@aitne/daemon 0.1.10 → 0.1.11

package/dist/settings/runtime-settings.d.ts

@@ -138,6 +138,7 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     proactiveForwardChannelTimelineEnabled: z.ZodDefault<z.ZodBoolean>;
     proactiveForwardForceFreshSession: z.ZodDefault<z.ZodBoolean>;
     feedbackLearningEnabled: z.ZodDefault<z.ZodBoolean>;
+    selfTuningEnabled: z.ZodDefault<z.ZodBoolean>;
     feedbackPromotionThreshold: z.ZodDefault<z.ZodNumber>;
     feedbackLessonMaxBytesGlobal: z.ZodDefault<z.ZodNumber>;
     feedbackLessonMaxBytesPerAgent: z.ZodDefault<z.ZodNumber>;
@@ -152,19 +153,27 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     browserTaskPendingQueueTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
     browserTaskRespectQuietHours: z.ZodDefault<z.ZodBoolean>;
     browserTaskHostnameDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    hourlyCheckEnabled: z.ZodDefault<z.ZodBoolean>;
-    hourlyCheckIntervalMinutes: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckActiveStartHour: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckActiveEndHour: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckMinObservations: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckStage2Enabled: z.ZodDefault<z.ZodBoolean>;
-    hourlyCheckHeartbeatHours: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckLowSignalPendingCeiling: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckPrePassFreshnessMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskMaxConcurrent: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskClarificationTtlMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskPendingQueueTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskDigestCadenceHours: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskDedupWindowMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskResumeAcrossRestart: z.ZodDefault<z.ZodBoolean>;
+    autonomousForwardNaturalDelivery: z.ZodDefault<z.ZodBoolean>;
+    activityScanEnabled: z.ZodDefault<z.ZodBoolean>;
+    activityScanIntervalMinutes: z.ZodDefault<z.ZodNumber>;
+    activityScanActiveStartHour: z.ZodDefault<z.ZodNumber>;
+    activityScanActiveEndHour: z.ZodDefault<z.ZodNumber>;
+    activityScanMinObservations: z.ZodDefault<z.ZodNumber>;
+    activityScanStage2Enabled: z.ZodDefault<z.ZodBoolean>;
+    activityScanHeartbeatHours: z.ZodDefault<z.ZodNumber>;
+    activityScanLowSignalPendingCeiling: z.ZodDefault<z.ZodNumber>;
+    activityScanPrePassFreshnessMinutes: z.ZodDefault<z.ZodNumber>;
     authProbeDisabled: z.ZodDefault<z.ZodBoolean>;
     authPreflightFreshnessMs: z.ZodDefault<z.ZodNumber>;
     schedulePollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     maxBriefingDelayMinutes: z.ZodDefault<z.ZodNumber>;
+    ownerActivityIdleThresholdMinutes: z.ZodDefault<z.ZodNumber>;
     maxNotificationsPerHour: z.ZodDefault<z.ZodNumber>;
     maxNotificationsPerDay: z.ZodDefault<z.ZodNumber>;
     quietHoursStart: z.ZodDefault<z.ZodString>;
@@ -192,6 +201,11 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     }>>;
     opencodeBaseUrl: z.ZodDefault<z.ZodString>;
     opencodeServerUsername: z.ZodDefault<z.ZodString>;
+    preventSleepMode: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        ac: "ac";
+        always: "always";
+    }>>;
     obsidianDebounceSeconds: z.ZodDefault<z.ZodNumber>;
     gitPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     gitPushOverdueMinutes: z.ZodDefault<z.ZodNumber>;
@@ -252,7 +266,7 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     mailIdleFallbackRecoveryMinutes: z.ZodDefault<z.ZodNumber>;
     mailMaxMessagesPerPoll: z.ZodDefault<z.ZodNumber>;
     mailAuthFailureRetryHours: z.ZodDefault<z.ZodNumber>;
-    hourlyObservationCharBudget: z.ZodDefault<z.ZodNumber>;
+    activityScanObservationCharBudget: z.ZodDefault<z.ZodNumber>;
     prePassMaxAttemptsPerIntegration: z.ZodDefault<z.ZodNumber>;
     prePassBackoffMs: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
     prePassRetryEscalationTier: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
@@ -287,8 +301,21 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     voiceTranscriptionPrimaryLanguage: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export type RuntimeSettings = z.infer<typeof runtimeSettingsSchema>;
