@aitne/daemon 0.1.0

package/dist/services/voice/transcriber.js

@@ -0,0 +1,201 @@
+import { mkdirSync } from "node:fs";
+import { createLogger } from "../../logging.js";
+import { getVoiceTranscript, saveVoiceTranscript, } from "../../db/voice-transcripts-store.js";
+import { decodeAudioWithFfmpeg, defaultLoadPipeline, } from "./transcriber-impl.js";
+const logger = createLogger("voice-transcriber");
+export const VOICE_TRANSCRIBER_DEFAULTS = {
+    enabled: true,
+    model: "Xenova/whisper-small",
+    language: null,
+    maxDurationSec: 600,
+};
+const TARGET_SAMPLE_RATE = 16000;
+/**
+ * VoiceTranscriber — local Whisper transcription for inbound audio
+ * attachments. See `docs/design/appendices/voice-transcription.md`.
+ *
+ * Lifecycle:
+ *  1. Constructor takes options + DB; no model load happens here.
+ *  2. First `transcribe(...)` call lazy-loads the pipeline.
+ *  3. Subsequent calls reuse the loaded pipeline. Concurrent calls for
+ *     the same `attachmentId` share a single in-flight promise; calls
+ *     for different attachments are serialized (single-flight queue)
+ *     so the CPU does not thrash.
+ *
+ * Failure modes degrade gracefully — every error returns `null` so the
+ * dispatcher falls back to the pre-feature behaviour (path-only file
+ * reference) without breaking the turn.
+ */
+export class VoiceTranscriber {
+    db;
+    modelDir;
+    enabledFn;
+    model;
+    language;
+    maxDurationSec;
+    loadPipeline;
+    decodeAudio;
+    pipelinePromise = null;
+    inflight = new Map();
+    queue = Promise.resolve();
+    setupDone = false;
+    constructor(opts) {
+        this.db = opts.db;
+        this.modelDir = opts.modelDir;
+        const enabledOpt = opts.enabled ?? VOICE_TRANSCRIBER_DEFAULTS.enabled;
+        this.enabledFn =
+            typeof enabledOpt === "function" ? enabledOpt : () => enabledOpt;
+        this.model = opts.model ?? VOICE_TRANSCRIBER_DEFAULTS.model;
+        this.language = opts.language ?? VOICE_TRANSCRIBER_DEFAULTS.language;
+        this.maxDurationSec =
+            opts.maxDurationSec ?? VOICE_TRANSCRIBER_DEFAULTS.maxDurationSec;
+        this.loadPipeline = opts.loadPipeline ?? defaultLoadPipeline;
+        this.decodeAudio = opts.decodeAudio ?? decodeAudioWithFfmpeg;
+        // Eagerly run the model-dir + HF env setup when the flag is on at boot.
+        // When the flag flips on later (e.g. after the dashboard's voice install
+        // flips `config.voiceTranscriptionEnabled`), `transcribe()` runs the
+        // same setup lazily before the first inference.
+        if (this.isEnabled())
+            this.ensureSetup();
+    }
+    ensureSetup() {
+        if (this.setupDone)
+            return;
+        this.setupDone = true;
+        try {
+            mkdirSync(this.modelDir, { recursive: true });
+        }
+        catch (err) {
+            logger.warn({ err, modelDir: this.modelDir }, "voice model dir mkdir failed");
+        }
+        // Anchor HuggingFace's cache inside the daemon data dir so models do
+        // not pollute the user's `~/.cache/huggingface/`. Set BEFORE the
+        // pipeline is first imported so transformers.js picks it up.
+        process.env.HF_HOME ??= this.modelDir;
+        process.env.TRANSFORMERS_CACHE ??= this.modelDir;
+    }
+    isEnabled() {
+        return this.enabledFn();
+    }
+    isAudio(mimeType) {
+        return /^audio\//i.test(mimeType.split(";")[0].trim());
+    }
+    async transcribe(input) {
+        if (!this.isEnabled())
+            return null;
+        if (!this.isAudio(input.mimeType))
+            return null;
+        // Cover the boot-disabled → later-enabled path: the constructor only ran
+        // setup when the flag was true at construction.
