@aitne/daemon 0.1.8 → 0.1.10

package/dist/core/today-direct-writer.js

@@ -1,9 +1,15 @@
 /**
- * Daemon-direct writer that appends a single bullet to today.md
- * `## Agent Log` without going through the agent at all. Used by the
- * three-stage hourly_check gate (cost-reduction-structural §B) on the
- * stage0_silent / stage2_log_only paths so a "no-op" cron tick still
- * leaves an audit trail in today.md without paying for an LLM session.
+ * Daemon-direct, lock-aware writes to today.md that run *before* (or
+ * instead of) an agent session — bypassing `/api/context/*` because there
+ * is no subprocess to issue the curl call from. Two operations live here:
+ *
+ *   1. {@link appendAgentLogLine} — append a single `## Agent Log` bullet.
+ *      Used by the three-stage hourly_check gate (cost-reduction-structural
+ *      §B) on the stage0_silent / stage2_log_only paths so a "no-op" cron
+ *      tick still leaves an audit trail without paying for an LLM session.
+ *   2. {@link ensureTodaySkeleton} — seed the canonical empty skeleton when
+ *      today.md is **absent**, so a section-only refresh routine has a valid
+ *      PATCH target instead of 404-ing and budget-burning on full-file PUTs.
  *
  * Why this lives in the daemon (not /api/context/* via curl):
  *   - These paths run *before* the agent is spawned. There is no
@@ -12,19 +18,22 @@
  *     `context-staleness.ts`) — the same tier the PATCH route already
  *     classifies for `## Agent Log` appends. Bypassing the route is
  *     fine because we never touch the prompt-context-changed hook here.
- *   - The today-write-lock invariant is preserved: we acquire it before
- *     mutating the file, so morning_routine and direct writes never
- *     interleave.
+ *   - The today-write-lock invariant is preserved: both functions acquire
+ *     it before mutating the file, so morning_routine and direct writes
+ *     never interleave.
  *
- * Failure mode: when today.md is missing, malformed, or lacks the
- * `## Agent Log` heading, the writer logs a warning and returns false
- * rather than synthesizing the structure — that is the morning routine's
- * job. The gate caller treats false as "log not appended; consume
- * observations regardless".
+ * Synthesis boundary: `appendAgentLogLine` NEVER synthesizes structure —
+ * a missing / malformed / heading-less file returns false and the gate
+ * caller proceeds. `ensureTodaySkeleton` synthesizes ONLY the empty
+ * skeleton, ONLY when the file is entirely absent, and never touches a
+ * present file. Neither populates today.md — full creation and repair stay
+ * the morning routine's job.
  */
 import { existsSync, readFileSync } from "node:fs";
 import { writeFileAtomically } from "./atomic-write.js";
+import { serializeContextFileWrite } from "./context-file-serializer.js";
 import { fullPath, CONTEXT_RELATIVE_PATHS } from "./context-paths.js";
+import { FALLBACK_PLACEHOLDERS } from "./skeleton.js";
 import { createLogger } from "../logging.js";
 const logger = createLogger("today-direct-writer");
 const AGENT_LOG_HEADER = "## Agent Log";
@@ -32,8 +41,18 @@ const AGENT_LOG_HEADER = "## Agent Log";
  * Append a single bullet line to today.md `## Agent Log`. Idempotent
  * shape — repeated calls each add a new bullet (the gate guarantees at
  * most one call per cron tick anyway).
+ *
+ * Async because the read-modify-write block runs inside the daemon-wide
+ * {@link serializeContextFileWrite} so it cannot interleave with the HTTP
+ * Context API's PUT/PATCH on the same today.md file. Without that fence
+ * a concurrent HTTP PATCH could read the pre-bullet bytes, compute its
+ * update, and rename over the file AFTER this writer's rename, silently
+ * dropping the bullet. The cross-session `todayWriteLock` is still
+ * acquired around the serialized block so the morning routine (which
+ * holds the lock + passes X-Lock-Id) continues to fence other direct
+ * writers cleanly.
  */
-export function appendAgentLogLine(input) {
+export async function appendAgentLogLine(input) {
     const lock = input.todayWriteLock.acquire();
     if (!lock.ok) {
         logger.info({ holder: lock.holder }, "Skipping daemon-direct Agent Log append — today-write-lock held");
@@ -41,31 +60,105 @@ export function appendAgentLogLine(input) {
     }
     try {
         const path = fullPath(input.contextDir, CONTEXT_RELATIVE_PATHS.today);
-        if (!existsSync(path)) {
-            logger.warn({ path }, "Daemon-direct Agent Log append skipped — today.md missing");
-            return { appended: false, reason: "today_missing" };
-        }
-        let content;
-        try {
-            content = readFileSync(path, "utf-8");
-        }
-        catch (err) {
-            logger.error({ err, path }, "Failed to read today.md for Agent Log append");
-            return { appended: false, reason: "io_error" };
-        }
-        const updated = appendBulletToAgentLog(content, formatBullet(input));
-        if (updated === null) {
-            logger.warn({ path }, "Daemon-direct Agent Log append skipped — `## Agent Log` heading missing");
-            return { appended: false, reason: "agent_log_section_missing" };
-        }
-        try {
-            writeFileAtomically(path, updated);
-            return { appended: true };
