@aitne/daemon 0.1.7 → 0.1.9

package/dist/api/routes/wiki.js

@@ -3,8 +3,9 @@ import { existsSync, mkdirSync, readdirSync, readFileSync, statSync } from "node
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { wikiBridgeProposalSchema, wikiFilePatchSchema, wikiFilePostSchema, wikiImportDecisionSchema, wikiWorkspaceCreateSchema, wikiWorkspacePatchSchema, wikiWorkspaceProbeSchema, } from "@aitne/shared";
 import { readJsonBody } from "../json-body.js";
+import { composeIssue, respondWithAgentError } from "../helpers/agent-errors.js";
 import { writeFileAtomically } from "../../core/atomic-write.js";
-import { buildWikiWorkspaceStats, createExternalWikiWorkspace, ensureDefaultWikiWorkspace, listWikiWorkspaces, readWikiWorkspaceByName, validateWikiRootPath, } from "../../core/wiki/workspaces.js";
+import { buildWikiWorkspaceStats, createExternalWikiWorkspace, defaultWikiRoot, ensureDefaultWikiWorkspace, listWikiWorkspaces, readWikiWorkspaceByName, validateWikiRootPath, } from "../../core/wiki/workspaces.js";
 import { probeExistingWikiVault } from "../../core/wiki/import-probe.js";
 import { applyImportMigration, planImportMigration, } from "../../core/wiki/import-migrate.js";
 import { estimateFullCompileCost } from "../../core/wiki/cost-estimate.js";
@@ -51,7 +52,7 @@ export function createWikiRoutes(deps) {
     app.get("/wiki/workspaces", (c) => {
         return c.json({
             defaultWorkspace: "default",
-            defaultInternalRoot: join(deps.config.dataDir, "wiki"),
+            defaultInternalRoot: defaultWikiRoot(deps.config),
             workspaces: listWikiWorkspaces(deps.db).map((row) => serializeWorkspace(row, deps.db)),
         });
     });
@@ -133,7 +134,12 @@ export function createWikiRoutes(deps) {
         const workspaceName = c.req.param("workspace");
         const workspace = readWikiWorkspaceByName(deps.db, workspaceName);
         if (!workspace) {
-            return c.json({ error: "not_found", message: "Wiki workspace not found" }, 404);
+            return respondWithAgentError(c, 404, [
+                composeIssue("wiki.workspace_not_found", {
+                    field: "workspace",
+                    received: workspaceName,
+                }),
+            ], { legacyFields: { message: "Wiki workspace not found" } });
         }
         const parsedBody = await readJsonBody(c, { maxBytes: 16 * 1024 });
         if (!parsedBody.ok)
@@ -171,7 +177,12 @@ export function createWikiRoutes(deps) {
         const workspaceName = c.req.param("workspace");
         const workspace = readWikiWorkspaceByName(deps.db, workspaceName);
         if (!workspace) {
-            return c.json({ error: "not_found", message: "Wiki workspace not found" }, 404);
+            return respondWithAgentError(c, 404, [
+                composeIssue("wiki.workspace_not_found", {
+                    field: "workspace",
+                    received: workspaceName,
+                }),
+            ], { legacyFields: { message: "Wiki workspace not found" } });
         }
         deps.db
             .prepare(`UPDATE wiki_workspaces
@@ -190,7 +201,12 @@ export function createWikiRoutes(deps) {
         const workspaceName = c.req.param("workspace");
         const workspace = readWikiWorkspaceByName(deps.db, workspaceName);
         if (!workspace) {
-            return c.json({ error: "not_found", message: "Wiki workspace not found" }, 404);
+            return respondWithAgentError(c, 404, [
+                composeIssue("wiki.workspace_not_found", {
+                    field: "workspace",
+                    received: workspaceName,
+                }),
+            ], { legacyFields: { message: "Wiki workspace not found" } });
         }
         deleteWikiFulltextWorkspace(deps.db, workspace.id);
         deps.db.prepare(`DELETE FROM wiki_workspaces WHERE name = ?`).run(workspaceName);
@@ -591,11 +607,21 @@ export function createWikiRoutes(deps) {
         if (auth)
             return auth;
         if (!existsSync(resolved.fullPath)) {
-            return c.json({ error: "not_found", path: resolved.classified.relPath }, 404);
