@aitne/daemon 0.1.8 → 0.1.10

package/dist/db/sot-bindings-store.d.ts

@@ -38,4 +38,3 @@ export declare function readSotBindings(db: Database.Database): SotBindings;
  * through `readSotBindings`.
  */
 export declare function writeSotBindings(db: Database.Database, next: SotBindings): SotBindings;
-//# sourceMappingURL=sot-bindings-store.d.ts.map

package/dist/db/sot-bindings-store.js

@@ -61,4 +61,3 @@ export function writeSotBindings(db, next) {
        updated_at = CURRENT_TIMESTAMP`).run(SOT_BINDINGS_SETTINGS_KEY, JSON.stringify(parsed));
     return parsed;
 }
-//# sourceMappingURL=sot-bindings-store.js.map

package/dist/db/voice-transcripts-store.d.ts

@@ -25,4 +25,3 @@ export interface SaveVoiceTranscriptInput {
 }
 export declare function saveVoiceTranscript(db: Database.Database, input: SaveVoiceTranscriptInput): VoiceTranscriptRow;
 export declare function deleteVoiceTranscript(db: Database.Database, attachmentId: string): boolean;
-//# sourceMappingURL=voice-transcripts-store.d.ts.map

package/dist/db/voice-transcripts-store.js

@@ -40,4 +40,3 @@ export function deleteVoiceTranscript(db, attachmentId) {
         .run(attachmentId);
     return result.changes > 0;
 }
-//# sourceMappingURL=voice-transcripts-store.js.map

package/dist/db/wiki-store.d.ts

@@ -1,3 +1,2 @@
 import type Database from "better-sqlite3";
 export declare function isWikiEnabled(db: Database.Database): boolean;
-//# sourceMappingURL=wiki-store.d.ts.map

package/dist/db/wiki-store.js

@@ -7,4 +7,3 @@ export function isWikiEnabled(db) {
     /* c8 ignore next */
     return (row?.count ?? 0) > 0;
 }
-//# sourceMappingURL=wiki-store.js.map

