@aitne/daemon 0.1.8 → 0.1.9

package/dist/api/routes/dashboard/messaging.d.ts

@@ -1,4 +1,3 @@
 import type { Hono } from "hono";
 import type { ApiDependencies } from "../../server.js";
 export declare function registerMessagingRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=messaging.d.ts.map

package/dist/api/routes/dashboard/messaging.js

@@ -6,9 +6,8 @@ export function registerMessagingRoutes(app, deps) {
      * POST /messaging/whatsapp/pair
      *
      * Triggers Baileys pairing and waits up to ~10s for the first scannable QR.
-     * If WhatsApp isn't enabled yet, returns 409 with a clear hint instead of
-     * silently 404'ing — this surfaces the original setup-flow bug where users
-     * clicked Pair without first enabling.
+     * Returns 409 (not 404) when WhatsApp isn't enabled yet so the dashboard
+     * can show an actionable hint instead of a generic not-found.
      */
     app.post("/messaging/whatsapp/pair", async (c) => {
         if (!deps.whatsappControls) {
@@ -348,4 +347,3 @@ export function registerMessagingRoutes(app, deps) {
         return c.json(deps.messagingControls.discord.getPairingStatus());
     });
 }
-//# sourceMappingURL=messaging.js.map

package/dist/api/routes/dashboard/notifications.d.ts

@@ -1,4 +1,3 @@
 import type { Hono } from "hono";
 import type { ApiDependencies } from "../../server.js";
 export declare function registerNotificationsRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=notifications.d.ts.map

package/dist/api/routes/dashboard/notifications.js

@@ -106,4 +106,3 @@ export function registerNotificationsRoutes(app, deps) {
         });
     });
 }
-//# sourceMappingURL=notifications.js.map

package/dist/api/routes/dashboard/oauth-google.d.ts

@@ -1,4 +1,3 @@
 import type { Hono } from "hono";
 import type { ApiDependencies } from "../../server.js";
 export declare function registerOauthGoogleRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=oauth-google.d.ts.map

package/dist/api/routes/dashboard/oauth-google.js

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { loopbackOrigins, resolveDashboardPort } from "@aitne/shared";
 import { getGoogleOAuthClientConfig, parseGoogleCredentialsJson, } from "../../../services/google-auth.js";
 import { createLogger, toSafeErrorMessage } from "../../../logging.js";
 const MAX_UPLOAD_SIZE = 100 * 1024; // 100 KB — credential files are small
@@ -21,7 +22,7 @@ export function registerOauthGoogleRoutes(app, deps) {
     // The OAuth callback HTML uses `window.opener.postMessage(..., target)`
     // to notify the dashboard that auth succeeded. `target` was previously
     // derived from the Origin/Referer headers at start time with a
-    // `http://localhost:3000` fallback when neither was present. Both
+    // `http://localhost:<dashboard port>` fallback when neither was present. Both
     // headers are attacker-controlled in the request that *initiates* the
     // flow (the attacker's page can be `http://attacker.com`), so the
     // postMessage notification could be steered off the trusted dashboard.
@@ -31,16 +32,12 @@ export function registerOauthGoogleRoutes(app, deps) {
     // and a future widening of the payload would leak silently. Defence is
     // a closed allowlist: only same-origin localhost variants on the
     // configured dashboard port are accepted; anything else rejects the
-    // OAuth start with 403.
-    const dashboardPort = Number.parseInt(process.env.PA_DASHBOARD_PORT ?? "", 10) || 3000;
-    const allowedDashboardOrigins = new Set([
-        `http://localhost:${dashboardPort}`,
-        `http://127.0.0.1:${dashboardPort}`,
-        // IPv6 loopback — some dev environments (Docker desktop with IPv6
-        // preference, certain Node IPv6-first configurations) emit origins
-        // in this form. URL.origin returns the bracketed literal.
-        `http://[::1]:${dashboardPort}`,
-    ]);
+    // OAuth start with 403. `loopbackOrigins` covers all three loopback
+    // forms — the `[::1]` variant matters because some IPv6-first
+    // environments (Docker Desktop with IPv6 preference, certain Node
+    // IPv6-first configs) emit it, and URL.origin returns the bracketed
+    // literal.
+    const allowedDashboardOrigins = new Set(loopbackOrigins(resolveDashboardPort()));
     function parseOriginSafely(value) {
         if (!value)
             return null;
@@ -163,10 +160,9 @@ export function registerOauthGoogleRoutes(app, deps) {
         if (!clientConfig) {
             return c.json({ error: "Invalid credentials format" }, 400);
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         let google;
         try {
-            const mod = await import("googleapis");
+            const mod = (await import("googleapis"));
             google = mod.google;
         }
         catch {
@@ -290,4 +286,3 @@ export function registerOauthGoogleRoutes(app, deps) {
         }
     });
 }
-//# sourceMappingURL=oauth-google.js.map