-export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "feedbackLearningEnabled", "feedbackPromotionThreshold", "feedbackLessonMaxBytesGlobal", "feedbackLessonMaxBytesPerAgent", "feedbackLessonStaleDays", "feedbackSignalRetentionDays", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "monthlyReviewEnabled", "browserTaskMaxConcurrent", "browserTaskPendingQueueTimeoutMinutes", "browserTaskRespectQuietHours", "browserTaskHostnameDenylist", "hourlyCheckEnabled", "hourlyCheckIntervalMinutes", "hourlyCheckActiveStartHour", "hourlyCheckActiveEndHour", "hourlyCheckMinObservations", "hourlyCheckStage2Enabled", "hourlyCheckHeartbeatHours", "hourlyCheckLowSignalPendingCeiling", "hourlyCheckPrePassFreshnessMinutes", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "opencodeExecutionPermissionMode", "opencodeBaseUrl", "opencodeServerUsername", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "browserHistoryConsentAccepted", "browserHistoryBrowserOverrides", "browserHistoryCategories", "browserHistoryRetentionDays", "browserHistorySearchQueryRetentionDays", "browserHistoryLifecycle", "browserHistoryResearchDomainAllowlist", "browserHistoryResearchDomainDenylist", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "hourlyObservationCharBudget", "prePassMaxAttemptsPerIntegration", "prePassBackoffMs", "prePassRetryEscalationTier", "prePassFanOutConcurrency", "prePassMaxBudgetUsdPerIntegration", "prePassMaxBudgetUsdPerRoutine", "prePassRetryOnPartial", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled", "voiceTranscriptionPrimaryLanguage"];
+export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "feedbackLearningEnabled", "selfTuningEnabled", "feedbackPromotionThreshold", "feedbackLessonMaxBytesGlobal", "feedbackLessonMaxBytesPerAgent", "feedbackLessonStaleDays", "feedbackSignalRetentionDays", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "monthlyReviewEnabled", "browserTaskMaxConcurrent", "browserTaskPendingQueueTimeoutMinutes", "browserTaskRespectQuietHours", "browserTaskHostnameDenylist", "backgroundTaskMaxConcurrent", "backgroundTaskClarificationTtlMinutes", "backgroundTaskPendingQueueTimeoutMinutes", "backgroundTaskDigestCadenceHours", "backgroundTaskDedupWindowMinutes", "backgroundTaskResumeAcrossRestart", "autonomousForwardNaturalDelivery", "activityScanEnabled", "activityScanIntervalMinutes", "activityScanActiveStartHour", "activityScanActiveEndHour", "activityScanMinObservations", "activityScanStage2Enabled", "activityScanHeartbeatHours", "activityScanLowSignalPendingCeiling", "activityScanPrePassFreshnessMinutes", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "ownerActivityIdleThresholdMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "opencodeExecutionPermissionMode", "opencodeBaseUrl", "opencodeServerUsername", "preventSleepMode", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "browserHistoryConsentAccepted", "browserHistoryBrowserOverrides", "browserHistoryCategories", "browserHistoryRetentionDays", "browserHistorySearchQueryRetentionDays", "browserHistoryLifecycle", "browserHistoryResearchDomainAllowlist", "browserHistoryResearchDomainDenylist", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "activityScanObservationCharBudget", "prePassMaxAttemptsPerIntegration", "prePassBackoffMs", "prePassRetryEscalationTier", "prePassFanOutConcurrency", "prePassMaxBudgetUsdPerIntegration", "prePassMaxBudgetUsdPerRoutine", "prePassRetryOnPartial", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled", "voiceTranscriptionPrimaryLanguage"];
 export type RuntimeSettingKey = (typeof RUNTIME_SETTING_KEYS)[number];
 export declare const INTERNAL_RUNTIME_SETTING_KEYS: readonly ["enforceReadToken", "useReviewDossiers", "useContextIndex"];
 export type InternalRuntimeSettingKey = (typeof INTERNAL_RUNTIME_SETTING_KEYS)[number];
 export declare function isRuntimeSettingKey(value: string): value is RuntimeSettingKey;
+/**
+ * v0.1.10 → v0.1.11: the "Hourly Check" agent became "Activity Scan" and its
+ * settings keys moved from `hourlyCheck*` / `hourlyObservationCharBudget` to
+ * `activityScan*`. Migration `0010-hourly-check-to-activity-scan` renames the
+ * persisted `settings` rows, but `loadPersistedSettings` runs BEFORE
+ * `runMigrations` (the merge is load-bearing for `getContextDir`, see
+ * bootstrap/db.ts), so on the first post-upgrade boot the rows still carry the
+ * legacy names when they are parsed. This map lets the settings store read
+ * them under the canonical key for that one boot (and tolerates DBs restored
+ * from old backups). Drop after a deprecation window once the migration has
+ * been in the wild for a few releases.