package/dist/index.d.ts

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,7 +1,7 @@
 import { join, resolve } from "node:path";
 import { randomBytes } from "node:crypto";
 import { loadConfig, getContextDir, runVaultHealthProbe, validateExternalObsidianVaultPath, } from "./config.js";
-import { getDegradedMode, isSetupCompleted, isDegraded as readDegradedMode, } from "./db/runtime-state.js";
+import { getDegradedMode, getVaultRestructurePendingConsent, isSetupCompleted, isDegraded as readDegradedMode, } from "./db/runtime-state.js";
 import { initDirectories } from "./init.js";
 import { EventBus } from "./core/event-bus.js";
 import { AgentScheduler } from "./core/scheduler.js";
@@ -18,6 +18,7 @@ import { ObsidianService } from "./services/obsidian.js";
 import { createServiceRegistry } from "./services/service-registry.js";
 import { ensureSkeletonFiles, resolveTemplatesRoot } from "./core/skeleton.js";
 import { reconcileTemplateAssets, recordInstructionAssetStatus, recordSkillAssetStatus, } from "./core/release-assets.js";
+import { resolveUserSkillsRoot } from "./core/user-skills-root.js";
 import { bootstrapManagementMd, startManagementMdWatcher, } from "./core/management-md.js";
 import { bootstrapManagementRegistry, startManagementRegistryWatcher, } from "./core/management-registry.js";
 import { startDocsIndexer, } from "./core/docs/indexer.js";
@@ -28,6 +29,9 @@ import { AgentWriteTracker } from "./safety/agent-write-tracker.js";
 import { InMemoryTodayWriteLockManager, getTodayWriteLockTimeoutMs, } from "./core/today-write-lock.js";
 import { InMemoryRoadmapWriteLockManager, getRoadmapWriteLockTimeoutMs, } from "./core/roadmap-write-lock.js";
 import { runRoadmapMechanicalMaintenance } from "./core/roadmap-maintenance.js";
+import { fanoutResearchClusterUpdates } from "./core/browser-history/research-cluster-fanout.js";
+import { safeRunPreMorningDigestJob } from "./core/browser-history/pre-morning-digest-job.js";
+import { shouldStartObserversFor } from "./core/integration-lifecycle.js";
 import { sweepExpiredMigrationBackups } from "./api/routes/setup-migrate.js";
 import { PlatformSecretStore } from "./secrets/platform-secret-store.js";
 import { FileEncryptedBlobStore } from "./secrets/encrypted-blob-store.js";
@@ -46,6 +50,7 @@ import { runCatchup, runPostMessagingCatchup, } from "./bootstrap/catchup.js";
 import { createAdapterReloaders, } from "./bootstrap/adapters.js";
 import { createInitialSecretState, createServiceReloaders, } from "./bootstrap/services.js";
 import { initDatabase } from "./bootstrap/db.js";
+import { bootstrapAgents } from "./core/agents/loader-boot.js";
 import { createObservers } from "./bootstrap/observers.js";
 import { startApiServer } from "./bootstrap/api.js";
 import { createEventPipeline } from "./bootstrap/event-pipeline.js";
@@ -89,21 +94,42 @@ async function startup() {
         config,
     });
     // ── Integration Delegation Framework (Phase 1) ──
-    // Reconcile `<dataDir>/integrations.md` with the DB integrations map.
+    // Reconcile `<contextDir>/policies/integrations.md` with the DB integrations map.
     // Creates the file on first run, parses hand-edits if present, and
     // re-renders unconditionally so daemon-owned columns are canonical.
     // The watcher is started later (after the observer manager) so fs-watch
     // errors don't block boot.
     let managementMdWatcher = null;
     let managementRegistryWatcher = null;
-    try {
-        await bootstrapManagementMd(config.dataDir, db, config.workspaceDir, {
-            externalObsidianVaultPath: config.externalObsidianVaultPath,
-            externalObsidianWatch: config.externalObsidianWatch,
-        });
+    // CONTEXT_VAULT_REDESIGN V16 — when the consent gate deferred the vault
+    // restructure (Obsidian-mode user has not acknowledged the sidebar move
+    // yet), DO NOT write `policies/integrations.md` into the legacy vault.
+    // Doing so would create a stray `policies/` directory next to the
+    // legacy `rules/` / `user/` / etc., producing a mixed layout the user
+    // sees in Obsidian before they ever consented. The write resumes on
+    // the next boot after ack, where the migration runs first and the
+    // vault has a coherent post-restructure shape.
+    const vaultConsentPending = getVaultRestructurePendingConsent(db) !== null;
+    if (vaultConsentPending) {
+        logger.warn({
+            contextDir: getContextDir(config, db),
+            ackEnvVar: "PA_VAULT_RESTRUCTURE_ACK",
+        }, "Skipping integrations.md bootstrap: Obsidian-vault consent pending. Set PA_VAULT_RESTRUCTURE_ACK=1 (headless) or POST /api/setup/vault-restructure-ack (dashboard), then restart.");
     }
-    catch (err) {
-        logger.error({ err, dataDir: config.dataDir }, "integrations.md bootstrap failed; continuing with DB state");
+    else {
+        try {
+            // V18 — pass contextDir explicitly so `policies/integrations.md` lands
+            // at the right vault root in both plain and Obsidian-vault modes. The
+            // `initDirectories` step earlier created `<contextDir>/policies/`, which
+            // this bootstrap depends on existing.
+            await bootstrapManagementMd(config.dataDir, db, config.workspaceDir, {