package/dist/api/routes/dashboard/schedule-readonly.d.ts

@@ -1,4 +1,3 @@
 import type { Hono } from "hono";
 import type { ApiDependencies } from "../../server.js";
 export declare function registerScheduleReadonlyRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=schedule-readonly.d.ts.map

package/dist/api/routes/dashboard/schedule-readonly.js

@@ -4,12 +4,21 @@ export function registerScheduleReadonlyRoutes(app, deps) {
     /** GET /schedule/next — next pending scheduled task */
     app.get("/schedule/next", (c) => {
         const row = db
-            .prepare(`SELECT id, scheduled_for, task_type, task_description
+            .prepare(`SELECT id, scheduled_for, task_type, task_description, task_prompt
          FROM agent_schedule
          WHERE status = 'pending' AND scheduled_for > datetime('now')
          ORDER BY scheduled_for ASC LIMIT 1`)
             .get();
-        return c.json({ next: row ?? null });
+        if (!row)
+            return c.json({ next: null });
+        // One-off rows make `task_description` an optional label, so it can be
+        // empty. Coalesce to a prompt excerpt so the dashboard's "Next Up" card
+        // always shows meaningful text. `task_prompt` is not surfaced raw.
+        const { task_prompt, ...rest } = row;
+        const label = rest.task_description && rest.task_description.trim().length > 0
+            ? rest.task_description
+            : (task_prompt ?? "").slice(0, 200);
+        return c.json({ next: { ...rest, task_description: label } });
     });
     /** GET /schedule/list — all scheduled tasks (paginated) */
     app.get("/schedule/list", (c) => {
@@ -43,4 +52,3 @@ export function registerScheduleReadonlyRoutes(app, deps) {
         });
     });
 }
-//# sourceMappingURL=schedule-readonly.js.map

package/dist/api/routes/dashboard/secrets.d.ts

@@ -21,4 +21,3 @@ export interface SecretConfigSummary {
 }
 export declare function getSecretConfigSummary(deps: ApiDependencies): Promise<SecretConfigSummary>;
 export declare function registerSecretsRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=secrets.d.ts.map

package/dist/api/routes/dashboard/secrets.js

@@ -304,4 +304,3 @@ export function registerSecretsRoutes(app, deps) {
         });
     });
 }
-//# sourceMappingURL=secrets.js.map

package/dist/api/routes/dashboard/snapshots.d.ts

@@ -1,4 +1,3 @@
 import type { Hono } from "hono";
 import type { ApiDependencies } from "../../server.js";
 export declare function registerSnapshotsRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=snapshots.d.ts.map

package/dist/api/routes/dashboard/snapshots.js

@@ -30,4 +30,3 @@ export function registerSnapshotsRoutes(app, deps) {
         return c.json({ snapshots: rows });
     });
 }
-//# sourceMappingURL=snapshots.js.map

package/dist/api/routes/delegated-sync.d.ts

@@ -1,4 +1,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createDelegatedSyncRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=delegated-sync.d.ts.map

package/dist/api/routes/delegated-sync.js

@@ -189,4 +189,3 @@ export function createDelegatedSyncRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=delegated-sync.js.map

package/dist/api/routes/delegated.d.ts

@@ -40,4 +40,3 @@ import type { ApiDependencies } from "../server.js";
  * registry — both are deferrable.
  */
 export declare function createDelegatedRunRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=delegated.d.ts.map

package/dist/api/routes/delegated.js

@@ -248,4 +248,3 @@ function clampNumber(raw, defaultValue, min, max, allowFloat = false) {
         return null;
     return raw;
 }
-//# sourceMappingURL=delegated.js.map

