@aitne/daemon 0.1.8 → 0.1.10

package/dist/api/routes/integrations/integrations/crud.js

@@ -1,158 +0,0 @@
-import { BACKEND_IDS, INTEGRATION_DESCRIPTORS, INTEGRATION_KEYS, isIntegrationKey, } from "@aitne/shared";
-import { readIntegrations } from "../../../db/integrations-store.js";
-import { listProxyModelOptions, resolveCanonicalDelegatedModel, } from "../../../core/backends/proxy-model-registry.js";
-import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
-import { handleIntegrationPatch } from "./crud-patch.js";
-/**
- * Register the integration CRUD routes:
- *   - `GET    /integrations`
- *   - `GET    /integrations/:key/recent-proxy-calls`
- *   - `GET    /integrations/proxy-models/:backend`
- *   - `PATCH  /integrations/:key`
- *
- * PATCH body lives in `./crud-patch.ts:handleIntegrationPatch` because the
- * full lifecycle (validate / flip-lock / probe-cache / re-materialise /
- * audit) is ~700 lines and would push this file past the ~800-line soft
- * ceiling.
- */
-export function registerCrudRoutes(app, deps) {
-    const { db } = deps;
-    app.get("/integrations", (c) => {
-        const state = readIntegrations(db);
-        const integrations = INTEGRATION_KEYS.map((key) => {
-            const descriptor = INTEGRATION_DESCRIPTORS[key];
-            return {
-                key: descriptor.key,
-                displayName: descriptor.displayName,
-                supportedModes: descriptor.supportedModes,
-                directSetup: descriptor.directSetup ?? null,
-                backendConnectors: descriptor.backendConnectors,
-                skillsTouched: descriptor.skillsTouched,
-                taskFlowsTouched: descriptor.taskFlowsTouched,
-                observersTouched: descriptor.observersTouched,
-                apiRoutesTouched: descriptor.apiRoutesTouched,
-                userManagedConnector: descriptor.userManagedConnector ?? false,
-                state: state[key],
-            };
-        });
-        return c.json({ integrations });
-    });
-    // DELEGATED-PROXY-API-DESIGN.md §7 — last N delegated-proxy invocations for
-    // an integration. Drives the IntegrationCard's "Recent calls" collapsible
-    // table so the user can spot slow / failing connectors without leaving the
-    // /connections page. Daemon-side filter (rather than dashboard reading the
-    // generic cost table and post-filtering) because:
-    //   - integrationKey lives inside `detail` JSON; SQLite-side JSON1 extract
-    //     keeps the response payload small and skips the parent-event noise.
-    //   - cost.ts dashboards already aggregate; a per-integration debug view
-    //     belongs alongside the integration's other state for cohesion.
-    //
-    // Limit defaults to 50 (the design's stated cap), bounded at 200 so a
-    // typo-driven `?limit=99999` cannot DoS the response.
-    app.get("/integrations/:key/recent-proxy-calls", (c) => {
-        const key = c.req.param("key");
-        if (!isIntegrationKey(key)) {
-            return respondWithAgentError(c, 404, [
-                composeIssue("integrations.unknown_integration", {
-                    field: "key",
-                    received: key,
-                }),
-            ], { legacyFields: { key } });
-        }
-        const rawLimit = c.req.query("limit");
-        let limit = 50;
-        if (rawLimit !== undefined) {
-            const parsed = Number.parseInt(rawLimit, 10);
-            if (!Number.isFinite(parsed) || parsed < 1) {
-                return respondWithAgentError(c, 400, [
-                    composeIssue("integrations.invalid_limit", {
-                        field: "limit",
-                        received: rawLimit,
-                    }),
-                ], {
-                    legacyFields: {
-                        message: "limit must be a positive integer (default 50, max 200)",
-                    },
-                });
-            }
-            limit = Math.min(parsed, 200);
-        }
-        const rows = db
-            .prepare(`SELECT id, started_at, completed_at, model_used, backend,
-                cost_usd, tokens_input, tokens_output, duration_ms,
-                num_turns, result, error, detail
-           FROM agent_actions
-          WHERE action_type = 'delegated_proxy.invoke'
-            AND json_extract(detail, '$.integrationKey') = ?
