@aitne/daemon 0.1.8 → 0.1.10

package/dist/api/routes/setup.js

@@ -15,6 +15,7 @@ import { createRecurringSchedule } from "../../db/recurring-schedules.js";
 import { createSettingsStore } from "../../settings/settings-store.js";
 import { cleanupSessionWorkdir, getSessionWorkdirPath } from "../../core/workdir.js";
 import { readJsonBody } from "../json-body.js";
+import { getVaultRestructureAck, getVaultRestructurePendingConsent, setVaultRestructureAck, } from "../../db/runtime-state.js";
 const logger = createLogger("api:setup");
 const EXECUTION_PERMISSION_SETTING_KEYS = {
     claude: "claudeExecutionPermissionMode",
@@ -512,6 +513,46 @@ export function createSetupRoutes(deps) {
             }, 200);
         }
     });
+    // CONTEXT_VAULT_REDESIGN_PLAN.md §11.3.4 / V16 — dashboard consent
+    // surface for the Obsidian-mode vault restructure. On Obsidian
+    // installs the boot layer defers the migration until the user opts
+    // in; this endpoint records that opt-in. The migration runs on the
+    // NEXT daemon boot — the response carries that instruction so the
+    // dashboard can ask the user to restart (or trigger a supervisor
+    // restart if one is wired).
+    //
+    // GET returns the current pending-consent state so the dashboard
+    // can decide whether to show the banner.
+    app.get("/setup/vault-restructure-status", (c) => {
+        const pending = getVaultRestructurePendingConsent(db);
+        const ack = getVaultRestructureAck(db);
+        return c.json({
+            pendingConsent: pending,
+            acknowledgement: ack,
+        });
+    });
+    app.post("/setup/vault-restructure-ack", async (c) => {
+        const ack = getVaultRestructureAck(db);
+        if (ack) {
+            return c.json({
+                ok: true,
+                alreadyAcknowledged: true,
+                acknowledgement: ack,
+                restartRequired: false,
+                message: "Vault restructure consent was already recorded; nothing to do.",
+            }, 200);
+        }
+        setVaultRestructureAck(db, {
+            at: new Date().toISOString(),
+            source: "dashboard",
+        });
+        logger.info({ source: "dashboard" }, "Vault restructure consent recorded — migration will run on next daemon boot.");
+        return c.json({
+            ok: true,
+            alreadyAcknowledged: false,
+            restartRequired: true,
+            message: "Consent recorded. Restart the daemon (e.g. `aitne restart`) to run the vault restructure.",
+        }, 200);
+    });
     return app;
 }
-//# sourceMappingURL=setup.js.map

package/dist/api/routes/skill-curation.d.ts

@@ -2,4 +2,3 @@ import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createSkillCurationRoutes(deps: ApiDependencies): Hono;
 export declare const SKILL_CURATION_KINDS: readonly ["knowledge_layout", "routing_table", "frontmatter_schema", "search_recipes", "convention_notes", "cross_references"];
-//# sourceMappingURL=skill-curation.d.ts.map

package/dist/api/routes/skill-curation.js

@@ -725,4 +725,3 @@ function safeParse(s) {
 // Reserved for future use — when the daemon needs to enumerate every kind
 // (e.g. for the `knowledge-map` query routing).
 export const SKILL_CURATION_KINDS = SECTION_KINDS;
-//# sourceMappingURL=skill-curation.js.map

package/dist/api/routes/skills.d.ts

@@ -1,6 +1,7 @@
 import { Hono } from "hono";
 import { type SkillSummary } from "@aitne/shared";
 import type { AgentConfig } from "../../config.js";
+import { resolveUserSkillsRoot } from "../../core/user-skills-root.js";
 /**
  * Skills API — CRUD over *user-authored* Claude Code skills.
  *
@@ -55,6 +56,6 @@ declare function safeSkillPath(root: string, slug: string): string | null;
  * to a flat scan when no category subdirs are present.
  */
 declare function listSkillsInRoot(root: string, builtin: boolean): SkillSummary[];
+export { resolveUserSkillsRoot };
 export declare function createSkillsRoutes(deps: SkillsRouteDependencies): Hono;
 export { parseSkillFile, serializeSkillFile, safeSkillPath, listSkillsInRoot };
-//# sourceMappingURL=skills.d.ts.map