+        this.ensureSetup();
+        const cached = getVoiceTranscript(this.db, input.attachmentId);
+        if (cached) {
+            return {
+                attachmentId: cached.attachmentId,
+                transcript: cached.transcript,
+                language: cached.language,
+                durationSec: cached.durationSec,
+                model: cached.model,
+                fromCache: true,
+            };
+        }
+        const existing = this.inflight.get(input.attachmentId);
+        if (existing)
+            return existing;
+        const promise = this.runQueued(() => this.transcribeUncached(input));
+        this.inflight.set(input.attachmentId, promise);
+        try {
+            return await promise;
+        }
+        finally {
+            this.inflight.delete(input.attachmentId);
+        }
+    }
+    runQueued(fn) {
+        const next = this.queue.then(fn, fn);
+        // Swallow failures on the queue chain so a single bad inference does
+        // not poison subsequent ones; callers still see the rejection.
+        this.queue = next.catch(() => undefined);
+        return next;
+    }
+    async transcribeUncached(input) {
+        let audio;
+        try {
+            audio = await this.decodeAudio({
+                path: input.path,
+                mimeType: input.mimeType,
+            });
+        }
+        catch (err) {
+            logger.warn({ err, attachmentId: input.attachmentId }, "voice decode failed");
+            return null;
+        }
+        if (audio.durationSec > this.maxDurationSec) {
+            logger.info({
+                attachmentId: input.attachmentId,
+                durationSec: audio.durationSec,
+                maxDurationSec: this.maxDurationSec,
+            }, "voice clip exceeds duration cap, skipping transcription");
+            return null;
+        }
+        if (audio.sampleRate !== TARGET_SAMPLE_RATE) {
+            logger.warn({ attachmentId: input.attachmentId, sampleRate: audio.sampleRate }, "voice decoder returned unexpected sample rate; skipping");
+            return null;
+        }
+        let pipeline;
+        try {
+            pipeline = await this.ensurePipeline();
+        }
+        catch (err) {
+            logger.warn({ err }, "voice pipeline load failed");
+            return null;
+        }
+        let output;
+        try {
+            output = await pipeline(audio.samples, {
+                language: this.language,
+                task: "transcribe",
+            });
+        }
+        catch (err) {
+            logger.warn({ err, attachmentId: input.attachmentId }, "voice inference failed");
+            return null;
+        }
+        const transcript = output.text.trim();
+        if (!transcript) {
+            logger.info({ attachmentId: input.attachmentId }, "voice transcript empty, skipping cache");
+            return null;
+        }
+        const detectedLanguage = output.language ?? this.language ?? null;
+        saveVoiceTranscript(this.db, {
+            attachmentId: input.attachmentId,
+            model: this.model,
+            language: detectedLanguage,
+            durationSec: audio.durationSec,
+            transcript,
+        });
+        return {
+            attachmentId: input.attachmentId,
+            transcript,
+            language: detectedLanguage,
+            durationSec: audio.durationSec,
+            model: this.model,
+            fromCache: false,
+        };
+    }
+    ensurePipeline() {
+        if (this.pipelinePromise)
+            return this.pipelinePromise;
+        this.pipelinePromise = this.loadPipeline({
+            model: this.model,
+            modelDir: this.modelDir,
+        }).catch((err) => {
+            // Reset so a transient model-download failure can be retried on
+            // the next inbound voice message instead of being latched.