package/dist/api/routes/docs.d.ts

@@ -31,4 +31,3 @@ export declare function createDocsRoutesFromDeps(deps: Pick<ApiDependencies, "db
     indexer?: DocsIndexerHandle;
     docsQAAdapter?: DocsQAAdapter;
 }): Hono;
-//# sourceMappingURL=docs.d.ts.map

package/dist/api/routes/docs.js

@@ -640,4 +640,3 @@ function rebindDocsQASessionChannel(db, newChannelId) {
 export function createDocsRoutesFromDeps(deps, extra = {}) {
     return createDocsRoutes({ db: deps.db, ...extra });
 }
-//# sourceMappingURL=docs.js.map

package/dist/api/routes/entities.d.ts

@@ -6,4 +6,3 @@ export interface EntitiesRoutesDeps {
 }
 export declare function createEntitiesRoutes(deps: EntitiesRoutesDeps): Hono;
 export declare function buildEntitiesRoutesDepsFromApi(deps: ApiDependencies): EntitiesRoutesDeps;
-//# sourceMappingURL=entities.d.ts.map

package/dist/api/routes/entities.js

@@ -135,7 +135,8 @@ export function createEntitiesRoutes(deps) {
                 items: items.map(toResponse),
             });
         }
-        // tier-2
+        // Tier-2 fallback — domain/type/date triple is required for the
+        // structured lookup below.
         if (!domain || !type || !date) {
             return respondWithAgentError(c, 400, [
                 composeIssue("entities.validation_error", {
@@ -222,7 +223,7 @@ export function createEntitiesRoutes(deps) {
                 }),
             ], {
                 legacyFields: {
-                    message: "provide `path` query parameter (e.g. work/meetings/foo.md)",
+                    message: "provide `path` query parameter (e.g. knowledge/entities/work/meetings/foo.md)",
                 },
             });
         }
@@ -242,4 +243,3 @@ export function createEntitiesRoutes(deps) {
 export function buildEntitiesRoutesDepsFromApi(deps) {
     return { db: deps.db };
 }
-//# sourceMappingURL=entities.js.map

package/dist/api/routes/fs.d.ts

@@ -20,4 +20,3 @@ import type { ApiDependencies } from "../server.js";
  * filesystem call is made.
  */
 export declare function createFsRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=fs.d.ts.map

package/dist/api/routes/fs.js

@@ -168,4 +168,3 @@ function mapValidationError(error) {
         /* c8 ignore stop */
     }
 }
-//# sourceMappingURL=fs.js.map

package/dist/api/routes/fs.logic.d.ts

@@ -59,4 +59,3 @@ export type NormalizeResult = {
     message: string;
 };
 export type NormalizeError = "invalid_path" | "relative_path" | "forbidden_prefix" | "secret_path";
-//# sourceMappingURL=fs.logic.d.ts.map

package/dist/api/routes/fs.logic.js

@@ -77,7 +77,12 @@ export const SECRET_ABS_PATTERNS = [
     /(^|\/)id_ed25519(\..*)?$/,
 ];
 export function isSecretPath(absPath) {
-    return SECRET_ABS_PATTERNS.some((re) => re.test(absPath));
+    // SECRET_ABS_PATTERNS are POSIX-slash anchored, so a backslash-delimited
+    // Windows path (e.g. `C:\Users\me\.ssh\id_rsa`) would slip past them.
+    // Normalising separators is inert on macOS/Linux (legitimate secret-dir
+    // paths there contain no backslashes) and closes the Windows gap.
+    const p = absPath.replace(/\\/g, "/");
+    return SECRET_ABS_PATTERNS.some((re) => re.test(p));
 }
 export function isUnderForbidden(absPath) {
     // Exemptions take precedence — a path under `/var/folders/...`
@@ -134,4 +139,3 @@ export function normalizeRequestedPath(raw) {
     }
     return { ok: true, path: absPath };
 }
-//# sourceMappingURL=fs.logic.js.map

package/dist/api/routes/git-accounts.d.ts

@@ -20,4 +20,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createGitAccountsRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=git-accounts.d.ts.map

package/dist/api/routes/git-accounts.js

@@ -224,4 +224,3 @@ function wireRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=git-accounts.js.map

package/dist/api/routes/git-templates.d.ts

@@ -47,4 +47,3 @@ export interface GitTemplatesRouteDependencies {
     getContextDir: () => string;
 }
 export declare function createGitTemplatesRoutes(deps: GitTemplatesRouteDependencies): Hono;
-//# sourceMappingURL=git-templates.d.ts.map

