@aitne/daemon 0.1.8 → 0.1.10

package/dist/adapters/composite-dashboard-stream.d.ts

@@ -3,20 +3,18 @@ import type { SessionInfoPayload } from "../api/chat-binding-query.js";
 /**
  * Fan-out wrapper for the dispatcher's single `IDashboardStream` slot.
  *
- * The dispatcher only knows one outbound stream at a time
- * (`setDashboardStream(adapter)`), but Phase 2 of the docs-QA pipeline
- * introduces a second dashboard-platform adapter (`DocsQAAdapter`)
- * that needs to receive the same outbound calls. Channel routing is
- * content-addressed by `channelId` (each underlying adapter no-ops on
- * unknown ids per `dashboard-adapter.ts:211-218`), so fan-out is
- * naturally safe — only the adapter that owns the channel actually
- * emits.
+ * The dispatcher knows one outbound stream at a time
+ * (`setDashboardStream(adapter)`), but the docs-QA pipeline needs a
+ * second dashboard-platform adapter (`DocsQAAdapter`) to receive the
+ * same outbound calls. Channel routing is content-addressed by
+ * `channelId` (each underlying adapter no-ops on unknown ids), so
+ * fan-out is naturally safe — only the adapter that owns the channel
+ * actually emits.
  *
  * Class members are declared concrete (no `?`) even when the
  * `IDashboardStream` member is optional — the composite always fans
  * out the call; each underlying stream may or may not implement the
- * optional method, so we guard with `s.method?.(...)` per
- * DOCS_QA_B7_DESIGN.md §11.4.
+ * optional method, so we guard with `s.method?.(...)`.
  */
 export declare class CompositeDashboardStream implements IDashboardStream {
     private readonly streams;
@@ -39,4 +37,3 @@ export declare class CompositeDashboardStream implements IDashboardStream {
         caption?: string;
     }>): void;
 }
-//# sourceMappingURL=composite-dashboard-stream.d.ts.map

package/dist/adapters/composite-dashboard-stream.js

@@ -1,20 +1,18 @@
 /**
  * Fan-out wrapper for the dispatcher's single `IDashboardStream` slot.
  *
- * The dispatcher only knows one outbound stream at a time
- * (`setDashboardStream(adapter)`), but Phase 2 of the docs-QA pipeline
- * introduces a second dashboard-platform adapter (`DocsQAAdapter`)
- * that needs to receive the same outbound calls. Channel routing is
- * content-addressed by `channelId` (each underlying adapter no-ops on
- * unknown ids per `dashboard-adapter.ts:211-218`), so fan-out is
- * naturally safe — only the adapter that owns the channel actually
- * emits.
+ * The dispatcher knows one outbound stream at a time
+ * (`setDashboardStream(adapter)`), but the docs-QA pipeline needs a
+ * second dashboard-platform adapter (`DocsQAAdapter`) to receive the
+ * same outbound calls. Channel routing is content-addressed by
+ * `channelId` (each underlying adapter no-ops on unknown ids), so
+ * fan-out is naturally safe — only the adapter that owns the channel
+ * actually emits.
  *
  * Class members are declared concrete (no `?`) even when the
  * `IDashboardStream` member is optional — the composite always fans
  * out the call; each underlying stream may or may not implement the
- * optional method, so we guard with `s.method?.(...)` per
- * DOCS_QA_B7_DESIGN.md §11.4.
+ * optional method, so we guard with `s.method?.(...)`.
  */
 export class CompositeDashboardStream {
     streams;
@@ -46,4 +44,3 @@ export class CompositeDashboardStream {
             s.sendAttachments?.(channelId, attachments);
     }
 }
-//# sourceMappingURL=composite-dashboard-stream.js.map

