API Inventory — Complete Codebase Coverage
<!-- GENERATED by scripts/extract-api-inventory.mjs — do not hand-edit; edit apps//src and re-run. --> Scope: every HTTP route literal under apps//src, plus outbound calls, plus Camel and Kestra surfaces. Status: generated 2026-11-09 from apps//src + apps/agent-bff/openapi/.json — regenerate with node scripts/extract-api-inventory.mjs. How to read this: "spec" = COVERED means a matching operation exists in the OpenAPI specs; "— (no spec)" means the route exists in code but has no spec entry yet. All "— (no spec)" rows are real, callable endpoints — the spec is behind the implementation.
Coverage summary
| Surface | Route uniques | Covered by spec | Uncovered |
|---|---|---|---|
agent-bff | 3655 | 498 | 3157 |
akili-mcp-server | 2 | 0 | 2 |
app-bff | 51 | 3 | 48 |
appwrite-bff | 91 | 5 | 86 |
auth-api | 8 | 0 | 8 |
dev-portal | 9 | 2 | 7 |
email-courier-service | 8 | 2 | 6 |
fsm-worker | 2 | 1 | 1 |
gravitus-admin | 0 | 0 | 0 |
jamii-bff | 2 | 1 | 1 |
sovereign-api | 165 | 1 | 164 |
sovereign-backend | 10 | 4 | 6 |
supabase-bff | 39 | 4 | 35 |
truth-bff | 254 | 1 | 253 |
| Total (HTTP server routes) | 4296 | 522 | 3774 |
OpenAPI spec operations in the published OpenAPI specs: 610 (across 18 specs). The generated per-spec renders live in the generated API reference set; this inventory is the implementation truth the specs are measured against.
Per-app files
| App | Doc |
|---|---|
agent-bff | Agent BFF — route inventory — 3655 routes |
akili-mcp-server | Akili MCP Server — route inventory — 2 routes |
app-bff | App BFF — route inventory — 51 routes |
appwrite-bff | Appwrite BFF — route inventory — 91 routes |
auth-api | Auth API — route inventory — 8 routes |
dev-portal | Dev Portal — route inventory — 9 routes |
email-courier-service | Email Courier — route inventory — 8 routes |
fsm-worker | FSM Worker — route inventory — 2 routes |
gravitus-admin | Gravitus Admin — route inventory — 0 routes |
jamii-bff | Jamii BFF — route inventory — 2 routes |
sovereign-api | Sovereign API — route inventory — 165 routes |
sovereign-backend | Sovereign Backend — route inventory — 10 routes |
supabase-bff | Supabase BFF — route inventory — 39 routes |
truth-bff | Truth BFF — route inventory — 254 routes |
| Outbound calls | Outbound integrations — calls to external services — 15 calls to external services |
Non-HTTP surfaces
Apache Camel routes (Camel route sources): 63 files — NATS-subject protocol translators (egress.camel. → ingress.camel..response). See the Camel gateway design.
- Accum terminal governance cas soft
- Accum terminal governance soft
- Accum terminal procurement soft
- Accum wake ingest soft
- Agri standards routes
- Building reflex actuate route
- Cbam route
- Cdc outbox relay route
- Claim check route
- Claimgen intake extgate routes
- Commerce order pipeline
- Community sourcing scatter route
- Community starter dispatch route
- Config track live routes
- Cross realm sourcing pep
- Declarative gateway routes
- Declarative sse stream consolidator
- Deliver preprocess
- Doc history classifier soft
- Egov nats to kestra soft
- Erpnext route
- Eudris route
- Fleetbase denormalize route
- Fleetbase dispatch route
- Fleetbase epod route
- Fleetbase normalize route
- Generic outbound route
- Geospatial s2 routes
- Git forge webhook route
- Hitl orchestration route
- Identity retention pipeline
- Iso compliance route
- Jetstream lifecycle
- Kazisasa cmd route
- Kazisasa dispatch route
- Kazisasa labor mobility pep
- Kazisasa webhook route
- Kutuma notification egress route
- Lifelong criteria
- Mars fleet compose route
- Mars ice dispatch route
- Mpesa escrow route
- Mtls route
- Openmaint cmd route
- Openmaint dispatch route
- Openmaint webhook route
- Ops dispatch criteria normalize
- Pamoja bbs pii redaction route
- Platform exchange peer routes
- Sourcing affinity credit route
- Sourcing credit matcher route
- Sourcing criteria normalize
- Sourcing visit signed verify
- Sovereign event to workflow triggers
- Spec gate quorum routes
- Tancis route
- Telemetry ingestion route
- Truth graph criteria
- Truth graph http adapters soft
- Ucp jdbc route
- Udm flood claim pipeline
- Udm truth edge reactive
- Wallet commerce route
Kestra flows (Kestra workflow sources): 26 files — scheduled/managed workflow timers and DAGs (e.g. claims-sla-timeout).
- Accumulation soft parallel join
- Accumulation soft saga
- Claims sla timeout
- Commerce bco order saga
- Derived market intelligence feed
- Food security monitor
- Generalized hitl compliance fsm
- Hitl governance approval saga
- Identity and access retention saga
- Kazisasa sourcing attestation saga
- Kujenga milestone escrow inspection
- Lease and retention reconciliation
- Materra eudr satellite sentinel sync
- Order consolidation and dispatch
- Poce chaos soft
- Poce cross node prove soft
- Poce journal on finalize
- Poce recovery soft
- Poce soft exit
- Poce wave e soft
- Poce wave h master soft
- Sourcing multi fill mango live
- Sourcing multi fill mango soft
- Sourcing visit saga
- Standing order sweep
- Udm flood mitigation saga
Methodology and limits
- Route literals are extracted statically from
.get/.post/.put/.patch/.delete/.all/.head/.options(call sites. Dynamically constructed paths (template literals, variables) cannot be enumerated; they appear here as literals where resolvable. - Router mounts (app.use of sub-routers) are resolved best-effort from
apps/agent-bff/src/index.js; unresolved mount-relative routes keep their literal path and are still listed. - Outbound calls (
https://...targets) are calls this platform makes to external services (Discord, Slack, Twilio, Telegram, Meta, Anthropic, Google) — see outbound-integrations.md. - Coverage is exact after normalising Express
:paramto OpenAPI{param}. A spec path that differs only by parameter name is intentionally reported uncovered.