package/dist/api/routes/git-templates.js

@@ -283,13 +283,19 @@ export function createGitTemplatesRoutes(deps) {
                 : persisted.reason === "correlation_mismatch"
                     ? 409
                     : 404;
+            // `correlation_mismatch` is only returned by `persistPerFileStatus`
+            // when `options.correlationId !== undefined`, and the route only
+            // spreads `correlationId` into the persist call when
+            // `typeof body.correlationId === "string"`. So when we land here
+            // with `correlation_mismatch`, `body.correlationId` is guaranteed
+            // to be a string — no defensive fallback needed.
             return respondWithAgentError(c, status, [
                 composeIssue(registryCode, {
                     field: persisted.reason === "correlation_mismatch"
                         ? "correlationId"
                         : "slug",
                     received: persisted.reason === "correlation_mismatch"
-                        ? (typeof body.correlationId === "string" ? body.correlationId : null)
+                        ? body.correlationId
                         : slug,
                 }),
             ]);
@@ -353,4 +359,3 @@ export function createGitTemplatesRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=git-templates.js.map

package/dist/api/routes/git.d.ts

@@ -31,4 +31,3 @@ export interface GitRouteDependencies {
  * Refs and hashes are sanitized to prevent shell injection.
  */
 export declare function createGitRoutes(deps: GitRouteDependencies): Hono;
-//# sourceMappingURL=git.d.ts.map

package/dist/api/routes/git.js

@@ -70,15 +70,21 @@ export function createGitRoutes(deps) {
                 }),
             ], { legacyErrorCode: "invalid or missing repo", legacyFields: { allowed: listAllowed() } });
         }
-        const count = Math.min(Number(c.req.query("count") ?? "5"), 200);
+        const countRaw = Number.parseInt(c.req.query("count") ?? "5", 10);
+        const count = Number.isFinite(countRaw) && countRaw >= 1
+            ? Math.min(countRaw, 200)
+            : 5;
+        // ASCII Unit Separator — git commit fields (subject/author) cannot contain it,
+        // so it's a safer delimiter than `|` which naturally appears in commit subjects.
+        const FS = "\x1f";
         try {
-            const { stdout } = await execFileAsync("git", ["log", "--format=%H|%h|%s|%an|%ar", `-${count}`], { cwd: repo, timeout: 10_000 });
+            const { stdout } = await execFileAsync("git", ["log", `--format=%H${FS}%h${FS}%s${FS}%an${FS}%ar`, `-${count}`], { cwd: repo, timeout: 10_000 });
             const commits = stdout
                 .trim()
                 .split("\n")
                 .filter(Boolean)
                 .map((line) => {
-                const [hash, short, subject, author, ago] = line.split("|");
+                const [hash, short, subject, author, ago] = line.split(FS);
                 return { hash, short, subject, author, ago };
             });
             return c.json({ commits });
@@ -167,4 +173,3 @@ export function createGitRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=git.js.map

package/dist/api/routes/github.d.ts

@@ -31,4 +31,3 @@ export declare function createGitHubRoutes(deps: GitHubRouteDependencies): {
 };
 /** Verify GitHub webhook HMAC-SHA256 signature */
 export declare function verifySignature(payload: string, signature: string, secret: string): boolean;
-//# sourceMappingURL=github.d.ts.map