+            return respondWithAgentError(c, 404, [
+                composeIssue("wiki.file_not_found", {
+                    field: "path",
+                    received: resolved.classified.relPath,
+                }),
+            ], { legacyFields: { path: resolved.classified.relPath } });
         }
         const stat = statSync(resolved.fullPath);
         if (!stat.isFile()) {
-            return c.json({ error: "not_file", path: resolved.classified.relPath }, 400);
+            return respondWithAgentError(c, 400, [
+                composeIssue("wiki.not_file", {
+                    field: "path",
+                    received: resolved.classified.relPath,
+                }),
+            ], { legacyFields: { path: resolved.classified.relPath } });
         }
         return c.json({
             path: resolved.classified.relPath,
@@ -624,10 +650,20 @@ export function createWikiRoutes(deps) {
             return c.json({ error: "invalid_body", issues: parsed.error.issues }, 400);
         }
         if (resolved.classified.layer === "raw" && existsSync(resolved.fullPath)) {
-            return c.json({ error: "append_only", message: "10_raw files are create-only" }, 409);
+            return respondWithAgentError(c, 409, [
+                composeIssue("wiki.append_only_raw", {
+                    field: "path",
+                    received: resolved.classified.relPath,
+                }),
+            ], { legacyFields: { message: "10_raw files are create-only" } });
         }
         if (resolved.classified.layer === "log" && existsSync(resolved.fullPath)) {
-            return c.json({ error: "append_only", message: "Use PATCH to append log.md" }, 409);
+            return respondWithAgentError(c, 409, [
+                composeIssue("wiki.append_only_log", {
+                    field: "path",
+                    received: resolved.classified.relPath,
+                }),
+            ], { legacyFields: { message: "Use PATCH to append log.md" } });
         }
         snapshotIfNeeded(workspace.row, resolved.classified.relPath, resolved.fullPath);
         const normalizedPostBody = ensureTrailingNewline(parsed.data.content);
@@ -651,7 +687,12 @@ export function createWikiRoutes(deps) {
         if (auth)
             return auth;
         if (resolved.classified.layer === "raw") {
-            return c.json({ error: "append_only", message: "10_raw files cannot be patched" }, 409);
+            return respondWithAgentError(c, 409, [
+                composeIssue("wiki.raw_patch_forbidden", {
+                    field: "path",
+                    received: resolved.classified.relPath,
+                }),
+            ], { legacyFields: { message: "10_raw files cannot be patched" } });
         }
         const parsedBody = await readJsonBody(c, { maxBytes: WIKI_BODY_MAX_BYTES });
         if (!parsedBody.ok)
@@ -979,7 +1020,14 @@ function searchWikiFiles(rootPath, query, limit) {
         if (!file.path.endsWith(".md"))
             continue;
         const full = join(rootPath, file.path);
-        const content = readFileSync(full, "utf-8");
+        let content;
+        try {
+            content = readFileSync(full, "utf-8");
+        }
+        catch {
+            // Race / permissions — skip rather than 500ing the whole search.
+            continue;
+        }
         const lower = content.toLowerCase();
         const idx = query ? lower.indexOf(query) : 0;
         if (idx < 0)
@@ -998,11 +1046,14 @@ function searchWikiFiles(rootPath, query, limit) {
 function listWikiIndex(rootPath) {
     const out = [];
     for (const rel of walkFiles(rootPath)) {
-        if (rel.startsWith(".snapshots/"))
-            continue;
         const full = join(rootPath, rel);
-        const stat = statSync(full);
-        out.push({ path: rel, sizeBytes: stat.size, mtime: stat.mtime.toISOString() });
+        try {
+            const stat = statSync(full);
+            out.push({ path: rel, sizeBytes: stat.size, mtime: stat.mtime.toISOString() });
+        }
+        catch {
+            // Race: file vanished between readdir and stat. Skip rather than 500.