+                externalObsidianVaultPath: config.externalObsidianVaultPath,
+                externalObsidianWatch: config.externalObsidianWatch,
+            }, getContextDir(config, db));
+        }
+        catch (err) {
+            logger.error({ err, dataDir: config.dataDir }, "integrations.md bootstrap failed; continuing with DB state");
+        }
     }
     // ── Docs corpus indexer (DOCS_QA_DESIGN.md P1) ──
     // Seeds `docs/user/` from `agent-assets/docs/` on first launch, then
@@ -123,7 +149,7 @@ async function startup() {
     }
     try {
         recordInstructionAssetStatus(db, config.workspaceDir);
-        const skillStatus = recordSkillAssetStatus(db, config.dataDir, config.workspaceDir);
+        const skillStatus = recordSkillAssetStatus(db, resolveUserSkillsRoot(config), config.workspaceDir);
         if (skillStatus.builtinShadowedUserSkills.length > 0) {
             logger.warn({ slugs: skillStatus.builtinShadowedUserSkills }, "User skills are shadowed by newly-shipped built-in skills");
         }
@@ -157,7 +183,7 @@ async function startup() {
         ensureSkeletonFiles(contextDir, config.workspaceDir);
         // ── Management Registry boot reconcile (design 21 §7.2 / P2) ──
         // Mirrors `bootstrapManagementMd` (which owns integrations.md). Reads
-        // `<contextDir>/rules/management.md` and reconciles its A-section with
+        // `<contextDir>/policies/management.md` and reconciles its A-section with
         // `settings.sot_bindings`; renders a fresh file when the on-disk
         // schema_version does not match the current daemon's. Run after
         // `ensureSkeletonFiles` so the seeded template is the parse target
@@ -166,7 +192,7 @@ async function startup() {
             await bootstrapManagementRegistry(contextDir, db);
         }
         catch (err) {
-            logger.error({ err, contextDir }, "rules/management.md bootstrap failed; continuing with DB state");
+            logger.error({ err, contextDir }, "policies/management.md bootstrap failed; continuing with DB state");
         }
         // Release asset reconcile (future-proofing for format changes).
         // Missing templates are added, unedited versioned templates are
@@ -260,7 +286,7 @@ async function startup() {
         });
         if (Object.keys(result.errors).length > 0) {
             logger.error({ platform, ownerId, errors: result.errors }, "Failed to persist detected owner ID to .env");
-            // B-1: throw so the adapter's captureOwner rolls back mutableOwnerId.
+            // Throw so the adapter's captureOwner rolls back mutableOwnerId.
             // Without this, the adapter would silently accept owner DMs in
             // memory while .env shows no pairing — and the next daemon restart
             // would lose the binding. The user's matcher stays armed
@@ -270,13 +296,10 @@ async function startup() {
             throw new Error(`Failed to persist ${platform} owner ID to .env: ${errorKeys}`);
         }
         logger.info({ platform, ownerId }, "auto-paired owner from discovery");
-        // Greet the user so they know pairing landed. P2-05: the inline
-        // "Pairing successful — this channel is now linked..." line used to
-        // fire here AND `sendSetupWelcomeDm` (WELCOME_DM_TEXT with menu) fired
-        // from the setup wizard's onSetupComplete — the operator got two
-        // greetings in quick succession when pairing happened during setup. We
-        // now prefer the consolidated welcome path so that initial pairing
-        // produces a single, menu-bearing DM rather than ack + welcome.
+        // Greet the user so they know pairing landed. The consolidated
+        // welcome path (via sendSetupWelcomeDm / WELCOME_DM_TEXT) is preferred
+        // over emitting an inline "Pairing successful…" ack: pairing during
+        // setup would otherwise fire two greetings in quick succession.
         //
         // Three-way UX contract:
         //
@@ -635,22 +658,6 @@ async function startup() {
         services,
         secretState,
     });
-    // Google Maps (F-08: commute optimization)
-    {
-        const { GoogleMapsService } = await import("./services/google-maps.js");
-        const mapsService = new GoogleMapsService(secretBroker);
-        try {
-            await mapsService.init();
-            if (mapsService.available) {
-                services.googleMaps = mapsService;
-            }
-        }
-        catch (err) {
-            const msg = err.message;
-            logger.error({ error: msg }, "Google Maps service init failed, continuing without it");
-            services.errors.googleMaps = msg;
-        }
-    }
     // Obsidian
     if (config.externalObsidianVaultName) {
         const obsidianService = new ObsidianService(config);
@@ -738,13 +745,6 @@ async function startup() {
                         : null,
                 state: whatsappState,
             },
-            googleMaps: {
-                configured: services.googleMaps !== null,
-                connected: services.googleMaps !== null,
-                error: services.errors.googleMaps
-                    ? toSafeErrorMessage(services.errors.googleMaps)
-                    : null,
-            },
         };
     };