+            this.pipelinePromise = null;
+            throw err;
+        });
+        return this.pipelinePromise;
+    }
+}
+//# sourceMappingURL=transcriber.js.map

package/dist/services/voice/transcriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcriber.js","sourceRoot":"","sources":["../../../src/services/voice/transcriber.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,sBAAsB;IAC7B,QAAQ,EAAE,IAAqB;IAC/B,cAAc,EAAE,GAAG;CACX,CAAC;AAEX,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAkFjC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,gBAAgB;IACV,EAAE,CAAoB;IACtB,QAAQ,CAAS;IACjB,SAAS,CAAgB;IACzB,KAAK,CAAS;IACd,QAAQ,CAAgB;IACxB,cAAc,CAAS;IACvB,YAAY,CAAiB;IAC7B,WAAW,CAAe;IAEnC,eAAe,GAAoC,IAAI,CAAC;IACxD,QAAQ,GAAG,IAAI,GAAG,EAAoD,CAAC;IACvE,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5C,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,IAA6B;QACvC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC,OAAO,CAAC;QACtE,IAAI,CAAC,SAAS;YACZ,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;QACnE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAC,KAAK,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,0BAA0B,CAAC,QAAQ,CAAC;QACrE,IAAI,CAAC,cAAc;YACjB,IAAI,CAAC,cAAc,IAAI,0BAA0B,CAAC,cAAc,CAAC;QACnE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAE7D,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAChF,CAAC;QACD,qEAAqE;QACrE,iEAAiE;QACjE,6DAA6D;QAC7D,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,QAAQ,CAAC;IACnD,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,yEAAyE;QACzE,gDAAgD;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAEO,SAAS,CAAI,EAAoB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,qEAAqE;QACrE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,KAA8B;QAE9B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CACT;gBACE,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,EACD,yDAAyD,CAC1D,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAClE,yDAAyD,CAC1D,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;gBACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,wBAAwB,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QAElE,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE;YAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU;SACX,CAAC,CAAC;QAEH,OAAO;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU;YACV,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,gEAAgE;YAChE,2DAA2D;YAC3D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;CACF"}

package/dist/settings/runtime-settings.d.ts

@@ -0,0 +1,232 @@
+import { z } from "zod";
+/**
+ * The secret-exfiltration / credential-tampering subset of the absolute-block
+ * layer now lives in `safety/always-disallowed.ts` (EXECUTION-MODE-DESIGN.md
+ * §6). Import `ALWAYS_DISALLOWED_TOOLS` from there; the old
+ * `SENSITIVE_PATH_DISALLOWED_TOOLS` export has been removed as part of
+ * consolidating the two previously-parallel lists.
+ */
+/**
+ * Strict-mode seed for `config.disallowedTools`. Composed from the absolute
+ * block list (single source at `safety/always-disallowed.ts`) plus the
+ * strict-only extras that live OUTSIDE the "enforced in both modes"
+ * contract — `chmod`, `chown`, destructive `git` flags. Allow mode skips
+ * these per design, Safe mode keeps them.