+        }
     }
     return out.sort((a, b) => a.path.localeCompare(b.path));
 }
@@ -1011,8 +1062,25 @@ function walkFiles(rootPath, relDir = "") {
     if (!existsSync(dir))
         return [];
     const out = [];
-    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    let entries;
+    try {
+        entries = readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        // Permission-denied / vanished mid-walk. Sibling helpers in
+        // `cost-estimate.ts` and `wiki-fts.ts:walkWikiTree` swallow the same
+        // condition; matching that behaviour keeps `/index` returning partial
+        // results instead of 500-ing on a single unreadable subdir.
+        return out;
+    }
+    for (const entry of entries) {
         const rel = relDir ? `${relDir}/${entry.name}` : entry.name;
+        // `.snapshots/` is the internal-mode backup tree (§14 Q3) and must
+        // never appear in `/index` or `/search` — its entries duplicate the
+        // live wiki and would explode walk cost on long-lived workspaces.
+        // Skip at walk time so the recursion doesn't pay for them.
+        if (rel === ".snapshots" || rel.startsWith(".snapshots/"))
+            continue;
         if (entry.isDirectory()) {
             out.push(...walkFiles(rootPath, rel));
         }
@@ -1072,4 +1140,3 @@ function isWikiFtsLayer(value) {
         value === "log" ||
         value === "inbox");
 }
-//# sourceMappingURL=wiki.js.map

package/dist/api/server.d.ts

@@ -14,6 +14,7 @@ import type { DashboardAdapter } from "../adapters/dashboard-adapter.js";
 import type { AgentWriteTracker } from "../safety/agent-write-tracker.js";
 import type { ContextWriteGate, MigrationLock, TodayWriteLockManager } from "../core/today-write-lock.js";
 import type { RoadmapWriteLockManager } from "../core/roadmap-write-lock.js";
+import type { RoadmapMaintenanceResult } from "../core/roadmap-maintenance.js";
 import { type ManagementMdWriteLockManager } from "../core/management-md-write-lock.js";
 import type { ObserverManager } from "../observers/manager.js";
 import type { SecretBroker } from "../secrets/secret-broker.js";
@@ -47,7 +48,6 @@ export interface IntegrationStatuses {
     obsidian: IntegrationStatus;
     notion: IntegrationStatus;
     whatsapp: WhatsAppIntegrationStatus;
-    googleMaps: IntegrationStatus;
 }
 export interface MessagingHealthStatus {
     configured: boolean;
@@ -155,6 +155,36 @@ export interface ApiDependencies {
     onScheduleConfigChanged?: () => void;
     /** Called after git repository config changes so project-doc init rows can be queued. */
     onGitReposChanged?: () => void | Promise<void>;
+    /**
+     * Phase B-4 — DM-token-gated purchase workflow handler. Null when
+     * B-4 is not wired at startup (the default for any install that has
+     * not flipped the experimental flag on). The workflow runner refuses
+     * `variant: "purchase"` invocations with `purchase_b4_disabled` when
+     * absent; the dashboard / dispatcher inbound classifier are no-ops
+     * without it.
+     *
+     * MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §17 / §13 step 50.
+     */
+    purchaseHandler?: import("../services/browser-history/automation/purchase-handler.js").PurchaseHandler;
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §5 / §5.1 — browser-task sub-agent
+     * runner + shared slot state. Both wired together at boot in
+     * `index.ts`. Optional in tests; when absent the POST /api/browser-task
+     * route writes a synthetic terminal transition so the row doesn't
+     * hang in pending. Phase 1 runner is the `not_implemented` stub;
+     * Phase 2 lands the real Playwright + Claude SDK driver.
+     */
+    browserTaskRunner?: import("../services/browser-task/browser-task-runner.js").BrowserTaskRunner;
+    browserTaskSlotStateRef?: import("../services/browser-task/browser-task-runner.js").SlotStateRef;
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §5 / §14.11 — lite-final-confirm
+     * token handler. The runner calls into it from the final-confirm
+     * gate; the messaging adapter's `!~xxxxxxxx` inbound dispatcher
+     * routes via `jti`-prefix between this and `purchaseHandler`. Phase 1
+     * wires the handler but the runner stub does not exercise it; Phase 2
+     * lights up the gate.