     const getMessagingStatus = () => {
@@ -820,7 +820,7 @@ async function startup() {
     // ── 9. Scheduler ──
     const scheduler = new AgentScheduler(eventBus, db, config);
     // ── 9.1 Custom routine scheduler (B-007 §5.8) ──
-    // Reads `routines/custom/*.md` from the context dir and registers a
+    // Reads `policies/routines/custom/*.md` from the context dir and registers a
     // cron job per enabled routine. Reloaded from the context API whenever
     // the agent or dashboard edits a file under that directory.
     const customRoutineScheduler = new CustomRoutineScheduler({
@@ -885,7 +885,15 @@ async function startup() {
             emitRoadmapRefreshSink = cb;
         },
     });
-    const { dispatcher, sessionManager, notificationManager, signalDetector, eventBroadcaster, auditLogger, docsQAAdapter, agentBackends, opencodeServerManager, delegatedBackendInvoker, authHealthMonitor, authRecovery, authTelemetry, readTokenManager, migrationLock, contextWriteGate, buildDelegatedSyncWorker, getDelegatedSyncWorker, rematerializeActiveDmWorkdirs, handleSecretChange, handleGoogleServicesReady, handlePromptContextChanged, keepaliveTimer, } = eventPipeline;
+    const { dispatcher, sessionManager, notificationManager, signalDetector, eventBroadcaster, auditLogger, docsQAAdapter, agentBackends, opencodeServerManager, delegatedBackendInvoker, authHealthMonitor, authRecovery, authTelemetry, readTokenManager, migrationLock, contextWriteGate, buildDelegatedSyncWorker, getDelegatedSyncWorker, rematerializeActiveDmWorkdirs, handleSecretChange, handleGoogleServicesReady, handlePromptContextChanged, keepaliveTimer, browserTaskDeadlineTimer, } = eventPipeline;
+    // ── 10.5 Agent Definitions load (AGENT_DEFINITIONS_DESIGN.md §6.1 / §7.1) ──
+    // Runs AFTER `runMigrations` (inside `initDatabase`) and BEFORE
+    // `scheduler.start()`: scans the built-in + user `agent.md` roots into the
+    // `agents` table, builds the live enabled cache the scheduler's per-built-in
+    // gate consults, and starts the user-root watcher for live dashboard edits.
+    // Crash-proof by contract — a bad YAML never aborts boot.
+    const { enabledCache: agentEnabledCache, watcher: agentsWatcher } = bootstrapAgents({ db, config, eventBroadcaster });
+    scheduler.setAgentEnabledCache(agentEnabledCache);
     // ── 11. Hono HTTP Server ──
     // Enable webhook fallback: when GitHub webhook is configured at boot,
     // upgrade the existing GitWatcher to webhook mode. (The runtime
@@ -925,6 +933,7 @@ async function startup() {
         dispatcher,
         sessionManager,
         scheduler,
+        agentEnabledCache,
         customRoutineScheduler,
         healthMonitor,
         heartbeat,
@@ -934,6 +943,12 @@ async function startup() {
         primaryVaultWatcher,
         delegatedBackendInvoker,
         gitAccountRegistry,
+        // BROWSER_TASK_REDESIGN_PLAN.md §5 / §5.1 — runner + shared slot
+        // state. Constructed in event-pipeline; threaded through here so
+        // the API surface's POST / GET / cancel routes operate on the
+        // same in-memory state as the runner's promote/release cascade.
+        browserTaskRunner: eventPipeline.browserTaskRunner,
+        browserTaskSlotStateRef: eventPipeline.browserTaskSlotStateRef,
         writeTracker,
         auditLogger,
         attachmentStore,
@@ -985,9 +1000,24 @@ async function startup() {
     // minutes, so this ordering is load-bearing, not cosmetic.
     heartbeat.start();
     // ── 12. Catchup (recover missed actions after restart) ──
-    // Register day boundary callback: summarize DM sessions at 4 AM before morning routine
+    // Register day boundary callback: summarize DM sessions at 4 AM before
+    // morning routine. Then fan out one
+    // `routine.research_cluster_update` event per active browser-history
+    // research cluster with new activity in the last 24h
+    // (BROWSER_HISTORY_INTEGRATION_PLAN §10.6 step 3). The fan-out is
+    // bounded at 25 clusters / cycle; backlog clusters surface on the
+    // next day-boundary tick.
     scheduler.setDayBoundaryCallback(async () => {
         await dispatcher.summarizeDmSessions();
+        try {
+            const result = await fanoutResearchClusterUpdates(db, eventBus);
+            if (result.enqueuedSlugs.length > 0) {
+                logger.info({ enqueuedSlugs: result.enqueuedSlugs }, "Research cluster updates enqueued at day boundary");
+            }
+        }
+        catch (err) {
+            logger.error({ err }, "Research cluster update fan-out failed; will retry next day boundary");
+        }
     });
     // Register direct DM callback: sends scheduled messages without running an agent
     scheduler.setSendDmCallback(async (message, platforms) => {
@@ -1024,10 +1054,14 @@ async function startup() {
     // agent-originated so the Obsidian / Git observers do not loop on
     // their own output.
     // Shared closure used by both the 17:45 cron callback above and the
-    // synchronous `triggerRoadmapMaintenance` API dependency wired into
-    // `createApp`. Keeping a single fire site means the cron path and
-    // the `aitne run-now roadmap_maintenance` path operate on identical
-    // deps — no drift between the scheduled and the manual surface.