package/dist/adapters/dashboard-adapter.d.ts

@@ -21,20 +21,17 @@ export declare class DashboardAdapter implements MessageAdapter {
     readonly notificationEligible = false;
     get primaryRecipient(): string | null;
     /**
-     * P2-19 — channel → set of SSE clients. Previously a `Map<channelId,
-     * SSEClient>` where a second `registerClient(channelId, ...)` for an
-     * existing key silently replaced the first; the original tab kept its
-     * EventSource open but received no further chunks. Switching to a set
-     * lets the SSE route opt-in to fan-out (multiple tabs on one channel)
-     * without changing callers that pass a fresh UUID per connect.
+     * Channel → set of SSE clients. Multiple tabs on one channel get
+     * fan-out; a second `registerClient(channelId, ...)` for an existing
+     * key never silently replaces an open EventSource. Callers that pass a
+     * fresh UUID per connect get the equivalent of a 1:1 mapping for free.
      */
     private readonly clients;
     private onMessage;
     private attachmentStore;
     constructor(onMessage: OnMessageCallback);
-    /** Inject the AttachmentStore. Optional — callers without attachment
-     *  support (older tests) skip this and POST /chat/messages rejects
-     *  attachmentIds with 503. */
+    /** Inject the AttachmentStore. Optional — without it,
+     *  POST /chat/messages rejects attachmentIds with 503. */
     setAttachmentStore(store: AttachmentStore): void;
     start(): Promise<void>;
     stop(): Promise<void>;
@@ -117,4 +114,3 @@ export declare class DashboardAdapter implements MessageAdapter {
     getActiveChannels(): string[];
 }
 export {};
-//# sourceMappingURL=dashboard-adapter.d.ts.map

package/dist/adapters/dashboard-adapter.js

@@ -18,12 +18,10 @@ export class DashboardAdapter {
         return this.getActiveChannels()[0] ?? null;
     }
     /**
-     * P2-19 — channel → set of SSE clients. Previously a `Map<channelId,
-     * SSEClient>` where a second `registerClient(channelId, ...)` for an
-     * existing key silently replaced the first; the original tab kept its
-     * EventSource open but received no further chunks. Switching to a set
-     * lets the SSE route opt-in to fan-out (multiple tabs on one channel)
-     * without changing callers that pass a fresh UUID per connect.
+     * Channel → set of SSE clients. Multiple tabs on one channel get
+     * fan-out; a second `registerClient(channelId, ...)` for an existing
+     * key never silently replaces an open EventSource. Callers that pass a
+     * fresh UUID per connect get the equivalent of a 1:1 mapping for free.
      */
     clients = new Map();
     onMessage;
@@ -31,9 +29,8 @@ export class DashboardAdapter {
     constructor(onMessage) {
         this.onMessage = onMessage;
     }
-    /** Inject the AttachmentStore. Optional — callers without attachment
-     *  support (older tests) skip this and POST /chat/messages rejects
-     *  attachmentIds with 503. */
+    /** Inject the AttachmentStore. Optional — without it,
+     *  POST /chat/messages rejects attachmentIds with 503. */
     setAttachmentStore(store) {
         this.attachmentStore = store;
     }
@@ -263,4 +260,3 @@ export class DashboardAdapter {
         return [...this.clients.keys()].filter((id) => this.isConnected(id));
     }
 }
-//# sourceMappingURL=dashboard-adapter.js.map

package/dist/adapters/discord.d.ts

@@ -12,8 +12,8 @@ export interface DiscordAdapterOptions {
     onMessage: OnMessageCallback;
     /** Called when a matching pairing challenge captures a new owner user ID. */
     onOwnerDetected?: (userId: string) => void | Promise<void>;
-    /** Phase 2: canonical attachment store for inbound media download/ingest
-     *  and outbound file delivery. When absent, media is silently skipped. */
+    /** Canonical attachment store for inbound media download/ingest and
+     *  outbound file delivery. When absent, media is silently skipped. */
     attachmentStore?: AttachmentStore;
 }
 /**
@@ -24,7 +24,7 @@ export interface DiscordAdapterOptions {
 export interface DiscordPairingChallenge {
     match: (text: string) => boolean;
     expiresAt: number;
-    /** P2-23 — see SlackPairingChallenge.hintReply. */
+    /** See SlackPairingChallenge.hintReply. */
     hintReply?: (text: string) => string | null;
 }
 /**
@@ -76,10 +76,9 @@ export declare class DiscordAdapter implements MessageAdapter {
     private handleRawMessage;
     /**
      * Atomically promote a user ID to "owner" and notify the daemon. See
-     * slack-adapter.captureOwner for the full B-1 design rationale —
-     * pairing must persist through env/DB before we acknowledge it, and
+     * slack-adapter.captureOwner for the full rationale — pairing must
+     * persist through env/DB before we acknowledge it, and
      * mutableOwnerId rolls back if the callback throws.
      */
     private captureOwner;
 }
-//# sourceMappingURL=discord.d.ts.map

