endpoint-catalog.json

{
  "schemaVersion": 1,
  "reviewBaseline": {
    "reviewedAt": "2026-10-25",
    "clientRepository": "desirecore/desirecore",
    "clientRevision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
    "internalDocsRevision": "9fbe5f4668d223553b38ebd4e7a2a49450000a9b",
    "publicDocsBaseRevision": "b8fc9329b935f85a20ab8bd253cf3afbbe99020b"
  },
  "pages": [
    {
      "id": "api/connection-and-auth",
      "file": "docs/07-api/01-connection-and-auth.md",
      "slug": "/api/connection-and-auth"
    },
    {
      "id": "api/agent-webhook",
      "file": "docs/07-api/02-agent-webhook.md",
      "slug": "/api/agent-webhook"
    },
    {
      "id": "api/errors-and-troubleshooting",
      "file": "docs/07-api/03-errors-and-troubleshooting.md",
      "slug": "/api/errors-and-troubleshooting"
    },
    {
      "id": "api/conversations-and-runs",
      "file": "docs/07-api/04-conversations-and-runs.md",
      "slug": "/api/conversations-and-runs"
    },
    {
      "id": "api/model-proxy",
      "file": "docs/07-api/05-model-proxy.md",
      "slug": "/api/model-proxy"
    },
    {
      "id": "api/workflow-integration",
      "file": "docs/07-api/06-workflow-integration.md",
      "slug": "/api/workflow-integration"
    },
    {
      "id": "api/openapi",
      "file": "docs/07-api/07-openapi.md",
      "slug": "/api/openapi"
    },
    {
      "id": "api/session-history-and-messages",
      "file": "docs/07-api/08-session-history-and-messages.md",
      "slug": "/api/session-history-and-messages"
    },
    {
      "id": "api/attachments-and-media",
      "file": "docs/07-api/09-attachments-and-media.md",
      "slug": "/api/attachments-and-media"
    },
    {
      "id": "api/observability",
      "file": "docs/07-api/10-observability.md",
      "slug": "/api/observability"
    },
    {
      "id": "api/taskboards",
      "file": "docs/07-api/11-taskboards.md",
      "slug": "/api/taskboards"
    },
    {
      "id": "api/object-storage",
      "file": "docs/07-api/12-object-storage.md",
      "slug": "/api/object-storage"
    },
    {
      "id": "api/index",
      "file": "docs/07-api/index.md",
      "slug": "/api"
    }
  ],
  "endpoints": [
    {
      "operationId": "getAgentServiceClientHandshake",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/client-handshake",
      "doc": "api/connection-and-auth",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Valid instance access credential; metadata is service-level and does not expose a user ID or token.",
      "resultDelivery": "Synchronous JSON metadata. A 200 response verifies this authenticated request, not every optional capability.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/client-handshake-routes.ts",
          "packages/agent-service/src/service-metadata.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/readiness.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/client-handshake.ts:clientHandshakeResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Fixed-source auth and handshake unit tests plus a real loopback HTTPS readiness integration; no public-domain or Caddy-container run.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "triggerAgentWebhook",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/webhook/:agent_id",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "Authorization: Bearer <Webhook secret>; secret must be configured for external callers.",
      "permissions": "Enabled event with an administrator-created tool/file permission snapshot. Owner management is available when handshake.capabilities.webhookManagement is true. Runtime intersects the stored ceiling with current Agent scope; authorized file or command tools retain existing approval semantics.",
      "resultDelivery": "200 {accepted:true,agentId,event} acknowledges receipt, with no Run ID or delivery deduplication. Only explicit authorized SendUserMessage output is delivered to the user; final model answers are not automatically returned to the caller or added to chat.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/webhook-routes.ts",
          "packages/agent-service/src/routes/webhook-state.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/scheduler/background-delivery.ts",
          "app/components/resources/agents/components/AgentFormEditor.tsx",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/webhook.ts:webhookRequestSchema",
        "packages/schemas/src/agent-service/webhook.ts:webhookEventConfigSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Real production owner management, atomic AgentFS snapshot writes, local fake-provider runtime and SendUserMessage delivery, rotation, failure and disable/delete integration. No commercial-provider or packaged-client claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "WebhookSecret"
      ]
    },
    {
      "operationId": "listAgents",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/agents",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner access. Run list, metadata and live-state reads are instance-level; receipt reads additionally check trusted user ownership and return 404 for another owner.",
      "resultDelivery": "Synchronous read; live state is observational, not a query completion signal.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/agent-routes.ts",
          "packages/agent-service/src/agent/list-projection.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent/agent-summary.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listRuns",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/runs",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner access. Run list, metadata and live-state reads are instance-level; receipt reads additionally check trusted user ownership and return 404 for another owner.",
      "resultDelivery": "Synchronous read; live state is observational, not a query completion signal.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/runs-routes.ts",
          "packages/agent-service/src/session/run-manager.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/run.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getRun",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/runs/:id",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner access. Run list, metadata and live-state reads are instance-level; receipt reads additionally check trusted user ownership and return 404 for another owner.",
      "resultDelivery": "Synchronous read; live state is observational, not a query completion signal.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/runs-routes.ts",
          "packages/agent-service/src/session/run-meta-read.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/run.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getRunRuntimeState",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/runs/:id/runtime-state",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner access. Run list, metadata and live-state reads are instance-level; receipt reads additionally check trusted user ownership and return 404 for another owner.",
      "resultDelivery": "Synchronous read; live state is observational, not a query completion signal.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/runs-routes.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/run.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listRunReceipts",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/runs/:id/receipt",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner access. Run list, metadata and live-state reads are instance-level; receipt reads additionally check trusted user ownership and return 404 for another owner.",
      "resultDelivery": "Synchronous read; live state is observational, not a query completion signal.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/runs-routes.ts",
          "packages/agent-service/src/receipts/reader.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/operations-activity.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "startAgentQuery",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/query/start",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner identity from instance authentication; durable request identifiers and digest preserve admission identity. Socket.IO uses the same instance credential and current originSocketId.",
      "resultDelivery": "HTTP admission or lookup JSON; query completion and incremental messages arrive through correlated Socket.IO events.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/query-routes.ts",
          "packages/agent-service/src/query/client-request-registry.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/query.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "followUpAgentQuery",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/query/follow-up",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner identity from instance authentication; durable request identifiers and digest preserve admission identity. Socket.IO uses the same instance credential and current originSocketId.",