+ */
+export declare const DEFAULT_DISALLOWED_TOOLS: readonly ["Bash(rm -rf *)", "Bash(rm -rf /*)", "Bash(rm -rf ~*)", "Bash(rm -rf .*)", "Bash(rm -r *)", "Bash(rm -rf*)", "Bash(rm -rv*)", "Bash(rm -ri*)", "Bash(rm -rd*)", "Bash(rm -rI*)", "Bash(rm -fr*)", "Bash(rm -vr*)", "Bash(rm -ir*)", "Bash(rm -dr*)", "Bash(rm -Ir*)", "Bash(rm -R*)", "Bash(rm -fR*)", "Bash(rm -vR*)", "Bash(rm -iR*)", "Bash(rm -dR*)", "Bash(rm -IR*)", "Bash(rm --recursive*)", "Bash(rm --force --recursive*)", "Bash(rm --recursive --force*)", "Bash(sudo *)", "Bash(doas *)", "Bash(su *)", "Bash(curl * | sh*)", "Bash(curl * | bash*)", "Bash(wget * | sh*)", "Bash(wget * | bash*)", "Bash(bash <(*)*)", "Bash(sh <(*)*)", "Bash(bash<*)", "Bash(sh<*)", "Bash(eval *)", "Bash(source *)", "Bash(security *)", "Bash(secret-tool *)", "Bash(cmdkey *)", "Read(.env)", "Read(.env.*)", "Read(**/.env)", "Read(**/.env.*)", "Read(id_rsa*)", "Read(id_ed25519*)", "Read(~/.ssh/**)", "Read(~/.gnupg/**)", "Read(~/.aws/**)", "Read(~/.config/gcloud/**)", "Read(~/.config/gh/hosts.yml)", "Read(~/.netrc)", "Read(~/Library/Keychains/**)", "Read(~/.local/share/keyrings/**)", "Read(~/.personal-agent/backups/**)", "Read(~/.personal-agent/whatsapp/auth/**)", "Read(~/.personal-agent/secrets/**)", "Write(.env)", "Edit(.env)", "Write(.env.*)", "Edit(.env.*)", "Write(**/.env)", "Edit(**/.env)", "Write(**/.env.*)", "Edit(**/.env.*)", "Write(id_rsa*)", "Edit(id_rsa*)", "Write(id_ed25519*)", "Edit(id_ed25519*)", "Write(~/.ssh/**)", "Edit(~/.ssh/**)", "Write(~/.gnupg/**)", "Edit(~/.gnupg/**)", "Write(~/.aws/**)", "Edit(~/.aws/**)", "Write(~/.config/gcloud/**)", "Edit(~/.config/gcloud/**)", "Write(~/.config/gh/hosts.yml)", "Edit(~/.config/gh/hosts.yml)", "Write(~/.netrc)", "Edit(~/.netrc)", "Write(~/Library/Keychains/**)", "Edit(~/Library/Keychains/**)", "Write(~/.local/share/keyrings/**)", "Edit(~/.local/share/keyrings/**)", "Write(~/.personal-agent/backups/**)", "Edit(~/.personal-agent/backups/**)", "Write(~/.personal-agent/whatsapp/auth/**)", "Edit(~/.personal-agent/whatsapp/auth/**)", "Write(~/.personal-agent/secrets/**)", "Edit(~/.personal-agent/secrets/**)", "CronCreate", "CronList", "CronDelete", "RemoteTrigger", "PushNotification", "Bash(chmod *)", "Bash(chown *)", "Bash(git push --force *)", "Bash(git push -f *)", "Bash(git reset --hard *)", "Bash(git clean *)"];
+/**
+ * Shape of a "watched git repository" — projected from the unified
+ * `repositories` table by `selectGitWatchedRepos` for legacy consumers
+ * (git-watcher, git-delegated-cron, project-doc helpers). Held here as a
+ * type-only export so callers don't import from db/repositories-store.ts
+ * directly.
+ *
+ * The unified table is the source of truth — see
+ * `docs/design/appendices/unified-repositories.md`. The legacy
+ * `gitRepos` / `gitWatchedRepos` / `githubRepos` config keys were removed
+ * at cutover.
+ */
+export declare const gitWatchedRepoSchema: z.ZodObject<{
+    path: z.ZodString;
+    slug: z.ZodOptional<z.ZodString>;
+    classification: z.ZodDefault<z.ZodEnum<{
+        project: "project";
+        "repo-only": "repo-only";
+    }>>;
+    category: z.ZodDefault<z.ZodEnum<{
+        work: "work";
+        personal: "personal";
+        research: "research";
+        client: "client";
+        other: "other";
+    }>>;
+    org: z.ZodOptional<z.ZodString>;
+    accountAlias: z.ZodOptional<z.ZodString>;
+    pollPriority: z.ZodDefault<z.ZodEnum<{
+        high: "high";
+        normal: "normal";
+    }>>;
+    pollIntervalSec: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    githubRepo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    repositoryId: z.ZodString;
+}, z.core.$strip>;
+export type GitWatchedRepoSetting = z.infer<typeof gitWatchedRepoSchema>;
+export type GitWatchedRepoSettingInput = Omit<z.input<typeof gitWatchedRepoSchema>, "repositoryId"> & {
+    repositoryId?: string;
+};
+/**
+ * `gitAccounts` registry — per-alias credential metadata for multi-account
+ * Git/GitHub setups (P5 §"Multi-account remotes"). The PAT itself never
+ * appears here; when `authMode === "pat-keychain"` the value lives in the
+ * OS keychain at `git.account.<alias>` and is fetched via
+ * `SecretBroker.getScoped(...)`. The alias matches `^[a-z0-9._-]+$` so the
+ * keychain entry name and Hono route segment stay bounded.