package/dist/adapters/discord.js

@@ -65,7 +65,7 @@ export class DiscordAdapter {
     startPairing(challenge) {
         this.pairingChallenge = challenge;
         logger.info({ ttlMs: challenge.expiresAt - Date.now() }, "discord pairing challenge registered");
-        // P2-20: TTL sweep — see SlackAdapter.startPairing for rationale.
+        // TTL sweep — see SlackAdapter.startPairing for rationale.
         const ttlMs = Math.max(0, challenge.expiresAt - Date.now());
         const sweep = setTimeout(() => {
             if (this.pairingChallenge === challenge) {
@@ -109,11 +109,11 @@ export class DiscordAdapter {
         };
     }
     async start() {
+        const rawClient = this.client;
         // Remove all listeners first to prevent duplicates on re-start
         this.client.removeAllListeners(Events.Error);
         this.client.removeAllListeners(Events.Warn);
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        this.client.removeAllListeners("raw");
+        rawClient.removeAllListeners("raw");
         this.client.on(Events.Error, (err) => {
             logger.error({ error: err.message }, "Discord client error");
         });
@@ -137,8 +137,7 @@ export class DiscordAdapter {
         // unmodified. If a future discord.js release fixes the bug, we stay
         // on the raw path regardless — re-enabling Events.MessageCreate
         // would produce duplicate deliveries without deduplication plumbing.
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        this.client.on("raw", (packet) => {
+        rawClient.on("raw", (packet) => {
             if (packet.t === "MESSAGE_CREATE" && packet.d) {
                 void this.handleRawMessage(packet.d).catch((err) => {
                     logger.error({ err }, "discord raw message handler threw");
@@ -237,14 +236,13 @@ export class DiscordAdapter {
         if (data.author?.bot)
             return;
         // channel_type 1 = DM, 3 = GroupDM. Guild text channels are 0 etc.
-        // B-4: reject GroupDM (type 3) outright. The earlier logic let it
-        // fall through the !isDm + isMention path, so owner @-mentions in a
-        // GroupDM would emit agent replies into a channel visible to
-        // non-owner participants — violating the single-owner scope
-        // invariant in CLAUDE.md. We block the entire packet here, before
-        // any pairing or owner check.
+        // Reject GroupDM (type 3) outright. Otherwise the !isDm + isMention
+        // path would emit agent replies into a channel visible to non-owner
+        // participants — violating the single-owner scope invariant in
+        // CLAUDE.md. Block the entire packet here, before any pairing or
+        // owner check.
         if (data.channel_type === 3) {
-            logger.debug({ channel: data.channel_id }, "discord message dropped: GroupDM rejected (B-4)");
+            logger.debug({ channel: data.channel_id }, "discord message dropped: GroupDM rejected");
             return;
         }
         const isDm = data.channel_type === 1;
@@ -267,7 +265,7 @@ export class DiscordAdapter {
                 // completes before pairing is acknowledged. cancelPairing only
                 // fires on success — if the callback throws (e.g. .env unwritable)
                 // the matcher stays armed so the user can retry by resending the
-                // phrase. See B-1.
+                // phrase.
                 const ok = await this.captureOwner(authorId);
                 if (ok) {
                     this.cancelPairing();
@@ -317,7 +315,7 @@ export class DiscordAdapter {
                     });
                     if (!res.ok) {
                         logger.warn({ status: res.status, filename: att.filename }, "discord file download failed");
-                        // P2-13: Discord CDN URLs expire after ~24h. If the daemon is
+                        // Discord CDN URLs expire after ~24h. If the daemon is
                         // late picking up a DM (queue, restart, throttle), the URL is
                         // already dead. Surface a sentinel so the agent prompt can
                         // include "attachment couldn't be fetched — please resend"
@@ -395,8 +393,8 @@ export class DiscordAdapter {
     }
     /**
      * Atomically promote a user ID to "owner" and notify the daemon. See
-     * slack-adapter.captureOwner for the full B-1 design rationale —
-     * pairing must persist through env/DB before we acknowledge it, and
+     * slack-adapter.captureOwner for the full rationale — pairing must
+     * persist through env/DB before we acknowledge it, and
      * mutableOwnerId rolls back if the callback throws.
      */
     async captureOwner(userId) {
@@ -415,4 +413,3 @@ export class DiscordAdapter {
         }
     }
 }
-//# sourceMappingURL=discord.js.map