+ */
+export declare const LEGACY_RUNTIME_SETTING_KEY_ALIASES: Readonly<Record<string, RuntimeSettingKey>>;

package/dist/settings/runtime-settings.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { ADVISOR_ALLOWED_MODELS, DEFAULT_AGENT_DISPLAY_NAME, EXECUTION_PERMISSION_MODES, INTEGRATION_KEYS, browserHistoryBrowserOverrideSchema, browserHistoryCategorySchema, browserHistoryLifecycleConfigSchema, isAdvisorModel, isSupportedVoiceLanguage, validateAgentDisplayName, } from "@aitne/shared";
 import { NOTIFICATION_DESTINATION_PLATFORMS, isNotificationDestinationPlatform, } from "../messaging/constants.js";
 import { ALWAYS_DISALLOWED_TOOLS } from "../safety/always-disallowed.js";
+import { PREVENT_SLEEP_MODES } from "../core/sleep-inhibitor.js";
 /**
  * The secret-exfiltration / credential-tampering subset of the absolute-block
  * layer now lives in `safety/always-disallowed.ts` (EXECUTION-MODE-DESIGN.md
@@ -269,6 +270,18 @@ export const runtimeSettingsSchema = z.object({
     proactiveForwardChannelTimelineEnabled: z.boolean().default(true),
     proactiveForwardForceFreshSession: z.boolean().default(false),
     feedbackLearningEnabled: z.boolean().default(true),
+    /**
+     * SELF_TUNING_REVIEW_CYCLE_DESIGN.md §6 — actuation gate for the
+     * self-tuning loop's Phase 3 Actuate stage. While `false` (the shipped
+     * default), the loop runs in shadow mode: the weekly Recommend pre-step
+     * still generates `<tuning_recommendations>` and `POST
+     * /api/tuning/verdicts` still records apply/reject/defer verdicts, but
+     * nothing is written through the `applyConfigUpdates` chokepoint.
+     * Whether this ever flips to default-true is conditional on the Phase 2
+     * shadow-period results — a loop that edits spend-affecting knobs
+     * autonomously may reasonably stay opt-in permanently (§8).
+     */
+    selfTuningEnabled: z.boolean().default(false),
     feedbackPromotionThreshold: z.number().int().min(1).max(10).default(2),
     feedbackLessonMaxBytesGlobal: z.number().int().min(1024).max(32768).default(8192),
     feedbackLessonMaxBytesPerAgent: z.number().int().min(512).max(16384).default(4096),
@@ -315,9 +328,13 @@ export const runtimeSettingsSchema = z.object({
     // poor in the current shape; the routine stays in-tree as a concept
     // pending the Mirror+Prune redesign (one trend observation + aged
     // carry-over kill/keep decisions, scoped to feed day-1-of-month
-    // morning_routine). Re-enable by setting `PA_MONTHLY_REVIEW_ENABLED=true`
-    // or PATCH /api/config — the scheduler reads the live flag at fire time
-    // so the flip takes effect on the next month-end without restart.
+    // morning_routine).
+    //
+    // DEPRECATED (Agents-hub redesign, AGENTS_HUB_REDESIGN_PLAN.md §2): the
+    // monthly-review AGENT row's `enabled` is the single switch now — enable
+    // from /agents/monthly-review. This key stays parseable so previously
+    // persisted values survive (a one-time boot reconcile carries a `true`
+    // onto the agent row); the scheduler no longer reads it.
     monthlyReviewEnabled: z.boolean().default(false),
     /**
      * BROWSER_TASK_REDESIGN_PLAN.md §5.1 — global concurrency cap for the
@@ -381,31 +398,118 @@ export const runtimeSettingsSchema = z.object({
         .array(z.string().min(1).max(253))
         .max(500)
         .default([]),
-    hourlyCheckEnabled: z.boolean().default(true),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §10.3 — global concurrency cap for
+     * the generic background-task runner. Each worker is a fresh SDK
+     * session (no resident browser), so the ceiling is cost/quota driven
+     * rather than RAM driven. Range [1, 5], default 3.
