@aitne/daemon 0.1.3 → 0.1.6

package/dist/index.js

@@ -1,6 +1,6 @@
 import { serve } from "@hono/node-server";
-import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
+import { rmSync } from "node:fs";
 import { randomBytes } from "node:crypto";
 import { loadConfig, getContextDir, isRoadmapStale, mergeRuntimeSettingsFromDb, runVaultHealthProbe, validateExternalObsidianVaultPath, } from "./config.js";
 import { getDegradedMode, isSetupCompleted, isUserPaused, isDegraded as readDegradedMode, } from "./db/runtime-state.js";
@@ -37,20 +37,14 @@ import { DiscordAdapter } from "./adapters/discord.js";
 import { SlackAdapter } from "./adapters/slack-adapter.js";
 import { TelegramAdapter } from "./adapters/telegram-adapter.js";
 import { DashboardAdapter } from "./adapters/dashboard-adapter.js";
-import { WhatsAppAdapter } from "./adapters/whatsapp-adapter.js";
-import { CalendarService } from "./services/calendar.js";
-import { AppleCalendarService } from "./services/apple-calendar/index.js";
-import { GmailService } from "./services/gmail.js";
-import { detectGoogleCredentialType } from "./services/google-auth.js";
 import { ObsidianService } from "./services/obsidian.js";
-import { NotionService } from "./services/notion.js";
-import { GitHubService } from "./services/github.js";
 import { createServiceRegistry } from "./services/service-registry.js";
 import { SignalDetector } from "./core/signal-detector.js";
 import { EventDispatcher } from "./core/dispatcher.js";
 import { ClaudeCodeCore } from "./core/backends/claude-code-core.js";
 import { BackendRouter } from "./core/backends/backend-router.js";
 import { ensureBackendMaterialized, syncAllUserSkills, buildConfiguredServices, refreshDmSessionWorkdirs, validateDelegatedStartup, } from "./core/workdir.js";
+import { setWikiWorkspaceTokenResolver } from "./core/skills-compiler.js";
 import { CodexCore } from "./core/backends/codex-core.js";
 import { GeminiCliCore } from "./core/backends/gemini-cli-core.js";
 import { PriceFetcher } from "./core/backends/price-fetcher.js";
@@ -59,6 +53,8 @@ import { AuthHealthMonitor, AUTH_PROBE_NOTIFICATION_CATEGORY } from "./core/back
 import { AuthRecovery } from "./core/backends/auth-recovery.js";
 import { ContextBuilder } from "./core/context-builder.js";
 import { getTaskFlow, initTaskFlows } from "./core/prompts.js";
+import { listWikiWorkspaces, readDefaultWikiWorkspace, readWikiWorkspaceByName, } from "./core/wiki/workspaces.js";
+import { backfillWikiFulltext } from "./core/wiki/wiki-fts.js";
 import { ensureSkeletonFiles, resolveTemplatesRoot } from "./core/skeleton.js";
 import { normalizeGitWatchedRepos, queueGitProjectUpdate, queueMissingGitProjectInits, seedGitProjectDocTemplates, } from "./core/git-project-docs.js";
 import { reconcileTemplateAssets, recordInstructionAssetStatus, recordSkillAssetStatus, } from "./core/release-assets.js";
@@ -69,7 +65,7 @@ import { NotificationManager } from "./adapters/notification-manager.js";
 import { recordProactiveForwardDeliveries } from "./core/channel-timeline.js";
 import { continueDashboardSession as continueDashboardSessionFromHistory, endDashboardSession as endDashboardSessionFromChannel, markContextChanged, } from "./core/dashboard-session-controls.js";
 import { AuditLogger } from "./safety/audit.js";
-import { bootstrapManagementMd, migrateLegacyManagementMd, startManagementMdWatcher, } from "./core/management-md.js";
+import { bootstrapManagementMd, startManagementMdWatcher, } from "./core/management-md.js";
 import { bootstrapManagementRegistry, startManagementRegistryWatcher, } from "./core/management-registry.js";
 import { bootstrapManagedTaskSeq } from "./db/managed-tasks-store.js";
 import { startDocsIndexer, } from "./core/docs/indexer.js";
@@ -79,11 +75,10 @@ import { DocsQAAdapter } from "./adapters/docs-qa-adapter.js";
 import { CompositeDashboardStream } from "./adapters/composite-dashboard-stream.js";
 import { createApp } from "./api/server.js";
 import { EventBroadcaster } from "./api/routes/sse.js";
-import { APP_NAME, createEvent, EventPriority, formatSqliteDatetime, getAgentDayBoundsUtc, getAgentDayDateStr, getAgentDayProgressMinutes, getBackendIds, nowInTimezone, parseSqliteUtcMs, } from "@aitne/shared";
+import { APP_NAME, EventPriority, getBackendIds, } from "@aitne/shared";
 import { getOwnerChannel } from "./messaging/owner-channels.js";
 import { SUPPORTED_MESSAGING_PLATFORMS, } from "./messaging/constants.js";
 import { AgentWriteTracker } from "./safety/agent-write-tracker.js";
-import { discardStalePendingSchedules, hasActionInWindow, recoverOrphanedRunningSchedules, } from "./core/schedule-maintenance.js";
 import { ContextWriteGate, InMemoryTodayWriteLockManager, MigrationLock, getTodayWriteLockTimeoutMs, } from "./core/today-write-lock.js";
 import { applyPromptContextStaleness, } from "./core/context-staleness.js";
 import { InMemoryRoadmapWriteLockManager, getRoadmapWriteLockTimeoutMs, } from "./core/roadmap-write-lock.js";
@@ -103,13 +98,15 @@ import { parseImapAccountSecret } from "./services/mail/imap/app-password.js";
 import { ICloudImapProvider } from "./services/mail/imap/icloud-provider.js";
 import { YahooImapProvider } from "./services/mail/imap/yahoo-provider.js";
 import { GmailProvider } from "./services/mail/gmail/gmail-provider.js";
-import { ensureLegacyGmailRow } from "./services/mail/gmail/legacy-row.js";
-import { syncLegacyGmailAccountState } from "./services/mail/gmail/legacy-row.js";
 import { MailPoller } from "./observers/mail-poller.js";
 import { MailReconciliationJob } from "./observers/mail-reconciliation.js";
 import { SecretBroker } from "./secrets/secret-broker.js";
 import { captureOriginalShellEnv, syncBackendApiKeyToEnv, } from "./secrets/backend-api-key-env.js";
 import { createLogger, toSafeErrorMessage } from "./logging.js";
+import { runCatchup, runPostMessagingCatchup, } from "./bootstrap/catchup.js";
+import { hasFreshAgentDayTodayMd, readSkillCurationCadence, } from "./bootstrap/schedule-helpers.js";
+import { createAdapterReloaders, whatsappQrResponseFromAdapter, } from "./bootstrap/adapters.js";
+import { createInitialSecretState, createServiceReloaders, } from "./bootstrap/services.js";
 const logger = createLogger("daemon", {
     transport: {
         target: "pino-pretty",
@@ -146,6 +143,32 @@ async function startup() {
     // ── 3. Database ──
     const db = createDatabase(config);
     applySchema(db);
+    setWikiWorkspaceTokenResolver((processKey, workspaceName) => {
+        if (!processKey.startsWith("wiki."))