      "resultDelivery": "HTTP admission or lookup JSON; query completion and incremental messages arrive through correlated Socket.IO events.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/query-routes.ts",
          "packages/agent-service/src/query/client-request-registry.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/query.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "lookupQueryAdmissions",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/query/client-requests/lookup",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Owner identity from instance authentication; durable request identifiers and digest preserve admission identity. Socket.IO uses the same instance credential and current originSocketId.",
      "resultDelivery": "HTTP admission or lookup JSON; query completion and incremental messages arrive through correlated Socket.IO events.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/query-routes.ts",
          "packages/agent-service/src/query/client-request-registry.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/client-request-admission.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Fixed-source request/response examples and focused HTTP + Socket.IO client contract; runtime fake in the public client fixture.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getAgentWebhookConfiguration",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/agents/:id/webhooks",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment owner",
      "permissions": "Management requires governed owner access and webhookManagement capability; selected tool IDs and current file scope are resolved by the server. Schedule messages are explicit persisted user deliveries, not request-level execution status.",
      "resultDelivery": "Synchronous configuration or explicit delivery JSON. First configuration and rotation disclose a secret once; GET does not return it.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/webhook-management-routes.ts",
          "packages/agent-service/src/auth/governed-endpoint-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/webhook-management.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Production Webhook management integration with local fake model upstream and real delivery persistence; no commercial model or desktop package verification.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "upsertAgentWebhookEvent",
      "service": "agent-service",
      "method": "PUT",
      "path": "/api/agents/:id/webhooks/events/:event",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment owner",
      "permissions": "Management requires governed owner access and webhookManagement capability; selected tool IDs and current file scope are resolved by the server. Schedule messages are explicit persisted user deliveries, not request-level execution status.",
      "resultDelivery": "Synchronous configuration or explicit delivery JSON. First configuration and rotation disclose a secret once; GET does not return it.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/webhook-management-routes.ts",
          "packages/agent-service/src/auth/governed-endpoint-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/webhook-management.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Production Webhook management integration with local fake model upstream and real delivery persistence; no commercial model or desktop package verification.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "setAgentWebhookEnabled",
      "service": "agent-service",
      "method": "PATCH",
      "path": "/api/agents/:id/webhooks",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment owner",
      "permissions": "Management requires governed owner access and webhookManagement capability; selected tool IDs and current file scope are resolved by the server. Schedule messages are explicit persisted user deliveries, not request-level execution status.",
      "resultDelivery": "Synchronous configuration or explicit delivery JSON. First configuration and rotation disclose a secret once; GET does not return it.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/webhook-management-routes.ts",
          "packages/agent-service/src/auth/governed-endpoint-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/webhook-management.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Production Webhook management integration with local fake model upstream and real delivery persistence; no commercial model or desktop package verification.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "deleteAgentWebhookEvent",
      "service": "agent-service",
      "method": "DELETE",
      "path": "/api/agents/:id/webhooks/events/:event",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment owner",
      "permissions": "Management requires governed owner access and webhookManagement capability; selected tool IDs and current file scope are resolved by the server. Schedule messages are explicit persisted user deliveries, not request-level execution status.",
      "resultDelivery": "Synchronous configuration or explicit delivery JSON. First configuration and rotation disclose a secret once; GET does not return it.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/webhook-management-routes.ts",
          "packages/agent-service/src/auth/governed-endpoint-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/webhook-management.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Production Webhook management integration with local fake model upstream and real delivery persistence; no commercial model or desktop package verification.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "rotateAgentWebhookSecret",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/agents/:id/webhooks/secret/rotate",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment owner",
      "permissions": "Management requires governed owner access and webhookManagement capability; selected tool IDs and current file scope are resolved by the server. Schedule messages are explicit persisted user deliveries, not request-level execution status.",
      "resultDelivery": "Synchronous configuration or explicit delivery JSON. First configuration and rotation disclose a secret once; GET does not return it.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/webhook-management-routes.ts",
          "packages/agent-service/src/auth/governed-endpoint-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/webhook-management.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Production Webhook management integration with local fake model upstream and real delivery persistence; no commercial model or desktop package verification.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listAgentScheduleMessages",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/agents/:agentId/schedule-messages",
      "doc": "api/agent-webhook",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment owner",
      "permissions": "Authenticated request identity; visibility is filtered by authorizedMessageIds using current delivery-resource authorization. This is persisted explicit delivery, not request-level Webhook execution status.",
      "resultDelivery": "Synchronous {items,total,limit,offset}; default limit50, maximum200. Items may include other authorized background deliveries.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/schedule-routes.ts",
          "packages/agent-service/src/auth/governed-endpoint-auth.ts"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Production Webhook management integration with local fake model upstream and real delivery persistence; no commercial model or desktop package verification.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "createProxyMessage",
      "service": "compat-proxy",
      "method": "POST",
      "path": "/v1/messages",
      "doc": "api/model-proxy",
      "deploymentModes": [
        "local-loopback"
      ],
      "authentication": "Provider-bound safe token in Authorization: Bearer or x-api-key",
      "permissions": "Local service access and valid non-revoked provider-bound safe token. Models listing is not an authorization list; no automatic token expiry or per-model quota promise.",
      "resultDelivery": "Protocol-specific JSON or SSE stream; streaming failures are interpreted inside the stream.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "packages/shared/src/compat-proxy/server.ts",
          "packages/shared/src/compat-proxy/proxy-auth.ts",
          "packages/agent-service/src/builtin-tools/compute-credential.ts"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Focused local proxy contract tests; no commercial-provider acceptance."