package/dist/api/routes/skills.js

@@ -5,6 +5,7 @@ import { join, resolve, relative } from "node:path";
 import { skillCreateSchema, skillUpdateSchema, skillNameSchema, } from "@aitne/shared";
 import { createLogger, toSafeErrorMessage } from "../../logging.js";
 import { SkillsCompiler } from "../../core/skills-compiler.js";
+import { resolveUserSkillsRoot } from "../../core/user-skills-root.js";
 import { listBuiltinSkillDirs, resolveBuiltinSkillDir, } from "../../core/skill-source-paths.js";
 import { getProfileForProcess, getSkillsForProcess } from "../../core/skills-manifest.js";
 import { readJsonBody } from "../json-body.js";
@@ -204,10 +205,17 @@ function listSkillDetailsInRoot(root, builtin) {
     }
     return out;
 }
+// `resolveUserSkillsRoot` lives in `core/user-skills-root.ts` — re-export
+// from there so existing API consumers continue to import from this module.
+export { resolveUserSkillsRoot };
 export function createSkillsRoutes(deps) {
     const app = new Hono();
     const { config } = deps;
-    const userSkillsRoot = resolve(config.dataDir, "skills");
+    // CONTEXT_VAULT_REDESIGN_PLAN.md §11.6 (v3.1 V5) — user skills root
+    // moved from `<dataDir>/skills/` to `<contextDir>/policies/skills/`.
+    // The vault-restructure migration moves any pre-existing slug
+    // directories on first boot post-upgrade.
+    const userSkillsRoot = resolveUserSkillsRoot(config);
     // Default workspaceDir to cwd if the config stub omits it (test fixtures).
     const workspaceDir = config.workspaceDir ?? process.cwd();
     const builtinSkillsRoot = resolve(workspaceDir, "agent-assets", "skills");
@@ -353,10 +361,11 @@ export function createSkillsRoutes(deps) {
         const skillFile = safeSkillPath(userSkillsRoot, slug);
         // skillFile is null only for traversal slugs; the zod slug check above
         // already rejects those — this null branch is unreachable for valid slugs.
-        /* c8 ignore next */
+        /* c8 ignore start */
         if (!skillFile) {
             return respondWithAgentError(c, 400, [composeIssue("skills.invalid_name", { field: "name", received: slug })], { legacyFields: { name: slug } });
         }
+        /* c8 ignore stop */
         try {
             mkdirSync(join(userSkillsRoot, slug), { recursive: true });
             const existed = existsSync(skillFile);
@@ -537,4 +546,3 @@ export function createSkillsRoutes(deps) {
 }
 // Exports for tests
 export { parseSkillFile, serializeSkillFile, safeSkillPath, listSkillsInRoot };
-//# sourceMappingURL=skills.js.map

package/dist/api/routes/sot-bindings.d.ts

@@ -3,7 +3,7 @@ import type Database from "better-sqlite3";
 import { type ManagementMdWriteLockManager } from "../../core/management-md-write-lock.js";
 import type { ApiDependencies } from "../server.js";
 /**
- * SoT bindings — Section A of `rules/management.md` (§9.5, §10.6).
+ * SoT bindings — Section A of `policies/management.md` (§9.5, §10.6).
  *
  * The list is small (typically ≤ DOMAINS.length) and PUT replace-
  * semantics (§10.6) is the only mutation surface. A single-binding
@@ -17,4 +17,3 @@ export interface SotBindingsRoutesDeps {
 }
 export declare function createSotBindingsRoutes(deps: SotBindingsRoutesDeps): Hono;
 export declare function buildSotBindingsRoutesDepsFromApi(deps: ApiDependencies, fallbackLockManager?: ManagementMdWriteLockManager): SotBindingsRoutesDeps;
-//# sourceMappingURL=sot-bindings.d.ts.map

package/dist/api/routes/sot-bindings.js

@@ -195,4 +195,3 @@ export function buildSotBindingsRoutesDepsFromApi(deps, fallbackLockManager) {
             new InMemoryManagementMdWriteLockManager(),
     };
 }
-//# sourceMappingURL=sot-bindings.js.map

package/dist/api/routes/sse.d.ts

@@ -83,4 +83,3 @@ export declare function createSSERoutes(deps: {
     attachmentStore?: AttachmentStore;
 }): Hono;
 export {};
-//# sourceMappingURL=sse.d.ts.map