package/dist/adapters/docs-qa-adapter.d.ts

@@ -24,7 +24,7 @@ export interface DocsQAScopeOptions {
      * the time the adapter sees this field both fields are guaranteed
      * to round-trip cleanly through `requestedBackendId` /
      * `requestedModelId` on the MessageEvent. The dispatcher's hard-
-     * override path (`backend-router.ts:618`) then routes the turn on
+     * override path (see `backend-router.ts`) then routes the turn on
      * the picked model regardless of `process_backend_config` pins.
      */
     modelOverride?: {
@@ -34,7 +34,7 @@ export interface DocsQAScopeOptions {
 }
 /**
  * DocsQAAdapter — SSE-based MessageAdapter for the operator-facing
- * Docs Q&A panel (DOCS_QA_B7_DESIGN.md §3.2).
+ * Docs Q&A panel (see DOCS_QA_B7_DESIGN.md).
  *
  * Parallel to `DashboardAdapter`: same SSE/HTTP transport, same
  * dispatcher entry point, but a separate channel registry and a
@@ -46,10 +46,10 @@ export interface DocsQAScopeOptions {
  * Implements:
  *   - `IDashboardStream`: dispatcher fans outbound calls out to this
  *     adapter via `CompositeDashboardStream`. The streaming validator
- *     splice lives inside `sendStreamChunk` per §11.3. The
- *     persistence-side `validateAndRewrite` runs in the dispatcher
- *     (gated on `isDocsQAMessage(event)` per §11.1) — not here — so
- *     this adapter never sees the full assembled output.
+ *     splice lives inside `sendStreamChunk`. The persistence-side
+ *     `validateAndRewrite` runs in the dispatcher (gated on
+ *     `isDocsQAMessage(event)`) — not here — so this adapter never
+ *     sees the full assembled output.
  *   - `MessageAdapter`: registered with `MessageHub` so the standard
  *     adapter lifecycle (`start`/`stop`) and `notificationEligible`
  *     contract apply. `sendMessage` is required by the interface but
@@ -71,12 +71,11 @@ export declare class DocsQAAdapter implements MessageAdapter, IDashboardStream {
     /**
      * Register a new SSE client. Mints a `channelId`, emits the initial
      * `session_info` event so the dashboard knows the id to echo on
-     * subsequent POSTs (D5 — SSE-first channelId minting), and returns
-     * the id for the route's `onAbort` to unregister with.
+     * subsequent POSTs, and returns the id for the route's `onAbort` to
+     * unregister with.
      *
-     * No `resumeSessionId` parameter (§11.6): QA panel state lives in
-     * React state in-memory; the panel does not persist transcripts
-     * across reload.
+     * No `resumeSessionId` parameter: QA panel state lives in React state
+     * in-memory; the panel does not persist transcripts across reload.
      */
     registerClient(client: SSEClient): string;
     /** Drop a client. Called by the SSE route's `onAbort`. */
@@ -89,15 +88,16 @@ export declare class DocsQAAdapter implements MessageAdapter, IDashboardStream {
      * Translate an HTTP POST into a `MessageEvent` and feed it to the
      * dispatcher. Forces `intent: "docs_qa"`, `platform: "dashboard"`,
      * `isDm: true` regardless of the body — the route already guarded
-     * the body shape; this is the second forced-fields layer per §3.3.
+     * the body shape; this is the second forced-fields layer.
      */
     handleIncomingMessage(channelId: string, content: string, options: DocsQAScopeOptions): void;
     /**
      * Forward a streaming text delta through the per-channel citation
      * validator and emit the validated suffix. Unknown channelIds
-     * silently no-op (matches `dashboard-adapter.ts:211-218`) so the
-     * `CompositeDashboardStream` fan-out works without per-channel
-     * ownership tracking — only the adapter that owns the id emits.
+     * silently no-op (matches `dashboard-adapter.ts`'s unknown-channel
+     * no-op) so the `CompositeDashboardStream` fan-out works without
+     * per-channel ownership tracking — only the adapter that owns the
+     * id emits.
      */
     sendStreamChunk(channelId: string, chunk: string): void;
     /**
@@ -120,4 +120,3 @@ export declare class DocsQAAdapter implements MessageAdapter, IDashboardStream {
     getActiveChannels(): string[];
 }
 export {};
-//# sourceMappingURL=docs-qa-adapter.d.ts.map

