@aitne-sh/aitne 0.1.8 → 0.1.10

package/README.md

@@ -2,15 +2,17 @@
 
 # Aitne
 
-**A local-first, proactive personal AI agent.**
-A long-running TypeScript daemon watches your calendar, mail, repos, and notes — and acts on its own. Your AI of choice (Claude / Codex / Gemini; OpenCode coming soon) is the brain; Aitne is the nervous system.
-
 [![npm version](https://img.shields.io/npm/v/@aitne-sh/aitne.svg)](https://www.npmjs.com/package/@aitne-sh/aitne)
 [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](./LICENSE)
 [![Node](https://img.shields.io/badge/node-%E2%89%A522-brightgreen)](https://nodejs.org)
-[![Status](https://img.shields.io/badge/status-pre--1.0-orange)](#status)
 [![Platforms](https://img.shields.io/badge/platforms-macOS%20%7C%20Linux%20%7C%20Windows-blue)](#platform-support)
 
+**Wake up to a brief that was written for you, by you.**
+
+At 04:00, Aitne reads your calendar, mail, GitHub, and notes — then drafts a one-page plan for the day ahead: today's meetings, the email thread you missed, the PR your teammate is waiting on. Before you've finished coffee, the summary is in your DMs. By evening it journals what actually happened.
+
+All on your laptop. All Markdown you own. Bring your own AI (Claude Code / Codex / Gemini CLI) — Aitne is the part that watches, schedules, and remembers.
+
 ```bash
 npm install -g @aitne-sh/aitne@latest
 aitne start
@@ -22,83 +24,102 @@ aitne start
 
 ---
 
-## Why Aitne
-
-- **Proactive, not reactive.** Drafts your morning plan at 04:00. Surfaces the email you forgot. Nudges you about the PR your teammate is waiting on. You don't have to open an app.
-- **Local-first.** Daemon binds to `127.0.0.1` only. Secrets in the OS keychain. Memory in plain Markdown under `~/.personal-agent/`. No telemetry, no cloud state.
-- **Multi-backend.** Bring Claude Code, Codex CLI, or Gemini CLI — or all three. Per-task tier routing decides which one runs for each kind of work. (OpenCode is wired internally and ships as preview-only in this release.)
-- **Compounds.** Every DM, every correction shapes how Aitne thinks about you. The model doesn't change — the context does.
-
----
-
-## Highlights
+## A day with Aitne
 
-<details>
-<summary><b>Time, calendar, travel</b></summary>
+Aitne is a daemon on your laptop, connected to your calendar, mail (Gmail / Outlook / iCloud / Yahoo), GitHub, Obsidian, and Notion. You talk to it through DMs in Slack / Telegram / Discord / WhatsApp — or through a local dashboard at `:8322`.
 
-- Auto-generate `today.md` every morning with your real schedule
-- 15-min approach reminders for every event, with travel time pre-computed via Google Maps
-- Find a 30-min slot across multiple calendars — Aitne checks freebusy and replies with options
-- Auto-extract flight, hotel, train confirmations from email into a structured travel timeline
-</details>
+- **04:00 — Morning routine.** Aitne reads everything that landed overnight (mail, GitHub activity, calendar changes, vault updates) and writes `today.md` — sample below.
+- **Morning — Brief.** The plan lands in your DMs as a short summary.
+- **Through the day — Nudges.** Meeting reminders, hourly background checks for the things you care about (eval results, PR review requests, new mail). DMs only when there's something worth your attention.
+- **Evening — Review.** Aitne writes a daily journal: what got done, what slipped, one observation about the week.
 
-<details>
-<summary><b>Mail across every account</b></summary>
+You steer it through natural-language DMs ("skip morning routine on Sundays", "ping me when the overnight job finishes") and bang commands (`!cost`, `!ask`, `!ingest`).
 
-- Unified inbox across Gmail, Outlook, Yahoo, and iCloud (OAuth or app-password / IMAP)
-- Local FTS5 full-text search across every account
-- Auto-classify, label, archive, and draft replies in your style
-- Forwarded receipts auto-extract into a structured receipts table
-- IMAP IDLE for near-real-time delivery; PDF/image attachments are extracted and indexed
-</details>
+---
 
-<details>
-<summary><b>Knowledge: Obsidian, Notion, your own wiki</b></summary>
+## Aitne's plan for today
+
+`today.md` — written each morning into `~/.personal-agent/context/state/`. Plain Markdown you can `cat`, `vim`, or sync to Obsidian. Sample:
+
+```text
+2026-05-20 (Wednesday)
+Day type: Weekday | Work focus: on | Study focus: on | Personal focus: on
+
+User Schedule
+ 10:00 — Team standup (#ml-platform)
+ 13:30 — RAG eval review with research team
+ 16:00 — 1:1 with manager (quarterly check-in)
+ 21:00 — Overnight training window opens (8xH100 reserved)
+
+User Tasks
+ Land the embedding-index refactor PR — address review feedback [URGENT] [work]
+ Cancel unused GPU reservation before 18:00 — billing cutoff [work]
+ Skim 3 papers from yesterday's arxiv digest — pick one for Friday's reading group [study]
+ Renew gym membership before Friday [personal]
+ Reply to dentist about reschedule [personal]
+
+Agent Plan
+ 09:45 Notify: standup in 15 min [work] →notify
+ 17:30 Notify: cancel GPU reservation by 18:00 to avoid overnight charges [work] →notify
+ 20:45 Notify: training window opens in 15 min — confirm dataset hash [work] →notify
+
+Agent Notes