-          ORDER BY id DESC
-          LIMIT ?`)
-            .all(key, limit);
-        const calls = rows.map((row) => {
-            /* c8 ignore next -- sql WHERE json_extract filters out rows with null detail */
-            const detail = row.detail ? safeParseJson(row.detail) : null;
-            return {
-                id: row.id,
-                startedAt: row.started_at,
-                completedAt: row.completed_at,
-                modelId: row.model_used,
-                backend: row.backend,
-                costUsd: row.cost_usd,
-                tokensInput: row.tokens_input,
-                tokensOutput: row.tokens_output,
-                durationMs: row.duration_ms,
-                numTurns: row.num_turns,
-                result: row.result,
-                // detail.errorClass is the structured DelegatedErrorClass when the
-                // call failed inside the proxy pipeline (auth_error, no_tool_call,
-                // etc.). detail.toolName is always present. We surface both so the
-                // table can render a human label without re-parsing on the client.
-                errorClass: detail?.errorClass ?? null,
-                toolName: detail?.toolName ?? null,
-                errorMessage: row.error,
-            };
-        });
-        return c.json({
-            key,
-            limit,
-            calls,
-        });
-    });
-    // DELEGATED-PROXY-API-DESIGN.md §6.1 / §7 — list known proxy-model options
-    // for a backend (registered + custom-pinned). Drives the dashboard model
-    // dropdown so the daemon stays the source of truth for the registered
-    // model surface; clients don't need to keep their own registry mirror.
-    app.get("/integrations/proxy-models/:backend", (c) => {
-        const backend = c.req.param("backend");
-        if (!BACKEND_IDS.includes(backend)) {
-            return c.json({
-                error: "invalid_backend",
-                message: `Unknown backend '${backend}'.`,
-                supportedBackends: BACKEND_IDS,
-            }, 400);
-        }
-        const backendId = backend;
-        const options = listProxyModelOptions(backendId);
-        const canonical = resolveCanonicalDelegatedModel(backendId, db);
-        return c.json({
-            backend: backendId,
-            canonical,
-            options,
-        });
-    });
-    app.patch("/integrations/:key", (c) => handleIntegrationPatch(c, deps));
-}
-function safeParseJson(s) {
-    try {
-        const parsed = JSON.parse(s);
-        /* c8 ignore next -- sql WHERE guarantees only object-typed detail rows reach here */
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
-            return null;
-        return parsed;
-        /* c8 ignore start -- sql WHERE json_extract would reject malformed JSON rows */
-    }
-    catch {
-        return null;
-    }
-    /* c8 ignore stop */
-}
-//# sourceMappingURL=crud.js.map

package/dist/api/routes/integrations/integrations/crud.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crud.js","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/crud.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EACL,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAqB;IACjE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO;gBACL,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;gBAC3C,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,oBAAoB,EAAE,UAAU,CAAC,oBAAoB,IAAI,KAAK;gBAC9D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,kDAAkD;IAClD,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,EAAE;IACF,sEAAsE;IACtE,sDAAsD;IACtD,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,kCAAkC,EAAE;oBAC/C,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,GAAG;iBACd,CAAC;aACH,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;oBACnC,YAAY,CAAC,4BAA4B,EAAE;wBACzC,KAAK,EAAE,OAAO;wBACd,QAAQ,EAAE,QAAQ;qBACnB,CAAC;iBACH,EAAE;oBACD,YAAY,EAAE;wBACZ,OAAO,EAAE,wDAAwD;qBAClE;iBACF,CAAC,CAAC;YACL,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN;;;;;;;kBAOU,CACX;aACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAcb,CAAC;QAEL,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7B,gFAAgF;YAChF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,OAAO,EAAE,GAAG,CAAC,UAAU;gBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;gBAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;gBAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;gBACtC,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;gBAClC,YAAY,EAAE,GAAG,CAAC,KAAK;aACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,GAAG;YACH,KAAK;YACL,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAAC,qCAAqC,EAAE,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,oBAAoB,OAAO,IAAI;gBACxC,iBAAiB,EAAE,WAAW;aAC/B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAoB,CAAC;QACvC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,8BAA8B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,SAAS;YAClB,SAAS;YACT,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;QACxC,qFAAqF;QACrF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,MAAiC,CAAC;QAC3C,gFAAgF;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oBAAoB;AACtB,CAAC"}

package/dist/api/routes/integrations/integrations/index.d.ts

@@ -1,55 +0,0 @@
-import { Hono } from "hono";
-import type { ApiDependencies } from "../../server.js";
-/**
- * Integration Delegation Framework — `/api/integrations` routes.