+     */
+    backgroundTaskMaxConcurrent: z.number().int().min(1).max(5).default(3),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §6 / §10.6 — clarification TTL. A
+     * parked background task waits this long for the owner's `ask_user`
+     * reply before the housekeeping tick transitions it to `timeout`. No
+     * browser resource is held while parked, so the default is far longer
+     * than browser-task's fixed 5 min. Range [5, 1440] minutes, default 60.
+     */
+    backgroundTaskClarificationTtlMinutes: z
+        .number()
+        .int()
+        .min(5)
+        .max(1440)
+        .default(60),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §10.3 — safety valve for a task that
+     * sits `pending` behind the concurrency cap too long. After this many
+     * minutes a queued task transitions to `timeout` (fail-loud). Range
+     * [5, 180], default 120 (background tasks queue longer than browser
+     * tasks because they run longer). The reused slot-manager sweep
+     * (`clampPendingQueueTimeoutMinutes`) caps at 180, so the range matches.
+     */
+    backgroundTaskPendingQueueTimeoutMinutes: z
+        .number()
+        .int()
+        .min(5)
+        .max(180)
+        .default(120),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §10.5 — cadence (hours) of the
+     * filed-results digest ("filed N background results since yesterday").
+     * Consumed by the Phase 3 digest surface; the setting lands here so the
+     * runtime schema parses it on upgrade. Range [1, 168], default 24.
+     */
+    backgroundTaskDigestCadenceHours: z
+        .number()
+        .int()
+        .min(1)
+        .max(168)
+        .default(24),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §10.3 / Phase 4 — brief-dedup window
+     * (minutes). A `POST /api/background-task` whose `brief` + `tier` exactly
+     * match a still-relevant task (not a FAIL terminal) created within this
+     * window collapses onto that task instead of spawning a second worker —
+     * the runaway fan-out guard (a replayed trigger POSTing the same brief
+     * many times in minutes). Range [0, 1440]; `0` disables dedup. Default 10.
+     */
+    backgroundTaskDedupWindowMinutes: z
+        .number()
+        .int()
+        .min(0)
+        .max(1440)
+        .default(10),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §10.2 / Phase 4 — true mid-flight
+     * resume across a daemon restart. When `true`, a non-terminal task that
+     * captured an SDK session id (`backend_session_id`) is resumed via
+     * `query({resume})` on boot (warm session, no re-work); resume failures
+     * fall back to re-dispatch-from-brief. When `false`, every non-terminal
+     * task is re-dispatched from its (self-contained) brief — the v1 floor.
+     * Default `true`.
+     */
+    backgroundTaskResumeAcrossRestart: z.boolean().default(true),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §2.3 / §13 Decision 4 (Phase 4,
+     * opt-in) — when `true`, a routine autonomous forward to the owner DM is
+     * routed through the task-delivery gate + activity-branch machinery: an
+     * active owner gets a woven delivery turn (the real DM agent weaves the
+     * forward into the live conversation) instead of a verbatim dump; an idle
+     * owner gets the verbatim send (as today). Default `false` — the design
+     * deliberately scoped rev3 to task delivery only; this opens the same
+     * machinery to autonomous forwards for operators who want it.
+     */
+    autonomousForwardNaturalDelivery: z.boolean().default(false),
+    // DEPRECATED (Agents-hub redesign, AGENTS_HUB_REDESIGN_PLAN.md §2): the
+    // activity-scan AGENT row's `enabled` is the single switch now (a one-time
+    // boot reconcile carries a persisted `false` onto the agent row). The
+    // cadence keys below remain the per-field FALLBACK under the agent row's
+    // `runtime_window` overrides (core/agents/activity-scan-cadence.ts) — edit the
+    // cadence from /agents/activity-scan, not here.
+    activityScanEnabled: z.boolean().default(true),
     // Any positive integer in [1, 1440] minutes (1 minute up to 24 hours).