+ (HIGH) 2026-05-22 (Fri): Reading group at 16:00 — pick paper by Thu evening
+ (HIGH) 2026-05-23 (Sat): Friend's birthday dinner — gift not bought yet
+ (MED)  2026-05-25 (Mon): Quarterly OKR review — draft self-assessment by EOD Sun
+ Two coworkers pushed to feat/embedding-index since you last pulled [work]
+ Overnight eval run finished — accuracy +1.2pp, p95 latency +18ms [work]
+ Bank statement available — review when convenient [personal]
+ Weather: rain 06:00–10:00 — leave 10 min earlier [personal]
+
+Agent Log
+ 04:12 Morning Routine completed — today.md drafted from 23 raw signals
+ 07:02 Sent morning brief to Slack DM (4 priorities, 2 timing alerts)
+ 12:38 Hourly check: 1 new GitHub review request, 0 calendar changes
+ 18:00 Evening Review completed — 3 of 5 tasks closed; 2 carried to tomorrow
+
+Handoff
+ Tomorrow
+  Reply to dentist about reschedule [personal]
+  Pick reading-group paper [study]
+  Triage overnight training-run metrics [work]
+ Later
+  2026-05-22 (Fri): Reading group at 16:00
+  2026-05-23 (Sat): Friend's birthday dinner
+  2026-05-25 (Mon): Quarterly OKR review
+```
 
-- Use your existing Obsidian vault as Aitne's primary memory store — wiki-links keep working
-- Append to your daily note via the official Obsidian CLI
-- Full Notion page and database CRUD
-- DM `!ingest <url>` to capture a source, `!compile` to synthesize raw notes into linked wiki articles
-- `!ask <question>` answers from your own wiki and writes the cited reply to `30_outputs/`
-- `!lint`, `!trace`, `!connect` for vault health, idea evolution, cross-domain bridges
-- Multiple workspaces (`!ingest @research ...`) — internal or any number of external Obsidian vaults
-</details>
+---
 
-<details>
-<summary><b>Code, Git, GitHub</b></summary>
+## Why Aitne
 
-- Local Git: `git log`, `git diff`, `git show` exposed via daemon proxy
-- GitHub: PR lists, comments, issues, webhook receivers (HMAC-SHA256 verified)
-- Per-repo cron triggers — "every Monday at 09:00, summarize merged PRs into `projects/<repo>.md`"
-- Auto-detect when a coworker modified a file you're about to ship
-- Unified Repositories: one row pairs a local clone with a GitHub remote; the doctor flags drift
-</details>
+**You don't open it. It opens to you.**
+Most AI tools wait for you to type. Aitne goes first — it watches all day and reaches out only when there's something worth acting on.
 
-<details>
-<summary><b>Self-management via natural language</b></summary>
+**Nothing leaves your laptop.**
+The daemon binds to `127.0.0.1` only. Secrets sit in your OS keychain. Memory is plain Markdown under `~/.personal-agent/`. No vendor account, no remote sync, no telemetry — your AI provider's API is the only thing that talks to the network, on your own key.
 
-- "Don't run hourly checks on weekends" — patches the cron window
-- "Remember my partner's birthday is March 14" — appends to `user/profile.md`
-- "I prefer concise replies — no preamble" — updates the agent's `character` field
-- "Email me a summary every Friday at 5pm" — creates a recurring schedule
-- "Switch to Codex for code reviews" — flips the per-process backend mapping
-- Every change is journaled to `agent_actions` — audit anything via `aitne audit`
-</details>
+**Bring your own model.**
+Per-task routing assigns the right tier to the right backend, and the router fails over automatically on quota or auth issues. Run one backend or all of them — your choice.
 
-<details>
-<summary><b>Bring your own toolkit</b></summary>
+**Memory compounds, the model doesn't have to.**
+Every DM, every correction, every observation goes into your Markdown context. The model stays stateless — your story grows.
 
-- Your `~/.claude/skills`, `~/.codex/config.toml`, and `~/.gemini/` settings are loaded on session init (`~/.opencode/` is recognised but its executor is coming soon)
-- Custom MCP servers materialize into every per-session workdir
-- Aitne layers its persona on top of your existing config — nothing gets overwritten
-- Voice attachments — opt-in local Whisper transcription via `ffmpeg-static` + `@huggingface/transformers`
-</details>
+Already running Claude Code in a terminal? Aitne is the part that wakes itself up before you do, watches your mail and calendar between your sessions, remembers what you told it last week, and reaches you in your DMs without a terminal open.
 
 ---
 
-## Status
+## Is this for you?
+
+**Aitne fits if you...**
+- already use Claude Code, Codex CLI, or Gemini CLI daily
+- want context that survives sessions, without uploading your life to someone's server
+- are comfortable running a daemon on your laptop and pasting an API key
 
-Pre-1.0. APIs, schema, and dashboard surfaces may still change. SQLite migrations are deliberately destructive ("clean reinstall, no data migration"); Markdown memory in `context/` is forward-compatible and safe to keep across upgrades.
+**You'll bounce off if you...**
+- want a polished hosted chat UI — this isn't that
+- don't have an API key for at least one provider (Aitne spawns sessions on your behalf; the cost lands on your account)
+- expect zero setup — there's a 9-step wizard for integrations and channels
 
 ---
 
@@ -109,28 +130,28 @@ npm install -g @aitne-sh/aitne@latest
 aitne start
 ```
 