- *
- * Surface:
- *   - `GET /api/integrations` — list every registered integration with its
- *     descriptor metadata and current state.
- *   - `GET /api/integrations/:key/recent-proxy-calls` — last N delegated
- *     proxy invocations for the dashboard's IntegrationCard.
- *   - `GET /api/integrations/proxy-models/:backend` — registered + pinned
- *     proxy-model options for the dashboard's model dropdown.
- *   - `PATCH /api/integrations/:key` — change a single integration's mode.
- *     Runs the full lifecycle: validate → flip-lock acquire → §14.7 probe →
- *     DB update → `integrations.md` re-render → running-session
- *     re-materialisation → audit row → flip-lock release.
- *   - `POST /api/integrations/:key/exec` — cross-backend delegated proxy
- *     (DELEGATED-MODE-V2-DESIGN.md §11 / `docs/design/14-integration-delegation.md` §14.4.5).
- *   - `POST /api/integrations/:key/probe` — descriptor + cached + live
- *     probe paths (`docs/design/14-integration-delegation.md` §14.7).
- *   - `POST /api/integrations/:key/invoke` — RESERVED. Commented out
- *     2026-05-01 as part of the /exec-only migration; see `invoke.ts`.
- *
- * Observer gating, the route-410 middleware (`integration-route-gate.ts`),
- * skill / task-flow variant selection, and the connector probe are all
- * production paths.
- *
- * Mode model. `IntegrationMode = "direct" | "delegated" | "native" | "disabled"`.
- *   - `direct` — daemon poller + `/api/<integration>/*` daemon routes.
- *   - `delegated` — `delegated-sync-worker` cadences + `/exec` proxy.
- *   - `native` — main backend reaches the integration via its own native
- *     MCP / connector; daemon does no polling. Per-tick data acquisition
- *     for routines (morning / evening / hourly / weekly / monthly) runs in a
- *     separate pre-pass session on the `routine.fetch_window` ProcessKey
- *     and POSTs observations to `/api/observations`. See
- *     [`ROUTINE_DATA_ACQUISITION_DESIGN.md`](../../../../../ROUTINE_DATA_ACQUISITION_DESIGN.md)
- *     for the per-routine × per-integration acquisition contract.
- *   - `disabled` — silence. Routes 410 with `X-Integration-Mode: disabled`.
- *
- * User-managed connectors (`descriptor.userManagedConnector === true`,
- * today `outlook_mail` / `outlook_calendar`) skip the descriptor-driven
- * variant gates: there is no daemon-shipped `SKILL.<mode>.<backend>.md`
- * for them, and routine-side acquisition flows through the per-integration
- * partial (RDAD §6.8) rather than a variant fan-out.
- *
- * Risk tier: Approve (dashboard-only mutation, registered in
- * `risk-classifier.ts`).
- *
- * Registration order matches the original handler declaration order so
- * Hono route-match precedence is byte-identical to the pre-split file
- * (file-split-plan R2). Verify with
- * `app.routes.map(r => r.path)` before/after when in doubt.
- */
-export declare function createIntegrationRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=index.d.ts.map

package/dist/api/routes/integrations/integrations/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAOnE"}

package/dist/api/routes/integrations/integrations/index.js

@@ -1,65 +0,0 @@
-import { Hono } from "hono";
-import { registerCrudRoutes } from "./crud.js";
-import { registerExecRoutes } from "./exec.js";
-import { registerInvokeRoutes } from "./invoke.js";
-import { registerProbeRoutes } from "./probe.js";
-/**
- * Integration Delegation Framework — `/api/integrations` routes.
- *
- * Surface:
- *   - `GET /api/integrations` — list every registered integration with its
- *     descriptor metadata and current state.
