Health and status API

Health, status, and runtime feature endpoints.

Back to HTTP API overview.

Health & Status

GET /health

No authentication required. Legacy health check retained for backward compatibility. New integrations should prefer GET /health/live for liveness and GET /health/ready for readiness.

Response

{
  "status": "healthy",
  "uptime": 3600.5,
  "pid": 12345,
  "version": "0.124.5",
  "port": 3850,
  "agentsDir": "/home/user/.agents",
  "db": true,
  "shuttingDown": false,
  "updateAvailable": false,
  "pendingRestart": false,
  "resources": {
    "total": -1,
    "memoryMd": 0,
    "sockets": 0,
    "inotify": 0,
    "pipes": 0,
    "db": 0,
    "other": 0,
    "rss": 169,
    "heapUsed": 106,
    "physicalFootprint": 2867,
    "peakPhysicalFootprint": 3584
  }
}

Memory resource values are MiB. On macOS, physicalFootprint and peakPhysicalFootprint come from proc_pid_rusage and include compressed and driver-backed memory that RSS can miss. They are null on platforms where this metric is unavailable.

GET /health/live

No authentication required. Cheap liveness probe: reports that the daemon process is up and serving HTTP. It never touches the database or any subsystem, and always returns 200 while the process is alive.

Response (always 200)

{
  "status": "healthy",
  "uptime": 3600.5,
  "pid": 12345,
  "version": "0.124.5",
  "port": 3850,
  "shuttingDown": false
}

status is "healthy", or "shutting_down" once shutdown has begun.

GET /health/ready

No authentication required. Readiness probe: reports whether the daemon can actually serve work. Returns 200 only when every gate passes, otherwise 503 with a human-readable reasons list. Gates:

• db — a readonly database connection answers SELECT 1.
• migrations — no pending database migrations.
• embedding — the configured embedding provider is reachable. Passes with note: "disabled" when the provider is intentionally "none".
• inference — the extraction route is not fully blocked; a degraded route still passes readiness.
• queue — durable queue depth, dead-letter rate, and oldest pending job age are within thresholds. Becomes { "error": "database unavailable" } when the database check fails.

Response (200 when ready)

{
  "status": "ready",
  "version": "0.124.5",
  "shuttingDown": false,
  "checks": {
    "db": true,
    "migrations": true,
    "embedding": {
      "provider": "ollama",
      "available": true,
      "checkedAt": "2026-02-21T10:00:00.000Z"
    },
    "inference": {
      "status": "active",
      "configured": "ollama",
      "effective": "ollama",
      "reason": null
    },
    "queue": {
      "score": 1,
      "status": "healthy",
      "depth": 0,
      "oldestAgeSec": 0,
      "deadRate": 0,
      "leaseAnomalies": 0
    }
  },
  "reasons": []
}

Response (503 when not ready) — same shape, with status: "not_ready" and one entry per failing gate in reasons:

{
  "status": "not_ready",
  "version": "0.124.5",
  "shuttingDown": false,
  "checks": {
    "db": true,
    "migrations": false,
    "embedding": { "provider": "none", "available": true, "note": "disabled" },
    "inference": {
      "status": "active",
      "configured": "ollama",
      "effective": "ollama",
      "reason": null
    },
    "queue": {
      "score": 1,
      "status": "healthy",
      "depth": 0,
      "oldestAgeSec": 0,
      "deadRate": 0,
      "leaseAnomalies": 0
    }
  },
  "reasons": ["pending migrations"]
}

GET /api/status

Full daemon status including pipeline config, embedding provider, and a composite health score derived from diagnostics. Extraction provider runtime resolution persists startup degradation so operators can detect silent fallback or hard-blocked extraction after boot.