-    // Despite the "hourly" name, the operator can dial this anywhere in that
-    // range to balance observation latency against quota burn. The cadence
-    // is anchored to `hourlyCheckActiveStartHour` (see
-    // shouldFireHourlyTickAt in scheduler.ts), so the first fire of each
+    // The shipped default is 120 (every 2 hours); the operator can dial this
+    // anywhere in that range to balance observation latency against quota
+    // burn. The cadence is anchored to `activityScanActiveStartHour` (see
+    // shouldFireActivityScanTickAt in scheduler.ts), so the first fire of each
     // agent-day lands at the start of the active window. The upper bound
     // is 1440 because the modulo gate runs against minutes-since-midnight,
     // which cannot represent multi-day cadence — operators wanting weekly
     // or monthly cadence should use the dedicated review routines.
-    hourlyCheckIntervalMinutes: z
+    activityScanIntervalMinutes: z
         .number()
         .int()
-        .min(1, { message: "PA_HOURLY_CHECK_INTERVAL_MINUTES must be >= 1" })
-        .max(1440, { message: "PA_HOURLY_CHECK_INTERVAL_MINUTES must be <= 1440 (one day)" })
-        .default(60),
-    hourlyCheckActiveStartHour: z.number().int().min(0).max(23).default(4),
-    hourlyCheckActiveEndHour: z.number().int().min(1).max(24).default(24),
-    hourlyCheckMinObservations: z.number().int().nonnegative().default(1),
+        .min(1, { message: "PA_ACTIVITY_SCAN_INTERVAL_MINUTES must be >= 1" })
+        .max(1440, { message: "PA_ACTIVITY_SCAN_INTERVAL_MINUTES must be <= 1440 (one day)" })
+        .default(120),
+    activityScanActiveStartHour: z.number().int().min(0).max(23).default(4),
+    activityScanActiveEndHour: z.number().int().min(1).max(24).default(24),
+    activityScanMinObservations: z.number().int().nonnegative().default(1),
     /**
      * cost-reduction-structural §B — flag for the optional Stage 2 lite-tier
      * triage. Default `false` so cost remains bounded to Stage 0/1 + Stage 3
      * until shadow telemetry justifies the lite triage budget.
      */
-    hourlyCheckStage2Enabled: z.boolean().default(false),
+    activityScanStage2Enabled: z.boolean().default(false),
     /**
      * cost-reduction-structural §B — heartbeat window for the gate. Even on
      * a string of quiet ticks, the gate force-runs Stage 2 (or Stage 3 if
@@ -413,7 +517,7 @@ export const runtimeSettingsSchema = z.object({
      * exercised end-to-end and a signal misclassification can't trap the
      * routine in `stage0_silent` indefinitely.
      */
-    hourlyCheckHeartbeatHours: z.number().int().min(1).max(48).default(4),
+    activityScanHeartbeatHours: z.number().int().min(1).max(48).default(4),
     /**
      * cost-reduction-structural §B — pending-observation ceiling under
      * which low-signal cases still route to Stage 0 silent. The default 0
@@ -421,7 +525,7 @@ export const runtimeSettingsSchema = z.object({
      * Stage 2 / Stage 3); operators who notice the gate over-escalating on
      * journal noise can dial this up.
      */
-    hourlyCheckLowSignalPendingCeiling: z
+    activityScanLowSignalPendingCeiling: z
         .number()
         .int()
         .nonnegative()
@@ -430,25 +534,30 @@ export const runtimeSettingsSchema = z.object({
     /**
      * HOURLY_CHECK_GATE_REDESIGN_PLAN.md §3.4 — minimum minutes between
      * pre-pass spawns for the same integration. The `harvestForGate`
-     * step in `HourlyCheckCoordinator.trigger` reads
+     * step in `ActivityScanCoordinator.trigger` reads
      * `runtime_state.pre_pass_last_run:<integrationKey>` and skips
      * pre-pass when the prior successful run is more recent than this
-     * window. Default 30 — the cron interval is 60 min, so a 30-min
-     * window guarantees at most one pre-pass per integration per tick
-     * while still firing every tick under normal load.
+     * window. Default 30 — comfortably below the default 120-min scan
+     * interval, so a default install runs the pre-pass on every tick;
+     * the gate only bites when an operator dials the interval down or
+     * another routine's pre-pass ran recently.
      *
-     * Bounded [0, 240]. `0` disables the freshness gate (pre-pass fires
+     * Bounded [0, 480]. `0` disables the freshness gate (pre-pass fires
      * on every tick); 240 (4h) approximates "only fire when the
-     * heartbeat would have anyway" for cost-minimal deployments.