- *   - `GET /api/integrations/:key/recent-proxy-calls` — last N delegated
- *     proxy invocations for the dashboard's IntegrationCard.
- *   - `GET /api/integrations/proxy-models/:backend` — registered + pinned
- *     proxy-model options for the dashboard's model dropdown.
- *   - `PATCH /api/integrations/:key` — change a single integration's mode.
- *     Runs the full lifecycle: validate → flip-lock acquire → §14.7 probe →
- *     DB update → `integrations.md` re-render → running-session
- *     re-materialisation → audit row → flip-lock release.
- *   - `POST /api/integrations/:key/exec` — cross-backend delegated proxy
- *     (DELEGATED-MODE-V2-DESIGN.md §11 / `docs/design/14-integration-delegation.md` §14.4.5).
- *   - `POST /api/integrations/:key/probe` — descriptor + cached + live
- *     probe paths (`docs/design/14-integration-delegation.md` §14.7).
- *   - `POST /api/integrations/:key/invoke` — RESERVED. Commented out
- *     2026-05-01 as part of the /exec-only migration; see `invoke.ts`.
- *
- * Observer gating, the route-410 middleware (`integration-route-gate.ts`),
- * skill / task-flow variant selection, and the connector probe are all
- * production paths.
- *
- * Mode model. `IntegrationMode = "direct" | "delegated" | "native" | "disabled"`.
- *   - `direct` — daemon poller + `/api/<integration>/*` daemon routes.
- *   - `delegated` — `delegated-sync-worker` cadences + `/exec` proxy.
- *   - `native` — main backend reaches the integration via its own native
- *     MCP / connector; daemon does no polling. Per-tick data acquisition
- *     for routines (morning / evening / hourly / weekly / monthly) runs in a
- *     separate pre-pass session on the `routine.fetch_window` ProcessKey
- *     and POSTs observations to `/api/observations`. See
- *     [`ROUTINE_DATA_ACQUISITION_DESIGN.md`](../../../../../ROUTINE_DATA_ACQUISITION_DESIGN.md)
- *     for the per-routine × per-integration acquisition contract.
- *   - `disabled` — silence. Routes 410 with `X-Integration-Mode: disabled`.
- *
- * User-managed connectors (`descriptor.userManagedConnector === true`,
- * today `outlook_mail` / `outlook_calendar`) skip the descriptor-driven
- * variant gates: there is no daemon-shipped `SKILL.<mode>.<backend>.md`
- * for them, and routine-side acquisition flows through the per-integration
- * partial (RDAD §6.8) rather than a variant fan-out.
- *
- * Risk tier: Approve (dashboard-only mutation, registered in
- * `risk-classifier.ts`).
- *
- * Registration order matches the original handler declaration order so
- * Hono route-match precedence is byte-identical to the pre-split file
- * (file-split-plan R2). Verify with
- * `app.routes.map(r => r.path)` before/after when in doubt.
- */
-export function createIntegrationRoutes(deps) {
-    const app = new Hono();
-    registerCrudRoutes(app, deps);
-    registerInvokeRoutes(app, deps);
-    registerExecRoutes(app, deps);
-    registerProbeRoutes(app, deps);
-    return app;
-}
-//# sourceMappingURL=index.js.map

package/dist/api/routes/integrations/integrations/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAqB;IAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/integrations/integrations/invoke.d.ts

@@ -1,38 +0,0 @@
-import type { Hono } from "hono";
-import type { ApiDependencies } from "../../server.js";
-/**
- * `POST /api/integrations/:key/invoke` — RESERVED reactivation slot.
- *
- * The handler and the supporting `resolveCanonicalBareTool` helper were
- * commented out 2026-05-01 as part of the /exec-only migration. They are
- * preserved verbatim below for future reactivation. Today this register
- * function is a no-op so the route does not exist; `/exec` (see
- * `./exec.ts`) is the canonical surface.
- *
- * Why this file exists despite registering nothing:
- *   - Keeping the reservation block in its own file gives future
- *     reactivation a clear, self-contained home — uncomment the block,
- *     re-import the helpers it needs (`matchToolPattern`,
- *     `mapErrorClassToHttpStatus`, `IntegrationBackendConnector`,
- *     `INTEGRATION_DESCRIPTORS`, `readIntegrations`,
- *     `markIntegrationWrite`, `extractWriteItemIds`, `composeIssue`,
- *     `respondWithAgentError`, `createLogger`, `readJsonBody`), and
- *     register the route inside this function.