      },
      "spec": "static/openapi/compat-proxy.json",
      "securitySchemes": [
        "ProxyBearer",
        "ProxyApiKey"
      ]
    },
    {
      "operationId": "createProxyChatCompletion",
      "service": "compat-proxy",
      "method": "POST",
      "path": "/v1/chat/completions",
      "doc": "api/model-proxy",
      "deploymentModes": [
        "local-loopback"
      ],
      "authentication": "Provider-bound safe token in Authorization: Bearer or x-api-key",
      "permissions": "Local service access and valid non-revoked provider-bound safe token. Models listing is not an authorization list; no automatic token expiry or per-model quota promise.",
      "resultDelivery": "Protocol-specific JSON or SSE stream; streaming failures are interpreted inside the stream.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "packages/shared/src/compat-proxy/server.ts",
          "packages/shared/src/compat-proxy/proxy-auth.ts",
          "packages/agent-service/src/builtin-tools/compute-credential.ts"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Focused local proxy contract tests; no commercial-provider acceptance."
      },
      "spec": "static/openapi/compat-proxy.json",
      "securitySchemes": [
        "ProxyBearer",
        "ProxyApiKey"
      ]
    },
    {
      "operationId": "listProxyModels",
      "service": "compat-proxy",
      "method": "GET",
      "path": "/v1/models",
      "doc": "api/model-proxy",
      "deploymentModes": [
        "local-loopback"
      ],
      "authentication": "Provider-bound safe token in Authorization: Bearer or x-api-key",
      "permissions": "Local service access and valid non-revoked provider-bound safe token. Models listing is not an authorization list; no automatic token expiry or per-model quota promise.",
      "resultDelivery": "Protocol-specific JSON or SSE stream; streaming failures are interpreted inside the stream.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "packages/shared/src/compat-proxy/server.ts",
          "packages/shared/src/compat-proxy/proxy-auth.ts",
          "packages/agent-service/src/builtin-tools/compute-credential.ts"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Focused local proxy contract tests; no commercial-provider acceptance."
      },
      "spec": "static/openapi/compat-proxy.json",
      "securitySchemes": [
        "ProxyBearer",
        "ProxyApiKey"
      ]
    },
    {
      "operationId": "listWorkflows",
      "service": "workflow-service",
      "method": "GET",
      "path": "/api/workflows",
      "doc": "api/workflow-integration",
      "deploymentModes": [
        "administrator-provided-workflow-service"
      ],
      "authentication": "X-Workflow-Service-Token for the independent Workflow Service",
      "permissions": "Administrator-preconfigured definitions; service-token reads are service-level. TaskBoard-backed history additionally enforces current ACL. Public grant minting and unguarded /run are not included.",
      "resultDelivery": "Synchronous metadata/history or trigger runId, followed by SSE workflow events; inspect terminal status even on workflow:complete.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "lib/workflow-service/server.ts",
          "packages/shared/src/workflow-contracts/api.ts"
        ]
      },
      "schemaRefs": [
        "packages/shared/src/workflow-contracts/api.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Implementation-derived contract and focused workflow validation; no execution-grant acquisition flow."
      },
      "spec": "static/openapi/workflow-service.json",
      "securitySchemes": [
        "WorkflowToken"
      ]
    },
    {
      "operationId": "triggerWorkflowWebhook",
      "service": "workflow-service",
      "method": "POST",
      "path": "/api/workflow/webhook",
      "doc": "api/workflow-integration",
      "deploymentModes": [
        "administrator-provided-workflow-service"
      ],
      "authentication": "X-Workflow-Service-Token for the independent Workflow Service",
      "permissions": "Administrator-preconfigured definitions; service-token reads are service-level. TaskBoard-backed history additionally enforces current ACL. Public grant minting and unguarded /run are not included.",
      "resultDelivery": "Synchronous metadata/history or trigger runId, followed by SSE workflow events; inspect terminal status even on workflow:complete.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "lib/workflow-service/server.ts",
          "packages/shared/src/workflow-contracts/api.ts"
        ]
      },
      "schemaRefs": [
        "packages/shared/src/workflow-contracts/api.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Implementation-derived contract and focused workflow validation; no execution-grant acquisition flow."