package/dist/api/routes/sse.js

@@ -116,9 +116,9 @@ export function createSSERoutes(deps) {
             if (resolvedResume.sessionId && resolvedResume.valid && deps.rebindSessionChannel) {
                 deps.rebindSessionChannel(resolvedResume.sessionId, channelId);
             }
-            // P2-19: pass `client` so the adapter removes only THIS tab's SSE
-            // entry. Today each tab gets a unique channelId so it's equivalent
-            // to a full delete; this guards a future change that lets multiple
+            // Pass `client` so the adapter removes only THIS tab's SSE entry.
+            // Today each tab gets a unique channelId so it's equivalent to a
+            // full delete; this guards a future change that lets multiple
             // tabs share a channelId (e.g. session-shared fan-out) from
             // accidentally reaping every tab when one disconnects.
             stream.onAbort(() => {
@@ -380,4 +380,3 @@ export function createSSERoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=sse.js.map

package/dist/api/routes/system.d.ts

@@ -1,4 +1,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createSystemRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=system.d.ts.map

package/dist/api/routes/system.js

@@ -217,4 +217,3 @@ export function createSystemRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=system.js.map

package/dist/api/routes/task-flows.d.ts

@@ -27,4 +27,3 @@
  */
 import { Hono } from "hono";
 export declare function createTaskFlowsRoutes(): Hono;
-//# sourceMappingURL=task-flows.d.ts.map

package/dist/api/routes/task-flows.js

@@ -152,4 +152,3 @@ export function createTaskFlowsRoutes() {
     });
     return app;
 }
-//# sourceMappingURL=task-flows.js.map

package/dist/api/routes/travel-bookings.d.ts

@@ -1,4 +1,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createTravelBookingRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=travel-bookings.d.ts.map

package/dist/api/routes/travel-bookings.js

@@ -156,4 +156,3 @@ export function createTravelBookingRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=travel-bookings.js.map

package/dist/api/routes/triggers.d.ts

@@ -1,4 +1,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createTriggerRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=triggers.d.ts.map

package/dist/api/routes/triggers.js

@@ -98,4 +98,3 @@ export function createTriggerRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=triggers.js.map

package/dist/api/routes/voice.d.ts

@@ -47,4 +47,3 @@ export interface VoiceRoutesOptions {
 }
 export declare function createVoiceRoutes(deps: ApiDependencies, opts?: VoiceRoutesOptions): Hono;
 export {};
-//# sourceMappingURL=voice.d.ts.map

package/dist/api/routes/voice.js

@@ -528,4 +528,3 @@ export function createVoiceRoutes(deps, opts = {}) {
     });
     return app;
 }
-//# sourceMappingURL=voice.js.map

package/dist/api/routes/wiki.d.ts

@@ -1,4 +1,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createWikiRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=wiki.d.ts.map