-Then bring at least one AI backend. The documented operating mode is **provider API keys** — paste them into the setup wizard (they land in the OS keychain, never `.env`):
+The daemon listens on `:8321`, the dashboard on `:8322`. After `aitne start`, your browser opens to the setup wizard.
+
+You also need at least one AI backend installed and one API key. The documented operating mode is **provider API keys** — paste them into the wizard (they land in the OS keychain, never `.env`):
 
 | Backend | Install | Auth |
 |---|---|---|
-| **Claude Code** | `npm install -g @anthropic-ai/claude-code` | `ANTHROPIC_API_KEY` in the wizard (Anthropic's headless-agent policy disallows Pro/Max subscriptions for SDK-driven sessions) |
-| **OpenAI Codex CLI** | `npm install -g @openai/codex` | `OPENAI_API_KEY` in the wizard, or `codex login --device-auth` as fallback |
+| **Claude Code** | `npm install -g @anthropic-ai/claude-code` | `ANTHROPIC_API_KEY` in the wizard (Anthropic's headless-agent policy disallows Pro/Max subscriptions for SDK sessions) |
+| **OpenAI Codex CLI** | `npm install -g @openai/codex` | `OPENAI_API_KEY` in the wizard, or `codex login --device-auth` |
 | **Google Gemini CLI** | `npm install -g @google/gemini-cli` | `GEMINI_API_KEY` / `GOOGLE_API_KEY`, or OAuth on first use |
-| **OpenCode** (sst/opencode) | _coming soon_ — registered for preview; setup will open when the runtime executor lands | _coming soon_ |
+| **OpenCode** (sst/opencode) | `npm install -g opencode-ai` | provider via `opencode auth login`, set in the wizard |
 
-The daemon listens on `:8321`, the dashboard on `:3000`. After `aitne start`, the browser opens to a 9-step setup wizard.
-
-### Verify the install
+### Verify
 
 ```bash
 aitne status   # PIDs, uptime, connected platforms, today's spend
-aitne doctor   # 10-check install diagnostic
+aitne doctor   # install-health diagnostic (Node, ports, keychain, CLIs, native bindings)
 aitne logs -f  # tail the daemon log
 ```
 
 ### From source
 
-For contributors, or to hack on the daemon directly. Requires Node ≥ 22 and pnpm 10.x.
+Contributors and anyone hacking on the daemon directly. Requires Node ≥ 22 and pnpm 10.x.
 
 ```bash
 git clone https://github.com/Aitne-sh/Aitne.git aitne
@@ -140,7 +161,7 @@ pnpm install
 pnpm dev          # foreground mode with full stdio
 ```
 
-See [docs/setup-guide.md](docs/setup-guide.md) for the full installation walkthrough.
+Full walkthrough: [docs/setup-guide.md](docs/setup-guide.md).
 