      },
      "spec": "static/openapi/workflow-service.json",
      "securitySchemes": [
        "WorkflowToken"
      ]
    },
    {
      "operationId": "watchWorkflowRunEvents",
      "service": "workflow-service",
      "method": "GET",
      "path": "/api/workflow/events",
      "doc": "api/workflow-integration",
      "deploymentModes": [
        "administrator-provided-workflow-service"
      ],
      "authentication": "X-Workflow-Service-Token for the independent Workflow Service",
      "permissions": "Administrator-preconfigured definitions; service-token reads are service-level. TaskBoard-backed history additionally enforces current ACL. Public grant minting and unguarded /run are not included.",
      "resultDelivery": "Synchronous metadata/history or trigger runId, followed by SSE workflow events; inspect terminal status even on workflow:complete.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "lib/workflow-service/server.ts",
          "packages/shared/src/workflow-contracts/api.ts"
        ]
      },
      "schemaRefs": [
        "packages/shared/src/workflow-contracts/api.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Implementation-derived contract and focused workflow validation; no execution-grant acquisition flow."
      },
      "spec": "static/openapi/workflow-service.json",
      "securitySchemes": [
        "WorkflowToken"
      ]
    },
    {
      "operationId": "listWorkflowRuns",
      "service": "workflow-service",
      "method": "GET",
      "path": "/api/workflow/:id/runs",
      "doc": "api/workflow-integration",
      "deploymentModes": [
        "administrator-provided-workflow-service"
      ],
      "authentication": "X-Workflow-Service-Token for the independent Workflow Service",
      "permissions": "Administrator-preconfigured definitions; service-token reads are service-level. TaskBoard-backed history additionally enforces current ACL. Public grant minting and unguarded /run are not included.",
      "resultDelivery": "Synchronous metadata/history or trigger runId, followed by SSE workflow events; inspect terminal status even on workflow:complete.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "lib/workflow-service/server.ts",
          "packages/shared/src/workflow-contracts/api.ts"
        ]
      },
      "schemaRefs": [
        "packages/shared/src/workflow-contracts/api.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Implementation-derived contract and focused workflow validation; no execution-grant acquisition flow."
      },
      "spec": "static/openapi/workflow-service.json",
      "securitySchemes": [
        "WorkflowToken"
      ]
    },
    {
      "operationId": "getWorkflowRun",
      "service": "workflow-service",
      "method": "GET",
      "path": "/api/workflow/:id/runs/:runId",
      "doc": "api/workflow-integration",
      "deploymentModes": [
        "administrator-provided-workflow-service"
      ],
      "authentication": "X-Workflow-Service-Token for the independent Workflow Service",
      "permissions": "Administrator-preconfigured definitions; service-token reads are service-level. TaskBoard-backed history additionally enforces current ACL. Public grant minting and unguarded /run are not included.",
      "resultDelivery": "Synchronous metadata/history or trigger runId, followed by SSE workflow events; inspect terminal status even on workflow:complete.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "e45f22902af2dc45b109cfa8f454795538aea2ed",
        "files": [
          "lib/workflow-service/server.ts",
          "packages/shared/src/workflow-contracts/api.ts"
        ]
      },
      "schemaRefs": [
        "packages/shared/src/workflow-contracts/api.ts"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/verification.md",
        "scope": "Implementation-derived contract and focused workflow validation; no execution-grant acquisition flow."
      },
      "spec": "static/openapi/workflow-service.json",
      "securitySchemes": [
        "WorkflowToken"
      ]
    },
    {
      "operationId": "uploadAttachment",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/attachments",
      "doc": "api/attachments-and-media",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token supplied by the instance administrator",
      "permissions": "One non-empty multipart file, at most 20 MiB. Stores bytes without extraction or execution. Per-user retained-directory limit 256, total retained data limit 512 MiB. Each successful POST creates a new attachment; no automatic retry/idempotency contract. The receipt fileReference is passed unchanged in Query options.fileReferences on this instance and does not grant tool or cross-user permission.",
      "resultDelivery": "Complete persisted attachment receipt.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/attachment-routes.ts",
          "packages/schemas/src/agent-service/attachments.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/http-server.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/attachments.ts:attachmentReceiptSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/schema/auth review. Standalone uploader: 12 local HTTP contract tests with a fake server, not production storage or model execution. Root records actual fixed-source route validation separately.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "downloadAttachment",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/attachments/:attachmentId",
      "doc": "api/attachments-and-media",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token supplied by the instance administrator",
      "permissions": "Returns original bytes as an attachment, not JSON. The user is resolved from instance authentication. IDs do not confer cross-user permission. This route has no media byte-Range contract.",
      "resultDelivery": "Original file bytes with no-store and nosniff.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/attachment-routes.ts",
          "packages/schemas/src/agent-service/attachments.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/http-server.ts"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/schema/auth review. Standalone uploader: 12 local HTTP contract tests with a fake server, not production storage or model execution. Root records actual fixed-source route validation separately.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "uploadMedia",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/media/upload",
      "doc": "api/attachments-and-media",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token supplied by the instance administrator",
      "permissions": "Single multipart file with an allowed MIME. Service multipart limit is 2 GiB; deployment/proxy limits may be smaller. Empty files are rejected. New files retain authenticated owner metadata. Metadata may be passed in top-level Query mediaRefs; model support is a separate condition.",
      "resultDelivery": "Direct media metadata.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/media-routes.ts",
          "packages/agent-service/src/media/media-store.ts",
          "packages/shared/src/utils/media-upload-policy.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/http-server.ts"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/schema/auth review. Standalone uploader: 12 local HTTP contract tests with a fake server, not production storage or model execution. Root records actual fixed-source route validation separately.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "createMediaAccessUrls",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/media/access-urls",