+            return null;
+        // Match `context-builder.ts`'s per-event lookup: prefer the named
+        // workspace, fall back to the default. Without this, multi-workspace
+        // installs would render the `<wiki_workspace>` XML against the target
+        // workspace while skill prose (`{{vault_path}}` etc.) referenced the
+        // default — the agent would then operate on the wrong vault.
+        const workspace = (workspaceName ? readWikiWorkspaceByName(db, workspaceName) : null)
+            ?? readDefaultWikiWorkspace(db);
+        if (!workspace)
+            return null;
+        return {
+            vault_path: workspace.root_path,
+            language: workspace.language,
+            workspace_name: workspace.name,
+            schema_version: String(workspace.schema_version),
+        };
+    });
+    // WIKI_BUILDER_DESIGN.md §P4.A — boot-time FTS backfill. The
+    // `fts_wiki` virtual table is content-less and lives outside the
+    // mail-style trigger chain (the source is the filesystem, not a SQL
+    // table), so a fresh DB or a workspace seeded before P4 landed needs
+    // a one-shot rebuild. Per-workspace gate inside `backfillWikiFulltext`
+    // keeps this near-free in steady state.
+    backfillWikiFulltext(db, listWikiWorkspaces(db));
     // §12 ("managed_tasks.id collision after restore from backup") — ensure
     // `managed_task_seq.next_id` is greater than the max existing mt id so a
     // backup-restored DB cannot collide with the seq counter on the next
@@ -227,7 +250,6 @@ async function startup() {
     let managementMdWatcher = null;
     let managementRegistryWatcher = null;
     try {
-        migrateLegacyManagementMd(config.dataDir);
         await bootstrapManagementMd(config.dataDir, db, config.workspaceDir, {
             externalObsidianVaultPath: config.externalObsidianVaultPath,
             externalObsidianWatch: config.externalObsidianWatch,
@@ -407,185 +429,34 @@ async function startup() {
             logger.warn({ err, platform }, "Failed to deliver welcome DM after auto-pairing");
         }
     }
-    let discordAdapter = null;
-    let slackAdapter = null;
-    let telegramAdapter = null;
-    let whatsappAdapter = null;
-    async function reloadDiscordAdapter(startNow) {
-        const botToken = await secretBroker.getDiscordBotToken();
-        const configured = !!botToken;
-        messageHub.setPlatformConfigured("discord", configured);
-        if (discordAdapter) {
-            try {
-                await discordAdapter.stop();
-            }
-            catch (err) {
-                logger.warn({ err }, "Failed to stop Discord adapter during reload");
-            }
-            messageHub.unregister("discord");
-            discordAdapter = null;
-        }
-        if (!botToken) {
-            return;
-        }
-        discordAdapter = new DiscordAdapter({
-            botToken,
-            ownerUserId: config.discordOwnerUserId,
-            onMessage: (event) => void eventBus.put(event),
-            onOwnerDetected: (userId) => recordDetectedOwner("discord", userId),
-            attachmentStore,
-        });
-        messageHub.register(discordAdapter);
-        if (startNow) {
-            // Mark as "connecting" while the websocket handshake is in flight so
-            // /health doesn't briefly report "ok" before the adapter actually
-            // comes up (register() defaults to "ok" to keep the notification
-            // pipeline usable in unit tests; this override is the real state).