+     */
+    finalConfirmHandler?: import("../services/browser-history/automation/final-confirm-handler.js").FinalConfirmHandler;
     /** Called when /setup/start arrives so the dispatcher can pause autonomous work. */
     onSetupStart?: (mode: "initial" | "update") => void;
     /** Called after setup/save-rules to clear the setup mode from the dispatcher */
@@ -170,7 +200,7 @@ export interface ApiDependencies {
      */
     onIndexableContextChange?: (path: string) => void;
     /**
-     * B-007 §5.8 — called after any write/delete under `routines/custom/`
+     * B-007 §5.8 — called after any write/delete under `policies/routines/custom/`
      * so the CustomRoutineScheduler re-enumerates and re-registers jobs.
      */
     onCustomRoutinesChanged?: () => void;
@@ -184,6 +214,14 @@ export interface ApiDependencies {
     onMailScopeChanged?: (reason: string) => void;
     /** Manual trigger for the polling-based hourly check */
     triggerHourlyCheck?: (source: string, options?: TriggerHourlyCheckOptions) => Promise<TriggerHourlyCheckResult>;
+    /**
+     * Evening-review slimdown §2.2 — synchronous manual fire of
+     * `runRoadmapMechanicalMaintenance` (substeps 2a / 2b / 2d). Used
+     * by `POST /api/agent/run-now/roadmap-maintenance` for operator
+     * debugging and the parallel-verification rollout phase. Returns
+     * the structured maintenance result so the CLI can surface counts.
+     */
+    triggerRoadmapMaintenance?: () => Promise<RoadmapMaintenanceResult>;
     /**
      * Emit a `routine.roadmap_refresh` event. Internal callers (post-morning,
      * google-auth-ready, schedule-insert hook) honor the 5-minute dedup guard.
@@ -210,9 +248,12 @@ export interface ApiDependencies {
     writeTracker?: AgentWriteTracker;
     /**
      * DELEGATED-MODE-V2-DESIGN.md §4.2 — backs the generic
-     * `POST /api/integrations/:key/invoke` endpoint. The legacy v1
-     * per-route mail/calendar proxy was removed in Phase 3.6; this
-     * invoker is now consumed exclusively by the invoke endpoint.
+     * `POST /api/integrations/:key/exec` task-mode endpoint and the
+     * delegated-sync-worker's hourly drift-detection invocations. The
+     * legacy v1 per-route mail/calendar proxy was removed in Phase 3.6,
+     * and the `/api/integrations/:key/invoke` RPC route that originally
+     * fronted this invoker was retired 2026-05-01; `/exec` is now the
+     * sole agent-facing surface.
      */
     delegatedInvoker?: DelegatedBackendInvoker;
     morningRoutineLock?: TodayWriteLockManager;
@@ -323,6 +364,15 @@ export interface ApiDependencies {
      * lazily builds a stand-in only when this is unset.
      */
     gitAccountRegistry?: import("../services/git-account-registry.js").GitAccountRegistry;
+    /**
+     * Agent Definitions enabled-cache (AGENT_DEFINITIONS_DESIGN.md §6.4 / §9.5).
+     * The same {@link AgentEnabledCache} instance the loader builds at boot and
+     * the scheduler's per-built-in cron gate consults. `PATCH /api/agents/:slug`
+     * and `DELETE /api/agents/:slug` call `.invalidate()` after an `enabled`
+     * change so the next cron firing re-reads the new state without a restart.
+     * Optional so test harnesses / headless installs can omit it.
