_extract(detail, '$.integrationKey') = ?
+          ORDER BY id DESC
+          LIMIT ?`)
+            .all(key, limit);
+        const calls = rows.map((row) => {
+            /* c8 ignore next -- sql WHERE json_extract filters out rows with null detail */
+            const detail = row.detail ? safeParseJson(row.detail) : null;
+            return {
+                id: row.id,
+                startedAt: row.started_at,
+                completedAt: row.completed_at,
+                modelId: row.model_used,
+                backend: row.backend,
+                costUsd: row.cost_usd,
+                tokensInput: row.tokens_input,
+                tokensOutput: row.tokens_output,
+                durationMs: row.duration_ms,
+                numTurns: row.num_turns,
+                result: row.result,
+                // detail.errorClass is the structured DelegatedErrorClass when the
+                // call failed inside the proxy pipeline (auth_error, no_tool_call,
+                // etc.). detail.toolName is always present. We surface both so the
+                // table can render a human label without re-parsing on the client.
+                errorClass: detail?.errorClass ?? null,
+                toolName: detail?.toolName ?? null,
+                errorMessage: row.error,
+            };
+        });
+        return c.json({
+            key,
+            limit,
+            calls,
+        });
+    });
+    // DELEGATED-PROXY-API-DESIGN.md §6.1 / §7 — list known proxy-model options
+    // for a backend (registered + custom-pinned). Drives the dashboard model
+    // dropdown so the daemon stays the source of truth for the registered
+    // model surface; clients don't need to keep their own registry mirror.
+    app.get("/integrations/proxy-models/:backend", (c) => {
+        const backend = c.req.param("backend");
+        if (!BACKEND_IDS.includes(backend)) {
+            return c.json({
+                error: "invalid_backend",
+                message: `Unknown backend '${backend}'.`,
+                supportedBackends: BACKEND_IDS,
+            }, 400);
+        }
+        const backendId = backend;
+        const options = listProxyModelOptions(backendId);
+        const canonical = resolveCanonicalDelegatedModel(backendId, db);
+        return c.json({
+            backend: backendId,
+            canonical,
+            options,
+        });
+    });
+    app.patch("/integrations/:key", (c) => handleIntegrationPatch(c, deps));
+}
+function safeParseJson(s) {
+    try {
+        const parsed = JSON.parse(s);
+        /* c8 ignore next -- sql WHERE guarantees only object-typed detail rows reach here */
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            return null;
+        return parsed;
+        /* c8 ignore start -- sql WHERE json_extract would reject malformed JSON rows */
+    }
+    catch {
+        return null;
+    }
+    /* c8 ignore stop */
+}
+//# sourceMappingURL=crud.js.map

package/dist/api/routes/integrations/integrations/crud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.js","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/crud.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EACL,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAqB;IACjE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO;gBACL,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;gBAC3C,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,oBAAoB,EAAE,UAAU,CAAC,oBAAoB,IAAI,KAAK;gBAC9D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,kDAAkD;IAClD,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,EAAE;IACF,sEAAsE;IACtE,sDAAsD;IACtD,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,kCAAkC,EAAE;oBAC/C,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,GAAG;iBACd,CAAC;aACH,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;oBACnC,YAAY,CAAC,4BAA4B,EAAE;wBACzC,KAAK,EAAE,OAAO;wBACd,QAAQ,EAAE,QAAQ;qBACnB,CAAC;iBACH,EAAE;oBACD,YAAY,EAAE;wBACZ,OAAO,EAAE,wDAAwD;qBAClE;iBACF,CAAC,CAAC;YACL,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN;;;;;;;kBAOU,CACX;aACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAcb,CAAC;QAEL,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7B,gFAAgF;YAChF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,OAAO,EAAE,GAAG,CAAC,UAAU;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;gBAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;gBACtC,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;gBAClC,YAAY,EAAE,GAAG,CAAC,KAAK;aACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,GAAG;YACH,KAAK;YACL,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAAC,qCAAqC,EAAE,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,oBAAoB,OAAO,IAAI;gBACxC,iBAAiB,EAAE,WAAW;aAC/B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAoB,CAAC;QACvC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,8BAA8B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,SAAS;YAClB,SAAS;YACT,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;QACxC,qFAAqF;QACrF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,MAAiC,CAAC;QAC3C,gFAAgF;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oBAAoB;AACtB,CAAC"}