-        }
-        catch (err) {
-            logger.error({ err, path }, "Failed to write today.md for Agent Log append");
-            return { appended: false, reason: "io_error" };
-        }
+        return await serializeContextFileWrite(path, () => {
+            if (!existsSync(path)) {
+                logger.warn({ path }, "Daemon-direct Agent Log append skipped — today.md missing");
+                return { appended: false, reason: "today_missing" };
+            }
+            let content;
+            try {
+                content = readFileSync(path, "utf-8");
+            }
+            catch (err) {
+                logger.error({ err, path }, "Failed to read today.md for Agent Log append");
+                return { appended: false, reason: "io_error" };
+            }
+            const updated = appendBulletToAgentLog(content, formatBullet(input));
+            if (updated === null) {
+                logger.warn({ path }, "Daemon-direct Agent Log append skipped — `## Agent Log` heading missing");
+                return {
+                    appended: false,
+                    reason: "agent_log_section_missing",
+                };
+            }
+            try {
+                writeFileAtomically(path, updated);
+                return { appended: true };
+            }
+            catch (err) {
+                logger.error({ err, path }, "Failed to write today.md for Agent Log append");
+                return { appended: false, reason: "io_error" };
+            }
+        });
+    }
+    finally {
+        input.todayWriteLock.release(lock.lockId);
+    }
+}
+/**
+ * Canonical empty `today.md` skeleton, reused byte-for-byte from the
+ * boot-time seeder (`skeleton.ts`) so a refresh-path seed and a
+ * fresh-install seed produce identical structure. `skeleton.test.ts`
+ * asserts this placeholder matches `agent-assets/templates/state/today.md`
+ * byte-for-byte, so the two definitions never drift. The non-null
+ * assertion is safe: the key is a literal entry of `FALLBACK_PLACEHOLDERS`.
+ */
+const TODAY_SKELETON = FALLBACK_PLACEHOLDERS[CONTEXT_RELATIVE_PATHS.today];
+/**
+ * Guarantee a `today.md` working surface exists before a section-only
+ * refresh routine (`routine.today_refresh`) assumes it.
+ *
+ * `rotateDayFiles()` intentionally renames `today.md` → `yesterday.md` at
+ * the day boundary and relies on the morning routine to recreate the
+ * dated file. When the morning routine has not run yet — or failed (e.g.
+ * a quota/budget death with no fallback backend) — `today.md` is absent
+ * and the refresh task flow's `PATCH section=user_schedule` 404s. The
+ * agent then improvises full-file `PUT`s, which the strict
+ * `validateTodayContent` schema rejects line-by-line; on a single-backend
+ * binding with a tight per-turn budget that loop tips into
+ * `BackendQuotaError(max_budget_usd)` and the refresh dies without ever
+ * writing the file — the "Refresh Today does nothing" symptom.
+ *
+ * This deterministic pre-step removes that whole failure mode: when the
+ * file is **entirely absent** we seed the canonical empty skeleton so the
+ * agent's section PATCH always has a valid target. A file that already
+ * exists is left byte-untouched — a valid dated file OR the legacy
+ * `# Today` bridge stub both accept the section PATCH (the route's
+ * `allowLegacyToday` branch). We never repair a malformed-but-present
+ * file and never overwrite user content; full creation/repair stays the
+ * morning routine's job. The seeded skeleton is dateless (`# Today`), so
+ * it does NOT satisfy `hasCurrentAgentDayTodayMd()` and the pending
+ * morning-routine retry still fires and upgrades it.
+ *
+ * Lock-aware exactly like {@link appendAgentLogLine}: if the morning
+ * routine holds the today-write-lock (mid-creation) we skip and let it
+ * win — the refresh session then 409-defers on its own PATCH.
+ */
+export async function ensureTodaySkeleton(input) {
+    const lock = input.todayWriteLock.acquire();
+    if (!lock.ok) {
+        logger.info({ holder: lock.holder }, "Skipping today.md skeleton seed — today-write-lock held");
+        return { seeded: false, reason: "lock_unavailable" };
+    }
+    try {
+        const path = fullPath(input.contextDir, CONTEXT_RELATIVE_PATHS.today);
+        return await serializeContextFileWrite(path, () => {
+            if (existsSync(path)) {
+                return {
+                    seeded: false,
+                    reason: "already_present",
+                };
+            }
+            try {
+                writeFileAtomically(path, TODAY_SKELETON);
+                logger.info({ path }, "Seeded today.md skeleton for refresh — file was absent (morning routine not yet run for the agent-day)");
+                return { seeded: true };
+            }
+            catch (err) {
+                logger.error({ err, path }, "Failed to seed today.md skeleton");
+                return { seeded: false, reason: "io_error" };
+            }
+        });
     }
     finally {
         input.todayWriteLock.release(lock.lockId);
@@ -129,4 +222,3 @@ function formatLocalHHMM(now, timezone) {
 function pad2(n) {
     return n.toString().padStart(2, "0");
 }
-//# sourceMappingURL=today-direct-writer.js.map