      "doc": "api/attachments-and-media",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token supplied by the instance administrator",
      "permissions": "Normal instance authentication is required to mint five-minute links. Validates new-media ownership and actual media content. Legacy media without owner metadata retains read compatibility. Existing objects forbidden to the user reject the request. The signing service requires an initialized instance token.",
      "resultDelivery": "Links and missing IDs; no universal success/data wrapper.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/media-routes.ts",
          "packages/agent-service/src/media/media-store.ts",
          "packages/shared/src/utils/media-upload-policy.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/http-server.ts"
        ]
      },
      "schemaRefs": [
        "packages/agent-service/src/routes/media-routes.ts:mediaAccessUrlsBodySchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/schema/auth review. Standalone uploader: 12 local HTTP contract tests with a fake server, not production storage or model execution. Root records actual fixed-source route validation separately.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getSignedMedia",
      "service": "agent-service",
      "method": "GET",
      "path": "/media/:filename",
      "doc": "api/attachments-and-media",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "expires and signature query values from an authenticated media access-urls response; no instance token header for the signed GET",
      "permissions": "Only GET/HEAD on the single-segment /media/:filename path bypass normal instance-token authentication, after the application authority fence. The handler requires the signed expires/signature pair; /api/media/*, other methods, and multi-segment paths do not inherit this exemption. Configured Origin policy and service readiness still apply. Anyone holding a valid complete link can read until expiry; owner is checked at issuance, not re-resolved from the unsigned reader. Supports one byte range, open-ended/suffix ranges, and private caching bounded by remaining TTL. The implementation also supplies HEAD with the same validation and no body; HEAD is not selected as another public catalog operation.",
      "resultDelivery": "Full media bytes.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/media-routes.ts",
          "packages/agent-service/src/media/media-store.ts",
          "packages/shared/src/utils/media-upload-policy.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/auth/app-authority-gate.ts",
          "packages/agent-service/src/auth/media-access-signing.ts",
          "packages/agent-service/src/security/origin-policy.ts",
          "packages/agent-service/src/readiness.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/schema/auth review. Standalone uploader: 12 local HTTP contract tests with a fake server, not production storage or model execution. Root records actual fixed-source route validation separately.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "SignedMediaSignature"
      ]
    },
    {
      "operationId": "listSessionHistory",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/sessions",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Valid deployment-owner instance credential; exact history is filtered by the trusted user before preview/body reads. Knowing a Run ID does not grant access.",
      "resultDelivery": "Lists ordinary user-visible history by updatedAt descending. Excludes delegated, manual and dedicated schedule/Webhook/Mention timelines. Preserves fork generations; do not concatenate branches as a deduplicated transcript. Pagination is not an immutable snapshot.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/history-routes.ts",
          "packages/agent-service/src/session/store.ts",
          "packages/agent-service/src/session/run-meta-read.ts",
          "packages/agent-service/src/auth/instance-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/session.ts:sessionSummarySchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/owner/pagination review; real local source history routes and SessionStore fixture verifies authentication, owner isolation, public projection, search validation and empty/404 matter reads. The independent example uses 13 local HTTP contract tests, including paging gaps and truncation; no deployed-instance claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getSessionSnapshot",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/sessions/:runId",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Valid deployment-owner instance credential; exact history is filtered by the trusted user before preview/body reads. Knowing a Run ID does not grant access.",
      "resultDelivery": "Checks trusted user ownership before body/image reads. Missing, cleared and unowned Runs return 404. Delegated Runs return 403 delegated_run_requires_inspect_view; use the messages inspection view instead. pendingAssistant is temporary and separate from durable messages. Returned configuration is not execution authority. Sensitive tool results may be withheld in the display projection; body references can be removed without changing the underlying execution outcome.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/history-routes.ts",
          "packages/agent-service/src/session/store.ts",
          "packages/agent-service/src/session/public-session-projection.ts",
          "packages/agent-service/src/session/persistent-state/history.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/builtin-tools/tool-result-privacy.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/session.ts:sessionSnapshotSchema",
        "packages/schemas/src/agent-service/session.ts:sessionMessageSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/stability-verification-2026-10-22.md",
        "scope": "Fixed-source route/owner/pagination review; real local source history routes and SessionStore fixture verifies authentication, owner isolation, public projection, search validation and empty/404 matter reads. The independent example uses 13 local HTTP contract tests, including paging gaps and truncation; no deployed-instance claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listSessionMessages",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/sessions/:runId/messages",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Valid deployment-owner instance credential; exact history is filtered by the trusted user before preview/body reads. Knowing a Run ID does not grant access.",
      "resultDelivery": "Checks ownership before content reads. Delegated Runs require view=inspect-run. total counts source rows, not returned messages; advance offset by the requested limit and stop at total, even if a page is empty. Optional live is a temporary delegated display checkpoint, not a durable message or terminal. There is no cross-page consistency revision. Sensitive tool results may be withheld in the display projection; body references can be removed without changing the underlying execution outcome.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/history-routes.ts",
          "packages/agent-service/src/session/store.ts",
          "packages/agent-service/src/session/message-index.ts",