package/dist/adapters/docs-qa-adapter.js

@@ -5,7 +5,7 @@ import { createLogger } from "../logging.js";
 const logger = createLogger("docs-qa-adapter");
 /**
  * DocsQAAdapter — SSE-based MessageAdapter for the operator-facing
- * Docs Q&A panel (DOCS_QA_B7_DESIGN.md §3.2).
+ * Docs Q&A panel (see DOCS_QA_B7_DESIGN.md).
  *
  * Parallel to `DashboardAdapter`: same SSE/HTTP transport, same
  * dispatcher entry point, but a separate channel registry and a
@@ -17,10 +17,10 @@ const logger = createLogger("docs-qa-adapter");
  * Implements:
  *   - `IDashboardStream`: dispatcher fans outbound calls out to this
  *     adapter via `CompositeDashboardStream`. The streaming validator
- *     splice lives inside `sendStreamChunk` per §11.3. The
- *     persistence-side `validateAndRewrite` runs in the dispatcher
- *     (gated on `isDocsQAMessage(event)` per §11.1) — not here — so
- *     this adapter never sees the full assembled output.
+ *     splice lives inside `sendStreamChunk`. The persistence-side
+ *     `validateAndRewrite` runs in the dispatcher (gated on
+ *     `isDocsQAMessage(event)`) — not here — so this adapter never
+ *     sees the full assembled output.
  *   - `MessageAdapter`: registered with `MessageHub` so the standard
  *     adapter lifecycle (`start`/`stop`) and `notificationEligible`
  *     contract apply. `sendMessage` is required by the interface but
@@ -50,12 +50,11 @@ export class DocsQAAdapter {
     /**
      * Register a new SSE client. Mints a `channelId`, emits the initial
      * `session_info` event so the dashboard knows the id to echo on
-     * subsequent POSTs (D5 — SSE-first channelId minting), and returns
-     * the id for the route's `onAbort` to unregister with.
+     * subsequent POSTs, and returns the id for the route's `onAbort` to
+     * unregister with.
      *
-     * No `resumeSessionId` parameter (§11.6): QA panel state lives in
-     * React state in-memory; the panel does not persist transcripts
-     * across reload.
+     * No `resumeSessionId` parameter: QA panel state lives in React state
+     * in-memory; the panel does not persist transcripts across reload.
      */
     registerClient(client) {
         const channelId = randomUUID();
@@ -89,7 +88,7 @@ export class DocsQAAdapter {
      * Translate an HTTP POST into a `MessageEvent` and feed it to the
      * dispatcher. Forces `intent: "docs_qa"`, `platform: "dashboard"`,
      * `isDm: true` regardless of the body — the route already guarded
-     * the body shape; this is the second forced-fields layer per §3.3.
+     * the body shape; this is the second forced-fields layer.
      */
     handleIncomingMessage(channelId, content, options) {
         const event = createEvent({
@@ -135,9 +134,10 @@ export class DocsQAAdapter {
     /**
      * Forward a streaming text delta through the per-channel citation
      * validator and emit the validated suffix. Unknown channelIds
-     * silently no-op (matches `dashboard-adapter.ts:211-218`) so the
-     * `CompositeDashboardStream` fan-out works without per-channel
-     * ownership tracking — only the adapter that owns the id emits.
+     * silently no-op (matches `dashboard-adapter.ts`'s unknown-channel
+     * no-op) so the `CompositeDashboardStream` fan-out works without
+     * per-channel ownership tracking — only the adapter that owns the
+     * id emits.
      */
     sendStreamChunk(channelId, chunk) {
         const entry = this.clients.get(channelId);
@@ -215,4 +215,3 @@ export class DocsQAAdapter {
             .map(([id]) => id);
     }
 }
-//# sourceMappingURL=docs-qa-adapter.js.map