+    // `triggerRoadmapMaintenance` API dependency wired into `createApp`.
+    // Keeping a single fire site means the cron path and the
+    // `aitne run-now roadmap_maintenance` path operate on identical deps
+    // — no drift between the scheduled and the manual surface.
+    //
+    // Async because the runner now wraps its roadmap.md write in the
+    // per-path serializer (avoids HTTP-vs-direct clobbers). Callers
+    // must await or fire-and-forget through `.catch`.
     function fireRoadmapMaintenance() {
         return runRoadmapMechanicalMaintenance({
             db,
@@ -1039,19 +1073,34 @@ async function startup() {
         });
     }
     scheduler.setRoadmapMaintenanceCallback(() => {
-        try {
-            fireRoadmapMaintenance();
-        }
-        catch (err) {
+        fireRoadmapMaintenance().catch((err) => {
             logger.error({ err }, "runRoadmapMechanicalMaintenance threw");
-        }
+        });
+    });
+    // BROWSER_HISTORY_INTEGRATION_PLAN §5.F2 P4a — pre-morning digest
+    // job. Fires at `dayBoundaryHour − 1` local, gated by the same
+    // integration-state check that hides the rest of the browser-history
+    // surface when the user has set `browser_history` to `disabled`.
+    // The callback owns its own try/catch (`safeRunPreMorningDigestJob`)
+    // so a transient SQL or fs failure never crashes the cron tick.
+    scheduler.setBrowserHistoryPreMorningDigestCallback(() => {
+        if (!shouldStartObserversFor(db, "browser_history"))
+            return;
+        safeRunPreMorningDigestJob({
+            db,
+            contextDir: getContextDir(config, db),
+            boundary: {
+                timezone: config.timezone || undefined,
+                dayBoundaryHour: config.dayBoundaryHour,
+            },
+        });
     });
     // Phase 4 auth probe — runs BEFORE the hourly check on each cron
     // tick so auth health detection happens independently of the
     // observation-threshold gate. checkAll() owns its own kill switch
     // (authProbeDisabled), morning-routine skip, and in-flight dedupe.
     scheduler.setAuthProbeCallback(() => authHealthMonitor.checkAll());
-    // Wire the autonomous-work gate: when rules/management.md is missing
+    // Wire the autonomous-work gate: when policies/management.md is missing
     // or a setup conversation is active, the scheduler pauses cron routines
     // and ScheduleWatcher claims. This prevents any autonomous turn from
     // racing with the dashboard setup flow and triggering the stale-session
@@ -1153,12 +1202,15 @@ async function startup() {
                     destinationMode: "configured_only",
                 });
             },
-        });
+        }, 
+        // V18 — chokidar must watch the post-restructure path under contextDir
+        // (Obsidian-mode users have a non-default vault root).
+        getContextDir(config, db));
     }
     catch (err) {
         logger.error({ err }, "integrations.md watcher failed to start");
     }
-    // Start the rules/management.md fs-watcher alongside its integrations.md
+    // Start the policies/management.md fs-watcher alongside its integrations.md
     // sibling so hand-edits to A-section bindings flow back into the DB. The
     // watcher is a no-op when the post-setup branch above did not run
     // (contextDir absent), since chokidar against a missing path is silent.
@@ -1167,7 +1219,7 @@ async function startup() {
             managementRegistryWatcher = startManagementRegistryWatcher(getContextDir(config), db);
         }
         catch (err) {
-            logger.error({ err }, "rules/management.md watcher failed to start");
+            logger.error({ err }, "policies/management.md watcher failed to start");
         }
     }
     healthMonitor.start();
@@ -1245,6 +1297,8 @@ async function startup() {
         });
         clearInterval(vaultHealthTimer);
         clearInterval(keepaliveTimer);
+        // BROWSER_TASK_REDESIGN_PLAN.md §5 / §5.1 — 30 s deadline tick.
+        clearInterval(browserTaskDeadlineTimer);
         clearTimeout(migrationBackupSweepInitial);
         clearInterval(migrationBackupSweepTimer);
         if (managementMdWatcher) {
@@ -1254,7 +1308,7 @@ async function startup() {
         }
         if (managementRegistryWatcher) {
             await managementRegistryWatcher.stop().catch((err) => {
-                logger.warn({ err }, "rules/management.md watcher stop failed");
+                logger.warn({ err }, "policies/management.md watcher stop failed");
             });
         }
         if (docsIndexer) {
@@ -1262,6 +1316,11 @@ async function startup() {
                 logger.warn({ err }, "docs indexer stop failed");
             });
         }
+        if (agentsWatcher) {
+            await agentsWatcher.stop().catch((err) => {
+                logger.warn({ err }, "agent definitions watcher stop failed");
+            });
+        }
         await observerManager.stopAll();
         await messageHub.stopAll();
         eventBus.close();
@@ -1303,4 +1362,3 @@ startup().catch((err) => {
     logger.fatal({ error: e?.message, code: e?.code, stack: e?.stack }, "Daemon startup failed");
     process.exit(1);
 });
-//# sourceMappingURL=index.js.map