+     */
+    agentEnabledCache?: import("../core/agents/loader.js").AgentEnabledCache;
 }
 export interface TelegramBotInfoResponse {
     ok: true;
@@ -438,4 +488,3 @@ export interface WhatsAppControls {
 }
 export declare function createApp(deps: ApiDependencies): Hono;
 export {};
-//# sourceMappingURL=server.d.ts.map

package/dist/api/server.js

@@ -1,16 +1,17 @@
 import { Hono } from "hono";
 import { cors } from "hono/cors";
 import { logger as honoLogger } from "hono/logger";
-import { createHash, timingSafeEqual } from "node:crypto";
+import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { readRuntimeState, writeRuntimeState, } from "../db/runtime-state.js";
 /** Persistence key for the boot-audit fingerprint (`auditRiskClassifications`). */
 const RISK_AUDIT_STATE_KEY = "risk_audit_unclassified_fingerprint";
 import { getContextDir } from "../config.js";
 import { auditRiskClassifications, classifyRisk, findExplicitRiskClassification, RiskTier, } from "../safety/risk-classifier.js";
 import { createHealthRoutes } from "./routes/health.js";
-import { createContextRoutes } from "./routes/context.js";
+import { createContextRoutes } from "./routes/context/index.js";
 import { createAgentRoutes } from "./routes/agent.js";
-import { createDashboardRoutes } from "./routes/dashboard.js";
+import { createAgentDefinitionRoutes } from "./routes/agents/index.js";
+import { createDashboardRoutes } from "./routes/dashboard/index.js";
 import { createNotionRoutes } from "./routes/notion.js";
 import { createGitHubRoutes } from "./routes/github.js";
 import { createCalendarRoutes } from "./routes/calendar.js";
@@ -20,7 +21,7 @@ import { createObsidianRoutes } from "./routes/obsidian.js";
 import { createGitRoutes } from "./routes/git.js";
 import { createGitTemplatesRoutes } from "./routes/git-templates.js";
 import { createRepositoriesRoutes } from "./routes/repositories.js";
-import { createMailRoutes } from "./routes/mail.js";
+import { createMailRoutes } from "./routes/mail/index.js";
 import { createSSERoutes } from "./routes/sse.js";
 import { createSetupRoutes } from "./routes/setup.js";
 import { createSetupMigrateRoutes } from "./routes/setup-migrate.js";
@@ -32,14 +33,14 @@ import { createObservationRoutes } from "./routes/observations.js";
 import { createSkillCurationRoutes } from "./routes/skill-curation.js";
 import { createProfileQuestionsRoutes } from "./routes/profile-questions.js";
 import { createRecurringScheduleRoutes } from "./routes/recurring-schedules.js";
+import { createScheduleOptionsRoutes } from "./routes/schedule-options.js";
 import { createTriggerRoutes } from "./routes/triggers.js";
 import { createTravelBookingRoutes } from "./routes/travel-bookings.js";
 import { createReceiptRoutes } from "./routes/receipts.js";
-import { createTravelTimeRoutes } from "./routes/travel-time.js";
 import { createBookRoutes } from "./routes/books.js";
 import { createDelegatedRunRoutes } from "./routes/delegated.js";
 import { createDelegatedSyncRoutes } from "./routes/delegated-sync.js";
-import { createIntegrationRoutes } from "./routes/integrations.js";
+import { createIntegrationRoutes } from "./routes/integrations/index.js";
 import { createIntegrationReconcileRoutes } from "./routes/integrations-reconcile.js";
 import { createKnowledgeRoutes } from "./routes/knowledge.js";
 import { createTaskFlowsRoutes } from "./routes/task-flows.js";
@@ -48,6 +49,11 @@ import { createCommandsRoutes } from "./routes/commands.js";
 import { createVoiceRoutes } from "./routes/voice.js";
 import { createWikiRoutes } from "./routes/wiki.js";
 import { createFsRoutes } from "./routes/fs.js";
+import { createBrowserHistoryRoutes } from "./routes/browser-history.js";
+import { createBrowserHistoryManagedRoutes } from "./routes/browser-history-managed.js";
+import { createBrowserAutomationSitesRoutes } from "./routes/browser-automation-sites.js";
+import { createBrowserAutomationPurchaseRoutes } from "./routes/browser-automation-purchase.js";
+import { createBrowserTaskRoutes } from "./routes/browser-task.js";
 import { buildManagedTasksRoutesDepsFromApi, createManagedTasksRoutes, } from "./routes/managed-tasks.js";
 import { buildSotBindingsRoutesDepsFromApi, createSotBindingsRoutes, } from "./routes/sot-bindings.js";
 import { buildEntitiesRoutesDepsFromApi, createEntitiesRoutes, } from "./routes/entities.js";
@@ -56,6 +62,8 @@ import { createIntegrationRouteGate } from "./integration-route-gate.js";
 import { createMcpRoutes } from "./routes/mcp.js";
 import { createAttachmentRoutes } from "./routes/attachments.js";
 import { InMemoryManagementMdWriteLockManager, } from "../core/management-md-write-lock.js";
+import { isRuntimeAvailableBackendId } from "@aitne/shared";