package/dist/adapters/message-hub.d.ts

@@ -1,7 +1,7 @@
 import type Database from "better-sqlite3";
 import type { AgentConfig } from "../config.js";
 import { type NotificationDestinationPlatform } from "../messaging/constants.js";
-import type { MessageAdapter, ProcessingIndicatorHandle } from "./types.js";
+import type { MessageAdapter, OutboundAttachmentRef, ProcessingIndicatorHandle } from "./types.js";
 export declare class MessageDeliveryError extends Error {
     constructor(message: string);
 }
@@ -61,10 +61,9 @@ export declare class MessageHub {
     sendToExactUserDestinations(text: string, platforms: readonly string[], logContext?: ProactiveLogContext): Promise<MessageDelivery[]>;
     private deliverToResolvedPlatforms;
     sendToUser(text: string, platforms?: string[], logContext?: ProactiveLogContext): Promise<MessageDelivery[]>;
-    sendToPlatform(platform: string, channel: string, text: string, threadId?: string): Promise<MessageDelivery>;
+    sendToPlatform(platform: string, channel: string, text: string, threadId?: string, attachments?: OutboundAttachmentRef[]): Promise<MessageDelivery>;
     beginProcessingIndicator(platform: string, channel: string, threadId?: string): Promise<ProcessingIndicatorHandle>;
     startAll(): Promise<void>;
     stopAll(): Promise<void>;
 }
 export {};
-//# sourceMappingURL=message-hub.d.ts.map

package/dist/adapters/message-hub.js

@@ -267,7 +267,7 @@ export class MessageHub {
     async sendToUser(text, platforms, logContext) {
         return this.sendToUserDestinations(text, platforms, logContext);
     }
-    async sendToPlatform(platform, channel, text, threadId) {
+    async sendToPlatform(platform, channel, text, threadId, attachments) {
         const adapter = this.adapters.get(platform);
         if (!adapter) {
             throw new MessageDeliveryError(`Adapter not found for platform "${platform}"`);
@@ -280,6 +280,7 @@ export class MessageHub {
             channel: resolvedChannel,
             text: this.decorateOutboundText(platform, text),
             threadId,
+            attachments,
         });
         if (channel === "user" && this.db) {
             upsertOwnerChannel(this.db, {
@@ -362,4 +363,3 @@ export class MessageHub {
         }
     }
 }
-//# sourceMappingURL=message-hub.js.map