package/dist/init.d.ts

@@ -4,4 +4,3 @@ import type { AgentConfig } from "./config.js";
  * Called during daemon startup.
  */
 export declare function initDirectories(config: AgentConfig): void;
-//# sourceMappingURL=init.d.ts.map

package/dist/init.js

@@ -23,10 +23,8 @@ export function initDirectories(config) {
     for (const sub of CONTEXT_SUBDIRS) {
         mkdirSync(resolve(fallbackContextDir, sub), { recursive: true });
     }
-    // Create other required directories
     mkdirSync(dataDbDir, { recursive: true });
     mkdirSync(logsDir, { recursive: true });
     mkdirSync(tmpDir, { recursive: true });
     mkdirSync(resolve(config.dataDir, "secrets"), { recursive: true });
 }
-//# sourceMappingURL=init.js.map

package/dist/log-buffer.d.ts

@@ -68,4 +68,3 @@ export declare function extractLogParts(args: unknown[]): {
     message: string;
     data: Record<string, unknown>;
 };
-//# sourceMappingURL=log-buffer.d.ts.map

package/dist/log-buffer.js

@@ -168,7 +168,6 @@ export function pushToLogBuffer(level, loggerName, args) {
 export function extractLogParts(args) {
     if (args.length === 0)
         return { message: "", data: {} };
-    // Single argument
     if (args.length === 1) {
         if (typeof args[0] === "string")
             return { message: args[0], data: {} };
@@ -198,4 +197,3 @@ export function extractLogParts(args) {
     }
     return { message, data };
 }
-//# sourceMappingURL=log-buffer.js.map

package/dist/logging.d.ts

@@ -2,4 +2,3 @@ import pino, { type DestinationStream, type LoggerOptions } from "pino";
 export declare function createLogger(name: string, options?: LoggerOptions, destination?: DestinationStream): pino.Logger<never, boolean>;
 export declare function sanitizeLogArg(arg: unknown): unknown;
 export declare function toSafeErrorMessage(error: unknown, fallback?: string): string;
-//# sourceMappingURL=logging.d.ts.map

package/dist/logging.js

@@ -107,7 +107,6 @@ export function createLogger(name, options = {}, destination) {
                 // Push redacted log entry to the in-memory buffer for dashboard viewing
                 pushToLogBuffer(level, name, sanitizedArgs);
                 if (typeof externalLogMethod === "function") {
-                    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- pino custom method signature
                     return externalLogMethod.call(this, sanitizedArgs, method, level);
                 }
                 return method.apply(this, sanitizedArgs);
@@ -127,4 +126,3 @@ export function toSafeErrorMessage(error, fallback = "Internal error") {
     }
     return fallback;
 }
-//# sourceMappingURL=logging.js.map

package/dist/management-rules.d.ts

@@ -1,2 +1 @@
 export declare function upsertManagementRulesAgentIdentity(content: string, name: string | null | undefined): string;
-//# sourceMappingURL=management-rules.d.ts.map

package/dist/management-rules.js

@@ -59,4 +59,3 @@ export function upsertManagementRulesAgentIdentity(content, name) {
         ? `${before}\n\n${section}\n\n${after}`
         : `${before}\n\n${section}`;
 }
-//# sourceMappingURL=management-rules.js.map