package/dist/api/routes/wiki.js

@@ -5,7 +5,7 @@ import { wikiBridgeProposalSchema, wikiFilePatchSchema, wikiFilePostSchema, wiki
 import { readJsonBody } from "../json-body.js";
 import { composeIssue, respondWithAgentError } from "../helpers/agent-errors.js";
 import { writeFileAtomically } from "../../core/atomic-write.js";
-import { buildWikiWorkspaceStats, createExternalWikiWorkspace, ensureDefaultWikiWorkspace, listWikiWorkspaces, readWikiWorkspaceByName, validateWikiRootPath, } from "../../core/wiki/workspaces.js";
+import { buildWikiWorkspaceStats, createExternalWikiWorkspace, defaultWikiRoot, ensureDefaultWikiWorkspace, listWikiWorkspaces, readWikiWorkspaceByName, validateWikiRootPath, } from "../../core/wiki/workspaces.js";
 import { probeExistingWikiVault } from "../../core/wiki/import-probe.js";
 import { applyImportMigration, planImportMigration, } from "../../core/wiki/import-migrate.js";
 import { estimateFullCompileCost } from "../../core/wiki/cost-estimate.js";
@@ -52,7 +52,7 @@ export function createWikiRoutes(deps) {
     app.get("/wiki/workspaces", (c) => {
         return c.json({
             defaultWorkspace: "default",
-            defaultInternalRoot: join(deps.config.dataDir, "wiki"),
+            defaultInternalRoot: defaultWikiRoot(deps.config),
             workspaces: listWikiWorkspaces(deps.db).map((row) => serializeWorkspace(row, deps.db)),
         });
     });
@@ -1020,7 +1020,14 @@ function searchWikiFiles(rootPath, query, limit) {
         if (!file.path.endsWith(".md"))
             continue;
         const full = join(rootPath, file.path);
-        const content = readFileSync(full, "utf-8");
+        let content;
+        try {
+            content = readFileSync(full, "utf-8");
+        }
+        catch {
+            // Race / permissions — skip rather than 500ing the whole search.
+            continue;
+        }
         const lower = content.toLowerCase();
         const idx = query ? lower.indexOf(query) : 0;
         if (idx < 0)
@@ -1039,11 +1046,14 @@ function searchWikiFiles(rootPath, query, limit) {
 function listWikiIndex(rootPath) {
     const out = [];
     for (const rel of walkFiles(rootPath)) {
-        if (rel.startsWith(".snapshots/"))
-            continue;
         const full = join(rootPath, rel);
-        const stat = statSync(full);
-        out.push({ path: rel, sizeBytes: stat.size, mtime: stat.mtime.toISOString() });
+        try {
+            const stat = statSync(full);
+            out.push({ path: rel, sizeBytes: stat.size, mtime: stat.mtime.toISOString() });
+        }
+        catch {
+            // Race: file vanished between readdir and stat. Skip rather than 500.
+        }
     }
     return out.sort((a, b) => a.path.localeCompare(b.path));
 }
@@ -1052,8 +1062,25 @@ function walkFiles(rootPath, relDir = "") {
     if (!existsSync(dir))
         return [];
     const out = [];
-    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    let entries;
+    try {
+        entries = readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        // Permission-denied / vanished mid-walk. Sibling helpers in
+        // `cost-estimate.ts` and `wiki-fts.ts:walkWikiTree` swallow the same
+        // condition; matching that behaviour keeps `/index` returning partial
+        // results instead of 500-ing on a single unreadable subdir.
+        return out;
+    }
+    for (const entry of entries) {
         const rel = relDir ? `${relDir}/${entry.name}` : entry.name;
+        // `.snapshots/` is the internal-mode backup tree (§14 Q3) and must
+        // never appear in `/index` or `/search` — its entries duplicate the
+        // live wiki and would explode walk cost on long-lived workspaces.
+        // Skip at walk time so the recursion doesn't pay for them.
+        if (rel === ".snapshots" || rel.startsWith(".snapshots/"))
+            continue;
         if (entry.isDirectory()) {
             out.push(...walkFiles(rootPath, rel));
         }
@@ -1113,4 +1140,3 @@ function isWikiFtsLayer(value) {
         value === "log" ||
         value === "inbox");
 }
-//# sourceMappingURL=wiki.js.map