package/dist/adapters/notification-manager.d.ts

@@ -39,15 +39,14 @@ export declare class NotificationManager implements INotificationManager {
     /** Per-`event.type` timestamp of the last actual delivery (ms since epoch). */
     private readonly lastDeliveryAtMs;
     /**
-     * P2-15 — per-event-type rate limiter. A misbehaving emitter for one
-     * event type used to consume the global `maxNotificationsPerHour`
-     * budget and silently starve unrelated notifications. We now also
-     * track a smaller per-type ring buffer of recent delivery timestamps;
-     * if a type exceeds {@link PER_TYPE_RATE_LIMIT} within
-     * {@link PER_TYPE_RATE_WINDOW_MS}, further sends of THAT type are
-     * dropped (logged) without consuming the global budget. Safety
-     * categories (`security`/`deadline`/`error`/`critical`) bypass this
-     * gate as they do the global one.
+     * Per-event-type rate limiter. Tracks a per-type ring buffer of recent
+     * delivery timestamps; if a type exceeds {@link PER_TYPE_RATE_LIMIT}
+     * within {@link PER_TYPE_RATE_WINDOW_MS}, further sends of THAT type are
+     * dropped (logged) without consuming the global budget. Without this
+     * gate, a misbehaving emitter for one event type can monopolise the
+     * global `maxNotificationsPerHour` budget and silently starve unrelated
+     * notifications. Safety categories (`security`/`deadline`/`error`/
+     * `critical`) bypass this gate as they do the global one.
      */
     private readonly perTypeDeliveryWindow;
     /**
@@ -90,13 +89,12 @@ export declare class NotificationManager implements INotificationManager {
      * Direct reply to a MessageEvent — bypasses quiet-hours, rate-limits,
      * and batching.
      *
-     * M4 (release-prep): bounded retry with exponential backoff to absorb
-     * the transient platform-failure class (Slack 5xx, socket reset, WA
-     * relay flap). The previous one-shot path silently swallowed those
-     * errors, leaving the user with no acknowledgement of their DM while
-     * `agent_actions` showed the turn as completed — the most common
-     * user-visible symptom was "agent feels stuck; user resends; agent
-     * double-runs the same turn".
+     * Bounded retry with exponential backoff absorbs the transient
+     * platform-failure class (Slack 5xx, socket reset, WhatsApp relay flap).
+     * Without it, a one-shot path silently swallows those errors and leaves
+     * the user with no acknowledgement of their DM while `agent_actions`
+     * shows the turn as completed — the symptom is "agent feels stuck;
+     * user resends; agent double-runs the same turn".
      *
      * Final-fallback contract: when the originating platform refuses
      * every attempt, we route the same payload through the proactive
@@ -173,27 +171,27 @@ export declare class NotificationManager implements INotificationManager {
      */
     private flushBatches;
     /**
-     * P2-17 helper. Returns ms-since-epoch when the current quiet-hours
-     * window ends, or null when quiet hours are not active. Used by
+     * Returns ms-since-epoch when the current quiet-hours window ends, or
+     * null when quiet hours are not active. Used by
      * {@link scheduleBatchFlush} to defer pending batches past the
      * quiet-hours boundary so they actually deliver instead of being
-     * suppressed at flush time. Walks forward minute-by-minute (capped at
-     * 24 h) so configured timezone + overnight windows stay correct
-     * without re-deriving the boundary math here.
+     * suppressed at flush time.
+     *
+     * Thin wrapper around the shared `core/quiet-hours.ts` helper —
+     * NotificationManager and `ScheduleWatcher` (BROWSER_TASK_REDESIGN_PLAN
+     * §12 Q#5) share the same overnight-window math.
      */
     private nextQuietHoursEndMs;
     /** Check if current time is within quiet hours (uses configured timezone) */
     isQuietHours(): boolean;
-    /**
-     * Quiet-hours predicate evaluated against an arbitrary wall-clock
-     * instant. Extracted from {@link isQuietHours} so {@link nextQuietHoursEndMs}
-     * can probe future times without mutating globals.
-     */
-    private isQuietHoursAt;
+    /** Frozen snapshot of the configured window — kept inline so the
+     *  cache invalidates naturally on every call (config can hot-reload
+     *  via PATCH /api/config). */
+    private quietHoursWindow;
     /** Check if hourly or daily notification limits have been reached */
     private isRateLimited;
     /**
-     * P2-15 per-type gate. True when this event type has hit
+     * Per-type gate. True when this event type has hit
      * {@link PER_TYPE_RATE_LIMIT} deliveries in the trailing
      * {@link PER_TYPE_RATE_WINDOW_MS}. Trims expired timestamps inline so
      * the ring buffer stays bounded.
@@ -208,4 +206,3 @@ export declare class NotificationManager implements INotificationManager {
     private logNotificationRows;
 }
 export {};
-//# sourceMappingURL=notification-manager.d.ts.map