+import { loopbackOrigins, resolveDashboardPort } from "@aitne/shared";
 import { queryChatBinding } from "./chat-binding-query.js";
 import { DEFAULT_CLAUDE_HIGH_MODEL, getModelsForBackend, } from "../core/backends/model-registry.js";
 import { createLogger } from "../logging.js";
@@ -105,11 +113,7 @@ function getRequestHostname(c) {
     /* c8 ignore stop */
 }
 function buildAllowedDaemonOrigins(apiPort) {
-    return new Set([
-        `http://localhost:${apiPort}`,
-        `http://127.0.0.1:${apiPort}`,
-        `http://[::1]:${apiPort}`,
-    ]);
+    return new Set(loopbackOrigins(apiPort));
 }
 function evaluateLoopbackBrowserGate(input) {
     if (SAFE_METHODS.has(input.method)) {
@@ -188,7 +192,12 @@ export function createApp(deps) {
         }
         await next();
     });
-    app.use("*", cors({ origin: "http://localhost:3000" }));
+    // CORS for direct browser → daemon requests. The dashboard normally proxies
+    // server-side (no CORS), but this keeps the daemon reachable from the
+    // dashboard's own loopback origin on whatever port it runs (PA_DASHBOARD_PORT
+    // default = DEFAULT_DASHBOARD_PORT). Previously hardcoded to localhost:3000,
+    // which silently broke whenever the dashboard ran on any other port.
+    app.use("*", cors({ origin: loopbackOrigins(resolveDashboardPort()) }));
     app.use("*", honoLogger());
     // Risk-based auth middleware — Approve-tier endpoints require Bearer token;
     // ReadSensitive-tier endpoints require Bearer or X-Read-Token when
@@ -268,15 +277,25 @@ export function createApp(deps) {
     // is path-prefix only; multi-provider routes (Gmail under /api/mail/*)
     // do per-account 410s inside their handlers.
     app.use("*", createIntegrationRouteGate({ db: deps.db }));
-    // Error handling — do not leak internal details to clients
+    // Error handling — do not leak internal details to clients, but mint a
+    // short debug id so the agent can quote it on retry and the operator can
+    // grep daemon logs for it. The id is the only correlation surface for
+    // uncaught throws; route-specific errors carry richer envelopes via
+    // respondWithAgentError.
     app.onError((err, c) => {
-        logger.error({ err, path: c.req.path, method: c.req.method }, "API error");
-        return c.json({ error: "internal_error" }, 500);
+        const debugId = randomUUID().slice(0, 8);
+        logger.error({ err, path: c.req.path, method: c.req.method, debugId }, "API error");
+        return c.json({
+            error: "internal_error",
+            debugId,
+            hint: "Unexpected daemon error. Quote `debugId` if reporting; the operator can grep daemon logs for it. Do not auto-retry tight — re-issue once and notify the user if it fails again.",
+        }, 500);
     });
     // Routes
     const healthRoutes = createHealthRoutes(deps);
     const contextRoutes = createContextRoutes(deps);
     const agentRoutes = createAgentRoutes(deps);
+    const agentDefinitionRoutes = createAgentDefinitionRoutes(deps);
     const dashboardRoutes = createDashboardRoutes(deps);
     const notionRoutes = createNotionRoutes({
         notionService: deps.services.notion,
@@ -310,10 +329,12 @@ export function createApp(deps) {
     const skillCurationRoutes = createSkillCurationRoutes(deps);
     const profileQuestionsRoutes = createProfileQuestionsRoutes(deps);
     const recurringScheduleRoutes = createRecurringScheduleRoutes(deps);
+    const scheduleOptionsRoutes = createScheduleOptionsRoutes({
+        config: deps.config,
+    });
     const triggerRoutes = createTriggerRoutes(deps);
     const travelBookingRoutes = createTravelBookingRoutes(deps);
     const receiptRoutes = createReceiptRoutes(deps);
-    const travelTimeRoutes = createTravelTimeRoutes({ services: deps.services });
     const bookRoutes = createBookRoutes(deps);
     const integrationRoutes = createIntegrationRoutes(deps);
     const integrationReconcileRoutes = createIntegrationReconcileRoutes(deps);
@@ -326,6 +347,27 @@ export function createApp(deps) {
     const voiceRoutes = createVoiceRoutes(deps);
     const wikiRoutes = createWikiRoutes(deps);
     const fsRoutes = createFsRoutes(deps);
+    const browserHistoryRoutes = createBrowserHistoryRoutes(deps);
+    const browserHistoryManagedRoutes = createBrowserHistoryManagedRoutes(deps);
+    // MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §16.9 — Phase B-2.5
+    // per-site sign-in surface. Same mounting rationale as the parent
+    // automation routes: the per-site list is the dashboard's "available
+    // sites" probe, so it stays mounted unconditionally and gates on the
+    // master managed-chromium toggle inside the connect / reauth handlers.