package/dist/api/routes/github.js

@@ -53,6 +53,11 @@ export function createGitHubRoutes(deps) {
             return null;
         if (octokit && cachedToken === githubToken)
             return octokit;
+        // No pending-promise coalescing: the only cost of a concurrent miss is one
+        // extra `new Octokit({...})` (the dynamic import is module-cached after
+        // the first call). Coalescing would also mean that a caller whose token
+        // was rotated mid-flight could receive an Octokit auth'd with the prior
+        // token — losing the cache-by-token guarantee this function provides.
         const { Octokit } = await import("@octokit/rest");
         octokit = new Octokit({ auth: githubToken });
         cachedToken = githubToken;
@@ -561,6 +566,7 @@ class RateLimiter {
     maxRequests;
     windowMs;
     windows = new Map();
+    lastSweepAt = 0;
     constructor(maxRequests, windowMs) {
         this.maxRequests = maxRequests;
         this.windowMs = windowMs;
@@ -568,24 +574,31 @@ class RateLimiter {
     allow(key) {
         const now = Date.now();
         const cutoff = now - this.windowMs;
+        // Periodic full sweep — bounds map size against the floods-of-unique-keys
+        // case where the old per-key cleanup never runs because each key never
+        // returns. Throttled to once per windowMs and only when the map has grown
+        // past the threshold, so steady-state per-request cost stays O(W).
+        if (this.windows.size > 1000 && now - this.lastSweepAt >= this.windowMs) {
+            this.lastSweepAt = now;
+            for (const [k, ts] of this.windows) {
+                while (ts.length > 0 && ts[0] < cutoff)
+                    ts.shift();
+                if (ts.length === 0)
+                    this.windows.delete(k);
+            }
+        }
         let timestamps = this.windows.get(key);
         if (!timestamps) {
             timestamps = [];
             this.windows.set(key, timestamps);
         }
-        // Remove expired timestamps
+        // Remove expired timestamps for this key
         while (timestamps.length > 0 && timestamps[0] < cutoff) {
             timestamps.shift();
         }
-        // Clean up empty entries to prevent memory leak from unique IPs
-        if (timestamps.length === 0 && this.windows.size > 1000) {
-            this.windows.delete(key);
-            return true;
-        }
         if (timestamps.length >= this.maxRequests)
             return false;
         timestamps.push(now);
         return true;
     }
 }
-//# sourceMappingURL=github.js.map

package/dist/api/routes/health.d.ts

@@ -1,4 +1,3 @@
 import { Hono } from "hono";
 import type { ApiDependencies } from "../server.js";
 export declare function createHealthRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=health.d.ts.map

package/dist/api/routes/health.js

@@ -123,9 +123,11 @@ export function createHealthRoutes(deps) {
                COUNT(*) FILTER (WHERE consecutive_failures >= ?) AS failing_now
              FROM managed_tasks`)
                 .get(MANAGEMENT_FAILURE_NOTIFY_THRESHOLD_DEFAULT);
+            // SQL COUNT() always returns an integer (zero on an empty table,
+            // never NULL), so a `?? 0` fallback would be dead defensive code.
             return {
-                active: row.active ?? 0,
-                failingNow: row.failing_now ?? 0,
+                active: row.active,
+                failingNow: row.failing_now,
             };
         }, { active: 0, failingNow: 0 });
         // ── Notifications Center inputs ────────────────────────────────────
@@ -256,4 +258,3 @@ export function createHealthRoutes(deps) {
     });
     return app;
 }
-//# sourceMappingURL=health.js.map

package/dist/api/routes/integrations/crud-patch.d.ts

@@ -14,4 +14,3 @@ import type { ApiDependencies } from "../../server.js";
  *   audit → flip-lock release.
  */
 export declare function handleIntegrationPatch(c: Context, deps: ApiDependencies): Promise<Response>;
-//# sourceMappingURL=crud-patch.d.ts.map