package/dist/api/server.d.ts

@@ -48,7 +48,6 @@ export interface IntegrationStatuses {
     obsidian: IntegrationStatus;
     notion: IntegrationStatus;
     whatsapp: WhatsAppIntegrationStatus;
-    googleMaps: IntegrationStatus;
 }
 export interface MessagingHealthStatus {
     configured: boolean;
@@ -156,6 +155,36 @@ export interface ApiDependencies {
     onScheduleConfigChanged?: () => void;
     /** Called after git repository config changes so project-doc init rows can be queued. */
     onGitReposChanged?: () => void | Promise<void>;
+    /**
+     * Phase B-4 — DM-token-gated purchase workflow handler. Null when
+     * B-4 is not wired at startup (the default for any install that has
+     * not flipped the experimental flag on). The workflow runner refuses
+     * `variant: "purchase"` invocations with `purchase_b4_disabled` when
+     * absent; the dashboard / dispatcher inbound classifier are no-ops
+     * without it.
+     *
+     * MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §17 / §13 step 50.
+     */
+    purchaseHandler?: import("../services/browser-history/automation/purchase-handler.js").PurchaseHandler;
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §5 / §5.1 — browser-task sub-agent
+     * runner + shared slot state. Both wired together at boot in
+     * `index.ts`. Optional in tests; when absent the POST /api/browser-task
+     * route writes a synthetic terminal transition so the row doesn't
+     * hang in pending. Phase 1 runner is the `not_implemented` stub;
+     * Phase 2 lands the real Playwright + Claude SDK driver.
+     */
+    browserTaskRunner?: import("../services/browser-task/browser-task-runner.js").BrowserTaskRunner;
+    browserTaskSlotStateRef?: import("../services/browser-task/browser-task-runner.js").SlotStateRef;
+    /**
+     * BROWSER_TASK_REDESIGN_PLAN.md §5 / §14.11 — lite-final-confirm
+     * token handler. The runner calls into it from the final-confirm
+     * gate; the messaging adapter's `!~xxxxxxxx` inbound dispatcher
+     * routes via `jti`-prefix between this and `purchaseHandler`. Phase 1
+     * wires the handler but the runner stub does not exercise it; Phase 2
+     * lights up the gate.
+     */
+    finalConfirmHandler?: import("../services/browser-history/automation/final-confirm-handler.js").FinalConfirmHandler;
     /** Called when /setup/start arrives so the dispatcher can pause autonomous work. */
     onSetupStart?: (mode: "initial" | "update") => void;
     /** Called after setup/save-rules to clear the setup mode from the dispatcher */
@@ -171,7 +200,7 @@ export interface ApiDependencies {
      */
     onIndexableContextChange?: (path: string) => void;
     /**
-     * B-007 §5.8 — called after any write/delete under `routines/custom/`
+     * B-007 §5.8 — called after any write/delete under `policies/routines/custom/`
      * so the CustomRoutineScheduler re-enumerates and re-registers jobs.
      */
     onCustomRoutinesChanged?: () => void;
@@ -192,7 +221,7 @@ export interface ApiDependencies {
      * debugging and the parallel-verification rollout phase. Returns
      * the structured maintenance result so the CLI can surface counts.
      */
-    triggerRoadmapMaintenance?: () => RoadmapMaintenanceResult;
+    triggerRoadmapMaintenance?: () => Promise<RoadmapMaintenanceResult>;
     /**
      * Emit a `routine.roadmap_refresh` event. Internal callers (post-morning,
      * google-auth-ready, schedule-insert hook) honor the 5-minute dedup guard.
@@ -335,6 +364,15 @@ export interface ApiDependencies {
      * lazily builds a stand-in only when this is unset.
      */
     gitAccountRegistry?: import("../services/git-account-registry.js").GitAccountRegistry;
+    /**
+     * Agent Definitions enabled-cache (AGENT_DEFINITIONS_DESIGN.md §6.4 / §9.5).
+     * The same {@link AgentEnabledCache} instance the loader builds at boot and
+     * the scheduler's per-built-in cron gate consults. `PATCH /api/agents/:slug`
+     * and `DELETE /api/agents/:slug` call `.invalidate()` after an `enabled`
+     * change so the next cron firing re-reads the new state without a restart.
+     * Optional so test harnesses / headless installs can omit it.
+     */
+    agentEnabledCache?: import("../core/agents/loader.js").AgentEnabledCache;
 }
 export interface TelegramBotInfoResponse {
     ok: true;
@@ -450,4 +488,3 @@ export interface WhatsAppControls {
 }
 export declare function createApp(deps: ApiDependencies): Hono;
 export {};
-//# sourceMappingURL=server.d.ts.map