+     * heartbeat would have anyway" for cost-minimal deployments. The cap
+     * was widened 240 → 480 for the self-tuning R1 ladder
+     * (120/240/360/480 — SELF_TUNING_REVIEW_CYCLE_DESIGN.md §3.2 / D2;
+     * a compatible widening, every previously persisted value still
+     * parses). Twin bound: `env-writer.ts:NUMERIC_RANGE`.
      *
      * `forced` runs (`POST /api/agent/run-now`) bypass the gate
      * unconditionally — manual triggers explicitly want a fresh fetch.
      */
-    hourlyCheckPrePassFreshnessMinutes: z
+    activityScanPrePassFreshnessMinutes: z
         .number()
         .int()
         .min(0)
-        .max(240)
+        .max(480)
         .default(30),
     /**
      * Phase 4 auth health probe kill switch — corresponds to
@@ -477,6 +586,13 @@ export const runtimeSettingsSchema = z.object({
      * /api/config; tunable per user's tolerance for chatty mornings.
      */
     maxBriefingDelayMinutes: z.number().int().nonnegative().default(30),
+    /**
+     * BACKGROUND_TASK_RUNNER_DESIGN.md §2.6 — deterministic branch used by
+     * task.delivery to decide whether a finished task should be woven into
+     * an active owner conversation or sent as a standalone draft. Reads the
+     * most recent inbound owner DM across messaging + dashboard scopes.
+     */
+    ownerActivityIdleThresholdMinutes: z.number().int().min(1).max(60).default(5),
     maxNotificationsPerHour: z.number().int().positive().default(3),
     maxNotificationsPerDay: z.number().int().positive().default(12),
     quietHoursStart: z.string().default("22:00"),
@@ -525,6 +641,19 @@ export const runtimeSettingsSchema = z.object({
         .url()
         .default("http://127.0.0.1:4096"),
     opencodeServerUsername: z.string().min(1).default("opencode"),
+    /**
+     * Keep-awake posture while the daemon runs (macOS only; no-op elsewhere).
+     * Every daemon timer freezes during host sleep, so a sleeping laptop
+     * turns the 04:00 day-boundary flow into hours of wake-catchup replays
+     * riding macOS maintenance DarkWakes — with cold prompt caches making
+     * each replay ~10× the normal cost. `"ac"` (default) holds a
+     * `caffeinate -s` assertion: system sleep is inhibited only while on AC
+     * power, so battery drain stays impossible. `"always"` adds `-i` (idle
+     * sleep inhibited on battery too); `"off"` restores OS-managed sleep.
+     * Lid-close sleep is NOT overridden (that needs root). Read once at
+     * boot — see RESTART_REQUIRED_KEY_TUPLE.
+     */
+    preventSleepMode: z.enum(PREVENT_SLEEP_MODES).default("ac"),
     obsidianDebounceSeconds: z.number().positive().default(5.0),
     gitPollIntervalSeconds: z.number().int().positive().default(3600),
     /**
@@ -653,7 +782,7 @@ export const runtimeSettingsSchema = z.object({
     mailIdleFallbackRecoveryMinutes: z.number().int().positive().default(60),
     mailMaxMessagesPerPoll: z.number().int().min(1).max(100).default(20),
     mailAuthFailureRetryHours: z.number().int().positive().default(6),
-    hourlyObservationCharBudget: z.number().int().positive().default(8000),
+    activityScanObservationCharBudget: z.number().int().positive().default(8000),
     /**
      * docs/design/appendices/pre-pass-fan-out.md §6 — retry and budget controls for the
      * `routine.fetch_window` fan-out coordinator. Fan-out is now the only
@@ -689,7 +818,7 @@ export const runtimeSettingsSchema = z.object({
     /**
      * cost-reduction-structural §A — observation summarizer kill switch +
      * tunables. The summarizer runs out-of-band: when disabled, observation
-     * rows stay `summary_status='pending'` and hourly_check falls back to
+     * rows stay `summary_status='pending'` and activity_scan falls back to
      * the legacy fetch-on-doubt pattern (no regression in correctness; only
      * loss of cost savings).
      */
@@ -714,7 +843,7 @@ export const runtimeSettingsSchema = z.object({
      * Safety net for autonomous session cost. When set, the dispatcher skips
      * autonomous sessions whose cumulative daily cost exceeds this cap.