package/dist/core/today-write-lock.d.ts

@@ -86,4 +86,3 @@ export declare class ContextWriteGate {
         since: string | null;
     };
 }
-//# sourceMappingURL=today-write-lock.d.ts.map

package/dist/core/today-write-lock.js

@@ -151,4 +151,3 @@ export class ContextWriteGate {
         return { engaged: this.engaged, reason: this.reason, since: this.since };
     }
 }
-//# sourceMappingURL=today-write-lock.js.map

package/dist/core/trigger-dispatch.d.ts

@@ -28,4 +28,3 @@ export interface TriggerDispatchDeps {
  * stall the observer poll loop.
  */
 export declare function dispatchMatchingTriggers(deps: TriggerDispatchDeps, repositoryId: string, eventType: string, payload: Record<string, unknown>): Promise<number>;
-//# sourceMappingURL=trigger-dispatch.d.ts.map

package/dist/core/trigger-dispatch.js

@@ -97,4 +97,3 @@ function buildTriggerEvent(repo, trigger, eventType, payload) {
         requestedModelId: trigger.model,
     };
 }
-//# sourceMappingURL=trigger-dispatch.js.map

package/dist/core/trigger-evaluator.d.ts

@@ -56,4 +56,3 @@ export declare function matchesFilters(filters: Record<string, unknown>, eventTy
  * `listEnabledTriggersForEvent`'s `ORDER BY created_at`).
  */
 export declare function evaluateTriggers(triggers: readonly RepositoryTriggerDTO[], eventType: string, payload: Record<string, unknown>): RepositoryTriggerDTO[];
-//# sourceMappingURL=trigger-evaluator.d.ts.map