package/dist/api/server.js

@@ -10,6 +10,7 @@ import { auditRiskClassifications, classifyRisk, findExplicitRiskClassification,
 import { createHealthRoutes } from "./routes/health.js";
 import { createContextRoutes } from "./routes/context/index.js";
 import { createAgentRoutes } from "./routes/agent.js";
+import { createAgentDefinitionRoutes } from "./routes/agents/index.js";
 import { createDashboardRoutes } from "./routes/dashboard/index.js";
 import { createNotionRoutes } from "./routes/notion.js";
 import { createGitHubRoutes } from "./routes/github.js";
@@ -29,6 +30,7 @@ import { createSystemRoutes } from "./routes/system.js";
 import { createBackendRoutes } from "./routes/backends.js";
 import { createSkillsRoutes } from "./routes/skills.js";
 import { createObservationRoutes } from "./routes/observations.js";
+import { createFeedbackRoutes } from "./routes/feedback.js";
 import { createSkillCurationRoutes } from "./routes/skill-curation.js";
 import { createProfileQuestionsRoutes } from "./routes/profile-questions.js";
 import { createRecurringScheduleRoutes } from "./routes/recurring-schedules.js";
@@ -36,7 +38,6 @@ import { createScheduleOptionsRoutes } from "./routes/schedule-options.js";
 import { createTriggerRoutes } from "./routes/triggers.js";
 import { createTravelBookingRoutes } from "./routes/travel-bookings.js";
 import { createReceiptRoutes } from "./routes/receipts.js";
-import { createTravelTimeRoutes } from "./routes/travel-time.js";
 import { createBookRoutes } from "./routes/books.js";
 import { createDelegatedRunRoutes } from "./routes/delegated.js";
 import { createDelegatedSyncRoutes } from "./routes/delegated-sync.js";
@@ -49,6 +50,11 @@ import { createCommandsRoutes } from "./routes/commands.js";
 import { createVoiceRoutes } from "./routes/voice.js";
 import { createWikiRoutes } from "./routes/wiki.js";
 import { createFsRoutes } from "./routes/fs.js";
+import { createBrowserHistoryRoutes } from "./routes/browser-history.js";
+import { createBrowserHistoryManagedRoutes } from "./routes/browser-history-managed.js";
+import { createBrowserAutomationSitesRoutes } from "./routes/browser-automation-sites.js";
+import { createBrowserAutomationPurchaseRoutes } from "./routes/browser-automation-purchase.js";
+import { createBrowserTaskRoutes } from "./routes/browser-task.js";
 import { buildManagedTasksRoutesDepsFromApi, createManagedTasksRoutes, } from "./routes/managed-tasks.js";
 import { buildSotBindingsRoutesDepsFromApi, createSotBindingsRoutes, } from "./routes/sot-bindings.js";
 import { buildEntitiesRoutesDepsFromApi, createEntitiesRoutes, } from "./routes/entities.js";
@@ -58,6 +64,7 @@ import { createMcpRoutes } from "./routes/mcp.js";
 import { createAttachmentRoutes } from "./routes/attachments.js";
 import { InMemoryManagementMdWriteLockManager, } from "../core/management-md-write-lock.js";
 import { isRuntimeAvailableBackendId } from "@aitne/shared";
+import { loopbackOrigins, resolveDashboardPort } from "@aitne/shared";
 import { queryChatBinding } from "./chat-binding-query.js";
 import { DEFAULT_CLAUDE_HIGH_MODEL, getModelsForBackend, } from "../core/backends/model-registry.js";
 import { createLogger } from "../logging.js";
@@ -107,11 +114,7 @@ function getRequestHostname(c) {
     /* c8 ignore stop */
 }
 function buildAllowedDaemonOrigins(apiPort) {
-    return new Set([
-        `http://localhost:${apiPort}`,
-        `http://127.0.0.1:${apiPort}`,
-        `http://[::1]:${apiPort}`,
-    ]);
+    return new Set(loopbackOrigins(apiPort));
 }
 function evaluateLoopbackBrowserGate(input) {
     if (SAFE_METHODS.has(input.method)) {
@@ -190,7 +193,12 @@ export function createApp(deps) {
         }
         await next();
     });
-    app.use("*", cors({ origin: "http://localhost:3000" }));
+    // CORS for direct browser → daemon requests. The dashboard normally proxies
+    // server-side (no CORS), but this keeps the daemon reachable from the
+    // dashboard's own loopback origin on whatever port it runs (PA_DASHBOARD_PORT
+    // default = DEFAULT_DASHBOARD_PORT). Previously hardcoded to localhost:3000,
+    // which silently broke whenever the dashboard ran on any other port.
+    app.use("*", cors({ origin: loopbackOrigins(resolveDashboardPort()) }));
     app.use("*", honoLogger());
     // Risk-based auth middleware — Approve-tier endpoints require Bearer token;
     // ReadSensitive-tier endpoints require Bearer or X-Read-Token when
@@ -288,6 +296,7 @@ export function createApp(deps) {
     const healthRoutes = createHealthRoutes(deps);
     const contextRoutes = createContextRoutes(deps);
     const agentRoutes = createAgentRoutes(deps);
+    const agentDefinitionRoutes = createAgentDefinitionRoutes(deps);
     const dashboardRoutes = createDashboardRoutes(deps);
     const notionRoutes = createNotionRoutes({
         notionService: deps.services.notion,
@@ -318,6 +327,7 @@ export function createApp(deps) {
     const backendRoutes = createBackendRoutes(deps);
     const skillsRoutes = createSkillsRoutes({ config: deps.config });