 ---
 
@@ -162,7 +183,7 @@ flowchart LR
     subgraph LOCAL["Your laptop"]
         direction TB
         DAEMON["Aitne daemon<br/>(always on, 127.0.0.1)"]
-        BRAIN["AI session<br/>Claude / Codex / Gemini<br/>(OpenCode coming soon)"]
+        BRAIN["AI session<br/>Claude / Codex / Gemini / OpenCode"]
         MEMORY["Markdown memory<br/>plain files you own"]
         DAEMON --- BRAIN
         BRAIN --- MEMORY
@@ -178,55 +199,24 @@ flowchart LR
 Two execution paths run in parallel:
 
 - **Reactive path** — owner DMs/mentions, cron routines (morning / evening / weekly), calendar approach events. Event → priority heap → dispatcher → backend session.
-- **Polling path** — observers for Git, GitHub, Obsidian, Notion, Calendar, Mail write to an `observations` table without spawning sessions. An hourly cron triages those observations through a lite-tier session, then escalates to a full Sonnet-class session only if something worth surfacing was found.
+- **Polling path** — observers for Git, GitHub, Obsidian, Notion, Calendar, Mail write to an `observations` table without spawning sessions. An hourly cron triages those observations through a lite-tier session, then escalates to a full Sonnet-class session only if something is worth surfacing.
 
 A pre-pass `routine.fetch_window` session runs before each routine, fanning out per-account fetches (mail, calendar, Notion) into the `observations` table so the main session reads from a single source.
 
 ---
 
-## CLI
-
-### Lifecycle
-
-| Command | What it does |
-|---|---|
-| `aitne start [--no-open]` | Build if stale, launch daemon + dashboard in background |
-| `aitne stop` | Graceful shutdown (SIGTERM → SIGKILL after 10 s) |
-| `aitne restart [--clean-context]` | Stop then start. `--clean-context` wipes `context/` after a tarball backup |
-| `aitne status` | PIDs, uptime, platforms, backends, today's spend |
-| `aitne logs [-f] [-n N] [-d]` | Tail daemon log (`-d` = dashboard log, `-f` = follow) |
-| `aitne dev` | Foreground mode (full stdio) |
-
-### Operations
-
-| Command | What it does |
-|---|---|
-| `aitne doctor [--json]` | 10 install-health checks + repo-drift expansion |
-| `aitne audit [flags]` | Read the agent action log from SQLite — `--since`, `--type`, `--result`, `--backend`, `--detail`, `--json` |
-| `aitne setup` | Re-open the dashboard `/setup` wizard |
-| `aitne open` | Open the dashboard in your browser |
-| `aitne run-now <job>` | Fire a maintenance job on demand (currently `roadmap_maintenance`) |
-| `aitne verify <target>` | Read-only post-launch verification of a shipped design surface |
-| `aitne version` / `update` / `uninstall` | Self-explanatory |
-
-`aitne help [cmd]` for per-command details.
-
----
-
 ## Backends
 
-Aitne abstracts four AI runtimes behind a single `IAgentCore` interface. Every kind of work has a `ProcessKey` mapped to a tier (`lite` / `medium` / `high`) and a backend; for Claude those tiers map to **Haiku 4.5 / Sonnet 4.6 / Opus 4.7**.
+Aitne abstracts four AI runtimes behind one `IAgentCore` interface. Every kind of work has a `ProcessKey` mapped to a tier (`lite` / `medium` / `high`) and a backend; for Claude those tiers map to **Haiku 4.5 / Sonnet 4.6 / Opus 4.8**. The high tier is opt-in — no install-time surface defaults to it; pin it per row from `:8322/settings/models`.
 
 | Backend | Implementation | Resume | Strengths |
 |---|---|---|---|
-| **Claude Code** | `@anthropic-ai/claude-agent-sdk` | ✓ | Best for routines, deep context, server-side advisor |
+| **Claude Code** | `@anthropic-ai/claude-agent-sdk` | ✓ | Routines, deep context, server-side advisor |
 | **Codex CLI** | OpenAI Codex CLI subprocess + JSONL stream | ✓ | Code-heavy tasks, fast iteration |
 | **Gemini CLI** | Google Gemini CLI subprocess + JSONL stream | ✓ | Free-tier headroom, large-context summarization |
-| **OpenCode** _(coming soon)_ | `opencode-ai` HTTP server + SDK client | ✓ | Multi-provider — routes to any `opencode auth login` provider. Preview-only in this release; the dashboard selectors are disabled until the runtime executor ships. |
-
-The router fails over to a configured fallback backend automatically on `BackendQuotaError` or decisive failure, re-materializing the fallback's instruction file and skill directories into the session workdir.
+| **OpenCode** | `opencode-ai` HTTP server + SDK client | ✓ | Multi-provider — routes to any `opencode auth login` provider |
 