package/dist/core/trigger-evaluator.js

@@ -240,4 +240,3 @@ export function evaluateTriggers(triggers, eventType, payload) {
         return matchesFilters(trigger.filters, eventType, payload);
     });
 }
-//# sourceMappingURL=trigger-evaluator.js.map

package/dist/core/user-skills-root.d.ts

@@ -0,0 +1,24 @@
+import { type AgentConfig } from "../config.js";
+/**
+ * Absolute path of the user-skills root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — every runtime consumer of the
+ * user-skills location (skills API, session workdir materialization,
+ * dispatcher fallback materializer, backend cores, release-assets shadow
+ * alerts, tests) MUST route through this single helper so the location
+ * cannot drift between modules.
+ *
+ * Skill curation overlay JSON is NOT inside the vault — it lives at
+ * `<dataDir>/skill-curation-overlays/` (see `resolveSkillCurationOverlaysRoot`).
+ */
+export declare function resolveUserSkillsRoot(config: AgentConfig): string;
+/**
+ * Absolute path of the skill-curation overlay JSON root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — overlays are operational, not
+ * content. They stay outside the vault even though the user `SKILL.md`
+ * files moved into `policies/skills/`. The vault-restructure migration
+ * moves any pre-existing overlays from `<dataDir>/skills/overlays/` to
+ * this new root on first boot post-upgrade.
+ */
+export declare function resolveSkillCurationOverlaysRoot(dataDir: string): string;

package/dist/core/user-skills-root.js

@@ -0,0 +1,29 @@
+import { resolve } from "node:path";
+import { getContextDir } from "../config.js";
+/**
+ * Absolute path of the user-skills root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — every runtime consumer of the
+ * user-skills location (skills API, session workdir materialization,
+ * dispatcher fallback materializer, backend cores, release-assets shadow
+ * alerts, tests) MUST route through this single helper so the location
+ * cannot drift between modules.
+ *
+ * Skill curation overlay JSON is NOT inside the vault — it lives at
+ * `<dataDir>/skill-curation-overlays/` (see `resolveSkillCurationOverlaysRoot`).
+ */
+export function resolveUserSkillsRoot(config) {
+    return resolve(getContextDir(config), "policies", "skills");
+}
+/**
+ * Absolute path of the skill-curation overlay JSON root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — overlays are operational, not
+ * content. They stay outside the vault even though the user `SKILL.md`
+ * files moved into `policies/skills/`. The vault-restructure migration
+ * moves any pre-existing overlays from `<dataDir>/skills/overlays/` to
+ * this new root on first boot post-upgrade.
+ */
+export function resolveSkillCurationOverlaysRoot(dataDir) {
+    return resolve(dataDir, "skill-curation-overlays");
+}

package/dist/core/wiki/approval-queue.d.ts

@@ -28,4 +28,3 @@ export interface EnqueueWikiApprovalResult {
     taskDescription: string;
 }
 export declare function enqueueWikiApproval(db: Database.Database, input: EnqueueWikiApprovalInput): EnqueueWikiApprovalResult;
-//# sourceMappingURL=approval-queue.d.ts.map

