@aitne/daemon 0.1.8 → 0.1.9

package/dist/core/morning/parent-audit-emitter.d.ts

@@ -9,9 +9,8 @@
  * reads — the pre-routine gate must keep firing on the exact same
  * `action_type` string after the pipeline split.
  *
- * Phase 2 ships this module unwired; Phase 5 wires it into the
- * orchestrator after Stage A's terminal state lands and after
- * `diagnoseTodayMdState` returns its verdict.
+ * The orchestrator calls it after Stage A's terminal state lands and
+ * after `diagnoseTodayMdState` returns its verdict.
  *
  * Emit gate (the orchestrator could enforce this externally, but the
  * module owns it so caller paths cannot drift):
@@ -79,4 +78,3 @@ export type ParentAuditEmitResult = {
  */
 export type ParentAuditSkipReason = "stage_a_row_missing" | "stage_a_not_success" | "today_md_missing" | "today_md_no_h1_date" | "today_md_wrong_date";
 export declare function emitMorningRoutineParentAuditRow(db: Database.Database, inputs: ParentAuditEmitterInputs): ParentAuditEmitResult;
-//# sourceMappingURL=parent-audit-emitter.d.ts.map

package/dist/core/morning/parent-audit-emitter.js

@@ -9,9 +9,8 @@
  * reads — the pre-routine gate must keep firing on the exact same
  * `action_type` string after the pipeline split.
  *
- * Phase 2 ships this module unwired; Phase 5 wires it into the
- * orchestrator after Stage A's terminal state lands and after
- * `diagnoseTodayMdState` returns its verdict.
+ * The orchestrator calls it after Stage A's terminal state lands and
+ * after `diagnoseTodayMdState` returns its verdict.
  *
  * Emit gate (the orchestrator could enforce this externally, but the
  * module owns it so caller paths cannot drift):
@@ -117,4 +116,3 @@ function toSqliteDatetime(date) {
     // `YYYY-MM-DDTHH:MM:SS.sssZ` → `YYYY-MM-DD HH:MM:SS`.
     return `${iso.slice(0, 10)} ${iso.slice(11, 19)}`;
 }
-//# sourceMappingURL=parent-audit-emitter.js.map

package/dist/core/morning/partial-extract-streak.d.ts

@@ -0,0 +1,76 @@
+/**
+ * `partial-extract-streak` — §4.7b operator escalation for the daily
+ * journal's partial-extract shape.
+ *
+ * When Stage B's daily-journal compose lands `ok='partial'` three days
+ * in a row (any mix of `frontmatter_tag_missing` /
+ * `frontmatter_invalid_json` / `frontmatter_schema_invalid`), the
+ * user's wiki link graph is silently degrading even though the diary
+ * body is on disk. The daemon emits a one-shot owner DM the first
+ * time the 3-day streak fires, with 24h dedup so a continuing streak
+ * does not spam and a streak ending + restarting fires a fresh DM.
+ *
+ * Storage:
+ *   - Streak detection reads the last 7 days of `agent_actions` rows
+ *     for `action_type='routine.morning_routine_journal'`, ordered
+ *     newest-first.
+ *   - Dedup state lives in
+ *     `runtime_state.partial_extract_dm_last_notified_at` (ISO
+ *     timestamp). Absent value reads as "never notified" — the first
+ *     repeat streak fires.
+ */
+import type Database from "better-sqlite3";
+export declare const STREAK_THRESHOLD = 3;
+export declare const DEDUP_WINDOW_MS: number;
+export interface PartialExtractStreakNotifier {
+    /**
+     * Emit a one-shot owner DM about the partial-extract streak. The
+     * notifier shape mirrors the existing `sendNotification` chain
+     * (priority + platforms) so the streak detector can plug into the
+     * already-wired notification surface without depending on Hono /
+     * messaging adapters directly.
+     */
+    notify(args: {
+        message: string;
+    }): Promise<void> | void;
+}
+export interface MaybeEmitArgs {
+    db: Database.Database;
+    /** Correlation id for the morning routine; logged for ops grep. */
+    correlationId: string;
+    /** Override `Date.now()` for tests. */
+    now?: () => Date;
+    /** The DM emitter — the orchestrator passes the daemon's
+     *  `sendNotification` proxy. When `null` the streak detector still
+     *  runs (so the SQL aggregator is exercised + audited) but no DM
+     *  is sent. */
+    notifier: PartialExtractStreakNotifier | null;
+}
+export interface MaybeEmitResult {
+    /** Whether the SQL streak check actually fired (3+ recent partials). */
+    streakDetected: boolean;
+    /** Whether a DM was sent on this call. */
+    dmSent: boolean;
+    /**
+     * Reason the DM was suppressed when streakDetected=true but dmSent=false.
+     * Three distinct shapes so operators triaging from telemetry can tell a
+     * configuration gap ("no notifier was supplied") apart from a transient
+     * runtime failure ("notifier threw") apart from the normal dedup path.
+     */
+    suppressedReason?: "dedup_recent" | "no_notifier" | "notify_failed";
+    /** Reasons gathered from the most-recent 3 rows when the streak fires —
+     *  surfaced for tests / ops logging. */
+    reasonsInStreak?: ReadonlyArray<string>;
+}
+/**
+ * Look at the most recent 3 Stage B rows. If all carry
+ * `detail.dailyWrite.ok = 'partial'`, emit an owner DM (subject to
+ * the 24h dedup gate). Returns a structured outcome so callers can
+ * log + tests can assert without re-querying the DB.
+ *
+ * The SELECT is the canonical query from design §4.7b — keyed by
+ * `action_type` + a 7-day window + DESC ordering + LIMIT 3.
+ */
+export declare function maybeEmitPartialExtractStreakDm(args: MaybeEmitArgs): Promise<MaybeEmitResult>;
+/** Exposed for tests — surface the runtime_state key. */
+export declare const PARTIAL_EXTRACT_DEDUP_KEY = "partial_extract_dm_last_notified_at";