Response

{
  "status": "running",
  "version": "0.124.5",
  "pid": 12345,
  "uptime": 3600.5,
  "startedAt": "2026-02-21T10:00:00.000Z",
  "port": 3850,
  "host": "127.0.0.1",
  "bindHost": "127.0.0.1",
  "networkMode": "localhost",
  "agentId": "default",
  "agentsDir": "/home/user/.agents",
  "memoryDb": true,
  "resources": {
    "rss": 169,
    "heapUsed": 106,
    "physicalFootprint": 2867,
    "peakPhysicalFootprint": 3584
  },
  "pipelineV2": {
    "enabled": true,
    "paused": false,
    "shadowMode": false,
    "mutationsFrozen": false,
    "graph": {
      "enabled": true
    },
    "autonomous": {
      "enabled": true,
      "allowUpdateDelete": true
    },
    "extraction": {
      "provider": "llama-cpp",
      "model": "qwen3:4b"
    }
  },
  "pipeline": {
    "queue": {
      "memory": { "pending": 0, "leased": 0, "completed": 0, "failed": 0, "dead": 0, "oldestAgeSec": 0, "oldestDeadAgeSec": 0, "lastError": null },
      "summary": { "pending": 0, "leased": 0, "completed": 0, "failed": 0, "dead": 0, "oldestAgeSec": 0, "oldestDeadAgeSec": 0, "lastError": null }
    }
  },
  "providerResolution": {
    "extraction": {
      "configured": "llama-cpp",
      "resolved": "llama-cpp",
      "effective": "llama-cpp",
      "fallbackProvider": "llama-cpp",
      "status": "active",
      "degraded": false,
      "fallbackApplied": false,
      "reason": null,
      "blockedBy": [],
      "since": null,
      "enabled": true,
      "paused": false,
      "workerRunning": false,
      "ready": true,
      "blockedReason": null
    }
  },
  "logging": {
    "logDir": "/home/user/.agents/.daemon/logs",
    "logFile": "/home/user/.agents/.daemon/logs/signet-2026-04-29.log"
  },
  "activeSessions": 1,
  "bypassedSessions": 1,
  "agentCreatedAt": "2026-02-21T10:00:00.000Z",
  "transcripts": {
    "capture": { "pending": 0, "processing": 0, "failed": 0, "dead": 0 }
  },
  "health": { "score": 0.97, "status": "healthy" },
  "update": {
    "currentVersion": "0.124.5",
    "latestVersion": null,
    "updateAvailable": false,
    "pendingRestart": null,
    "autoInstall": false,
    "checkInterval": 21600,
    "lastCheckAt": null,
    "lastError": null,
    "timerActive": true
  },
  "embedding": {
    "provider": "ollama",
    "model": "nomic-embed-text",
    "available": true,
    "usage": {
      "total": { "requests": 2084, "tokens": 812345 },
      "today": { "requests": 12, "tokens": 4567 },
      "bySource": [
        { "source": "artifact-index", "requests": 2050, "tokens": 800000 },
        { "source": "memory-capture", "requests": 30, "tokens": 12000 },
        { "source": "recall", "requests": 4, "tokens": 345 }
      ],
      "byProvider": [
        { "provider": "ollama", "requests": 2080, "tokens": 812000 },
        { "provider": "llama-cpp", "requests": 4, "tokens": 345 }
      ]
    }
  }
}

The embedding.usage block reports embedding token consumption recorded at the shared embedding-fetch boundary (migration 108). Counts come from the real tokenizer (countTokens) applied to the text actually sent to the provider — never provider-reported usage, since Ollama’s /api/embeddings returns none and the native ONNX path reports none either. requests counts successful embedding fetches; tokens sums their input token counts. bySource breaks totals down by memory-capture, artifact-index, recall, dreaming, and other; byProvider breaks them down by the provider that actually served (ollama, llama-cpp, native, openai — the native fallback chain reports the real serving provider). The block is omitted when the table does not exist (pre-migration database).

The bypassedSessions field reports how many active sessions currently have bypass enabled (see Sessions and hooks API). providerResolution.extraction is the canonical workload-state object. Its configured, resolved, and effective labels describe provider selection; they do not imply that jobs are being serviced. Use enabled, paused, and ready to determine whether extraction is actually available for work. The standalone extraction worker was retired under the Dreaming cutover (#946), so workerRunning is always false and ready reflects route resolution alone (active or degraded). blockedReason is populated only for a blocked route. Monitor status for degraded or blocked states when the configured extraction provider is unavailable or routed to a fallback target. When extraction is blocked, providerResolution.extraction.blockedBy contains the first routing candidate’s policy and runtime gate reasons in evaluation order. The array is empty for non-blocked states. pipeline.queue exposes per-queue counts (memory / summary); the retired worker’s load/overload telemetry is no longer reported. transcripts.capture exposes compact durable transcript-capture queue counts; use GET /api/diagnostics/transcripts for detailed artifact/audit diagnostics. Use GET /api/inference/status for the shared inference control plane status.