+ *
+ * `host` defaults to `github.com`; set to a self-hosted GHES hostname for
+ * a non-public account. `gh-cli-profile` resolves the token via
+ * `gh auth token --user <ghProfile> --hostname <host>` at call time, so
+ * `gh` remains the credential source of truth and rotation is automatic.
+ */
+export declare const GIT_ACCOUNT_ALIAS_PATTERN: RegExp;
+export declare const gitAccountSchema: z.ZodObject<{
+    type: z.ZodDefault<z.ZodEnum<{
+        github: "github";
+        gitlab: "gitlab";
+        generic: "generic";
+    }>>;
+    authMode: z.ZodEnum<{
+        "gh-cli-profile": "gh-cli-profile";
+        "pat-keychain": "pat-keychain";
+    }>;
+    ghProfile: z.ZodOptional<z.ZodString>;
+    host: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export type GitAccountSetting = z.infer<typeof gitAccountSchema>;
+export declare const runtimeSettingsSchema: z.ZodObject<{
+    slackOwnerUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    telegramOwnerChatId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    discordOwnerUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    whatsappEnabled: z.ZodDefault<z.ZodBoolean>;
+    whatsappOwnerPhone: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    whatsappAuthDir: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    googleCalendarId: z.ZodDefault<z.ZodString>;
+    notionDatabaseIds: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    primaryVaultPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    primaryVaultName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    externalObsidianVaultPath: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    externalObsidianVaultName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    externalObsidianWatch: z.ZodDefault<z.ZodBoolean>;
+    gitAccounts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodDefault<z.ZodEnum<{
+            github: "github";
+            gitlab: "gitlab";
+            generic: "generic";
+        }>>;
+        authMode: z.ZodEnum<{
+            "gh-cli-profile": "gh-cli-profile";
+            "pat-keychain": "pat-keychain";
+        }>;
+        ghProfile: z.ZodOptional<z.ZodString>;
+        host: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>>;
+    advisorEnabled: z.ZodDefault<z.ZodBoolean>;
+    advisorModel: z.ZodDefault<z.ZodNullable<z.ZodString>> & z.ZodType<"claude-sonnet-4-6" | "claude-opus-4-6" | null, string | null | undefined, z.core.$ZodTypeInternals<"claude-sonnet-4-6" | "claude-opus-4-6" | null, string | null | undefined>>;
+    enforceReadToken: z.ZodDefault<z.ZodBoolean>;
+    maxConcurrentSessions: z.ZodDefault<z.ZodNumber>;
+    maxReactiveSessions: z.ZodDefault<z.ZodNumber>;
+    delegatedProxyMaxConcurrent: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskModeEnabled: z.ZodDefault<z.ZodBoolean>;
+    delegatedTaskMaxPerDay: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskDefaultMaxToolCalls: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskDefaultMaxBudgetUsd: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskDefaultTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskHeavyEnabled: z.ZodDefault<z.ZodBoolean>;
+    delegatedTaskStructuredOutputEnabled: z.ZodDefault<z.ZodBoolean>;
+    delegatedTaskSubprocessPoolEnabled: z.ZodDefault<z.ZodBoolean>;
+    delegatedTaskSubprocessPoolTtlSeconds: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskCacheEnabled: z.ZodDefault<z.ZodBoolean>;
+    delegatedTaskCacheTtlSeconds: z.ZodDefault<z.ZodNumber>;