-Per-process tier defaults and the routing table are editable from the dashboard at `:3000/settings/models`.
+The router fails over to a configured fallback automatically on `BackendQuotaError` or decisive failure, re-materializing the fallback's instruction file and skill directories into the session workdir. Per-process tier defaults and routing are editable at `:8322/settings/models`.
 
 ---
 
@@ -236,12 +226,10 @@ Per-process tier defaults and the routing table are editable from the dashboard
 |---|---|
 | **Messaging** | Slack (Socket Mode), Telegram, Discord, WhatsApp (Baileys), Web dashboard |
 | **Mail** | Gmail, Outlook, Yahoo, iCloud — unified API, classifier, local FTS5 search, IMAP IDLE |
-| **Calendar** | Google Calendar, Outlook Calendar, iCloud (CalDAV), Google Maps for travel time |
+| **Calendar** | Google Calendar, Outlook Calendar, iCloud (CalDAV) — free/busy slot-finding across accounts |
 | **Knowledge** | Obsidian (CLI + vault watch), Notion (REST), custom MCP servers |
 | **Code** | Local Git, GitHub (Octokit + webhooks) |
-| **Lifestyle** | Auto-extracted receipts · travel bookings · Kindle highlights · voice transcription (Whisper, opt-in) |
-
-### Integration modes
+| **Lifestyle** | Auto-extracted receipts · travel bookings · Kindle highlights · browser-history research clusters · voice transcription (Whisper, opt-in) |
 
 Each integration runs in one of four modes:
 
@@ -256,30 +244,122 @@ Every mode change goes through a live capability probe and a per-key flip lock.
 
 ---
 
+## What you can do
+
+<details open>
+<summary><b>Time, calendar, travel</b></summary>
+
+- Auto-generate `today.md` every morning with your real schedule
+- 15-min approach reminders for every event
+- Find a 30-min slot across multiple calendars — Aitne checks freebusy and replies with options
+- Auto-extract flight, hotel, train confirmations from email into a structured travel timeline
+</details>
+
+<details open>
+<summary><b>Mail across every account</b></summary>
+
+- Unified inbox across Gmail, Outlook, Yahoo, and iCloud (OAuth or app-password / IMAP)
+- Local FTS5 full-text search across every account
+- Auto-classify, label, archive, and draft replies in your style
+- Forwarded receipts auto-extract into a structured receipts table
+- IMAP IDLE for near-real-time delivery; PDF/image attachments are extracted and indexed
+</details>
+
+<details open>
+<summary><b>Agents you can define and schedule</b></summary>
+
+- Every routine is a first-class **Agent** — an identity with a YAML config + Markdown brief, editable at `:8322/agents`
+- The built-in routines (morning routine, evening review, hourly check, …) ship as **System** agents — can't be deleted, but can be stopped with a warning
+- Define your own recurring **work** agents (daily / weekly / monthly) — from the dashboard form or just by DMing the agent ("summarize my open PRs every Monday at 9")
+- Pin a backend, model, and tier per agent; see per-agent cost, success rate, and run history; fire any agent on demand
+- One-shot wake-ups ("remind me at 3pm"), pre-composed scheduled DMs, and recurring briefings — all quiet-hours-aware
+</details>
+
+<details>
+<summary><b>Browser automation (managed Chromium)</b></summary>
+
+- DM an open-ended browser task ("check my order status", "fill out this form") — a scoped sub-agent drives a managed Chromium session turn-by-turn, asking you to clarify mid-task and DMing back results + screenshots
+- Egress guards stay on: RFC1918 / loopback / cloud-metadata IP blocking, a form-submit payment-path blocker, and single-owner scoping
+- Purchase confirmation (the B-4 flow — DM-delivered single-use token + screenshot-first consent) is **experimental and default-off**; it requires explicit per-site dashboard opt-in
+</details>
+
+<details>
+<summary><b>Knowledge: Obsidian, Notion, your own wiki</b></summary>
+
+- Use your existing Obsidian vault as Aitne's primary memory store — wiki-links keep working
+- Append to your daily note via the official Obsidian CLI
+- Full Notion page and database CRUD
+- DM `!ingest <url>` to capture a source, `!compile` to synthesize raw notes into linked wiki articles
+- `!ask <question>` answers from your own wiki and writes the cited reply to `30_outputs/`
+- `!lint`, `!trace`, `!connect` for vault health, idea evolution, cross-domain bridges
+- Multiple workspaces (`!ingest @research ...`) — internal or any number of external Obsidian vaults
+</details>
+
+<details>
+<summary><b>Code, Git, GitHub</b></summary>
+
+- Local Git: `git log`, `git diff`, `git show` exposed via daemon proxy
+- GitHub: PR lists, comments, issues, webhook receivers (HMAC-SHA256 verified)
+- Per-repo cron triggers — "every Monday at 09:00, summarize merged PRs into the repo's daily journal"
+- Auto-detect when a coworker modified a file you're about to ship
+- Unified Repositories: one row pairs a local clone with a GitHub remote; the doctor flags drift
+</details>
+
+<details>
+<summary><b>Self-management via natural language</b></summary>
+
+- "Don't run hourly checks on weekends" — patches the cron window
+- "Remember my partner's birthday is March 14" — appends to `identity/profile.md`
+- "I prefer concise replies — no preamble" — updates the agent's `character` field
+- "Email me a summary every Friday at 5pm" — creates a recurring schedule
+- "Switch to Codex for code reviews" — flips the per-process backend mapping
+- Bang commands for instant control: `!stop` / `!start` (pause/resume autonomous work), `!close` (reset the DM session), `!cost`, `!report`, `!help` — and define your own `!commands` at `:8322/settings/commands`
+- Every change is journaled to `agent_actions` — audit anything via `aitne audit`
+</details>
+
+<details>
+<summary><b>Bring your own toolkit</b></summary>
+
+- Your `~/.claude/skills`, `~/.codex/config.toml`, and `~/.gemini/` settings are loaded on session init
+- Custom MCP servers materialize into every per-session workdir
+- Aitne layers its persona on top of your existing config — nothing gets overwritten
+- Voice attachments — opt-in local Whisper transcription via `ffmpeg-static` + `@huggingface/transformers`
+</details>
+
+---
+
 ## Memory
 