      * Reactive sessions (DMs, mentions) always pass through.
-     * Degradation priority: hourly_check → roadmap_refresh → evening_review →
+     * Degradation priority: activity_scan → roadmap_refresh → evening_review →
      * morning_routine (last to be cut).
      * Distinct from the removed Phase 9 `maxDailyCostUsd` which blanket-blocked
      * all sessions including reactive DMs — see p9-polling-pivot.md.
@@ -779,7 +908,7 @@ export const runtimeSettingsSchema = z.object({
      * Voice transcription opt-in (see docs/design/appendices/voice-transcription.md).
      * Default `false`: inbound audio attachments pass through as file paths
      * without local Whisper inference, and no model weights are downloaded.
-     * Flipping to `true` from `/settings/advanced` triggers a one-time model
+     * Flipping to `true` from `/settings/infrastructure` triggers a one-time model
      * download via `POST /api/voice/install`; the daemon auto-restarts on
      * success so the transcriber initializes with the flag observed.
      */
@@ -907,6 +1036,7 @@ export const RUNTIME_SETTING_KEYS = [
     "proactiveForwardChannelTimelineEnabled",
     "proactiveForwardForceFreshSession",
     "feedbackLearningEnabled",
+    "selfTuningEnabled",
     "feedbackPromotionThreshold",
     "feedbackLessonMaxBytesGlobal",
     "feedbackLessonMaxBytesPerAgent",
@@ -921,19 +1051,27 @@ export const RUNTIME_SETTING_KEYS = [
     "browserTaskPendingQueueTimeoutMinutes",
     "browserTaskRespectQuietHours",
     "browserTaskHostnameDenylist",
-    "hourlyCheckEnabled",
-    "hourlyCheckIntervalMinutes",
-    "hourlyCheckActiveStartHour",
-    "hourlyCheckActiveEndHour",
-    "hourlyCheckMinObservations",
-    "hourlyCheckStage2Enabled",
-    "hourlyCheckHeartbeatHours",
-    "hourlyCheckLowSignalPendingCeiling",
-    "hourlyCheckPrePassFreshnessMinutes",
+    "backgroundTaskMaxConcurrent",
+    "backgroundTaskClarificationTtlMinutes",
+    "backgroundTaskPendingQueueTimeoutMinutes",
+    "backgroundTaskDigestCadenceHours",
+    "backgroundTaskDedupWindowMinutes",
+    "backgroundTaskResumeAcrossRestart",
+    "autonomousForwardNaturalDelivery",
+    "activityScanEnabled",
+    "activityScanIntervalMinutes",
+    "activityScanActiveStartHour",
+    "activityScanActiveEndHour",
+    "activityScanMinObservations",
+    "activityScanStage2Enabled",
+    "activityScanHeartbeatHours",
+    "activityScanLowSignalPendingCeiling",
+    "activityScanPrePassFreshnessMinutes",
     "authProbeDisabled",
     "authPreflightFreshnessMs",
     "schedulePollIntervalSeconds",
     "maxBriefingDelayMinutes",
+    "ownerActivityIdleThresholdMinutes",
     "maxNotificationsPerHour",
     "maxNotificationsPerDay",
     "quietHoursStart",
@@ -949,6 +1087,7 @@ export const RUNTIME_SETTING_KEYS = [
     "opencodeExecutionPermissionMode",
     "opencodeBaseUrl",
     "opencodeServerUsername",
+    "preventSleepMode",
     "obsidianDebounceSeconds",
     "gitPollIntervalSeconds",
     "gitPushOverdueMinutes",
@@ -974,7 +1113,7 @@ export const RUNTIME_SETTING_KEYS = [
     "mailIdleFallbackRecoveryMinutes",
     "mailMaxMessagesPerPoll",
     "mailAuthFailureRetryHours",
-    "hourlyObservationCharBudget",
+    "activityScanObservationCharBudget",
     "prePassMaxAttemptsPerIntegration",
     "prePassBackoffMs",
     "prePassRetryEscalationTier",
@@ -1011,3 +1150,27 @@ const _assertRuntimeSettingCoverage = true;
 export function isRuntimeSettingKey(value) {
     return runtimeSettingKeySet.has(value);
 }
+/**
+ * v0.1.10 → v0.1.11: the "Hourly Check" agent became "Activity Scan" and its
+ * settings keys moved from `hourlyCheck*` / `hourlyObservationCharBudget` to
+ * `activityScan*`. Migration `0010-hourly-check-to-activity-scan` renames the
+ * persisted `settings` rows, but `loadPersistedSettings` runs BEFORE
+ * `runMigrations` (the merge is load-bearing for `getContextDir`, see
+ * bootstrap/db.ts), so on the first post-upgrade boot the rows still carry the
+ * legacy names when they are parsed. This map lets the settings store read
+ * them under the canonical key for that one boot (and tolerates DBs restored
+ * from old backups). Drop after a deprecation window once the migration has
+ * been in the wild for a few releases.