package/dist/api/routes/integrations/crud-patch.js

@@ -1,10 +1,10 @@
 import { INTEGRATION_DESCRIPTORS, filterDeniedToolsForBackend, integrationPatchSchema, isIntegrationKey, recommendedStarterDeniedTools, supportedNativeBackends, validateDeniedTools, } from "@aitne/shared";
 import { readIntegrations, updateIntegrationState, } from "../../../db/integrations-store.js";
 import { writeManagementMd } from "../../../core/management-md.js";
-import { missingDelegatedVariants, missingNativeVariants, } from "../../../core/skills-compiler.js";
+import { missingDelegatedVariants, missingNativeVariants, } from "../../../core/skills-compiler-variants.js";
 import { acquireIntegrationFlipLock, releaseIntegrationFlipLock, } from "../../../core/integration-lifecycle.js";
 import { readMainBackend } from "../../../core/integration-main-backend.js";
-import { deleteProbesForIntegration } from "../../../db/integration-probe-store.js";
+import { deleteProbesForIntegration, readProbe, } from "../../../db/integration-probe-store.js";
 import { knownProxyModels, proxyModelIsKnown, } from "../../../core/backends/proxy-model-registry.js";
 import { readJsonBody } from "../../json-body.js";
 import { createLogger } from "../../../logging.js";
@@ -259,9 +259,9 @@ export async function handleIntegrationPatch(c, deps) {
     //       connector doesn't expose (e.g. Claude's `label_message` carried
     //       into a Codex session), so the materializer's stale-drop pass
     //       would empty the disallowedTools array silently — closing the
-    //       same §4.5.4 floor the design wrote (a) to defend. The original
-    //       design framed §4.5.4 as "first delegated setup only" and missed
-    //       this case; surfaced during the 2026-04-26 implementation review.
+    //       same §4.5.4 floor the design wrote (a) to defend. Backend swap
+    //       falls under the same floor: an unsupervised flip can wipe denies
+    //       silently if the materializer drops unknown-tool entries.
     //
     // The wizard UI for the opt-out / "use recommended" / "I'll edit"
     // branches is Phase 4 polish (see §Phase 4.2). For now the API default
@@ -368,6 +368,47 @@ export async function handleIntegrationPatch(c, deps) {
     const finalNativeSyncEnabled = parsed.data.nativeSyncEnabled === undefined
         ? previous.nativeSyncEnabled
         : parsed.data.nativeSyncEnabled;
+    // §14.7 — synchronously consult the cached probe before committing a
+    // mode flip to delegated/native. Per §14.7 the PATCH response path
+    // intentionally never spawns a live probe ("no blocking subprocess");
+    // POST /api/integrations/:key/probe and the DelegatedProbeObserver own
+    // the live-probe cost. But when the user (or the wizard) HAS recently
+    // probed and the cached row shows missing required capabilities,
+    // committing the mode flip would only surface as a runtime "tool not
+    // found" at the next dispatch — bad UX with no actionable signal.
+    // Refusing here turns an opaque downstream failure into a 400 with
+    // the missing capabilities listed. When no cached row exists
+    // (post-eviction or never-probed) we fall through, mirroring the
+    // /health POC-default fallback — the wizard / dashboard is expected
+    // to probe first; CLI / curl callers accept the runtime feedback
+    // path. User-managed connectors (Outlook) are exempt: their probes
+    // are synthesised via makeUserManagedProbeResult with present=true,
+    // so a cached row from a prior live probe is always
+    // capability-trivial.
+    if (modeChanged
+        && (parsed.data.mode === "delegated" || parsed.data.mode === "native")
+        && !descriptor.userManagedConnector) {
+        const targetBackend = parsed.data.mode === "delegated"
+            ? effectiveBackend
+            : effectiveNativeBackend;
+        if (targetBackend) {
+            const cached = readProbe(db, key, targetBackend);
+            if (cached !== null && !cached.present) {
+                return c.json({
+                    error: "probe_missing_required_capabilities",
+                    key,
+                    backend: targetBackend,
+                    mode: parsed.data.mode,
+                    missingRequired: cached.missingRequired,
+                    probedAt: cached.probedAt,
+                    message: `Cannot enter ${parsed.data.mode} mode for '${key}' on backend `
+                        + `'${targetBackend}' — last probe (${cached.probedAt}) found `
+                        + `missing required capabilities: ${cached.missingRequired.join(", ")}. `
+                        + `Restore the connector and re-run POST /api/integrations/${key}/probe.`,
+                }, 400);
+            }
+        }
+    }
     const stamped = new Date().toISOString();
     // INTEGRATION_NATIVE_MODE_DESIGN.md §11.3.1 — flip-lock orchestration.
     // Only acquired when the mode or a backend binding is changing; pure
@@ -503,15 +544,13 @@ export async function handleIntegrationPatch(c, deps) {
             : "integration policy updated (deniedTools / delegatedModel)");
         // Auto-enable the global task-mode flag the first time *any*
         // integration enters delegated mode. Rationale:
-        //   - The legacy `/integrations/:key/invoke` RPC is dead (commented
-        //     out 2026-05-01 in this same file); every delegated skill body
-        //     and task flow now talks to `/exec`.
-        //   - `/exec` is gated by `delegatedTaskModeEnabled`, originally a
-        //     Phase-1 canary that defaults `false`. With `/invoke` gone,
-        //     "delegated mode + task mode off" is a degenerate state with
-        //     no productive use — the agent calls `/exec`, gets 503,
-        //     fails. So flipping an integration to delegated *is* the
-        //     enablement signal.
+        //   - The legacy `/integrations/:key/invoke` RPC is dead; every
+        //     delegated skill body and task flow now talks to `/exec`.
+        //   - `/exec` is gated by `delegatedTaskModeEnabled`, which defaults
+        //     `false`. With `/invoke` gone, "delegated mode + task mode off"
+        //     is a degenerate state with no productive use — the agent calls
+        //     `/exec`, gets 503, fails. So flipping an integration to
+        //     delegated *is* the enablement signal.
         //   - We only flip on the transition into delegated, not on every
         //     PATCH against an already-delegated integration. A pure
         //     deniedTools edit must not silently re-enable a flag the
@@ -597,4 +636,3 @@ function diffDeniedTools(previous, next) {
     const removed = previous.filter((t) => !nextSet.has(t));
     return { added, removed };
 }
-//# sourceMappingURL=crud-patch.js.map