- *   - Co-locating with the rest of the integrations routes keeps the
- *     directory inventory complete (every entry in the file inventory
- *     section of `docs/design/appendices/api-route-decomposition.md`
- *     §5.4 maps to a real file).
- *
- * The internal `DelegatedBackendInvoker.invoke()` API and each core's
- * `runDelegatedTool()` remain wired (used by `delegated-sync-worker`
- * for hourly drift detection — see
- * `packages/daemon/src/observers/delegated-sync-worker.ts:504`).
- *
- * DO NOT DELETE the comment block — possible reactivation scenarios:
- *   1. A low-latency RPC fast path for cost-sensitive callers.
- *   2. A debug/admin endpoint for direct tool dispatch.
- *   3. A per-integration opt-in once full cross-backend alias
- *      translation is in place.
- */
-export declare function registerInvokeRoutes(_app: Hono, _deps: ApiDependencies): void;
-//# sourceMappingURL=invoke.d.ts.map

package/dist/api/routes/integrations/integrations/invoke.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/invoke.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,eAAe,GACrB,IAAI,CAIN"}

package/dist/api/routes/integrations/integrations/invoke.js

@@ -1,320 +0,0 @@
-/**
- * `POST /api/integrations/:key/invoke` — RESERVED reactivation slot.
- *
- * The handler and the supporting `resolveCanonicalBareTool` helper were
- * commented out 2026-05-01 as part of the /exec-only migration. They are
- * preserved verbatim below for future reactivation. Today this register
- * function is a no-op so the route does not exist; `/exec` (see
- * `./exec.ts`) is the canonical surface.
- *
- * Why this file exists despite registering nothing:
- *   - Keeping the reservation block in its own file gives future
- *     reactivation a clear, self-contained home — uncomment the block,
- *     re-import the helpers it needs (`matchToolPattern`,
- *     `mapErrorClassToHttpStatus`, `IntegrationBackendConnector`,
- *     `INTEGRATION_DESCRIPTORS`, `readIntegrations`,
- *     `markIntegrationWrite`, `extractWriteItemIds`, `composeIssue`,
- *     `respondWithAgentError`, `createLogger`, `readJsonBody`), and
- *     register the route inside this function.
- *   - Co-locating with the rest of the integrations routes keeps the
- *     directory inventory complete (every entry in the file inventory
- *     section of `docs/design/appendices/api-route-decomposition.md`
- *     §5.4 maps to a real file).
- *
- * The internal `DelegatedBackendInvoker.invoke()` API and each core's
- * `runDelegatedTool()` remain wired (used by `delegated-sync-worker`
- * for hourly drift detection — see
- * `packages/daemon/src/observers/delegated-sync-worker.ts:504`).
- *
- * DO NOT DELETE the comment block — possible reactivation scenarios:
- *   1. A low-latency RPC fast path for cost-sensitive callers.
- *   2. A debug/admin endpoint for direct tool dispatch.
- *   3. A per-integration opt-in once full cross-backend alias
- *      translation is in place.
- */
-export function registerInvokeRoutes(_app, _deps) {
-    // Intentional no-op. See block comments below for the dormant route
-    // body and the dormant `resolveCanonicalBareTool` helper preserved
-    // verbatim for future reactivation.
-}
-// ─────────────────────────────────────────────────────────────────────
-// RESERVED — POST /integrations/:key/invoke (RPC-style tool dispatch)
-//
-// Commented out 2026-05-01 as part of the /exec-only migration. The
-// RPC `{tool, args}` shape required the caller to know the delegated
-// backend's exact bare tool name (Claude `search_threads` vs Codex
-// `search_emails` vs Gemini `search`) and arg names (`pageSize` vs
-// `max_results` vs `maxResults`). That coupling broke under:
-//   - cross-backend tool-name divergence (the alias-translation gap
-//     that caused the 2026-05-01 wrong_tool incidents),
-//   - any custom MCP server the user installs (registry-invisible),
-//   - backend swaps that should be transparent to the agent.