package/dist/core/wiki/approval-queue.js

@@ -30,8 +30,13 @@ export function enqueueWikiApproval(db, input) {
         .prepare(`INSERT INTO agent_schedule
          (scheduled_for, task_type, task_description, task_prompt, task_context, correlation_id, status)
        VALUES
-         (CURRENT_TIMESTAMP, 'approval', ?, NULL, json(?), ?, 'pending')`)
-        .run(taskDescription, JSON.stringify(taskContext), input.sourceEvent.correlationId);
+         (CURRENT_TIMESTAMP, 'approval', ?, ?, json(?), ?, 'pending')`)
+        .run(taskDescription, 
+    // On approval, cost-approvals flips task_type to 'approved_task' and
+    // re-dispatches WITHOUT touching task_prompt — and the dispatcher reads
+    // task_prompt directly (no task_description fallback). So carry the body
+    // in task_prompt now, never NULL.
+    taskDescription, JSON.stringify(taskContext), input.sourceEvent.correlationId);
     const scheduleId = Number(info.lastInsertRowid);
     logger.info({
         workspace: input.workspace,
@@ -41,4 +46,3 @@ export function enqueueWikiApproval(db, input) {
     }, "wiki !compile full escalated to Approve tier");
     return { scheduleId, taskDescription };
 }
-//# sourceMappingURL=approval-queue.js.map

package/dist/core/wiki/bridge.d.ts

@@ -71,4 +71,3 @@ export declare function renderBridgeMarkdown(proposal: WikiBridgeProposal, ctx:
  */
 export declare function bridgeFileExists(workspaceRoot: string, relPath: string): boolean;
 export {};
-//# sourceMappingURL=bridge.d.ts.map

package/dist/core/wiki/bridge.js

@@ -402,4 +402,3 @@ export function bridgeFileExists(workspaceRoot, relPath) {
         return false;
     return existsSync(resolve(workspaceRoot, relPath));
 }
-//# sourceMappingURL=bridge.js.map

package/dist/core/wiki/compile-lock.d.ts

@@ -39,4 +39,3 @@ export declare function releaseWikiCompileLock(workspace: string): void;
 export declare function getWikiCompileLockHolder(workspace: string): WikiCompileLockHolder | null;
 /** Test helper — wipes the lock state. Never call outside test setup. */
 export declare function __resetWikiCompileLockForTests(): void;
-//# sourceMappingURL=compile-lock.d.ts.map

package/dist/core/wiki/compile-lock.js

@@ -52,4 +52,3 @@ export function getWikiCompileLockHolder(workspace) {
 export function __resetWikiCompileLockForTests() {
     inFlight.clear();
 }
-//# sourceMappingURL=compile-lock.js.map

package/dist/core/wiki/compile-preview.d.ts

@@ -5,4 +5,3 @@ export interface CompilePreviewInput {
     mode: WikiCompileMode;
 }
 export declare function buildCompilePreview(input: CompilePreviewInput): WikiCompilePreview;
-//# sourceMappingURL=compile-preview.d.ts.map

package/dist/core/wiki/compile-preview.js

@@ -197,4 +197,3 @@ function parseEpoch(timestamp) {
 function round(value) {
     return Math.round(value * 1_000_000) / 1_000_000;
 }
-//# sourceMappingURL=compile-preview.js.map

package/dist/core/wiki/cost-estimate.d.ts

@@ -27,4 +27,3 @@ export declare function estimateFullCompileCost(workspace: Pick<WikiWorkspaceRow
  * input size (system prompt, skills bundle, tool descriptions).
  */
 export declare function approxTokenCount(content: string): number;
-//# sourceMappingURL=cost-estimate.d.ts.map