+ */
+export const LEGACY_RUNTIME_SETTING_KEY_ALIASES = {
+    hourlyCheckEnabled: "activityScanEnabled",
+    hourlyCheckIntervalMinutes: "activityScanIntervalMinutes",
+    hourlyCheckActiveStartHour: "activityScanActiveStartHour",
+    hourlyCheckActiveEndHour: "activityScanActiveEndHour",
+    hourlyCheckMinObservations: "activityScanMinObservations",
+    hourlyCheckStage2Enabled: "activityScanStage2Enabled",
+    hourlyCheckHeartbeatHours: "activityScanHeartbeatHours",
+    hourlyCheckLowSignalPendingCeiling: "activityScanLowSignalPendingCeiling",
+    hourlyCheckPrePassFreshnessMinutes: "activityScanPrePassFreshnessMinutes",
+    hourlyObservationCharBudget: "activityScanObservationCharBudget",
+};

package/dist/settings/settings-store.js

@@ -1,4 +1,4 @@
-import { RUNTIME_SETTING_KEYS, isRuntimeSettingKey, runtimeSettingsSchema, } from "./runtime-settings.js";
+import { LEGACY_RUNTIME_SETTING_KEY_ALIASES, RUNTIME_SETTING_KEYS, isRuntimeSettingKey, runtimeSettingsSchema, } from "./runtime-settings.js";
 class SqliteSettingsStore {
     db;
     constructor(db) {
@@ -8,11 +8,19 @@ class SqliteSettingsStore {
         const rows = this.db.prepare("SELECT key, value_json FROM settings").all();
         const rawValues = {};
         for (const row of rows) {
-            if (!isRuntimeSettingKey(row.key)) {
+            // Legacy rows (pre-rename key names) are read under their canonical
+            // key until migration 0010 has rewritten them — but never shadow a
+            // canonical row that already exists.
+            const aliased = LEGACY_RUNTIME_SETTING_KEY_ALIASES[row.key];
+            const key = aliased !== undefined ? aliased : row.key;
+            if (!isRuntimeSettingKey(key)) {
+                continue;
+            }
+            if (aliased !== undefined && key in rawValues) {
                 continue;
             }
             try {
-                rawValues[row.key] = JSON.parse(row.value_json);
+                rawValues[key] = JSON.parse(row.value_json);
             }
             catch {
                 continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aitne/daemon",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Aitne daemon — long-running TypeScript service that hosts the event bus, scheduler, observers, safety layer, and HTTP API. Consumed by the `aitne` CLI; not intended for standalone use.",
   "homepage": "https://github.com/Aitne-sh/Aitne#readme",
   "bugs": {
@@ -37,7 +37,7 @@
     "@octokit/rest": "^22.0.1",
     "@opencode-ai/sdk": "1.14.50",
     "@slack/bolt": "^4.7.0",
-    "@whiskeysockets/baileys": "7.0.0-rc.9",
+    "@whiskeysockets/baileys": "7.0.0-rc13",
     "ajv": "^8.20.0",
     "better-sqlite3": "^12.8.0",
     "busboy": "^1.6.0",
@@ -49,7 +49,7 @@
     "google-auth-library": "^10.6.2",
     "googleapis": "^171.4.0",
     "heap-js": "^2.7.1",
-    "hono": "^4.12.12",
+    "hono": "^4.12.25",
     "html-to-text": "^9.0.5",
     "ical.js": "^2.2.1",
     "imapflow": "^1.3.1",
@@ -66,7 +66,7 @@
     "telegraf": "^4.16.3",
     "tsdav": "^2.1.8",
     "zod": "^4.3.6",
-    "@aitne/shared": "0.1.10"
+    "@aitne/shared": "0.1.11"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",