package/dist/api/routes/integrations/integrations/index.d.ts

@@ -0,0 +1,55 @@
+import { Hono } from "hono";
+import type { ApiDependencies } from "../../server.js";
+/**
+ * Integration Delegation Framework — `/api/integrations` routes.
+ *
+ * Surface:
+ *   - `GET /api/integrations` — list every registered integration with its
+ *     descriptor metadata and current state.
+ *   - `GET /api/integrations/:key/recent-proxy-calls` — last N delegated
+ *     proxy invocations for the dashboard's IntegrationCard.
+ *   - `GET /api/integrations/proxy-models/:backend` — registered + pinned
+ *     proxy-model options for the dashboard's model dropdown.
+ *   - `PATCH /api/integrations/:key` — change a single integration's mode.
+ *     Runs the full lifecycle: validate → flip-lock acquire → §14.7 probe →
+ *     DB update → `integrations.md` re-render → running-session
+ *     re-materialisation → audit row → flip-lock release.
+ *   - `POST /api/integrations/:key/exec` — cross-backend delegated proxy
+ *     (DELEGATED-MODE-V2-DESIGN.md §11 / `docs/design/14-integration-delegation.md` §14.4.5).
+ *   - `POST /api/integrations/:key/probe` — descriptor + cached + live
+ *     probe paths (`docs/design/14-integration-delegation.md` §14.7).
+ *   - `POST /api/integrations/:key/invoke` — RESERVED. Commented out
+ *     2026-05-01 as part of the /exec-only migration; see `invoke.ts`.
+ *
+ * Observer gating, the route-410 middleware (`integration-route-gate.ts`),
+ * skill / task-flow variant selection, and the connector probe are all
+ * production paths.
+ *
+ * Mode model. `IntegrationMode = "direct" | "delegated" | "native" | "disabled"`.
+ *   - `direct` — daemon poller + `/api/<integration>/*` daemon routes.
+ *   - `delegated` — `delegated-sync-worker` cadences + `/exec` proxy.
+ *   - `native` — main backend reaches the integration via its own native
+ *     MCP / connector; daemon does no polling. Per-tick data acquisition
+ *     for routines (morning / evening / hourly / weekly / monthly) runs in a
+ *     separate pre-pass session on the `routine.fetch_window` ProcessKey
+ *     and POSTs observations to `/api/observations`. See
+ *     [`ROUTINE_DATA_ACQUISITION_DESIGN.md`](../../../../../ROUTINE_DATA_ACQUISITION_DESIGN.md)
+ *     for the per-routine × per-integration acquisition contract.
+ *   - `disabled` — silence. Routes 410 with `X-Integration-Mode: disabled`.
+ *
+ * User-managed connectors (`descriptor.userManagedConnector === true`,
+ * today `outlook_mail` / `outlook_calendar`) skip the descriptor-driven
+ * variant gates: there is no daemon-shipped `SKILL.<mode>.<backend>.md`
+ * for them, and routine-side acquisition flows through the per-integration
+ * partial (RDAD §6.8) rather than a variant fan-out.
+ *
+ * Risk tier: Approve (dashboard-only mutation, registered in
+ * `risk-classifier.ts`).
+ *
+ * Registration order matches the original handler declaration order so
+ * Hono route-match precedence is byte-identical to the pre-split file
+ * (file-split-plan R2). Verify with
+ * `app.routes.map(r => r.path)` before/after when in doubt.
+ */
+export declare function createIntegrationRoutes(deps: ApiDependencies): Hono;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/routes/integrations/integrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAOnE"}