package/dist/core/morning/partial-extract-streak.js

@@ -0,0 +1,165 @@
+/**
+ * `partial-extract-streak` — §4.7b operator escalation for the daily
+ * journal's partial-extract shape.
+ *
+ * When Stage B's daily-journal compose lands `ok='partial'` three days
+ * in a row (any mix of `frontmatter_tag_missing` /
+ * `frontmatter_invalid_json` / `frontmatter_schema_invalid`), the
+ * user's wiki link graph is silently degrading even though the diary
+ * body is on disk. The daemon emits a one-shot owner DM the first
+ * time the 3-day streak fires, with 24h dedup so a continuing streak
+ * does not spam and a streak ending + restarting fires a fresh DM.
+ *
+ * Storage:
+ *   - Streak detection reads the last 7 days of `agent_actions` rows
+ *     for `action_type='routine.morning_routine_journal'`, ordered
+ *     newest-first.
+ *   - Dedup state lives in
+ *     `runtime_state.partial_extract_dm_last_notified_at` (ISO
+ *     timestamp). Absent value reads as "never notified" — the first
+ *     repeat streak fires.
+ */
+import { readRuntimeState, writeRuntimeState, } from "../../db/runtime-state.js";
+import { createLogger } from "../../logging.js";
+const logger = createLogger("partial-extract-streak");
+export const STREAK_THRESHOLD = 3;
+export const DEDUP_WINDOW_MS = 24 * 60 * 60 * 1000;
+const STAGE_B_ACTION_TYPE = "routine.morning_routine_journal";
+const RUNTIME_KEY = "partial_extract_dm_last_notified_at";
+/**
+ * Look at the most recent 3 Stage B rows. If all carry
+ * `detail.dailyWrite.ok = 'partial'`, emit an owner DM (subject to
+ * the 24h dedup gate). Returns a structured outcome so callers can
+ * log + tests can assert without re-querying the DB.
+ *
+ * The SELECT is the canonical query from design §4.7b — keyed by
+ * `action_type` + a 7-day window + DESC ordering + LIMIT 3.
+ */
+export async function maybeEmitPartialExtractStreakDm(args) {
+    const rows = readRecentStageBRows(args.db);
+    if (rows.length < STREAK_THRESHOLD) {
+        return { streakDetected: false, dmSent: false };
+    }
+    const top3 = rows.slice(0, STREAK_THRESHOLD);
+    const allPartial = top3.every((row) => row.ok === "partial");
+    if (!allPartial) {
+        return { streakDetected: false, dmSent: false };
+    }
+    const reasons = top3.map((row) => row.partialReason ?? "unknown");
+    if (isWithinDedupWindow(args.db, args.now)) {
+        return {
+            streakDetected: true,
+            dmSent: false,
+            suppressedReason: "dedup_recent",
+            reasonsInStreak: reasons,
+        };
+    }
+    if (args.notifier === null) {
+        return {
+            streakDetected: true,
+            dmSent: false,
+            suppressedReason: "no_notifier",
+            reasonsInStreak: reasons,
+        };
+    }
+    const message = renderDmMessage(top3);
+    try {
+        await args.notifier.notify({ message });
+    }
+    catch (err) {
+        // Don't propagate notifier failures — the orchestrator already
+        // logged Stage B's outcome via `persistStageAuditRows`. A failed
+        // DM is recoverable (next day's streak check fires again with no
+        // dedup state recorded), so we DON'T write the timestamp on this
+        // path. Surfaced as `notify_failed` (distinct from `no_notifier`)
+        // so telemetry can tell "notifier threw" apart from "no notifier
+        // configured" — the two states are operationally different even
+        // though both end in dmSent=false.
+        logger.warn({ err, correlationId: args.correlationId }, "Partial-extract streak DM emit failed");