+    delegatedTaskCacheMaxEntries: z.ZodDefault<z.ZodNumber>;
+    executeTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    sessionTimeoutDmMinutes: z.ZodDefault<z.ZodNumber>;
+    sessionTimeoutChannelMinutes: z.ZodDefault<z.ZodNumber>;
+    sessionTimeoutDashboardMinutes: z.ZodDefault<z.ZodNumber>;
+    historyInjectionMaxMessages: z.ZodDefault<z.ZodNumber>;
+    historyInjectionMaxTokens: z.ZodDefault<z.ZodNumber>;
+    historyOtherSurfaceWindowMinutes: z.ZodDefault<z.ZodNumber>;
+    dmStalenessStrict: z.ZodDefault<z.ZodBoolean>;
+    proactiveForwardChannelTimelineEnabled: z.ZodDefault<z.ZodBoolean>;
+    proactiveForwardForceFreshSession: z.ZodDefault<z.ZodBoolean>;
+    agentDisplayName: z.ZodDefault<z.ZodString>;
+    character: z.ZodDefault<z.ZodString>;
+    timezone: z.ZodDefault<z.ZodString>;
+    dayBoundaryHour: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckEnabled: z.ZodDefault<z.ZodBoolean>;
+    hourlyCheckIntervalMinutes: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckActiveStartHour: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckActiveEndHour: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckMinObservations: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckGateMode: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        shadow: "shadow";
+        live: "live";
+    }>>;
+    hourlyCheckStage2Enabled: z.ZodDefault<z.ZodBoolean>;
+    hourlyCheckHeartbeatHours: z.ZodDefault<z.ZodNumber>;
+    hourlyCheckLowSignalPendingCeiling: z.ZodDefault<z.ZodNumber>;
+    authProbeDisabled: z.ZodDefault<z.ZodBoolean>;
+    authPreflightFreshnessMs: z.ZodDefault<z.ZodNumber>;
+    schedulePollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    maxBriefingDelayMinutes: z.ZodDefault<z.ZodNumber>;
+    maxNotificationsPerHour: z.ZodDefault<z.ZodNumber>;
+    maxNotificationsPerDay: z.ZodDefault<z.ZodNumber>;
+    quietHoursStart: z.ZodDefault<z.ZodString>;
+    quietHoursEnd: z.ZodDefault<z.ZodString>;
+    batchIntervalMinutes: z.ZodDefault<z.ZodNumber>;
+    primaryPlatform: z.ZodDefault<z.ZodString>;
+    defaultNotificationPlatforms: z.ZodDefault<z.ZodArray<z.ZodString>> & z.ZodType<("slack" | "telegram" | "discord" | "whatsapp")[], string[] | undefined, z.core.$ZodTypeInternals<("slack" | "telegram" | "discord" | "whatsapp")[], string[] | undefined>>;
+    disallowedTools: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    allowedToolsOverride: z.ZodDefault<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    claudeExecutionPermissionMode: z.ZodDefault<z.ZodEnum<{
+        strict: "strict";
+        allow: "allow";
+    }>>;
+    codexExecutionPermissionMode: z.ZodDefault<z.ZodEnum<{
+        strict: "strict";
+        allow: "allow";
+    }>>;
+    geminiExecutionPermissionMode: z.ZodDefault<z.ZodEnum<{
+        strict: "strict";
+        allow: "allow";
+    }>>;
+    obsidianDebounceSeconds: z.ZodDefault<z.ZodNumber>;
+    gitPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    gitPushOverdueMinutes: z.ZodDefault<z.ZodNumber>;
+    gitProjectUpdateDebounceMinutes: z.ZodDefault<z.ZodNumber>;
+    notionPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    calendarPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    gmailPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    githubPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    mcpAutoProbeIntervalMinutes: z.ZodDefault<z.ZodNumber>;
+    delegatedProbeIntervalMinutes: z.ZodDefault<z.ZodNumber>;
+    enabledMailProviders: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        gmail: "gmail";