     const observationRoutes = createObservationRoutes(deps);
+    const feedbackRoutes = createFeedbackRoutes(deps);
     const skillCurationRoutes = createSkillCurationRoutes(deps);
     const profileQuestionsRoutes = createProfileQuestionsRoutes(deps);
     const recurringScheduleRoutes = createRecurringScheduleRoutes(deps);
@@ -327,7 +337,6 @@ export function createApp(deps) {
     const triggerRoutes = createTriggerRoutes(deps);
     const travelBookingRoutes = createTravelBookingRoutes(deps);
     const receiptRoutes = createReceiptRoutes(deps);
-    const travelTimeRoutes = createTravelTimeRoutes({ services: deps.services });
     const bookRoutes = createBookRoutes(deps);
     const integrationRoutes = createIntegrationRoutes(deps);
     const integrationReconcileRoutes = createIntegrationReconcileRoutes(deps);
@@ -340,6 +349,27 @@ export function createApp(deps) {
     const voiceRoutes = createVoiceRoutes(deps);
     const wikiRoutes = createWikiRoutes(deps);
     const fsRoutes = createFsRoutes(deps);
+    const browserHistoryRoutes = createBrowserHistoryRoutes(deps);
+    const browserHistoryManagedRoutes = createBrowserHistoryManagedRoutes(deps);
+    // MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §16.9 — Phase B-2.5
+    // per-site sign-in surface. Same mounting rationale as the parent
+    // automation routes: the per-site list is the dashboard's "available
+    // sites" probe, so it stays mounted unconditionally and gates on the
+    // master managed-chromium toggle inside the connect / reauth handlers.
+    const browserAutomationSitesRoutes = createBrowserAutomationSitesRoutes(deps);
+    // MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §17.8 — Phase B-4
+    // experimental purchase config + audit surface. Mounted
+    // unconditionally; every route checks `getB4Enabled` / per-site
+    // config presence before producing meaningful output, so absent
+    // wiring is benign (returns empty lists + 403-equivalent JSON on
+    // attempted enable).
+    const browserAutomationPurchaseRoutes = createBrowserAutomationPurchaseRoutes(deps);
+    // BROWSER_TASK_REDESIGN_PLAN.md §3 — Phase 1 browser-task surface.
+    // Mounted unconditionally so the dashboard /browser-tasks page
+    // (Phase 7a) reaches a stable surface even when the runner is not
+    // wired (tests / lite installs). The route handlers degrade
+    // gracefully on absent runner / slot ref.
+    const browserTaskRoutes = createBrowserTaskRoutes(deps);
     // Management Registry & Entities (docs/design/21-management-registry-
     // and-entities.md). The managed-tasks and sot-bindings routes MUST
     // share one lock manager — separate instances would let back-to-back
@@ -355,6 +385,7 @@ export function createApp(deps) {
     app.route("/api", healthRoutes);
     app.route("/api", contextRoutes);
     app.route("/api", agentRoutes);
+    app.route("/api", agentDefinitionRoutes);
     app.route("/api", dashboardRoutes);
     app.route("/api", notionRoutes);
     app.route("/api", metricsRoutes);
@@ -366,6 +397,7 @@ export function createApp(deps) {
     app.route("/api", backendRoutes);
     app.route("/api", skillsRoutes);
     app.route("/api", observationRoutes);
+    app.route("/api", feedbackRoutes);
     app.route("/api", skillCurationRoutes);
     app.route("/api", profileQuestionsRoutes);
     app.route("/api", recurringScheduleRoutes);
@@ -377,7 +409,6 @@ export function createApp(deps) {
     app.route("/api", triggerRoutes);
     app.route("/api", travelBookingRoutes);
     app.route("/api", receiptRoutes);
-    app.route("/api", travelTimeRoutes);
     app.route("/api", bookRoutes);
     app.route("/api", integrationRoutes);
     app.route("/api", integrationReconcileRoutes);
@@ -390,6 +421,11 @@ export function createApp(deps) {
     app.route("/api", voiceRoutes);
     app.route("/api", wikiRoutes);
     app.route("/api", fsRoutes);
+    app.route("/api", browserHistoryRoutes);
+    app.route("/api", browserHistoryManagedRoutes);
+    app.route("/api", browserAutomationSitesRoutes);
+    app.route("/api", browserAutomationPurchaseRoutes);
+    app.route("/api", browserTaskRoutes);
     // ── Chat file attachments (Phase 1) ──
     if (deps.attachmentStore) {
         const attachmentRoutes = createAttachmentRoutes({
@@ -571,8 +607,8 @@ export function createApp(deps) {
     // rely on the default-Approve fallback. Most are intentional admin
     // surfaces (secrets, pairing, restore-snapshot, dashboard-only
     // controls) for which fail-closed is correct — but the same fallback
-    // historically masked the `POST /api/context/roadmap/id` regression
-    // that 7×401'd inside roadmap_refresh on 2026-04-28.
+    // can mask a missing classifier entry on an agent-callable route,
+    // producing a 401 retry spiral inside the routine that hits it.
     //
     // Gating: log only when the unclassified set CHANGES from the last
     // boot. A warning that fires identically on every restart turns into
@@ -603,4 +639,3 @@ export function createApp(deps) {
     }
     return app;
 }
-//# sourceMappingURL=server.js.map