package/dist/core/wiki/cost-estimate.js

@@ -52,8 +52,8 @@ const PESSIMISTIC_MULT = 2.0;
 export function estimateFullCompileCost(workspace, options = {}) {
     const unitCost = options.unitCostUsdPerKToken ?? DEFAULT_UNIT_COST_USD_PER_KTOKEN;
     const threshold = workspace.full_compile_approval_threshold_usd;
-    // Legacy flat-heuristic branch — preserved for existing P2 tests and
-    // any caller that explicitly opts into the cheap mode.
+    // Cheap flat-heuristic branch — opt-in via `avgInputTokensPerRaw`. Use
+    // when a raw-layer scan would cost more than the estimate it produces.
     if (options.avgInputTokensPerRaw !== undefined) {
         const rawCount = options.rawCountOverride ?? countRawNotes(join(workspace.root_path, "10_raw"));
         const estimatedInputTokens = Math.max(0, rawCount * options.avgInputTokensPerRaw);
@@ -84,6 +84,11 @@ export function estimateFullCompileCost(workspace, options = {}) {
             let tokenCount = PER_FILE_MIN_TOKENS;
             try {
                 const stat = statSync(full);
+                // Race-condition defensive: walkRawLayer already filtered for
+                // `entry.isFile()` via dirent, so this can only trip if the file
+                // was replaced with a non-file (e.g. directory, FIFO) between the
+                // readdir and the stat. Unreachable via the public API surface.
+                /* c8 ignore next */
                 if (!stat.isFile())
                     continue;
                 const content = readFileSync(full, "utf-8");
@@ -146,6 +151,10 @@ export function approxTokenCount(content) {
             cjkChars += 1;
     }
     const totalCodepoints = [...content].length;
+    // Defensive: `content.length === 0` returned early above, and any
+    // non-empty UTF-16 string yields at least one codepoint when iterated.
+    // This guard exists to keep the divide safe under future refactors.
+    /* c8 ignore next */
     const cjkRatio = totalCodepoints === 0 ? 0 : cjkChars / totalCodepoints;
     const divisor = cjkRatio > 0.5 ? CJK_CHARS_PER_TOKEN : LATIN_CHARS_PER_TOKEN;
     const tokens = Math.ceil(content.length / divisor);
@@ -153,6 +162,10 @@ export function approxTokenCount(content) {
 }
 function isCjkChar(ch) {
     const cp = ch.codePointAt(0);
+    // Defensive: callers iterate `for (const ch of content)`, which always
+    // yields a non-empty 1-2 UTF-16 unit string, so codePointAt(0) cannot
+    // return undefined. Guard preserved for safety under refactor.
+    /* c8 ignore next */
     if (cp === undefined)
         return false;
     // U+3040–U+309F Hiragana, U+30A0–U+30FF Katakana,
@@ -212,6 +225,13 @@ function countRawNotes(rawDir) {
             continue;
         if (entry.isDirectory()) {
             const full = join(rawDir, entry.name);
+            // Defensive: dirent already reported `entry.isDirectory()` true, and
+            // a stat on a direct child of the readable rawDir cannot fail on
+            // permissions. The try/catch + `stat.isDirectory()` guard exists for
+            // the race where the dir is deleted/replaced between readdirSync and
+            // statSync. Wrap the whole block in c8-ignore so v8 doesn't count
+            // the unreachable branch arms.
+            /* c8 ignore start */
             try {
                 const stat = statSync(full);
                 if (stat.isDirectory()) {
@@ -221,6 +241,7 @@ function countRawNotes(rawDir) {
             catch {
                 /* skip unreadable directory */
             }
+            /* c8 ignore stop */
         }
     }
     return count;
@@ -240,4 +261,3 @@ function countMarkdownRecursive(dir) {
 function round(value) {
     return Math.round(value * 1_000_000) / 1_000_000;
 }
-//# sourceMappingURL=cost-estimate.js.map