-//
-// `POST /integrations/:key/exec` (task mode) is the canonical surface
-// now: the agent describes intent in natural language + outputSchema,
-// the daemon's delegate picks the tool. The handler body and the
-// supporting `resolveCanonicalBareTool` helper are preserved verbatim
-// for **future reactivation** — possible reactivation scenarios:
-//   1. A low-latency RPC fast path for cost-sensitive callers.
-//   2. A debug/admin endpoint for direct tool dispatch.
-//   3. A per-integration opt-in once full cross-backend alias
-//      translation is in place.
-//
-// DO NOT DELETE. The internal `DelegatedBackendInvoker.invoke()` API
-// and each core's `runDelegatedTool()` remain wired (used by
-// `delegated-sync-worker` for hourly drift detection — see
-// `packages/daemon/src/observers/delegated-sync-worker.ts:504`).
-//
-// Original docstring (preserved for the reactivation-time author):
-//   POST /integrations/:key/invoke — DELEGATED-MODE-V2-DESIGN.md §4.2.
-//   Generic chokepoint for cross-backend delegated tool calls. The
-//   agent's cross-backend skill body
-//   (`SKILL.delegated.<sessionBackend>.md`) directs it here for any
-//   connector tool on a delegatedBackend that differs from the DM
-//   session backend. Body: `{tool, args}` — the daemon does NOT
-//   enumerate or validate the tool name (no per-tool routeMap
-//   maintenance); it forwards verbatim to `DelegatedBackendInvoker`.
-//
-//   Pre-flight order (cheapest first, fail-fast):
-//     1. Integration must be in `delegated` mode (409 mode_mismatch).
-//     2. If `x-session-backend` is set and matches `state.delegatedBackend`,
-//        the caller is misusing the endpoint — same-backend agents have
-//        native MCP and the skill is not provisioned (§4.1.2). Surface as
-//        409 to make accidental misuse loud rather than spawning a useless
-//        subprocess.
-//     3. `state.deniedTools` patterns enforced via `matchToolPattern`. The
-//        stored entries are bare names (no `mcp__*` prefix), so we strip the
-//        connector's `toolNamespace` from the body's `tool` before matching.
-//
-//   Risk tier: Autonomous (no Bearer required). Cost / failure
-//   attribution lands in `agent_actions` via the invoker
-//   (`action_type='delegated_proxy.invoke'`).
-// ─────────────────────────────────────────────────────────────────────
-/*
-app.post("/integrations/:key/invoke", async (c) => {
-  const key = c.req.param("key");
-  if (!isIntegrationKey(key)) {
-    return respondWithAgentError(c, 404, [
-      composeIssue("integrations.unknown_integration", {
-        field: "key",
-        received: key,
-      }),
-    ], { legacyFields: { key } });
-  }
-
-  const parsedBody = await readJsonBody(c);
-  if (!parsedBody.ok) return parsedBody.response;
-
-  const body = parsedBody.body as { tool?: unknown; args?: unknown } | null;
-  const toolRaw = body?.tool;
-  if (typeof toolRaw !== "string" || toolRaw.length === 0) {
-    return c.json(
-      {
-        error: "validation_error",
-        message: "`tool` must be a non-empty string (bare tool name or fully-qualified MCP name)",
-      },
-      400,
-    );
-  }
-  // §4.2.1 contract — `args` is `object`. Reject arrays, scalars, and null
-  // here so the failure surfaces at the route boundary with a precise 400
-  // rather than as a downstream invoker / connector parse error.
-  const argsRaw = body?.args;
-  if (
-    argsRaw !== undefined
-    && (argsRaw === null
-      || typeof argsRaw !== "object"
-      || Array.isArray(argsRaw))
-  ) {
-    return c.json(
-      {
-        error: "validation_error",
-        message: "`args` must be a JSON object (or omitted to send {})",
-      },
-      400,
-    );
-  }
-  const args = (argsRaw as Record<string, unknown> | undefined) ?? {};
-
-  if (!deps.delegatedInvoker) {
-    // Boot ordering / test wiring case — invoker not registered. Surface
-    // explicitly so the caller knows this isn't a precondition mismatch.