-            messageHub.setPlatformRuntimeStatus("discord", { runtimeState: "connecting", error: null });
-            try {
-                await discordAdapter.start();
-                messageHub.setPlatformRuntimeStatus("discord", { runtimeState: "ok", error: null });
-            }
-            catch (err) {
-                const message = toSafeErrorMessage(err, "Discord adapter failed to start");
-                messageHub.setPlatformRuntimeStatus("discord", { runtimeState: "error", error: message });
-                logger.error({ err }, "Failed to start Discord adapter during reload");
-            }
-        }
-    }
-    async function reloadSlackAdapter(startNow) {
-        const [botToken, appToken] = await Promise.all([
-            secretBroker.getSlackBotToken(),
-            secretBroker.getSlackAppToken(),
-        ]);
-        const configured = !!(botToken && appToken);
-        messageHub.setPlatformConfigured("slack", configured);
-        if (slackAdapter) {
-            try {
-                await slackAdapter.stop();
-            }
-            catch (err) {
-                logger.warn({ err }, "Failed to stop Slack adapter during reload");
-            }
-            messageHub.unregister("slack");
-            slackAdapter = null;
-        }
-        if (!botToken || !appToken) {
-            return;
-        }
-        slackAdapter = new SlackAdapter({
-            botToken,
-            appToken,
-            ownerUserId: config.slackOwnerUserId,
-            onMessage: (event) => void eventBus.put(event),
-            onOwnerDetected: (userId) => recordDetectedOwner("slack", userId),
-            attachmentStore,
-        });
-        messageHub.register(slackAdapter);
-        if (startNow) {
-            messageHub.setPlatformRuntimeStatus("slack", { runtimeState: "connecting", error: null });
-            try {
-                await slackAdapter.start();
-                messageHub.setPlatformRuntimeStatus("slack", { runtimeState: "ok", error: null });
-            }
-            catch (err) {
-                const message = toSafeErrorMessage(err, "Slack adapter failed to start");
-                messageHub.setPlatformRuntimeStatus("slack", { runtimeState: "error", error: message });
-                logger.error({ err }, "Failed to start Slack adapter during reload");
-            }
-        }
-    }
-    async function reloadTelegramAdapter(startNow) {
-        const botToken = await secretBroker.getTelegramBotToken();
-        const configured = !!botToken;
-        messageHub.setPlatformConfigured("telegram", configured);
-        if (telegramAdapter) {
-            try {
-                await telegramAdapter.stop();
-            }
-            catch (err) {
-                logger.warn({ err }, "Failed to stop Telegram adapter during reload");
-            }
-            messageHub.unregister("telegram");
-            telegramAdapter = null;
-        }
-        if (!botToken) {
-            return;
-        }
-        telegramAdapter = new TelegramAdapter({
-            botToken,
-            ownerChatId: config.telegramOwnerChatId,
-            onMessage: (event) => void eventBus.put(event),
-            onOwnerDetected: (chatId) => recordDetectedOwner("telegram", chatId),
-            attachmentStore,
-        });
-        messageHub.register(telegramAdapter);
-        if (startNow) {
-            messageHub.setPlatformRuntimeStatus("telegram", { runtimeState: "connecting", error: null });
+    const adapterState = {
+        discord: null,
+        slack: null,
+        telegram: null,
+        whatsapp: null,
+    };
+    const { reloadDiscordAdapter, reloadSlackAdapter, reloadTelegramAdapter, buildWhatsAppAdapter, teardownWhatsAppAdapter, enableWhatsAppAdapter, } = createAdapterReloaders({
+        config,
+        secretBroker,
+        messageHub,
+        eventBus,
+        attachmentStore,
+        recordDetectedOwner,
+        onWhatsAppLoggedOut: async () => {
             try {
-                await telegramAdapter.start();
-                messageHub.setPlatformRuntimeStatus("telegram", { runtimeState: "ok", error: null });
+                await messageHub.sendToUser("WhatsApp session logged out — re-run foreground pairing");
             }
             catch (err) {
-                const message = toSafeErrorMessage(err, "Telegram adapter failed to start");
-                messageHub.setPlatformRuntimeStatus("telegram", { runtimeState: "error", error: message });
-                logger.error({ err }, "Failed to start Telegram adapter during reload");
+                logger.error({ err }, "Failed to deliver WhatsApp logout notification via fallback channel");
             }
-        }
-    }
+        },
+        state: adapterState,
+    });
     await Promise.all([
         reloadDiscordAdapter(false),
         reloadSlackAdapter(false),
         reloadTelegramAdapter(false),
     ]);
-    /**
-     * Build (or rebuild) the WhatsApp adapter from current config and register
-     * it with the MessageHub. Idempotent: returns the existing adapter if config
-     * is unchanged. Throws if whatsappOwnerPhone is missing.
-     */
-    function buildWhatsAppAdapter() {
-        if (!config.whatsappOwnerPhone) {
-            throw new Error("Cannot enable WhatsApp: PA_WHATSAPP_OWNER_PHONE is not set");
-        }
-        const existing = messageHub.getAdapter("whatsapp");
-        if (existing && whatsappAdapter && existing === whatsappAdapter) {
-            return whatsappAdapter;
-        }
-        const adapter = new WhatsAppAdapter({
-            ownerPhone: config.whatsappOwnerPhone,
-            authDir: config.whatsappAuthDir ?? join(config.dataDir, "whatsapp", "auth"),
-            onMessage: (event) => void eventBus.put(event),
-            attachmentStore,
-            onLoggedOut: async () => {
-                try {
-                    await messageHub.sendToUser("WhatsApp session logged out — re-run foreground pairing");
-                }
-                catch (err) {
-                    logger.error({ err }, "Failed to deliver WhatsApp logout notification via fallback channel");
-                }
-            },
-        });
-        messageHub.register(adapter);
-        whatsappAdapter = adapter;
-        return adapter;
-    }
-    /**
-     * Tear down the WhatsApp adapter completely. Used by the dashboard
-     * `whatsappEnabled=false` toggle so we don't keep a stale Baileys socket
-     * around. Logs but does not throw on socket close errors.