package/dist/core/wiki/dispatcher.d.ts

@@ -1,16 +1,4 @@
-import { type Event, type WikiReplyTarget } from "@aitne/shared";
-/**
- * Every wiki-tier process key the daemon dispatches. Kept ordered by
- * Phase (P1 ingest/compile/ask, P3 operational triad lint/trace/connect)
- * so a quick visual scan tells you which surfaces ship in which phase.
- */
-export declare const WIKI_PROCESS_KEYS: readonly ["wiki.ingest_url", "wiki.compile", "wiki.ask", "wiki.lint", "wiki.trace", "wiki.connect"];
-/** Back-compat alias for the P1 surface. Prefer {@link WIKI_PROCESS_KEYS}. */
-export declare const WIKI_P1_PROCESS_KEYS: readonly ["wiki.ingest_url", "wiki.compile", "wiki.ask", "wiki.lint", "wiki.trace", "wiki.connect"];
-export type WikiProcessKey = (typeof WIKI_PROCESS_KEYS)[number];
-/** @deprecated use {@link WikiProcessKey}. */
-export type WikiP1ProcessKey = WikiProcessKey;
-export declare function isWikiProcessKey(value: string): value is WikiProcessKey;
+import { type Event, type WikiProcessKey, type WikiReplyTarget } from "@aitne/shared";
 export interface WikiCommandEventInput {
     processKey: WikiProcessKey;
     workspace: string;
@@ -36,13 +24,5 @@ export declare function createWikiCommandEvent(input: WikiCommandEventInput): Ev
  *     or wiki event minted without a sourceEvent), or
  *   - the field shape is corrupt (defensive — a daemon downgrade reading
  *     a payload from a future schema version).
- *
- * `readWikiReplyTarget` is exported as a back-compat alias so older
- * external consumers keep working; new code should prefer
- * `readEventReplyTarget`.
  */
 export declare function readEventReplyTarget(event: Event): WikiReplyTarget | null;
-/** @deprecated Renamed to {@link readEventReplyTarget} — kept as an
- *  alias to avoid breaking external callers during the rename window. */
-export declare const readWikiReplyTarget: typeof readEventReplyTarget;
-//# sourceMappingURL=dispatcher.d.ts.map

package/dist/core/wiki/dispatcher.js

@@ -1,22 +1,4 @@
 import { EventPriority, createEvent, isMessageEvent, wikiReplyTargetSchema, } from "@aitne/shared";
-/**
- * Every wiki-tier process key the daemon dispatches. Kept ordered by
- * Phase (P1 ingest/compile/ask, P3 operational triad lint/trace/connect)
- * so a quick visual scan tells you which surfaces ship in which phase.
- */
-export const WIKI_PROCESS_KEYS = [
-    "wiki.ingest_url",
-    "wiki.compile",
-    "wiki.ask",
-    "wiki.lint",
-    "wiki.trace",
-    "wiki.connect",
-];
-/** Back-compat alias for the P1 surface. Prefer {@link WIKI_PROCESS_KEYS}. */
-export const WIKI_P1_PROCESS_KEYS = WIKI_PROCESS_KEYS;
-export function isWikiProcessKey(value) {
-    return WIKI_PROCESS_KEYS.includes(value);
-}
 export function createWikiCommandEvent(input) {
     // WIKI_BUILDER_DESIGN.md §3.4 — derive the reply routing tuple from the
     // originating MessageEvent so the per-URL completion DMs from
@@ -74,10 +56,6 @@ export function createWikiCommandEvent(input) {
  *     or wiki event minted without a sourceEvent), or
  *   - the field shape is corrupt (defensive — a daemon downgrade reading
  *     a payload from a future schema version).
- *
- * `readWikiReplyTarget` is exported as a back-compat alias so older
- * external consumers keep working; new code should prefer
- * `readEventReplyTarget`.
  */
 export function readEventReplyTarget(event) {
     const raw = event.data?.reply_target;
@@ -86,7 +64,3 @@ export function readEventReplyTarget(event) {
     const parsed = wikiReplyTargetSchema.safeParse(raw);
     return parsed.success ? parsed.data : null;
 }
-/** @deprecated Renamed to {@link readEventReplyTarget} — kept as an
- *  alias to avoid breaking external callers during the rename window. */
-export const readWikiReplyTarget = readEventReplyTarget;
-//# sourceMappingURL=dispatcher.js.map

package/dist/core/wiki/git-precompile.d.ts

@@ -92,4 +92,3 @@ export interface GitPreCompileDeps {
 export declare function previewGitPreCompile(workspace: WikiWorkspaceRow, deps?: GitPreCompileDeps): Promise<GitPreCompilePreview>;
 export declare function runGitPreCompile(workspace: WikiWorkspaceRow, deps?: GitPreCompileDeps): Promise<GitPreCompileOutcome>;
 export declare function isGitRepo(rootPath: string): boolean;
-//# sourceMappingURL=git-precompile.d.ts.map