package/dist/bootstrap/adapters.d.ts

@@ -106,4 +106,3 @@ export declare function createAdapterReloaders(deps: BootstrapAdapterDeps): Adap
  * own.
  */
 export declare function whatsappQrResponseFromAdapter(adapter: WhatsAppAdapter | null, snapshotOverride?: WhatsAppQrSnapshot | null): WhatsAppQrResponse;
-//# sourceMappingURL=adapters.d.ts.map

package/dist/bootstrap/adapters.js

@@ -237,4 +237,3 @@ export function whatsappQrResponseFromAdapter(adapter, snapshotOverride) {
         error: adapter.getStatusError(),
     };
 }
-//# sourceMappingURL=adapters.js.map

package/dist/bootstrap/api.d.ts

@@ -121,6 +121,13 @@ export interface BootstrapApiDeps {
     readonly dispatcher: EventDispatcher;
     readonly sessionManager: SessionManager;
     readonly scheduler: AgentScheduler;
+    /**
+     * Agent Definitions enabled-cache built by `bootstrapAgents` (§10.5) — the
+     * same instance the scheduler's per-built-in cron gate consults. Threaded
+     * into `ApiDependencies` so `PATCH`/`DELETE /api/agents/:slug` can invalidate
+     * it on an `enabled` change. Optional so partial test harnesses can omit it.
+     */
+    readonly agentEnabledCache?: import("../core/agents/loader.js").AgentEnabledCache;
     readonly customRoutineScheduler: CustomRoutineScheduler;
     readonly healthMonitor: HealthMonitor;
     readonly heartbeat: Heartbeat;
@@ -130,6 +137,14 @@ export interface BootstrapApiDeps {
     readonly primaryVaultWatcher: PrimaryVaultWatcher;
     readonly delegatedBackendInvoker: DelegatedBackendInvoker;
     readonly gitAccountRegistry: GitAccountRegistry;
+    /** Shared in-memory slot state — the runner + route layer mutate one
+     *  instance so cancel-while-pending and runner-side promote see each
+     *  other. Constructed in `event-pipeline.ts`. */
+    readonly browserTaskSlotStateRef: import("../services/browser-task/browser-task-runner.js").SlotStateRef;
+    /** Per-install browser-task runner. Phase 1 runs without `driver`
+     *  wired so the runner returns `failed (not_implemented)`; Phase 2
+     *  passes the Playwright + Claude SDK driver into the same factory. */
+    readonly browserTaskRunner: import("../services/browser-task/browser-task-runner.js").BrowserTaskRunner;
     readonly writeTracker: AgentWriteTracker;
     readonly auditLogger: AuditLogger;
     readonly attachmentStore: AttachmentStore;
@@ -155,7 +170,7 @@ export interface BootstrapApiDeps {
         summary: RefreshDmSessionWorkdirsResult;
         mailAccounts: ReadonlyArray<unknown>;
     } | null;
-    readonly fireRoadmapMaintenance: () => RoadmapMaintenanceResult;
+    readonly fireRoadmapMaintenance: () => Promise<RoadmapMaintenanceResult>;
     readonly buildCalendarPoller: () => CalendarPoller | null;
     readonly buildNotionPoller: () => NotionPoller | null;
     readonly buildGitWatcher: () => GitWatcher | null;
@@ -202,4 +217,3 @@ export interface BootstrapApiResult {
  * dispatcher / heartbeat work that depends on the listener being live.
  */
 export declare function startApiServer(deps: BootstrapApiDeps): BootstrapApiResult;
-//# sourceMappingURL=api.d.ts.map