-     */
-    async function teardownWhatsAppAdapter() {
-        if (!whatsappAdapter)
-            return;
-        try {
-            await whatsappAdapter.stop();
-        }
-        catch (err) {
-            logger.warn({ err }, "Error stopping WhatsApp adapter during teardown");
-        }
-        messageHub.unregister("whatsapp");
-        whatsappAdapter = null;
-    }
     if (config.whatsappEnabled) {
         if (!config.whatsappOwnerPhone) {
             throw new Error("PA_WHATSAPP_ENABLED=true but PA_WHATSAPP_OWNER_PHONE is not set");
@@ -637,7 +508,7 @@ async function startup() {
             },
             startPairing: async (ttlMs = 5 * 60_000) => {
                 assertAdapterReady("telegram");
-                const adapter = telegramAdapter;
+                const adapter = adapterState.telegram;
                 if (!adapter) {
                     throw new Error("Telegram adapter is not initialized. Save the token and retry.");
                 }
@@ -697,12 +568,12 @@ async function startup() {
                 };
             },
             getPairingStatus: () => ({
-                paired: telegramAdapter?.getOwnerChatId() !== null,
-                ownerChatId: telegramAdapter?.getOwnerChatId() ?? null,
-                pairingActive: telegramAdapter?.isPairingActive() ?? false,
+                paired: adapterState.telegram?.getOwnerChatId() !== null,
+                ownerChatId: adapterState.telegram?.getOwnerChatId() ?? null,
+                pairingActive: adapterState.telegram?.isPairingActive() ?? false,
             }),
             cancelPairing: () => {
-                telegramAdapter?.cancelPairing();
+                adapterState.telegram?.cancelPairing();
             },
         };
     }
@@ -724,7 +595,7 @@ async function startup() {
             },
             startPairing: async (ttlMs = 5 * 60_000) => {
                 assertAdapterReady("slack");
-                const adapter = slackAdapter;
+                const adapter = adapterState.slack;
                 if (!adapter) {
                     throw new Error("Slack adapter is not initialized. Save the tokens and retry.");
                 }
@@ -743,12 +614,12 @@ async function startup() {
                 return { phrase, expiresAt };
             },
             cancelPairing: () => {
-                slackAdapter?.cancelPairing();
+                adapterState.slack?.cancelPairing();
             },
             getPairingStatus: () => ({
-                paired: slackAdapter?.getOwnerUserId() !== null,
-                ownerUserId: slackAdapter?.getOwnerUserId() ?? null,
-                pairingActive: slackAdapter?.isPairingActive() ?? false,
+                paired: adapterState.slack?.getOwnerUserId() !== null,
+                ownerUserId: adapterState.slack?.getOwnerUserId() ?? null,
+                pairingActive: adapterState.slack?.isPairingActive() ?? false,
             }),
         };
     }
@@ -770,7 +641,7 @@ async function startup() {
             },
             startPairing: async (ttlMs = 5 * 60_000) => {
                 assertAdapterReady("discord");
-                const adapter = discordAdapter;
+                const adapter = adapterState.discord;
                 if (!adapter) {
                     throw new Error("Discord adapter is not initialized. Save the token and retry.");
                 }
@@ -784,38 +655,15 @@ async function startup() {
                 return { phrase, expiresAt };
             },
             cancelPairing: () => {
-                discordAdapter?.cancelPairing();
+                adapterState.discord?.cancelPairing();
             },
             getPairingStatus: () => ({
-                paired: discordAdapter?.getOwnerUserId() !== null,
-                ownerUserId: discordAdapter?.getOwnerUserId() ?? null,
-                pairingActive: discordAdapter?.isPairingActive() ?? false,
+                paired: adapterState.discord?.getOwnerUserId() !== null,
+                ownerUserId: adapterState.discord?.getOwnerUserId() ?? null,
+                pairingActive: adapterState.discord?.isPairingActive() ?? false,
             }),
         };
     }
-    function whatsappQrResponseFromAdapter(adapter, snapshotOverride) {
-        if (!adapter) {
-            return {
-                dataUrl: null,
-                payload: null,
-                generatedAt: null,
-                expiresAt: null,
-                state: "not_initialized",
-                error: "WhatsApp adapter not enabled",
-            };
-        }
-        const snapshot = snapshotOverride !== undefined
-            ? snapshotOverride
-            : adapter.getQrSnapshot();
-        return {
-            dataUrl: snapshot?.dataUrl ?? null,
-            payload: snapshot?.payload ?? null,
-            generatedAt: snapshot?.generatedAt ?? null,
-            expiresAt: snapshot?.expiresAt ?? null,
-            state: adapter.getStatus(),
-            error: adapter.getStatusError(),
-        };
-    }
     // Dashboard adapter — always registered (activates on SSE connect)
     const dashboardAdapter = new DashboardAdapter((event) => void eventBus.put(event));
     messageHub.register(dashboardAdapter);
@@ -882,96 +730,14 @@ async function startup() {
             },
         },
     });
-    const secretState = {
-        googleCredentialsConfigured: false,
-        googleTokenConfigured: false,
-        googleCredentialType: null,
-        notionConfigured: false,
-        githubConfigured: false,
-        githubWebhookConfigured: false,
-    };
-    async function refreshGoogleSecretState() {
-        const [credentialsRaw, tokenRaw] = await Promise.all([
-            secretBroker.getGoogleCredentialsJson(),
-            secretBroker.getGoogleTokenJson(),
-        ]);
-        secretState.googleCredentialsConfigured = !!credentialsRaw;
-        secretState.googleTokenConfigured = !!tokenRaw;
-        secretState.googleCredentialType = detectGoogleCredentialType(credentialsRaw);
-    }
-    async function reloadGoogleServices() {
-        await refreshGoogleSecretState();
-        services.calendar = null;
-        services.gmail = null;
-        delete services.errors.googleCalendar;
-        delete services.errors.gmail;
-        if (!secretState.googleCredentialsConfigured) {
-            if (services.mail) {
-                syncLegacyGmailAccountState(db, services.mail, {
-                    available: false,
-                    error: "Google credentials are not configured.",
-                });
-            }
-            return;
-        }
-        // OAuth2 pre-auth: credentials uploaded but the user has not completed the
-        // browser flow yet (no token in the keychain). Initializing the services
-        // would fail with a "missing token" error that the dashboard would then
-        // render as red "Error" under the Google card — but this is the expected
-        // mid-setup state, not a failure. Skip init and leave services.errors
-        // unset so /health reports error: null until the user finishes OAuth or a
-        // real init error occurs.