+    const browserAutomationSitesRoutes = createBrowserAutomationSitesRoutes(deps);
+    // MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §17.8 — Phase B-4
+    // experimental purchase config + audit surface. Mounted
+    // unconditionally; every route checks `getB4Enabled` / per-site
+    // config presence before producing meaningful output, so absent
+    // wiring is benign (returns empty lists + 403-equivalent JSON on
+    // attempted enable).
+    const browserAutomationPurchaseRoutes = createBrowserAutomationPurchaseRoutes(deps);
+    // BROWSER_TASK_REDESIGN_PLAN.md §3 — Phase 1 browser-task surface.
+    // Mounted unconditionally so the dashboard /browser-tasks page
+    // (Phase 7a) reaches a stable surface even when the runner is not
+    // wired (tests / lite installs). The route handlers degrade
+    // gracefully on absent runner / slot ref.
+    const browserTaskRoutes = createBrowserTaskRoutes(deps);
     // Management Registry & Entities (docs/design/21-management-registry-
     // and-entities.md). The managed-tasks and sot-bindings routes MUST
     // share one lock manager — separate instances would let back-to-back
@@ -341,6 +383,7 @@ export function createApp(deps) {
     app.route("/api", healthRoutes);
     app.route("/api", contextRoutes);
     app.route("/api", agentRoutes);
+    app.route("/api", agentDefinitionRoutes);
     app.route("/api", dashboardRoutes);
     app.route("/api", notionRoutes);
     app.route("/api", metricsRoutes);
@@ -355,6 +398,7 @@ export function createApp(deps) {
     app.route("/api", skillCurationRoutes);
     app.route("/api", profileQuestionsRoutes);
     app.route("/api", recurringScheduleRoutes);
+    app.route("/api", scheduleOptionsRoutes);
     app.route("/api", managedTasksRoutes);
     app.route("/api", sotBindingsRoutes);
     app.route("/api", entitiesRoutes);
@@ -362,7 +406,6 @@ export function createApp(deps) {
     app.route("/api", triggerRoutes);
     app.route("/api", travelBookingRoutes);
     app.route("/api", receiptRoutes);
-    app.route("/api", travelTimeRoutes);
     app.route("/api", bookRoutes);
     app.route("/api", integrationRoutes);
     app.route("/api", integrationReconcileRoutes);
@@ -375,6 +418,11 @@ export function createApp(deps) {
     app.route("/api", voiceRoutes);
     app.route("/api", wikiRoutes);
     app.route("/api", fsRoutes);
+    app.route("/api", browserHistoryRoutes);
+    app.route("/api", browserHistoryManagedRoutes);
+    app.route("/api", browserAutomationSitesRoutes);
+    app.route("/api", browserAutomationPurchaseRoutes);
+    app.route("/api", browserTaskRoutes);
     // ── Chat file attachments (Phase 1) ──
     if (deps.attachmentStore) {
         const attachmentRoutes = createAttachmentRoutes({
@@ -405,7 +453,7 @@ export function createApp(deps) {
     // mode only — delegated requests are 410-gated by the integration
     // route gate before reaching this handler (DELEGATED-MODE-V2-DESIGN.md
     // §6.3); cross-backend delegated work flows through
-    // POST /api/integrations/google_calendar/invoke.