package/dist/messaging/browser-task-mcp-notifier.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Browser-task MCP-side DM dispatcher — BROWSER_TASK_REDESIGN_PLAN.md §5.
+ *
+ * The browser-task sub-agent's `ask_user` and `finish` tools call out to
+ * this surface to DM the originating channel:
+ *
+ *   - `notifyAskUser`  → "❓ Browser task <id> needs your input." with
+ *                        the question + the screenshot attached inline.
+ *   - `notifyFinish`   → the agent's markdown report + the ordered list
+ *                        of screenshots (attached inline) the user should
+ *                        review.
+ *
+ * Distinct from the runner-side `BrowserTaskNotifier` (queued / terminal
+ * structural DMs):
+ *
+ *   - The runner-side notifier covers events the sub-agent never sees
+ *     (the slot manager queued the task, the SDK loop crashed before any
+ *     tool fired, etc.). Plain templated bodies.
+ *   - This MCP-side notifier carries agent-authored prose — the
+ *     `question` / `report` strings come from the sub-agent.
+ *
+ * The two cannot collapse into one because:
+ *   - The SDK tool body needs synchronous access to a notifier (it's
+ *     invoked inside `mcp__aitne-browser__ask_user`'s handler); the
+ *     runner-side notifier is invoked from the runner's lifecycle hooks.
+ *   - The agent-authored vs. structural split keeps the redaction-
+ *     coverage guard happy: structural bodies are templated text that
+ *     the guard knows is safe; agent bodies pass the same redaction
+ *     pipeline already applied to other LLM-authored outbound text.
+ *
+ * Best-effort delivery: DM failures log + continue. The DB row for the
+ * task / clarification has already been written by the tool handler, so
+ * a DM hiccup does NOT block the parent task — the dashboard surfaces
+ * the row regardless. (See §5 ask_user "Resume — Deadline enforcement"
+ * for the deadline-driven fallback when the user never sees the DM.)
+ *
+ * No capability-symbol gate here. The structural anti-spoofing surface
+ * (B-4 purchase confirms + lite-final-confirm tokens) protects DM bodies
+ * that the agent could otherwise mint to itself; `ask_user` / `finish`
+ * bodies are intentionally agent-authored — the user is reading the
+ * agent's question / report. The only header marker we attach is for the
+ * user's benefit, not for adapter-side trust gating.
+ */
+import { type MessageHub } from "../adapters/message-hub.js";
+import { type IngestOutboundImage } from "./browser-task-screenshot-attachment.js";
+import type { BrowserTaskMcpNotifier } from "../services/browser-history/automation/browser-task-tools/server.js";
+/** Header line for ask_user DMs. Chosen so it does NOT collide with the
+ *  B-4 / lite-final-confirm markers (which carry the literal substring
+ *  "confirmation") nor with the runner's `🕒` / `🟦` queue / terminal
+ *  emojis. */
+export declare const ASK_USER_HEADER = "Browser task \u2014 needs your input";
+/** Header line for finish DMs. */
+export declare const FINISH_HEADER = "Browser task \u2014 report";
+export interface CreateBrowserTaskMcpNotifierDeps {
+    messageHub: MessageHub;
+    /** Daemon data directory (`PA_DATA_DIR`). Required to resolve a
+     *  screenshotKey (`/api/browser-task/<id>/screenshots/<file>`) back to
+     *  its on-disk location under
+     *  `<paDataDir>/automation-traces/<id>/<file>` so the bytes can be
+     *  uploaded through the messaging adapter / ingested for the dashboard.
+     *  When omitted, every screenshot resolves to an "unavailable" note. */
+    paDataDir?: string;
+    /** Ingest a resolved trace-store screenshot into the chat
+     *  `AttachmentStore` and return a store-backed `OutboundAttachmentRef`
+     *  (or null on failure). Used for the `dashboard` platform ONLY: the
+     *  dashboard fetches attachments by id through the authenticated
+     *  same-origin `/api/chat/attachments/:id` proxy, so a loopback trace
+     *  URL embedded as markdown would 401 (the bearer token is never
+     *  attached to a raw `<img>` request). Minting a real store id lets the
+     *  dashboard render the bytes inline like any other agent attachment —
+     *  never a URL. Messaging adapters take the trace file directly via
+     *  their native upload API, so they do NOT go through this. Optional:
+     *  when omitted, dashboard screenshots resolve to an "unavailable"
+     *  note. */
+    ingestOutboundImage?: IngestOutboundImage;
+}
+export declare function createBrowserTaskMcpNotifier(deps: CreateBrowserTaskMcpNotifierDeps): BrowserTaskMcpNotifier;