-        const oauth2PreAuth = secretState.googleCredentialType === "oauth2"
-            && !secretState.googleTokenConfigured;
-        if (oauth2PreAuth) {
-            if (services.mail) {
-                syncLegacyGmailAccountState(db, services.mail, {
-                    available: false,
-                    error: "Awaiting Google OAuth authorization.",
-                });
-            }
-            return;
-        }
-        const calendarService = new CalendarService(config, secretBroker);
-        try {
-            await calendarService.init();
-            services.calendar = calendarService;
-        }
-        catch (err) {
-            const msg = err.message;
-            logger.error({ error: msg }, "Calendar service init failed, continuing without it");
-            services.errors.googleCalendar = msg;
-        }
-        const gmailService = new GmailService(secretBroker);
-        try {
-            await gmailService.init();
-            services.gmail = gmailService;
-        }
-        catch (err) {
-            const msg = err.message;
-            logger.error({ error: msg }, "Gmail service init failed, continuing without it");
-            services.errors.gmail = msg;
-        }
-        // Ensure the shared-Google-OAuth Gmail identity exists as a unified
-        // mail account (idempotent; returns `exists` on subsequent boots).
-        if (services.gmail?.available) {
-            try {
-                await ensureLegacyGmailRow(db, services.gmail);
-            }
-            catch (err) {
-                logger.error({ err }, "Failed to ensure shared-Google-OAuth Gmail mail_accounts row");
-            }
-            if (services.mail) {
-                syncLegacyGmailAccountState(db, services.mail, { available: true });
-            }
-        }
-        else if (services.mail) {
-            syncLegacyGmailAccountState(db, services.mail, {
-                available: false,
-                error: services.errors.gmail ?? "Gmail is not configured.",
-            });
-        }
-    }
+    const secretState = createInitialSecretState();
+    const { reloadGoogleServices, reloadAppleCalendarService, reloadNotionService, reloadGitHubService, } = createServiceReloaders({
+        db,
+        config,
+        secretBroker,
+        services,
+        secretState,
+    });
     // Google Maps (F-08: commute optimization)
     {
         const { GoogleMapsService } = await import("./services/google-maps.js");
@@ -1007,78 +773,6 @@ async function startup() {
     else if (config.externalObsidianVaultPath && !config.externalObsidianVaultName) {
         services.errors.obsidian = "externalObsidianVaultName is required for the Obsidian CLI service (externalObsidianVaultPath alone enables file watching only)";
     }
-    async function reloadAppleCalendarService() {
-        const raw = await secretBroker.getAppleCalendarCredentialsJson();
-        services.appleCalendar = null;
-        delete services.errors.appleCalendar;
-        if (!raw) {
-            return;
-        }
-        const service = new AppleCalendarService(secretBroker);
-        try {
-            await service.init();
-            if (service.available) {
-                services.appleCalendar = service;
-            }
-            else {
-                // Surface the underlying iCloud error verbatim — the dashboard
-                // shows it on the Connections card so the user can act
-                // (`401 Unauthorized` → regenerate password; network error →
-                // retry; etc.). Falls back to a generic placeholder only if
-                // init() failed without recording a message.
-                services.errors.appleCalendar =
-                    service.initError
-                        ?? "Apple Calendar credentials present but iCloud discovery did not return a usable calendar — verify the app-specific password.";
-            }
-        }
-        catch (err) {
-            const msg = err.message;
-            logger.error({ error: msg }, "Apple Calendar service init failed, continuing without it");
-            services.errors.appleCalendar = msg;
-        }
-    }
-    async function reloadNotionService() {
-        const apiKey = await secretBroker.getNotionApiKey();
-        secretState.notionConfigured = !!apiKey;
-        services.notion = null;
-        delete services.errors.notion;
-        if (!apiKey) {
-            return;
-        }
-        const notionService = new NotionService(config, secretBroker);
-        try {
-            await notionService.init();
-            services.notion = notionService;
-        }
-        catch (err) {
-            const msg = err.message;
-            logger.error({ error: msg }, "Notion service init failed, continuing without it");
-            services.errors.notion = msg;
-        }
-    }
-    async function reloadGitHubService() {
-        const [token, webhookSecret] = await Promise.all([
-            secretBroker.getGitHubToken(),
-            secretBroker.getGitHubWebhookSecret(),
-        ]);
-        secretState.githubConfigured = !!token;
-        secretState.githubWebhookConfigured = !!webhookSecret;
-        services.github = null;
-        delete services.errors.github;
-        if (!token) {
-            return;
-        }
-        const githubService = new GitHubService(token, webhookSecret);
-        try {
-            await githubService.init();
-            services.github = githubService;
-        }
-        catch (err) {
-            const msg = err.message;
-            logger.error({ error: msg }, "GitHub service init failed, continuing without it");
-            services.errors.github = msg;
-        }
-    }
     await Promise.all([
         reloadGoogleServices(),
         reloadAppleCalendarService(),
@@ -1088,7 +782,7 @@ async function startup() {
     /** Build integration status snapshot for /api/health */
     const getIntegrationStatus = () => {
         const whatsappState = config.whatsappEnabled
-            ? (whatsappAdapter?.getStatus() ?? "disabled")
+            ? (adapterState.whatsapp?.getStatus() ?? "disabled")
             : "not_configured";
         return {
             google: {
@@ -1828,7 +1522,7 @@ async function startup() {
     // the newly created backend-specific dir (e.g. .codex/skills/) also
     // receives user skills. The dispatcher's syncAllUserSkills ran BEFORE
     // router.execute(), so the fallback dir didn't exist at that point.
-    (sessionDir, backendId, eventType, processKey) => {
+    (sessionDir, backendId, eventType, processKey, wikiWorkspaceName) => {
         // services is the mutable ServiceRegistry — reading .calendar here
         // picks up the current availability (e.g. after mid-flight OAuth).