package/dist/api/routes/integrations/integrations/index.js

@@ -0,0 +1,65 @@
+import { Hono } from "hono";
+import { registerCrudRoutes } from "./crud.js";
+import { registerExecRoutes } from "./exec.js";
+import { registerInvokeRoutes } from "./invoke.js";
+import { registerProbeRoutes } from "./probe.js";
+/**
+ * Integration Delegation Framework — `/api/integrations` routes.
+ *
+ * Surface:
+ *   - `GET /api/integrations` — list every registered integration with its
+ *     descriptor metadata and current state.
+ *   - `GET /api/integrations/:key/recent-proxy-calls` — last N delegated
+ *     proxy invocations for the dashboard's IntegrationCard.
+ *   - `GET /api/integrations/proxy-models/:backend` — registered + pinned
+ *     proxy-model options for the dashboard's model dropdown.
+ *   - `PATCH /api/integrations/:key` — change a single integration's mode.
+ *     Runs the full lifecycle: validate → flip-lock acquire → §14.7 probe →
+ *     DB update → `integrations.md` re-render → running-session
+ *     re-materialisation → audit row → flip-lock release.
+ *   - `POST /api/integrations/:key/exec` — cross-backend delegated proxy
+ *     (DELEGATED-MODE-V2-DESIGN.md §11 / `docs/design/14-integration-delegation.md` §14.4.5).
+ *   - `POST /api/integrations/:key/probe` — descriptor + cached + live
+ *     probe paths (`docs/design/14-integration-delegation.md` §14.7).
+ *   - `POST /api/integrations/:key/invoke` — RESERVED. Commented out
+ *     2026-05-01 as part of the /exec-only migration; see `invoke.ts`.
+ *
+ * Observer gating, the route-410 middleware (`integration-route-gate.ts`),
+ * skill / task-flow variant selection, and the connector probe are all
+ * production paths.
+ *
+ * Mode model. `IntegrationMode = "direct" | "delegated" | "native" | "disabled"`.
+ *   - `direct` — daemon poller + `/api/<integration>/*` daemon routes.
+ *   - `delegated` — `delegated-sync-worker` cadences + `/exec` proxy.
+ *   - `native` — main backend reaches the integration via its own native
+ *     MCP / connector; daemon does no polling. Per-tick data acquisition
+ *     for routines (morning / evening / hourly / weekly / monthly) runs in a
+ *     separate pre-pass session on the `routine.fetch_window` ProcessKey
+ *     and POSTs observations to `/api/observations`. See
+ *     [`ROUTINE_DATA_ACQUISITION_DESIGN.md`](../../../../../ROUTINE_DATA_ACQUISITION_DESIGN.md)
+ *     for the per-routine × per-integration acquisition contract.
+ *   - `disabled` — silence. Routes 410 with `X-Integration-Mode: disabled`.
+ *
+ * User-managed connectors (`descriptor.userManagedConnector === true`,
+ * today `outlook_mail` / `outlook_calendar`) skip the descriptor-driven
+ * variant gates: there is no daemon-shipped `SKILL.<mode>.<backend>.md`
+ * for them, and routine-side acquisition flows through the per-integration
+ * partial (RDAD §6.8) rather than a variant fan-out.
+ *
+ * Risk tier: Approve (dashboard-only mutation, registered in
+ * `risk-classifier.ts`).
+ *
+ * Registration order matches the original handler declaration order so
+ * Hono route-match precedence is byte-identical to the pre-split file
+ * (file-split-plan R2). Verify with
+ * `app.routes.map(r => r.path)` before/after when in doubt.
+ */
+export function createIntegrationRoutes(deps) {
+    const app = new Hono();
+    registerCrudRoutes(app, deps);
+    registerInvokeRoutes(app, deps);
+    registerExecRoutes(app, deps);
+    registerProbeRoutes(app, deps);
+    return app;
+}
+//# sourceMappingURL=index.js.map

package/dist/api/routes/integrations/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAqB;IAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/integrations/integrations/invoke.d.ts

@@ -0,0 +1,38 @@
+import type { Hono } from "hono";
+import type { ApiDependencies } from "../../server.js";
+/**
+ * `POST /api/integrations/:key/invoke` — RESERVED reactivation slot.
+ *
+ * The handler and the supporting `resolveCanonicalBareTool` helper were
+ * commented out 2026-05-01 as part of the /exec-only migration. They are
+ * preserved verbatim below for future reactivation. Today this register
+ * function is a no-op so the route does not exist; `/exec` (see
+ * `./exec.ts`) is the canonical surface.
+ *
+ * Why this file exists despite registering nothing:
+ *   - Keeping the reservation block in its own file gives future
+ *     reactivation a clear, self-contained home — uncomment the block,
+ *     re-import the helpers it needs (`matchToolPattern`,
+ *     `mapErrorClassToHttpStatus`, `IntegrationBackendConnector`,
+ *     `INTEGRATION_DESCRIPTORS`, `readIntegrations`,
+ *     `markIntegrationWrite`, `extractWriteItemIds`, `composeIssue`,
+ *     `respondWithAgentError`, `createLogger`, `readJsonBody`), and
+ *     register the route inside this function.
+ *   - Co-locating with the rest of the integrations routes keeps the
+ *     directory inventory complete (every entry in the file inventory
+ *     section of `docs/design/appendices/api-route-decomposition.md`
+ *     §5.4 maps to a real file).
+ *
+ * The internal `DelegatedBackendInvoker.invoke()` API and each core's
+ * `runDelegatedTool()` remain wired (used by `delegated-sync-worker`
+ * for hourly drift detection — see
+ * `packages/daemon/src/observers/delegated-sync-worker.ts:504`).
+ *
+ * DO NOT DELETE the comment block — possible reactivation scenarios:
+ *   1. A low-latency RPC fast path for cost-sensitive callers.
+ *   2. A debug/admin endpoint for direct tool dispatch.
+ *   3. A per-integration opt-in once full cross-backend alias
+ *      translation is in place.
+ */
+export declare function registerInvokeRoutes(_app: Hono, _deps: ApiDependencies): void;
+//# sourceMappingURL=invoke.d.ts.map

package/dist/api/routes/integrations/integrations/invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/invoke.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,eAAe,GACrB,IAAI,CAIN"}