-Everything Aitne writes lives in `~/.personal-agent/context/*.md` — plain Markdown you can `cat`, `vim`, `obsidian`, or `cp`:
+Everything Aitne writes lives in `~/.personal-agent/context/`:
 
 ```
 context/
-├── today.md             # Working view, always injected
-├── yesterday.md         # Daemon-rotated archive
-├── roadmap.md           # Long-term goals
-├── user/                # profile.md, people.md, work.md, …
-├── rules/               # Policy files (management, redaction)
-├── projects/            # One file per active project
-├── daily/YYYY-MM-DD.md  # Synthesized daily journal
-├── weekly/              # Weekly retrospectives
-└── agent/journal.md     # Private agent self-reflection
+├── state/
+│   ├── today.md            # Working view, always injected
+│   ├── yesterday.md        # Daemon-rotated archive
+│   ├── inbox/              # Captured snippets
+│   └── scratch/            # Short-lived agent notes (48h TTL)
+├── plans/
+│   ├── roadmap.md          # Long-term goals
+│   └── projects/           # One file per active project
+├── identity/              # profile.md, people.md, work.md, …
+├── policies/              # Management rules, MCP config, redaction, routines
+├── journal/
+│   ├── daily/YYYY-MM-DD.md # Synthesized daily journal
+│   ├── weekly/            # Weekly retrospectives
+│   └── agent.md           # Private agent self-reflection
+└── knowledge/             # wiki, per-repo overviews, entities, dossiers
 ```
 
-Context writes flow through `curl http://localhost:8321/api/context/<path>`, not the SDK's `Edit`/`Write` tools — this gives the daemon a single chokepoint for write locks, frontmatter validation, and 30-day snapshots. SQLite (`better-sqlite3` with FTS5) backs sessions, observations, agent actions, and history.
+Context writes flow through `curl http://localhost:8321/api/context/<class>/<path>` — where `<class>` is one of `identity`, `state`, `plans`, `journal`, `knowledge`, `policies` — not the SDK's `Edit`/`Write` tools. This gives the daemon a single chokepoint for write locks, frontmatter validation, and 30-day snapshots. SQLite (`better-sqlite3` with FTS5) backs sessions, observations, agent actions, and history.
+
+Schema upgrades are forward-only and idempotent — the migration runner preserves your SQLite history and Markdown context across releases. (`aitne update` prints the `npm install -g @aitne-sh/aitne@latest` command; there is no self-updater.)
 