         // GitHub presence is read fresh from the unified `repositories` table
@@ -1838,7 +1532,7 @@ async function startup() {
             github: selectGithubRepoSlugs(db).length > 0,
         });
         const mailAccounts = services.mail?.listActiveAccounts() ?? [];
-        ensureBackendMaterialized(config.workspaceDir, sessionDir, backendId, eventType, processKey, cfgServices, mailAccounts, readIntegrations(db), config.character);
+        ensureBackendMaterialized(config.workspaceDir, sessionDir, backendId, eventType, processKey, cfgServices, mailAccounts, readIntegrations(db), config.character, wikiWorkspaceName);
         syncAllUserSkills(sessionDir, join(config.dataDir, "skills"));
     });
     // Startup validation — warn if any delegated-mode variant files are
@@ -1965,6 +1659,13 @@ async function startup() {
     // safe (DOCS_QA_B7_DESIGN.md §9 F3.4 / §11.4).
     dispatcher.setDashboardStream(new CompositeDashboardStream([dashboardAdapter, docsQAAdapter]));
     dispatcher.setAttachmentStore(attachmentStore);
+    // Real-time routine progress for the dashboard. `dispatchSafe` emits
+    // `kind: "routine_started"` / `"routine_completed"` on the default
+    // SSE `event` channel — same pipe as `kind: "main_backend_changed"`
+    // — so the setup wizard's "今日の状況を生成中…" indicator can render
+    // without waiting on `/api/events` REST polling. Failure containment
+    // lives in `broadcastRoutineProgress` (swallows + warns).
+    dispatcher.setEventBroadcaster(eventBroadcaster);
     // Local-Whisper voice transcription for inbound audio attachments.
     // See docs/design/appendices/voice-transcription.md.
     //
@@ -2071,17 +1772,7 @@ async function startup() {
         // (same logic as runCatchup, ensures schedule generation after first auth)
         const contextDir = getContextDir(config);
         const todayMdPath = join(contextDir, "today.md");
-        let needsMorning = false;
-        if (existsSync(todayMdPath)) {
-            const firstLine = readFileSync(todayMdPath, "utf-8").split("\n")[0];
-            const today = getAgentDayDateStr(config.timezone || undefined, config.dayBoundaryHour);
-            if (!firstLine.includes(today)) {
-                needsMorning = true;
-            }
-        }
-        else {
-            needsMorning = true;
-        }
+        const needsMorning = !hasFreshAgentDayTodayMd(todayMdPath, config.timezone || undefined, config.dayBoundaryHour);
         if (needsMorning) {
             // Morning routine's post-completion hook will also check roadmap staleness.
             logger.info("Google services ready — today.md stale, queueing morning_routine wake");
@@ -2433,7 +2124,7 @@ async function startup() {
         auditLogger,
         validateAttachmentTurnToken: (token) => dispatcher.validateAttachmentTurnToken(token),
         whatsappControls: {
-            isInitialized: () => whatsappAdapter !== null,
+            isInitialized: () => adapterState.whatsapp !== null,
             enable: async () => {
                 const adapter = buildWhatsAppAdapter();
                 if (adapter.getStatus() === "disabled") {
@@ -2444,19 +2135,58 @@ async function startup() {
                 await teardownWhatsAppAdapter();
             },
             requestQr: async () => {
-                if (!whatsappAdapter) {
-                    await whatsappControls_enable();
+                if (!adapterState.whatsapp) {
+                    await enableWhatsAppAdapter();
                 }
-                await whatsappAdapter.requestQR();
+                await adapterState.whatsapp.requestQR();
             },
             waitForQr: async (timeoutMs = 10_000) => {
-                if (!whatsappAdapter) {
-                    await whatsappControls_enable();
+                if (!adapterState.whatsapp) {
+                    await enableWhatsAppAdapter();
+                }
+                const snapshot = await adapterState.whatsapp.waitForQr(timeoutMs);
+                return whatsappQrResponseFromAdapter(adapterState.whatsapp, snapshot);
+            },
+            getQrResponse: () => whatsappQrResponseFromAdapter(adapterState.whatsapp),
+            reset: async (timeoutMs = 10_000) => {
+                // 1. Stop + unregister any live adapter so no Baileys callbacks fire
+                //    against the auth dir while we delete it.
+                await teardownWhatsAppAdapter();
+                // 2. Wipe Baileys' multi-file auth state. Without this, a fresh
+                //    enable() would re-load the stale creds and never emit a QR —
+                //    which is exactly the "前のデータが残っているのか pair できない"
+                //    failure mode the dashboard's "Reset connection" button exists
+                //    to recover from. Recursive + force so a partially-written dir
+                //    (e.g. only qr.txt present, no creds.json yet) still wipes
+                //    cleanly. `force: true` also no-ops if the dir is already gone.
+                const authDir = config.whatsappAuthDir ?? join(config.dataDir, "whatsapp", "auth");
+                try {
+                    rmSync(authDir, { recursive: true, force: true });
+                }
+                catch (err) {
+                    logger.warn({ err, authDir }, "Failed to wipe WhatsApp auth directory during reset");
+                }
+                // 3. Drop the cached owner_channels mapping so a freshly-paired
+                //    session re-discovers the channel id from the inbound auth
+                //    handshake rather than reusing the prior LID alias.
+                try {
+                    db
+                        .prepare("DELETE FROM owner_channels WHERE platform = ?")
+                        .run("whatsapp");
+                }
+                catch (err) {
+                    logger.warn({ err }, "Failed to clear WhatsApp owner_channels row during reset");
                 }
-                const snapshot = await whatsappAdapter.waitForQr(timeoutMs);
-                return whatsappQrResponseFromAdapter(whatsappAdapter, snapshot);
+                // 4. If the integration is still enabled, rebuild the adapter and
+                //    await the first scannable QR so the dashboard can render it
+                //    in the same request that triggered the reset.
+                if (!config.whatsappEnabled) {
+                    return whatsappQrResponseFromAdapter(null);
+                }
+                await enableWhatsAppAdapter();
+                const snapshot = await adapterState.whatsapp.waitForQr(timeoutMs);
+                return whatsappQrResponseFromAdapter(adapterState.whatsapp, snapshot);
             },
-            getQrResponse: () => whatsappQrResponseFromAdapter(whatsappAdapter),
         },
         messagingControls: {
             telegram: buildTelegramControls(),
@@ -2464,13 +2194,6 @@ async function startup() {
             discord: buildDiscordControls(),
         },
     });
-    // Local helper avoiding circular reference inside the object literal above.