+        return {
+            streakDetected: true,
+            dmSent: false,
+            suppressedReason: "notify_failed",
+            reasonsInStreak: reasons,
+        };
+    }
+    writeDedupTimestamp(args.db, args.now);
+    logger.info({ correlationId: args.correlationId, reasonsInStreak: reasons }, "Partial-extract streak DM emitted");
+    return {
+        streakDetected: true,
+        dmSent: true,
+        reasonsInStreak: reasons,
+    };
+}
+function readRecentStageBRows(db) {
+    // Pull JSON-extracted fields directly via SQLite's json_extract so we
+    // never have to parse the column twice. `LIMIT 7` matches the 7-day
+    // window design §4.7b specifies; the 3-row check runs in JS over the
+    // result.
+    try {
+        return db
+            .prepare(`SELECT json_extract(detail, '$.dailyWrite.ok')            AS ok,
+                json_extract(detail, '$.dailyWrite.partialReason') AS partialReason,
+                started_at                                           AS startedAt
+           FROM agent_actions
+          WHERE action_type = ?
+            AND started_at >= datetime('now', '-7 days')
+          ORDER BY started_at DESC
+          LIMIT ?`)
+            .all(STAGE_B_ACTION_TYPE, STREAK_THRESHOLD + 4);
+    }
+    catch (err) {
+        logger.warn({ err }, "Partial-extract streak SELECT failed");
+        return [];
+    }
+}
+function isWithinDedupWindow(db, nowFn) {
+    const last = readRuntimeState(db, RUNTIME_KEY);
+    if (typeof last !== "string" || last.length === 0)
+        return false;
+    const lastMs = Date.parse(last);
+    if (!Number.isFinite(lastMs))
+        return false;
+    const nowMs = (nowFn ?? (() => new Date()))().getTime();
+    return nowMs - lastMs < DEDUP_WINDOW_MS;
+}
+function writeDedupTimestamp(db, nowFn) {
+    const iso = (nowFn ?? (() => new Date()))().toISOString();
+    writeRuntimeState(db, RUNTIME_KEY, iso);
+}
+/**
+ * Compose the operator-DM body. Counts each `partialReason` so the
+ * operator sees the distribution at a glance — `(reasons:
+ * frontmatter_tag_missing × 2, frontmatter_invalid_json × 1)`.
+ *
+ * Dates surfaced are the `started_at` UTC dates (YYYY-MM-DD slice).
+ *
+ * Streak-count rendering: derives the "on all N days" suffix from the
+ * actual `rows.length` rather than hardcoding three, so a future
+ * `STREAK_THRESHOLD` bump (or the SQL LIMIT returning fewer rows than
+ * the threshold under an edge case the caller didn't filter) cannot
+ * print a lie like "on all three days" against four-row input.
+ */
+function renderDmMessage(rows) {
+    const dates = rows
+        .map((row) => row.startedAt.slice(0, 10))
+        .filter((value, idx, arr) => arr.indexOf(value) === idx)
+        .join(" / ");
+    const counts = new Map();
+    for (const row of rows) {
+        const reason = row.partialReason ?? "unknown";
+        counts.set(reason, (counts.get(reason) ?? 0) + 1);
+    }
+    const reasonsRendered = [...counts.entries()]
+        .map(([reason, count]) => `${reason} × ${count}`)
+        .join(", ");
+    return [
+        `The daily journal authored OK on ${dates} but the model omitted the`,
+        `plans/projects/people/tags frontmatter on all ${rows.length} days`,
+        `(reasons: ${reasonsRendered}).`,
+        `Inspect agent-assets/task-flows/routine.morning_routine_journal.md`,
+        `or escalate Stage B's tier from lite to medium under /settings/models.`,
+    ].join(" ");
+}
+/** Exposed for tests — surface the runtime_state key. */
+export const PARTIAL_EXTRACT_DEDUP_KEY = RUNTIME_KEY;

