# odek serve integration coverage

The contract: every endpoint and protocol message of `odek serve` (WEBUI.md)
has a bodek client method and a UI surface. This matrix is the audit trail —
update it when either side changes.

## REST endpoints

| Endpoint | Client method | UI surface |
|----------|--------------|------------|
| `GET /api/resources` | `Resources` | `@` completion popup |
| `GET /api/models` | `Models` | model picker + context gauge (configured + provider catalog) |
| `GET /api/sessions` (bare) | `Sessions` | palette session entries |
| `GET /api/sessions?q&limit&offset` | `SearchSessions` | sessions tab (search, load-more) |
| `GET /api/sessions/{id}` | `SessionDetail` | resume (token bootstrap via `X-Session-Token`) |
| `POST /api/sessions/{id}` | `UpdateSession` | pin (`p`), rename (`r`) |
| `DELETE /api/sessions/{id}` | `DeleteSession` | sessions tab (`d` → `y` confirm gate) |
| `GET /api/sessions/{id}/export` | `ExportSession` | sessions tab (`e` md, `E` json) |
| `POST /api/cancel` | `Cancel` | cancel REST fallback (WS cancel is primary) |
| `GET /api/limits` | `Limits` | cost rendering (`PricesFor`), cockpit budget |
| `GET /api/health` | `Health` | cockpit live snapshot (`r` re-fetches) |
| `POST /api/prompt` | `StartRun` | `/run`, palette "run headless" (draft) |
| `GET /api/runs` | `Runs` | runs tab (3s poll while visible) |
| `GET /api/runs/{id}` | `RunDetail` | runs tab enter/refresh |
| `DELETE /api/runs/{id}` · `POST …/cancel` | `CancelRun` | runs tab (`c`) |
| `GET /api/runs/{id}/approvals` | `RunApprovals` | runs tab (`p` — light refresh, no event tail) |
| `POST /api/runs/{id}/approvals/{aid}` | `AnswerRunApproval` | runs tab (`A`/`D`/`T`) |
| `GET /api/events` | `RuntimeEvents` | events tab (`f` session filter, `e` run drill-in from runs, `x` clear) |
| `GET /api/usage` | `Usage` | cockpit lifetime (refreshes with `r`), config tab; includes plan created/updated/blocked counts |
| `GET /api/connections` | `Connections` | config tab |
| `DELETE /api/connections/{id}` | `KickConnection` | config tab (`d`) |
| `GET /api/config` | `ConfigView` | config tab |
| `GET /api/mcp` | `MCPServers` | tools tab |
| `GET /api/memory` | `Memory` | memory tab |
| `POST /api/memory/facts` | `AddMemoryFact` | memory tab (`a` user, `A` env) |
| `DELETE /api/memory/facts` | `DeleteMemoryFact` | memory tab (`d` → `y` confirm gate) |
| `POST /api/memory/episodes/promote` | `PromoteEpisode` | memory tab (`p`) |
| `POST /api/memory/consolidate` | `ConsolidateMemory` | memory tab (`c` user, `E` env) |
| `GET /api/skills` | `Skills` | skills tab (provenance badges) |
| `POST /api/skills/promote` | `PromoteSkill` | skills tab (`p`, `P` force) |
| `GET /api/tools` | `Tools` | tools tab |
| `POST /api/shutdown` | `Shutdown` | config tab (`S` + typed "shutdown" death-gate) |

All nine management surfaces are drawer tabs (sessions · runs · agents ·
events · plan · memory · skills · tools · config): `]`/`[` cycle, `1–9`
jump, `r`/`⏎` refresh — one grammar everywhere.

## Not exposed by odek REST (documented gaps)

These workflows have no server endpoint; bodek cannot offer them:

- Memory fact **replace/update** (the Go SDK has `ReplaceFact`; REST does not)
- Skill delete / enable / disable / import
- Config mutation (`GET /api/config` is sanitized read-only)
- MCP server add / remove / enable (listing only)

## WebSocket protocol (`/ws`)

| Message | Direction | Client | UI |
|---------|-----------|--------|----|
| `prompt` (content/model/thinking/attachments) | → | `SendPrompt` | composer ⏎ |
| `approval_response` | → | `SendApproval` | approval queue (`A`/`D`/`T`, friction typing) |
| `ping` | → | `Ping` | 20s heartbeat |
| `cancel` | → | `SendCancel` | `esc` (REST fallback) |
| `session_switch` | → | `SessionSwitch` | session resume, reconnect re-adopt |
| `skill_prompt_response` | → | `SendSkillPromptResponse` | suggestion card (`alt+s`/`alt+x`) |
| `server_info` / `pong` | ← | — | cockpit, stream badge, RTT |
| `keepalive` | ← | — | ignored (odek ≥ v2.1.0 idle traffic; must not drain the queue) |
| `session` | ← | — | session/token capture, model sync |
| `token` / `token_delta` | ← | — | transcript answer (coalesced) |
| `thinking` / `thinking_delta` | ← | — | reasoning accordions |
| `tool_call` / `tool_result` | ← | — | step lines + typed renderers |
| `subagent_log` | ← | — | nested sub-agent logs |
| `usage` | ← | — | live context gauge |
| `done` | ← | — | turn-foot telemetry (tokens, cache) |
| `error` | ← | — | error bubble / cancel markers |
| `cancelled` | ← | — | clean cancel close-out |
| `approval_request` / `approval_ack` | ← | — | approval queue |
| `clarify_request` / `clarify_ack` / `clarify_expired` | ← | `clarify_response` | principal-channel question card |
| `skill_event` / `memory_event` / `agent_signal` | ← | — | transient notes (+ suggestion card; `agent_signal:context_trimmed` / `trim` / `tool_running` stay silent) |