+    // POST /api/integrations/google_calendar/exec.
     const calendarRoutes = createCalendarRoutes({
         services: deps.services,
         agentWriteTracker: deps.writeTracker,
@@ -425,7 +473,7 @@ export function createApp(deps) {
     // accounts return 410 from the per-account gate inside the route
     // handler when `gmail.mode === "delegated"` (DELEGATED-MODE-V2-DESIGN.md
     // §6.3 defense-in-depth); cross-backend delegated work flows through
-    // POST /api/integrations/gmail/invoke.
+    // POST /api/integrations/gmail/exec.
     const mailRoutes = createMailRoutes({
         db: deps.db,
         config: deps.config,
@@ -516,6 +564,13 @@ export function createApp(deps) {
             attachmentStore: deps.attachmentStore,
             validateChatModelOverride: (backendId, modelId) => {
                 try {
+                    // Defense-in-depth: even if `backends.enabled = 1` somehow lands
+                    // for a backend whose runtime core isn't wired (`opencode` until
+                    // docs/design/appendices/opencode-backend.md Phase 2), reject the override here so
+                    // dashboard chat doesn't trip BackendRouter.requireCore at dispatch.
+                    if (!isRuntimeAvailableBackendId(backendId)) {
+                        return false;
+                    }
                     const row = deps.db
                         .prepare("SELECT enabled FROM backends WHERE id = ? LIMIT 1")
                         .get(backendId);
@@ -549,8 +604,8 @@ export function createApp(deps) {
     // rely on the default-Approve fallback. Most are intentional admin
     // surfaces (secrets, pairing, restore-snapshot, dashboard-only
     // controls) for which fail-closed is correct — but the same fallback
-    // historically masked the `POST /api/context/roadmap/id` regression
-    // that 7×401'd inside roadmap_refresh on 2026-04-28.
+    // can mask a missing classifier entry on an agent-callable route,
+    // producing a 401 retry spiral inside the routine that hits it.
     //
     // Gating: log only when the unclassified set CHANGES from the last
     // boot. A warning that fires identically on every restart turns into
@@ -581,4 +636,3 @@ export function createApp(deps) {
     }
     return app;
 }
-//# sourceMappingURL=server.js.map

package/dist/bootstrap/adapters.d.ts

@@ -106,4 +106,3 @@ export declare function createAdapterReloaders(deps: BootstrapAdapterDeps): Adap
  * own.
  */
 export declare function whatsappQrResponseFromAdapter(adapter: WhatsAppAdapter | null, snapshotOverride?: WhatsAppQrSnapshot | null): WhatsAppQrResponse;
-//# sourceMappingURL=adapters.d.ts.map

package/dist/bootstrap/adapters.js

@@ -62,10 +62,13 @@ export function createAdapterReloaders(deps) {
         });
         messageHub.register(state.discord);
         if (startNow) {
-            // Mark as "connecting" while the websocket handshake is in flight so
-            // /health doesn't briefly report "ok" before the adapter actually
-            // comes up (register() defaults to "ok" to keep the notification
-            // pipeline usable in unit tests; this override is the real state).
+            // P2-04: `register()` now seeds the status as "connecting" too, so
+            // this explicit set is redundant in the happy path. Kept as a
+            // defensive marker that the await-start() block below is the
+            // single transition site to "ok" / "error" for this adapter — a
+            // future refactor that adds work between `register()` and `start()`
+            // (e.g. token validation) won't accidentally let /health observe
+            // an "ok" status during that gap.
             messageHub.setPlatformRuntimeStatus("discord", { runtimeState: "connecting", error: null });
             try {
                 await state.discord.start();
@@ -234,4 +237,3 @@ export function whatsappQrResponseFromAdapter(adapter, snapshotOverride) {
         error: adapter.getStatusError(),
     };
 }
-//# sourceMappingURL=adapters.js.map