          "packages/agent-service/src/session/public-session-projection.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/builtin-tools/tool-result-privacy.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/session.ts:sessionMessageSchema",
        "packages/schemas/src/agent-service/session.ts:liveRunInspectionSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/stability-verification-2026-10-22.md",
        "scope": "Fixed-source route/owner/pagination review; real local source history routes and SessionStore fixture verifies authentication, owner isolation, public projection, search validation and empty/404 matter reads. The independent example uses 13 local HTTP contract tests, including paging gaps and truncation; no deployed-instance claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "searchSessionMessages",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/sessions/messages/search",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Valid deployment-owner instance credential; exact history is filtered by the trusted user before preview/body reads. Knowing a Run ID does not grant access.",
      "resultDelivery": "Matches extracted message text case-insensitively, newest timestamp first. Includes independent manual conversations; excludes archived and delegated Runs. Default-conversation fork families select the visible history window. preferredRunId is neither a credential nor an exact-Run filter. limit/offset and their sum must be safe nonnegative integers. limit=0 returns all remaining hits and hasMore=false. Match original text before cropping previews.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/history-routes.ts",
          "packages/agent-service/src/session/store.ts",
          "packages/agent-service/src/session/lineage.ts",
          "packages/agent-service/src/session/history-search-page.ts",
          "packages/agent-service/src/auth/instance-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/agent-service/src/session/store.ts:FlattenedMessage"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/owner/pagination review; real local source history routes and SessionStore fixture verifies authentication, owner isolation, public projection, search validation and empty/404 matter reads. The independent example uses 13 local HTTP contract tests, including paging gaps and truncation; no deployed-instance claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getConversationOverview",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/conversation/:agentId/overview",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Deployment owner only: conversation memory is selected by the instance's current local profile. This is not a multi-tenant isolation API. Matter Run sources additionally verify user and Agent ownership.",
      "resultDelivery": "Reads the instance's current local profile, not a caller-supplied tenant ID. Intended for the deployment owner. Returns all active matters and at most ten recent entries, not a complete transcript. No pagination. An empty overview does not establish Agent existence or absence of history.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/conversation-routes.ts",
          "packages/agent-service/src/conversation-memory/overview-projection.ts",
          "packages/agent-service/src/conversation-memory/types.ts",
          "packages/agent-service/src/auth/instance-auth.ts"
        ]
      },
      "schemaRefs": [
        "packages/agent-service/src/conversation-memory/types.ts:ConversationOverview"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/history-attachments-verification.md",
        "scope": "Fixed-source route/owner/pagination review; real local source history routes and SessionStore fixture verifies authentication, owner isolation, public projection, search validation and empty/404 matter reads. The independent example uses 13 local HTTP contract tests, including paging gaps and truncation; no deployed-instance claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getConversationMatterMessages",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/conversation/:agentId/matters/:id/full",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Deployment owner only: conversation memory is selected by the instance's current local profile. This is not a multi-tenant isolation API. Matter Run sources additionally verify user and Agent ownership.",
      "resultDelivery": "Reads the instance owner's local-profile conversation memory. Supports active, recent and archived source data. Underlying Run reads recheck that user and Agent ownership. Reads at most 120 source messages and sets truncated=true if more exist; projection may omit entries. No pagination or limit-override parameter. Entries are not guaranteed to have the per-Run message shape. Sensitive tool results may be withheld in the display projection; body references can be removed without changing the underlying execution outcome.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/conversation-routes.ts",
          "packages/agent-service/src/conversation-memory/conversation-store.ts",
          "packages/agent-service/src/session/run-meta-read.ts",
          "packages/agent-service/src/session/public-session-projection.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "packages/agent-service/src/builtin-tools/tool-result-privacy.ts"
        ]
      },
      "schemaRefs": [
        "packages/agent-service/src/conversation-memory/conversation-store.ts:MatterMessagesResult"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/stability-verification-2026-10-22.md",
        "scope": "Fixed-source route/owner/pagination review; real local source history routes and SessionStore fixture verifies authentication, owner isolation, public projection, search validation and empty/404 matter reads. The independent example uses 13 local HTTP contract tests, including paging gaps and truncation; no deployed-instance claim.",
        "baselineNote": "Source contract reviewed at a101a40c on 2026-10-22. Historical test results retain their own recorded baseline; current validation is recorded in api/stability-verification-2026-10-22.md.",
        "currentReview": "Static contract recheck at a0186f6feeaf66eb88787e8b80b8fea5559b8761 on 2026-10-25; historical executed tests retain their recorded baseline. Current observation checks are in api/observation-verification-2026-10-25.md."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getAgentInputConfig",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/agents/:id/input-config",
      "doc": "api/conversations-and-runs",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Fresh input configuration only; does not create a session, lock mode, or grant execution permission. configRevision is an equality digest.",
      "resultDelivery": "Synchronous JSON observation; no execution request or automatic replay.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/agent-input-config-route.ts",
          "packages/agent-service/src/routes/agent-input-config-observation.ts",
          "packages/agent-service/src/agent/input-config.ts",
          "packages/agent-service/src/routes/agent-routes.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/input-config.ts:agentInputConfigSchema"
      ],
      "effectiveVersion": "v10.0.180+",
      "versionEvidence": "Input-config introduction: implementation PR #4158 and its client v10.0.180 support statement, preserved from the internal Agent API reference.",