 ---
 
 ## Safety
 
-Four independent layers, designed so that the bottom layer holds even when upper layers are widened:
+Four independent layers, designed so the bottom layer holds even when upper layers are widened:
 
 1. **SDK permission model** — strict `allowedTools` whitelist in Safe mode; `bypassPermissions` in Allow mode
 2. **PreToolUse hooks** (Claude, Safe mode) — `curl` parsed for hostname + port; daemon-API is the only legal write path
@@ -297,19 +377,55 @@ Plus: localhost-only API, webhook HMAC verification, no automated financial tran
 | `maxConcurrentSessions` (autonomous) | 3 | Hard semaphore |
 | `maxReactiveSessions` (DMs) | 2 | Hard semaphore |
 | `executeTimeoutMinutes` | 60 | Per-execute watchdog |
-| `autonomousDailyCostCapUsd` | `null` | Priority-based skipping: `hourly_check` at 100%, `evening_review` at 150%, `morning_routine` at 200%. Reactive DMs are not gated. |
+| `autonomousDailyCostCapUsd` | `null` | Priority-based skipping: `hourly_check` at 100%, `roadmap_refresh` at 120%, `evening_review` at 150%, `morning_routine` at 200%. Reactive DMs are not gated. |
 | `autonomousMonthlyCostCapUsd` | `null` | Alert + warn surface |
 | Per-ProcessKey `maxBudgetUsd` | per-row | Hard cap per execute |
 
-Typical day for an active user: **~$0.50** (Morning routine + briefing + 2× hourly check + 1 DM + Evening review, all on Sonnet 4.6). Quota exhaustion is detected, dedupe-notified once per 2-hour window, and retried on the next tick.
+Typical day for an active user: **~$0.50** (morning routine + briefing + 2× hourly check + 1 DM + evening review, all on Sonnet 4.6). Quota exhaustion is detected, dedupe-notified once per 2-hour window, and retried on the next tick.
 
 ---
 
-## Configuration
+## Operating Aitne
+
+### Dashboard
+
+The dashboard at `:8322` is a full local app, not just a settings panel:
+
+- **`/chat`** — talk to any backend/model right in the browser, with per-session overrides
+- **`/agents`** — define, schedule, and inspect your agents (above)
+- **`/schedule`** + **`/activity`** — upcoming runs and the full conversation/action history
+- **`/analytics`** + **`/health`** — cost/usage trends and integration-mode health
+- **`/connections/*`** — wire up calendar, mail, repositories, messaging, MCP, routines
+- **`/settings/*`** — `models`, `backends`, `schedule`, `routines`, `processes`, `messaging`, `commands` (custom bang commands), `management`, and the experimental browser-history surfaces
+
+### Lifecycle
+
+| Command | What it does |
+|---|---|
+| `aitne start [--no-open]` | Build if stale, launch daemon + dashboard in background |
+| `aitne stop` | Graceful shutdown (SIGTERM → SIGKILL after 10 s) |
+| `aitne restart [--clean-context]` | Stop then start. `--clean-context` wipes `context/` after a tarball backup |
+| `aitne status` | PIDs, uptime, platforms, backends, today's spend |
+| `aitne logs [-f] [-n N] [-d]` | Tail daemon log (`-d` = dashboard, `-f` = follow) |
+| `aitne dev` | Foreground mode (full stdio) |
+
+### Operations
+
+| Command | What it does |
+|---|---|
+| `aitne doctor [--json]` | Eight install-health checks + per-repo GitHub-link drift expansion |
+| `aitne audit [flags]` | Read the agent action log — `--since`, `--type`, `--result`, `--backend`, `--detail`, `--json` |
+| `aitne setup` | Re-open the `/setup` wizard |
+| `aitne open` | Open the dashboard in your browser |
+| `aitne run-now <job>` | Fire a maintenance job on demand (currently `roadmap_maintenance`) |
+| `aitne verify <target>` | Read-only post-launch verification of a shipped design surface |
+| `aitne version` / `update` / `uninstall` | Self-explanatory |
+
+`aitne help [cmd]` for per-command details.
 