package/dist/core/wiki/git-precompile.js

@@ -99,4 +99,3 @@ async function defaultRun(file, args, options) {
     });
     return { stdout, stderr };
 }
-//# sourceMappingURL=git-precompile.js.map

package/dist/core/wiki/import-migrate.d.ts

@@ -35,4 +35,3 @@ export interface ApplyMigrationOptions {
     allowConflicts?: boolean;
 }
 export declare function applyImportMigration(plan: WikiImportMigrationPlan, options?: ApplyMigrationOptions): ApplyImportMigrationResult;
-//# sourceMappingURL=import-migrate.d.ts.map

package/dist/core/wiki/import-migrate.js

@@ -307,4 +307,3 @@ function writeImportReport(rootPath, dateStamp, plan, outcome) {
     ];
     writeFileAtomically(reportPath, lines.join("\n"));
 }
-//# sourceMappingURL=import-migrate.js.map

package/dist/core/wiki/import-probe.d.ts

@@ -73,4 +73,3 @@ export declare function probeExistingWikiVault(rootPath: string): WikiImportProb
 export declare function extractFrontmatter(content: string): Record<string, string> | null;
 export declare function formatProbeRelativePath(rootPath: string, abs: string): string;
 export {};
-//# sourceMappingURL=import-probe.d.ts.map

package/dist/core/wiki/import-probe.js

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, readdirSync, statSync, } from "node:fs";
+import { existsSync, lstatSync, readFileSync, readdirSync, statSync, } from "node:fs";
 import { join, relative } from "node:path";
 const LAYER_DIRS = ["00_inbox", "10_raw", "20_wiki", "30_outputs", "90_meta"];
 const EXPECTED_SCHEMAS = {
@@ -48,9 +48,12 @@ function inventoryLayer(rootPath, dir) {
             lastModifiedAt: null,
         };
     }
-    let stat;
+    // `lstatSync` does NOT follow symlinks; `statSync` does. The probe
+    // needs the symlink-itself state so the wizard can flag a layer-dir
+    // symlink (§7 — refusing the import is the safe default).
+    let lstat;
     try {
-        stat = statSync(full);
+        lstat = lstatSync(full);
     }
     catch {
         return {
@@ -86,7 +89,7 @@ function inventoryLayer(rootPath, dir) {
     return {
         dir,
         exists: true,
-        isSymlink: stat.isSymbolicLink(),
+        isSymlink: lstat.isSymbolicLink(),
         fileCount,
         subdirectories: subdirectories.sort(),
         lastModifiedAt,
@@ -242,4 +245,3 @@ function* walkMarkdown(rootDir) {
 export function formatProbeRelativePath(rootPath, abs) {
     return relative(rootPath, abs).split(/[\\/]/).join("/");
 }
-//# sourceMappingURL=import-probe.js.map

package/dist/core/wiki/index-cache.d.ts

@@ -36,4 +36,3 @@ export declare class WikiIndexCache {
     release(workspaceId: number): Promise<void>;
     shutdown(): Promise<void>;
 }
-//# sourceMappingURL=index-cache.d.ts.map

package/dist/core/wiki/index-cache.js

@@ -149,4 +149,3 @@ function readSnapshotFromDisk(workspace) {
         return { exists: false, content: null, mtimeMs: null, loadedAtMs: Date.now() };
     }
 }
-//# sourceMappingURL=index-cache.js.map

package/dist/core/wiki/multi-url-dispatch.d.ts

@@ -49,4 +49,3 @@ export interface DispatchWikiUrlBatchResult {
  * where a failed enqueue is a daemon-level fault, not a per-URL one.
  */
 export declare function dispatchWikiUrlBatch(input: DispatchWikiUrlBatchInput): Promise<DispatchWikiUrlBatchResult>;
-//# sourceMappingURL=multi-url-dispatch.d.ts.map