      "verification": {
        "record": "api/observation-verification-2026-10-25.md",
        "scope": "See the fixed-source route fixtures, index migration regressions and independent client checks; no model/provider or production execution claim."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listMergedHistoryMessages",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/sessions/messages/all",
      "doc": "api/session-history-and-messages",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Trusted-user visible merged history; apply public message projection and branch/manual/Mention rules before pagination and revision. Synthetic source-only run IDs are not execution identities.",
      "resultDelivery": "Synchronous JSON observation; no execution request or automatic replay.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/history-routes.ts",
          "packages/agent-service/src/session/store.ts",
          "packages/agent-service/src/session/public-session-projection.ts",
          "packages/agent-service/src/session/conversation-mention-history.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/session.ts:sessionMessageSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/observation-verification-2026-10-25.md",
        "scope": "See the fixed-source route fixtures, index migration regressions and independent client checks; no model/provider or production execution claim."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getNetworkHealth",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/network/health",
      "doc": "api/observability",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Instance network observation; does not provide per-tenant isolation, execution authority or model success evidence.",
      "resultDelivery": "Synchronous JSON observation; no execution request or automatic replay.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/network-routes.ts",
          "packages/agent-service/src/connection/network-health.ts",
          "packages/agent-service/src/handlers/network-handlers.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/network-health.ts:networkHealthStateSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/observation-verification-2026-10-25.md",
        "scope": "See the fixed-source route fixtures, index migration regressions and independent client checks; no model/provider or production execution claim."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listRecentToolCalls",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/runs/recent-calls",
      "doc": "api/observability",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Trusted-user Run filter; metadata only, bounded recent window. Opaque IDs, status and timestamps are observations rather than query terminal evidence.",
      "resultDelivery": "Synchronous JSON observation; no execution request or automatic replay.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/runs-routes.ts",
          "packages/agent-service/src/session/runs-index.ts",
          "packages/agent-service/src/receipts/recent-tool-calls.ts",
          "packages/agent-service/src/receipts/identity.ts",
          "packages/agent-service/src/receipts/reader.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/operations-activity.ts:operationsRecentCallsResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/observation-verification-2026-10-25.md",
        "scope": "See the fixed-source route fixtures, index migration regressions and independent client checks; no model/provider or production execution claim."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getRunUsageSummary",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/runs/usage/summary",
      "doc": "api/observability",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Trusted-user recorded usage only; limited scans/cache and UTC date bucket remapping. Not a final provider invoice or exact local day accounting.",
      "resultDelivery": "Synchronous JSON observation; no execution request or automatic replay.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/runs-routes.ts",
          "packages/agent-service/src/session/runs-index.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/operations-activity.ts:operationsUsageSummaryResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/observation-verification-2026-10-25.md",
        "scope": "See the fixed-source route fixtures, index migration regressions and independent client checks; no model/provider or production execution claim."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listTaskBoards",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/taskboards",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "No pagination. Can include archived boards; counts exclude archived/deleted tasks. Team and owner visibility is rechecked.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard.ts:taskBoardListResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "queryTaskBoards",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/taskboards/query",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "Read-only POST. Default pageSize 50 (1..200), updatedAt desc, active boards/tasks. Opaque nextCursor must retain filters/sort. 409 versionConflict requires discarding old pages and restarting. Claim tokens are always omitted; current liveness can change without invalidating the cursor. Missing/invisible boardIds are silently omitted.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard-workbench.ts:taskBoardQueryRequestSchema",
        "packages/schemas/src/agent-service/taskboard-workbench.ts:taskBoardQueryResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getTaskBoard",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/taskboards/:id",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "Actor-specific projection. Deleted tasks excluded; archived tasks may remain. Redacted comment bodies and private claim tokens are withheld as documented. Direct arbitrary missing/invisible Board IDs normally return 403. Authorized missing scope aliases can return exists:false.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard.ts:taskBoardDetailResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getTaskBoardTask",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/taskboards/:id/tasks/:taskId",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "Board access check runs first. A missing/deleted task within an authorized Board returns 200 exists:false. Available actions are a current actor snapshot, not a grant.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard-workbench.ts:taskDirectReadResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listTaskBoardHandoffEvidence",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/taskboards/:id/activity",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "Only handoff evidence; not a complete Board activity log. Optional taskId restricts visible tasks; no pagination.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard-workflow.ts:taskBoardHandoffEvidenceSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "getTaskBoardTaskActivity",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/taskboards/:id/tasks/:taskId/activity",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "Canonical task events use Board revision continuation. First page captures throughRevision; preserve it with nextAfterRevision on all later pages. Positive afterRevision requires throughRevision. null nextAfterRevision means complete, even if items is empty earlier. pageSize bounds candidate scans, not total returned items. Owner projections are current summaries, can repeat/change on every page, and are not frozen by throughRevision.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard-workbench.ts:taskActivityPageRequestSchema",