-    async function whatsappControls_enable() {
-        const adapter = buildWhatsAppAdapter();
-        if (adapter.getStatus() === "disabled") {
-            await adapter.start();
-        }
-    }
     // Mount /api/docs/* (DOCS_QA_DESIGN.md §10.4 + DOCS_QA_B7_DESIGN.md
     // §S5–S6) after createApp so the indexer handle and the QA SSE
     // adapter can be threaded in without extending ApiDependencies. The
@@ -2486,6 +2209,22 @@ async function startup() {
         fetch: app.fetch,
         hostname: "127.0.0.1",
         port: config.apiPort,
+        // @hono/node-server's getRequestListener defaults to replacing
+        // `globalThis.Request` / `globalThis.Response` with its own lazy
+        // wrapper classes (named `_Request` / `_Response`) for response-
+        // body materialization performance. The wrappers are prototype-
+        // chained to the native classes — fine for Hono's own response
+        // path — but they break `instanceof Response` checks for objects
+        // returned by native `fetch()`, because a native Response's
+        // prototype chain doesn't include `_Response.prototype`. This
+        // makes `@huggingface/transformers`'s `toCacheResponse` check
+        // (`response instanceof Response && response.status === 200`)
+        // evaluate to false on fresh fetches, which silently skips
+        // `cache.put` and then throws "Unable to get model file path or
+        // buffer." Disabling the override keeps the native globals
+        // intact and costs us nothing — we don't construct Hono's
+        // `Response` instances directly anywhere in the daemon.
+        overrideGlobalObjects: false,
     });
     logger.info({ port: config.apiPort }, "API server listening");
     void dispatcher.run(); // Start consuming dashboard events as soon as the API is live
@@ -2706,202 +2445,12 @@ async function startup() {
     }
     logger.info(`${APP_NAME} Daemon ready`);
 }
-async function runCatchup(db, dispatcher, config) {
-    // Setup gate — on first boot (before rules/management.md exists) we must
-    // NOT run the morning routine. Without user/profile.md / rules/management.md
-    // the generated today.md is meaningless AND it fires
-    // onPromptContextChanged → markActiveDmSessionsStale, which destroys the
-    // dashboard setup conversation on the user's next turn. Autonomous
-    // catchup will run on the first normal boot *after* setup completes.
-    const gateReason = dispatcher.isAutonomousAllowed();
-    if (gateReason !== null) {
-        logger.info({ reason: gateReason }, "Skipping startup catchup — autonomous work paused for setup");
-        return {
-            postMessagingRoadmapRefresh: false,
-            postMessagingRoutines: [],
-            postMessagingHourlyCheck: false,
-        };
-    }
-    const now = new Date();
-    const tz = config.timezone || undefined;
-    const contextDir = getContextDir(config);
-    const todayMdPath = join(contextDir, "today.md");
-    const { start: agentDayStartUtc, end: agentDayEndUtc } = getAgentDayBoundsUtc(tz, config.dayBoundaryHour, now);
-    const skippedPending = discardStalePendingSchedules(db, agentDayStartUtc);
-    if (skippedPending > 0) {
-        logger.warn({ count: skippedPending }, "Discarded stale pending schedules at startup");
-    }
-    const runningRecovery = recoverOrphanedRunningSchedules(db, agentDayStartUtc);
-    if (runningRecovery.skipped > 0 || runningRecovery.failed > 0) {
-        logger.warn(runningRecovery, "Recovered orphaned running schedules without replay");
-    }
-    // Check if morning routine is needed
-    let needsMorning = false;
-    if (existsSync(todayMdPath)) {
-        const firstLine = readFileSync(todayMdPath, "utf-8").split("\n")[0];
-        const today = getAgentDayDateStr(tz, config.dayBoundaryHour, now);
-        if (!firstLine.includes(today)) {
-            needsMorning = true;
-        }
-    }
-    else {
-        needsMorning = true;
-    }
-    const dueCatchupRoutines = getDueCatchupRoutines(db, config, agentDayStartUtc, agentDayEndUtc, now);
-    const needsHourlyCheckCatchup = shouldCatchUpHourlyCheck(db, config, now);
-    let ranMorningCatchup = false;
-    if (needsMorning) {
-        try {
-            await dispatcher.summarizeDmSessions();
-        }
-        catch (err) {
-            logger.error({ err }, "DM summarization catchup failed before morning routine");
-        }
-        logger.info("Stale today.md detected, running morning_routine catchup inline");
-        await dispatcher.processInline({
-            ...createEvent({
-                type: "routine.morning_routine",
-                source: "catchup",
-                priority: EventPriority.HIGH,
-                data: {
-                    postCatchupRoutines: dueCatchupRoutines,
-                    postCatchupHourlyCheck: needsHourlyCheckCatchup,
-                    deferPostMorningCatchupsUntilStartupReady: true,
-                },
-            }),
-            routine: "morning_routine",
-        });
-        ranMorningCatchup = true;
-        if (!hasFreshAgentDayTodayMd(todayMdPath, tz, config.dayBoundaryHour)) {
-            logger.warn("Startup morning catchup did not produce a fresh today.md — deferring remaining catchup work");
-            return {
-                postMessagingRoadmapRefresh: false,
-                postMessagingRoutines: [],
-                postMessagingHourlyCheck: false,
-            };
-        }
-        return {
-            postMessagingRoadmapRefresh: isRoadmapStale(contextDir),
-            postMessagingRoutines: dueCatchupRoutines,
-            postMessagingHourlyCheck: needsHourlyCheckCatchup,
-        };
-    }
-    if (!ranMorningCatchup && isRoadmapStale(contextDir)) {