package/dist/api/routes/integrations/crud.d.ts

@@ -13,4 +13,3 @@ import type { ApiDependencies } from "../../server.js";
  * ceiling.
  */
 export declare function registerCrudRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=crud.d.ts.map

package/dist/api/routes/integrations/crud.js

@@ -155,4 +155,3 @@ function safeParseJson(s) {
     }
     /* c8 ignore stop */
 }
-//# sourceMappingURL=crud.js.map

package/dist/api/routes/integrations/exec.d.ts

@@ -20,4 +20,3 @@ import type { ApiDependencies } from "../../server.js";
  * chokepoint by the invoker.
  */
 export declare function registerExecRoutes(app: Hono, deps: ApiDependencies): void;
-//# sourceMappingURL=exec.d.ts.map

package/dist/api/routes/integrations/exec.js

@@ -117,12 +117,10 @@ export function registerExecRoutes(app, deps) {
                 mode: "delegated",
             }, 409);
         }
-        // Codex task mode landed in Phase 1.5 — daemon-side stream pre-emption
-        // (see codex-core.ts `runDelegatedTask`) gates allowed-tools / destructive
-        // calls without relying on a CLI-level allowedTools surface. The 501
-        // short-circuit that previously fired here for `state.delegatedBackend
-        // === "codex"` is gone; Codex /exec requests now flow through the
-        // invoker like Claude and Gemini.
+        // Codex task mode uses daemon-side stream pre-emption (see
+        // codex-core.ts `runDelegatedTask`) to gate allowed-tools / destructive
+        // calls without relying on a CLI-level allowedTools surface. Codex
+        // /exec requests flow through the invoker like Claude and Gemini.
         const sessionBackendHeader = c.req.header("x-session-backend");
         if (sessionBackendHeader
             && sessionBackendHeader === state.delegatedBackend) {
@@ -308,14 +306,10 @@ function mapTaskErrorClassToHttpStatus(errorClass) {
  *     create_event / notion-create-pages are recovered in addition to
  *     id-in-args deletes / updates / labels).
  *
- * The historical `/invoke` route called the same helper once per call
- * with the full upstream `result.toolResult`; it was retired 2026-05-01
- * (/exec-only migration) and the dormant stub file was removed in the
- * api-route-decomposition.md PR-5 follow-up. The internal guards on
- * `connector` / `destructiveTools` membership are retained as
- * defense-in-depth (c8 ignored) so a reactivation — or any future
- * second caller — can re-share the helper safely without re-deriving
- * the pre-filter contract.
+ * The internal guards on `connector` / `destructiveTools` membership are
+ * retained as defense-in-depth (c8 ignored) so any future second caller
+ * can re-share the helper safely without re-deriving the pre-filter
+ * contract.
  *
  * Idempotent on extraction miss: returning early without any mark is the
  * documented degradation path (causes one self-noticed observation, not
@@ -353,4 +347,3 @@ function maybeMarkIntegrationWrite(db, args) {
         itemCount: extracted.itemIds.length,
     }, "marked integration_writes for destructive delegated call");
 }
-//# sourceMappingURL=exec.js.map

package/dist/api/routes/integrations/index.d.ts

@@ -59,4 +59,3 @@ import type { ApiDependencies } from "../../server.js";
  * `app.routes.map(r => r.path)` before/after when in doubt.
  */
 export declare function createIntegrationRoutes(deps: ApiDependencies): Hono;
-//# sourceMappingURL=index.d.ts.map

package/dist/api/routes/integrations/index.js

@@ -67,4 +67,3 @@ export function createIntegrationRoutes(deps) {
     registerProbeRoutes(app, deps);
     return app;
 }
-//# sourceMappingURL=index.js.map