+        outlook: "outlook";
+        yahoo: "yahoo";
+        icloud: "icloud";
+    }>>>;
+    mailPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
+    mailIdleEnabled: z.ZodDefault<z.ZodBoolean>;
+    mailIdleInstabilityThreshold: z.ZodDefault<z.ZodNumber>;
+    mailIdleFallbackRecoveryMinutes: z.ZodDefault<z.ZodNumber>;
+    mailMaxMessagesPerPoll: z.ZodDefault<z.ZodNumber>;
+    mailAuthFailureRetryHours: z.ZodDefault<z.ZodNumber>;
+    hourlyObservationCharBudget: z.ZodDefault<z.ZodNumber>;
+    observationSummarizerEnabled: z.ZodDefault<z.ZodBoolean>;
+    observationSummarizerConcurrency: z.ZodDefault<z.ZodNumber>;
+    observationSummarizerMaxCallsPerMinute: z.ZodDefault<z.ZodNumber>;
+    observationSummarizerQueueLimit: z.ZodDefault<z.ZodNumber>;
+    observationSummarizerTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    vipMailSenders: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    outlookDeltaPageSize: z.ZodDefault<z.ZodNumber>;
+    outlookGraphConcurrency: z.ZodDefault<z.ZodNumber>;
+    imapReconnectBaseMs: z.ZodDefault<z.ZodNumber>;
+    imapReconnectMaxMs: z.ZodDefault<z.ZodNumber>;
+    autonomousDailyCostCapUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    autonomousMonthlyCostCapUsd: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    primaryLanguage: z.ZodDefault<z.ZodString>;
+    vaultMode: z.ZodDefault<z.ZodEnum<{
+        obsidian: "obsidian";
+        plain: "plain";
+    }>>;
+    useReviewDossiers: z.ZodDefault<z.ZodBoolean>;
+    useContextIndex: z.ZodDefault<z.ZodBoolean>;
+    voiceTranscriptionEnabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type RuntimeSettings = z.infer<typeof runtimeSettingsSchema>;
+export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "hourlyCheckEnabled", "hourlyCheckIntervalMinutes", "hourlyCheckActiveStartHour", "hourlyCheckActiveEndHour", "hourlyCheckMinObservations", "hourlyCheckGateMode", "hourlyCheckStage2Enabled", "hourlyCheckHeartbeatHours", "hourlyCheckLowSignalPendingCeiling", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "hourlyObservationCharBudget", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled"];
+export type RuntimeSettingKey = (typeof RUNTIME_SETTING_KEYS)[number];
+export declare const INTERNAL_RUNTIME_SETTING_KEYS: readonly ["enforceReadToken", "useReviewDossiers", "useContextIndex"];
+export type InternalRuntimeSettingKey = (typeof INTERNAL_RUNTIME_SETTING_KEYS)[number];
+export declare function isRuntimeSettingKey(value: string): value is RuntimeSettingKey;
+//# sourceMappingURL=runtime-settings.d.ts.map

package/dist/settings/runtime-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-settings.d.ts","sourceRoot":"","sources":["../../src/settings/runtime-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,4uEAM3B,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;iBA2B/B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACzE,MAAM,MAAM,0BAA0B,GACpC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,EAAE,cAAc,CAAC,GACxD;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,QAAmB,CAAC;AAE1D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;iBAa3B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqlBhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,oBAAoB,mzFA2GsB,CAAC;AAExD,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,eAAO,MAAM,6BAA6B,uEAIO,CAAC;AAClD,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAUvF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E"}