-        logger.info("Roadmap stale at startup, running roadmap_refresh catchup inline");
-        await processRoutineCatchup(dispatcher, "roadmap_refresh");
-    }
-    return {
-        postMessagingRoadmapRefresh: false,
-        postMessagingRoutines: dueCatchupRoutines,
-        postMessagingHourlyCheck: needsHourlyCheckCatchup,
-    };
-}
-async function runPostMessagingCatchup(dispatcher, catchup) {
-    if (catchup.postMessagingRoadmapRefresh) {
-        logger.info("Running roadmap_refresh catchup after messaging startup");
-        await processRoutineCatchup(dispatcher, "roadmap_refresh");
-    }
-    for (const routine of catchup.postMessagingRoutines) {
-        logger.info({ routine }, "Running same-day routine catchup after messaging startup");
-        await processRoutineCatchup(dispatcher, routine);
-    }
-    if (catchup.postMessagingHourlyCheck) {
-        logger.info("Triggering hourly_check catchup after messaging startup");
-        await dispatcher.triggerHourlyCheck("catchup_startup", { force: false });
-    }
-}
-async function processRoutineCatchup(dispatcher, routine) {
-    await dispatcher.processInline({
-        ...createEvent({
-            type: `routine.${routine}`,
-            source: "catchup",
-            priority: routine === "hourly_check" ? EventPriority.NORMAL : EventPriority.HIGH,
-        }),
-        routine,
-    });
-}
-function getDueCatchupRoutines(db, config, agentDayStartUtc, agentDayEndUtc, now) {
-    const tz = config.timezone || undefined;
-    const progressMinutes = getAgentDayProgressMinutes(tz, config.dayBoundaryHour, now);
-    const dueAt18 = getProgressMinutesForHour(18, config.dayBoundaryHour);
-    if (progressMinutes < dueAt18) {
-        return [];
-    }
-    const routines = [];
-    const agentDayStartMs = parseSqliteUtcMs(agentDayStartUtc);
-    const agentDayLocal = nowInTimezone(tz, new Date(agentDayStartMs));
-    const tomorrowLocal = nowInTimezone(tz, new Date(agentDayStartMs + 24 * 60 * 60 * 1000));
-    if (!hasActionInWindow(db, "routine.evening_review", agentDayStartUtc, agentDayEndUtc)) {
-        routines.push("evening_review");
-    }
-    if (agentDayLocal.dayOfWeek === 5 &&
-        !hasActionInWindow(db, "routine.weekly_review", agentDayStartUtc, agentDayEndUtc)) {
-        routines.push("weekly_review");
-    }
-    if (tomorrowLocal.day === 1 &&
-        !hasActionInWindow(db, "routine.monthly_review", agentDayStartUtc, agentDayEndUtc)) {
-        routines.push("monthly_review");
-    }
-    return routines;
-}
-function shouldCatchUpHourlyCheck(db, config, now) {
-    if (!config.hourlyCheckEnabled) {
-        return false;
-    }
-    const tz = config.timezone || undefined;
-    const local = nowInTimezone(tz, now);
-    if (local.hours < config.hourlyCheckActiveStartHour ||
-        local.hours >= config.hourlyCheckActiveEndHour ||
-        local.hours === config.dayBoundaryHour) {
-        return false;
-    }
-    // Slot anchors to `activeStartHour`, mirroring shouldFireHourlyTickAt
-    // in scheduler.ts so the catch-up function picks the same slot the
-    // cron callback would have fired at. The earlier branch already
-    // returned false when local.hours < activeStartHour, so the offset is
-    // always non-negative here.
-    const anchorMinutes = config.hourlyCheckActiveStartHour * 60;
-    const offsetFromAnchor = local.hours * 60 + local.minutes - anchorMinutes;
-    const slotOffsetFromAnchor = Math.floor(offsetFromAnchor / config.hourlyCheckIntervalMinutes) *
-        config.hourlyCheckIntervalMinutes;
-    const slotMinutesSinceMidnight = anchorMinutes + slotOffsetFromAnchor;
-    const dayStartUtc = getAgentDayBoundsUtc(tz, 0, now).start;
-    const slotStartMs = parseSqliteUtcMs(dayStartUtc) + slotMinutesSinceMidnight * 60 * 1000;
-    const slotStartUtc = formatSqliteDatetime(new Date(slotStartMs));
-    return !hasActionInWindow(db, "routine.hourly_check", slotStartUtc, formatSqliteDatetime(now));
-}
-function getProgressMinutesForHour(hour, dayBoundaryHour) {
-    const scheduledMinutes = hour * 60;
-    const boundaryMinutes = dayBoundaryHour * 60;
-    return scheduledMinutes >= boundaryMinutes
-        ? scheduledMinutes - boundaryMinutes
-        : 24 * 60 - boundaryMinutes + scheduledMinutes;
-}
-function hasFreshAgentDayTodayMd(todayMdPath, timezone, dayBoundaryHour) {
-    if (!existsSync(todayMdPath)) {
-        return false;
-    }
-    const firstLine = readFileSync(todayMdPath, "utf-8").split("\n")[0] ?? "";
-    const today = getAgentDayDateStr(timezone, dayBoundaryHour);
-    return firstLine.includes(today);
-}
-// P22 — read the operator's chosen cadence for skill curation runs.
-// Mirrors the helper in `core/scheduler.ts` so the dispatcher hook here can
-// resolve cadence at runtime without crossing module boundaries.
-function readSkillCurationCadence(db) {
-    const row = db
-        .prepare(`SELECT value_json FROM runtime_state WHERE key = 'skill_curation.config'`)
-        .get();
-    if (!row)
-        return "weekly";
-    try {
-        const v = JSON.parse(row.value_json);
-        return v.cadence ?? "weekly";
-    }
-    catch {
-        return "weekly";
-    }
-}
+// Catchup (`runCatchup` / `runPostMessagingCatchup`) and the pure schedule
+// predicates (`getDueCatchupRoutines`, `shouldCatchUpHourlyCheck`,
+// `getProgressMinutesForHour`, `hasFreshAgentDayTodayMd`,
+// `readSkillCurationCadence`) live in `./bootstrap/` — see
+// `docs/design/appendices/file-split-plan.md` §10. Imports are at the top
+// of this file.
 // ── Global safety net ──
 // Catch unhandled rejections from fire-and-forget patterns (void async calls)
 // so they are logged before Node.js 22+ terminates the process.