-`.env` is **bootstrap-only** (`PA_DATA_DIR`, `PA_API_PORT`, `PA_DASHBOARD_PORT`, `PA_LOG_LEVEL`). Everything else — ~100 runtime keys covering schedule, notifications, models, character, mail, voice, delegated mode — is editable from the dashboard at `:3000`, or via natural-language DMs to the agent.
+### Configuration
 
-Bot tokens and OAuth credentials always live in the OS keychain, never in environment variables.
+`.env` is **bootstrap-only** (`PA_DATA_DIR`, `PA_API_PORT`, `PA_DASHBOARD_PORT`, `PA_LOG_LEVEL`). Everything else — ~130 runtime keys covering schedule, notifications, models, character, mail, voice, delegated mode — is editable from the dashboard at `:8322`, or via natural-language DMs to the agent.
 
 ---
 
@@ -321,9 +437,9 @@ Bot tokens and OAuth credentials always live in the OS keychain, never in enviro
 | **Folder picker** | `osascript` | `zenity` / `kdialog` / `yad` | `FolderBrowserDialog` |
 | **Process tree kill** | POSIX process group | POSIX process group | `taskkill /T /F` |
 
-WSL falls back to the encrypted file store — set `PA_MASTER_PASSWORD` to a long random string. Windows users hitting `ENAMETOOLONG` on install should enable long paths via `LongPathsEnabled=1` registry key.
+WSL falls back to the encrypted file store — set `PA_MASTER_PASSWORD` to a long random string. Windows users hitting `ENAMETOOLONG` on install should enable long paths via the `LongPathsEnabled=1` registry key.
 
-Common gotchas: [docs/troubleshooting.md](docs/troubleshooting.md)
+Common gotchas: [docs/troubleshooting.md](docs/troubleshooting.md).
 
 ---
 
@@ -349,35 +465,6 @@ Monorepo: pnpm 10 workspaces · Turborepo · TypeScript 5.8 · Vitest 3 (100% co
 
 ---
 
-## Contributing
-
-Issues and PRs welcome. Conventions:
-
-- All code, comments, tests, and user-facing text are in **English**
-- TypeScript throughout, camelCase, ESM with `.js` import extensions
-- Tests colocated with source as `foo.ts` + `foo.test.ts`
-- `packages/daemon/src/` is the source of truth
-
----
-
-## FAQ
-
-**Is Aitne a chatbot?** No — it's a daemon. It also responds to chat, but the more interesting half is what it does while you're not looking at it.
-
-**Does it phone home?** No. The daemon binds to `127.0.0.1` only. No telemetry. Verify with `lsof` and `nettop`.
-
-**Can I edit memory directly?** Yes. Open `~/.personal-agent/context/today.md`, change anything, save. The agent picks up your edits on the next routine.
-
-**Do my existing Claude Code / Codex / Gemini settings work?** Yes. Aitne reads `~/.claude/`, `~/.codex/`, and `~/.gemini/` on session init and layers its persona on top. (`~/.opencode/` is recognised but the OpenCode runtime is coming soon.)
-
-**Is this for my team?** No — single-owner by design. Group chats and multi-user channels are filtered at the adapter layer.
-
-**Does it work without internet?** Backends and reactive messaging need internet. The daemon, dashboard, observers, and Markdown memory are entirely offline.
-
-**How do I uninstall?** `aitne uninstall` — offers to wipe `~/.personal-agent` or keep it for re-installation.
-
----
-
 ## License
 
 MIT — see [LICENSE](./LICENSE).

package/agent-assets/agent-profiles/_safety.md

@@ -3,17 +3,17 @@
 - Store no passwords or secrets in any file.
 - Execute no financial transactions.
 - Auto-post to no social media platforms.
-- Do NOT modify `rules/management.md` directly except via the dashboard
+- Do NOT modify `policies/management.md` directly except via the dashboard
   setup wizard. The `## Active Policies` section is auto-maintained by
   the daemon's policy-index reconciler — never edit it by hand; any
   manual change is overwritten on the next reconcile pass.
 - Durable management rules captured from conversation belong in
-  `rules/policies/<slug>.md`. Use the `management-policy` skill — it
+  `policies/management-captures/<slug>.md`. Use the `management-policy` skill — it
   enforces the read-before-write, similarity-detection, and
   confirmation steps. The skill creates / pauses / resumes the policy
   file and (when applicable) the linked routine; the daemon's
   policy-index reconciler picks the change up and re-renders both
-  `rules/policies/_index.md` and `rules/management.md ## Active Policies`
+  `policies/management-captures/_index.md` and `policies/management.md ## Active Policies`
   within ~10 s. Do NOT manually PATCH `_index.md` or the management
   section.
 - Day boundary: 04:00 — manage schedules from 04:00 to next 03:59.