-    return c.json(
-      {
-        error: "unimplemented",
-        message: "delegated invoker is not wired into this daemon instance",
-        integration: key,
-        backend: null,
-        mode: "delegated",
-      },
-      501,
-    );
-  }
-
-  const state = readIntegrations(db)[key];
-  if (!state || state.mode !== "delegated" || !state.delegatedBackend) {
-    return c.json(
-      {
-        error: "mode_mismatch",
-        message: `${key} is not in delegated mode (mode=${state?.mode ?? "missing"})`,
-        integration: key,
-        backend: null,
-        mode: "delegated",
-      },
-      409,
-    );
-  }
-
-  const sessionBackendHeader = c.req.header("x-session-backend");
-  if (
-    sessionBackendHeader
-    && sessionBackendHeader === state.delegatedBackend
-  ) {
-    return c.json(
-      {
-        error: "mode_mismatch",
-        message: `session backend matches delegatedBackend (${sessionBackendHeader}) — use native MCP instead`,
-        integration: key,
-        backend: state.delegatedBackend,
-        mode: "delegated",
-      },
-      409,
-    );
-  }
-
-  // Strip the connector's namespace prefix if the body included it,
-  // then translate cross-backend aliases to the delegated connector's
-  // canonical tool name. Translation runs BEFORE the deniedTools check
-  // because deny entries are stored as backend-canonical names (the
-  // skill body trains the user on that form): checking pre-translation
-  // silently lets a denied call through if the agent used a sibling
-  // backend's alias.
-  const connector = INTEGRATION_DESCRIPTORS[key].backendConnectors[state.delegatedBackend];
-  const namespace = connector?.toolNamespace ?? "";
-  const incomingBareTool = namespace && toolRaw.startsWith(namespace)
-    ? toolRaw.slice(namespace.length)
-    : toolRaw;
-  const bareTool = resolveCanonicalBareTool(connector, incomingBareTool);
-  if (bareTool !== incomingBareTool) {
-    logger.debug(
-      {
-        integration: key,
-        backend: state.delegatedBackend,
-        from: incomingBareTool,
-        to: bareTool,
-      },
-      "delegated invoke: translated cross-backend tool alias",
-    );
-  }
-
-  if ((state.deniedTools ?? []).some((pattern) => matchToolPattern(pattern, bareTool))) {
-    return c.json(
-      {
-        error: "denied_tool",
-        message: `tool '${bareTool}' is denied by user settings for integration '${key}'`,
-        integration: key,
-        backend: state.delegatedBackend,
-        mode: "delegated",
-        tool: bareTool,
-      },
-      403,
-    );
-  }
-
-  // The invoker forwards verbatim — connector validates the tool name and
-  // arg shape. We always send the fully-qualified tool string so the
-  // subprocess prompt unambiguously points at one tool.
-  const fullyQualifiedTool = namespace ? `${namespace}${bareTool}` : bareTool;
-
-  const result = await deps.delegatedInvoker.invoke({
-    integrationKey: key,
-    toolName: fullyQualifiedTool,
-    toolArgs: args,
-    parentEventId: c.req.header("x-event-id"),
-    parentProcessKey: c.req.header("x-process-key"),
-  });
-
-  if (result.ok) {
-    // INTEGRATION-DRIFT-DETECTION-PLAN.md §11 Phase 4 — actor attribution.
-    // Successful writes mark the persistent `integration_writes` table so
-    // the next reconcile diff resolves `actor='agent'` and the agent does
-    // not re-discover its own write as a user-originated observation.
-    // Decision tree:
-    //   1. `bareTool` in `connector.destructiveTools` → it's a write.
-    //   2. Walk `result.toolResult` for canonical id keys (extractor).
-    //   3. If the response had no id (label_message / label_thread /
-    //      bulk_label_matching_emails return `{ ok: true }`), fall back
-    //      to `args.messageId` / `args.threadId` / each entry of
-    //      `args.messageIds` / `args.threadIds`.
-    // Failure to extract any id is logged at debug and the call still
-    // returns 2xx — losing one attribution mark causes one self-noticed
-    // observation, never data loss.