GET /api/diagnostics/queue

Per-queue counts (memory / summary), oldest-dead job references, and threshold metadata. Backend path uses the same shared threshold constants that GET /api/status and /health/ready consume.

Admin permission required.

Response

{
  "timestamp": "2026-07-19T00:00:00.000Z",
  "queues": {
    "memory":     { "pending": 0, "leased": 0, "completed": 1, "failed": 0, "dead": 1667, "oldestAgeSec": 0, "oldestDeadAgeSec": 5.4e6, "lastError": null },
    "summary":    { "pending": 0, "leased": 0, "completed": 92,  "failed": 0, "dead": 1667, "oldestAgeSec": 0, "oldestDeadAgeSec": 5.4e6, "lastError": "boom" }
  },
  "oldestDeadSummaryJob":    { "id": "...", "harness": "codex", "sessionKey": "...", "createdAt": "...", "attempts": 3, "error": "boom" },
  "oldestDeadMemoryJob":     { "...": "..." },
  "thresholds": {
    "summaryDeadWarn": 50, "summaryDeadFail": 500,
    "summaryOldestPendingWarnSec": 300, "summaryOldestPendingFailSec": 1800,
    "summaryOldestDeadWarnSec": 86400,
    "memoryDeadWarn": 50, "memoryDeadFail": 500,
    "memoryOldestPendingWarnSec": 300, "memoryOldestPendingFailSec": 1800
  }
}

Counts default to 0 and null if a table does not exist on the running database (older installs before the summary_jobs migration landed).

POST /api/diagnostics/queue/repair

Dispatches a queue repair action. Admin permission required. The body shape covers requeue (extending requeueDeadJobs), cancel (audit-preserving soft cancel into job_cancellations), and prune (archive-preserving hard delete into job_archive).

Request body

{
  "action": "cancel",
  "dryRun": true,
  "tables": ["summary"],
  "olderThanMs": 2592000000,
  "errorPattern": "timeout"
}

• action — one of requeue, cancel, prune.
• dryRun — boolean; defaults to true (safe preview).
• ids — optional array of row ids; bypasses filter for max precision.
• tables — optional array of memory and/or summary (default: both).
• olderThanMs — only match rows whose created_at is older than now - olderThanMs.
• errorPattern — optional LIKE %pattern% over the error column.
• retentionMs — optional override for prune’s default 90-day window.
• maxBatch — optional hard cap on rows touched (default: 50 for requeue; 1000 for cancel/prune).

Response

{
  "action": "cancelObsoleteJobs",
  "success": true,
  "affected": 0,
  "message": "dry-run: 1667 job(s) match cancel filter; preview shows 100",
  "preview": ["summary_jobs:abc", "summary_jobs:def"],
  "totalMatching": 1667
}

Both queue endpoints require the admin permission in authenticated modes. When the policy gate denies an action, the response carries success: false and HTTP 429 (cooldown active / hourly budget exhausted / agents without autonomous.enabled). Wrong action values or malformed JSON return 400. Cancel and prune apply requests require migrations 089 and 090; neither daemon creates audit tables from the request path, and a missing table is reported as a migration error.

GET /api/features

Returns all runtime feature flags.

Response

{
  "featureName": true,
  "anotherFeature": false
}

GET /api/mode

Environment probe (issue #1001). Deliberately lightweight and unauthenticated — the dashboard uses it to distinguish “talking to a real daemon” (any hostname: localhost, Tailscale, .local, tunnel, LAN IP) from the marketing site or the cloud app. If this endpoint responds, there is a real daemon behind the URL.

Response

{
  "mode": "local",
  "requiresAuth": false
}

• mode: the daemon’s auth mode (local, team, or hybrid).
• requiresAuth: false in local mode, true in team and hybrid modes. The endpoint itself is always unauthenticated and carries no data beyond this documented shape. Authenticated data endpoints use Bearer tokens only, with no cookies.