Selected REST surface. Most paths require an authenticated session; the public paths below are explicitly excluded from auth (see src/server/middleware/auth.ts).
Public (no auth)
Path
Purpose
GET /install, GET /install.html, POST /api/install
First-launch install flow
GET /auth/status
Auth/configured state
GET /health, GET /ready
Health checks
GET /build-info.json
Build metadata
GET /public-url
Echoes the configured PUBLIC_URL
GET/POST /twiml
Twilio voice webhook
POST /sms
Twilio SMS webhook
POST /api/copilot/callback
Copilot CLI callback
Auth
Method
Path
Purpose
POST
/login
Sign in
POST
/logout
Sign out
POST
/api/auth/password
Change admin password
Adaptations
Method
Path
GET
/api/adaptations
GET
/api/adaptations/:id
POST
/api/adaptations/:id
POST
/api/adaptations.reload
Config
Method
Path
GET
/api/config
PUT
/api/config
DELETE
/api/config/:key
Conversations / events
Method
Path
GET
/api/conversations
GET
/api/conversations/:id
GET
/api/conversations/:id/events
Session and operations
Method
Path
Purpose
GET
/api/session/context
Current model-context usage, compaction and capsule status
POST
/api/session/context/compact
Compact an idle active Responses chain
GET
/api/session/operations?hours=24
Windowed context, delivery and memory metrics plus process-runtime paging metrics