        "packages/schemas/src/agent-service/taskboard-workbench.ts:taskActivityResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "resolveSessionTaskBoard",
      "service": "agent-service",
      "method": "POST",
      "path": "/api/taskboards/session-board/resolve",
      "doc": "api/taskboards",
      "deploymentModes": [
        "standalone-owner"
      ],
      "authentication": "Existing instance-owner X-Agent-Service-Token.",
      "permissions": "Authenticated human user; global TaskBoard capability enabled, owner scope and current Team/Board ACL checks. Request fields do not grant actor or team authority.",
      "resultDelivery": "Read-only POST, 4 KiB body limit. Requires runId or sessionId; accepts no claimed session list. Current session with exactly one visible board wins, including archived boards; multiple current boards have no default. Otherwise choose newest unarchived board from another persisted session of the same Run. No default returns 200 exists:false. IDs do not expand current visibility.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/taskboard-routes.ts",
          "packages/agent-service/src/taskboard/service.ts",
          "packages/agent-service/src/taskboard/policy.ts",
          "packages/agent-service/src/taskboard/query-index.ts",
          "packages/agent-service/src/taskboard/session-board.ts",
          "packages/agent-service/src/taskboard/integrations/http-capability-port.ts",
          "packages/agent-service/src/auth/instance-auth.ts",
          "deploy/Caddyfile"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/taskboard-session-board.ts:taskBoardSessionBoardResolveRequestSchema",
        "packages/schemas/src/agent-service/taskboard.ts:taskBoardDetailResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Fixed-source contract review; independent local HTTP example fixtures. Real route/service/store checks are recorded separately; no real Agent/model execution."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listS3Connections",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/s3/connections",
      "doc": "api/object-storage",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Current user Object Storage capability must be enabled. Uses instance-configured connections and credentials; no separate object/prefix grant. Provider list/read permission is required for object operations.",
      "resultDelivery": "Configured connection summaries; an empty configuration returns an empty connections array.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/s3-routes.ts",
          "packages/agent-service/src/routes/object-storage-capability-gate.ts",
          "packages/agent-service/src/object-storage/index.ts",
          "packages/agent-service/src/object-storage/s3-connection-resolver.ts",
          "packages/agent-service/src/object-storage/s3-client.ts",
          "packages/agent-service/src/capabilities/error.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/s3-operations.ts:s3ConnectionSummarySchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Static source review plus source-handler fixture with synthetic capability/config/provider substitutes and Node HTTP client fixtures; no real S3 provider.",
        "baselineNote": "Reviewed at ba6a550aeb397c377f6c3c6e620863d06d526628; 9 real-handler fixture checks passed with synthetic capability/config/provider substitutes. See the record for boundaries."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "listS3Objects",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/s3/list",
      "doc": "api/object-storage",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Current user Object Storage capability must be enabled. Uses instance-configured connections and credentials; no separate object/prefix grant. Provider list/read permission is required for object operations.",
      "resultDelivery": "One provider page. Final pages omit a missing continuation token rather than returning null.",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/s3-routes.ts",
          "packages/agent-service/src/routes/object-storage-capability-gate.ts",
          "packages/agent-service/src/object-storage/index.ts",
          "packages/agent-service/src/object-storage/s3-connection-resolver.ts",
          "packages/agent-service/src/object-storage/s3-client.ts",
          "packages/agent-service/src/capabilities/error.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/s3-operations.ts:s3ListResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Static source review plus source-handler fixture with synthetic capability/config/provider substitutes and Node HTTP client fixtures; no real S3 provider.",
        "baselineNote": "Reviewed at ba6a550aeb397c377f6c3c6e620863d06d526628; 9 real-handler fixture checks passed with synthetic capability/config/provider substitutes. See the record for boundaries."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    },
    {
      "operationId": "downloadS3Object",
      "service": "agent-service",
      "method": "GET",
      "path": "/api/s3/download",
      "doc": "api/object-storage",
      "deploymentModes": [
        "standalone-owner",
        "standalone-external"
      ],
      "authentication": "X-Agent-Service-Token from the deployment administrator",
      "permissions": "Current user Object Storage capability must be enabled. Uses instance-configured connections and credentials; no separate object/prefix grant. Provider list/read permission is required for object operations.",
      "resultDelivery": "Link mode returns JSON; binary mode returns arbitrary object bytes, which can themselves contain JSON or HTML. Check HTTP status before saving. Optional link metadata can be absent (including content_length for an empty object).",
      "source": {
        "repository": "desirecore/desirecore",
        "revision": "ba6a550aeb397c377f6c3c6e620863d06d526628",
        "files": [
          "packages/agent-service/src/routes/s3-routes.ts",
          "packages/agent-service/src/routes/object-storage-capability-gate.ts",
          "packages/agent-service/src/object-storage/index.ts",
          "packages/agent-service/src/object-storage/s3-connection-resolver.ts",
          "packages/agent-service/src/object-storage/s3-client.ts",
          "packages/agent-service/src/capabilities/error.ts"
        ]
      },
      "schemaRefs": [
        "packages/schemas/src/agent-service/s3-operations.ts:s3DownloadLinkResponseSchema"
      ],
      "effectiveVersion": null,
      "versionEvidence": null,
      "verification": {
        "record": "api/taskboard-s3-verification-2026-10-25.md",
        "scope": "Static source review plus source-handler fixture with synthetic capability/config/provider substitutes and Node HTTP client fixtures; no real S3 provider.",
        "baselineNote": "Reviewed at ba6a550aeb397c377f6c3c6e620863d06d526628; 9 real-handler fixture checks passed with synthetic capability/config/provider substitutes. See the record for boundaries."
      },
      "spec": "static/openapi/agent-service.json",
      "securitySchemes": [
        "InstanceToken"
      ]
    }
  ]
}