-    maybeMarkIntegrationWrite(deps.db, {
-      integration: key,
-      connector,
-      bareTool,
-      toolResult: result.toolResult,
-      args,
-    });
-    return c.json({
-      toolResult: result.toolResult,
-      cost: {
-        tokensInput: result.cost.tokensInput,
-        tokensOutput: result.cost.tokensOutput,
-        cacheCreationTokens: result.cost.cacheCreationTokens,
-        cacheReadTokens: result.cost.cacheReadTokens,
-        costUsd: result.cost.costUsd,
-        durationMs: result.cost.durationMs,
-        numTurns: result.cost.numTurns,
-      },
-    });
-  }
-
-  const status = mapErrorClassToHttpStatus(result.errorClass);
-  return c.json(
-    {
-      error: result.errorClass,
-      message: result.message,
-      integration: key,
-      backend: result.backendId ?? state.delegatedBackend,
-      mode: "delegated",
-    },
-    status,
-  );
-});
-*/
-// ── end of reserved /invoke route ────────────────────────────────────
-// ─────────────────────────────────────────────────────────────────────
-// RESERVED — `resolveCanonicalBareTool`
-//
-// Helper for the commented-out RPC `/invoke` route. Preserved verbatim
-// alongside the route handler for future reactivation.
-//
-// The /exec migration removed the brittle "agent supplies the bare
-// tool name" coupling that this helper compensated for; future RPC
-// re-introduction (admin endpoint, cost-sensitive fast path) would
-// likely want a *more* complete cross-backend alias translator
-// (walk every connector under the integration, not just the active
-// one) — see the alias-divergence root-cause notes in the route
-// handler comment above for context.
-//
-// DO NOT DELETE.
-// ─────────────────────────────────────────────────────────────────────
-/*
-function resolveCanonicalBareTool(
-  connector: IntegrationBackendConnector | undefined,
-  bare: string,
-): string {
-  if (!connector) return bare;
-  const capTools = connector.capabilityTools;
-  for (const aliases of Object.values(capTools)) {
-    if (aliases.includes(bare)) return bare;
-  }
-  const aliasesForKey = capTools[bare];
-  if (aliasesForKey && aliasesForKey.length > 0) {
-    return aliasesForKey[0];
-  }
-  return bare;
-}
-*/
-//# sourceMappingURL=invoke.js.map

package/dist/api/routes/integrations/integrations/invoke.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../../../../src/api/routes/integrations/integrations/invoke.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAU,EACV,KAAsB;IAEtB,oEAAoE;IACpE,mEAAmE;IACnE,oCAAoC;AACtC,CAAC;AAED,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,mEAAmE;AACnE,mEAAmE;AACnE,6DAA6D;AAC7D,oEAAoE;AACpE,wDAAwD;AACxD,oEAAoE;AACpE,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,iEAAiE;AACjE,sEAAsE;AACtE,iEAAiE;AACjE,+DAA+D;AAC/D,wDAAwD;AACxD,8DAA8D;AAC9D,gCAAgC;AAChC,EAAE;AACF,qEAAqE;AACrE,6DAA6D;AAC7D,2DAA2D;AAC3D,iEAAiE;AACjE,EAAE;AACF,mEAAmE;AACnE,uEAAuE;AACvE,mEAAmE;AACnE,qCAAqC;AACrC,oEAAoE;AACpE,kEAAkE;AAClE,gEAAgE;AAChE,8DAA8D;AAC9D,qEAAqE;AACrE,EAAE;AACF,kDAAkD;AAClD,sEAAsE;AACtE,6EAA6E;AAC7E,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,qBAAqB;AACrB,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,+DAA+D;AAC/D,yDAAyD;AACzD,8CAA8C;AAC9C,wEAAwE;AACxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgME;AACF,wEAAwE;AAExE,wEAAwE;AACxE,wCAAwC;AACxC,EAAE;AACF,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,mEAAmE;AACnE,+DAA+D;AAC/D,mEAAmE;AACnE,gEAAgE;AAChE,qCAAqC;AACrC,EAAE;AACF,iBAAiB;AACjB,wEAAwE;AACxE;;;;;;;;;;;;;;;;EAgBE"}