package/dist/core/morning/roadmap-skeleton-builder.d.ts

@@ -5,7 +5,7 @@
  * branch.
  *
  * Why this exists — `docs/design/appendices/morning-routine-optimization.md`
- * Phase 7 retires `routine.morning_routine_initial`'s high-tier session.
+ * retires `routine.morning_routine_initial`'s high-tier session.
  * On the first run after setup, the wizard-installed `roadmap.md`
  * carries only the `_(Not yet configured)_` placeholder rows. The
  * legacy initial routine spent a high-tier (Opus) cold-start session
@@ -39,7 +39,7 @@
  * Two-layer design mirrors `journal-skeleton-builder.ts`:
  *   - `gatherRoadmapSkeletonFacts(db, contextDir, ...)` — runs SQLite
  *     aggregations against `travel_bookings`, walks `context/projects/`
- *     for active project frontmatter, parses `rules/management.md`
+ *     for active project frontmatter, parses `policies/management.md`
  *     for the operator-declared goals block, and pulls 7-day calendar
  *     events for the `## Quarterly Focus` synthesis hints. Pure
  *     read-only, idempotent.
@@ -106,7 +106,7 @@ export interface RoadmapSkeletonFacts {
     activeProjects: ReadonlyArray<RoadmapSkeletonProject>;
     /**
      * Annual goals — operator-supplied free-text lines extracted from
-     * `rules/management.md` under a `## Annual Goals` heading. Empty
+     * `policies/management.md` under a `## Annual Goals` heading. Empty
      * when the heading is absent or the section is empty (the skeleton
      * then renders an explicit `_(Not yet configured)_` placeholder
      * Stage A is expected to replace with the operator's intent — same
@@ -156,4 +156,3 @@ export declare function buildRoadmapSkeleton(inputs: RoadmapSkeletonInputs, fact
  * Exported for unit testing only.
  */
 export declare function extractAnnualGoals(rulesBody: string): string[];
-//# sourceMappingURL=roadmap-skeleton-builder.d.ts.map

package/dist/core/morning/roadmap-skeleton-builder.js

@@ -5,7 +5,7 @@
  * branch.
  *
  * Why this exists — `docs/design/appendices/morning-routine-optimization.md`
- * Phase 7 retires `routine.morning_routine_initial`'s high-tier session.
+ * retires `routine.morning_routine_initial`'s high-tier session.
  * On the first run after setup, the wizard-installed `roadmap.md`
  * carries only the `_(Not yet configured)_` placeholder rows. The
  * legacy initial routine spent a high-tier (Opus) cold-start session
@@ -39,7 +39,7 @@
  * Two-layer design mirrors `journal-skeleton-builder.ts`:
  *   - `gatherRoadmapSkeletonFacts(db, contextDir, ...)` — runs SQLite
  *     aggregations against `travel_bookings`, walks `context/projects/`
- *     for active project frontmatter, parses `rules/management.md`
+ *     for active project frontmatter, parses `policies/management.md`
  *     for the operator-declared goals block, and pulls 7-day calendar
  *     events for the `## Quarterly Focus` synthesis hints. Pure
  *     read-only, idempotent.
@@ -58,8 +58,8 @@ import { join } from "node:path";
  * harnesses can substitute the directory without re-implementing the
  * fs walk.
  */
-const PROJECTS_REL = "projects";
-const MANAGEMENT_RULES_REL = "rules/management.md";
+const PROJECTS_REL = "plans/projects";
+const MANAGEMENT_RULES_REL = "policies/management.md";
 /**
  * Run the SQLite + fs aggregations that feed the skeleton. Pure
  * read-only; callers own the timezone math (`todayDateStr` is the
@@ -335,4 +335,3 @@ function readFrontmatterScalar(frontmatter, key) {
         return null;
     return match[1].trim().replace(/^['"]|['"]$/g, "");
 }
-//# sourceMappingURL=roadmap-skeleton-builder.js.map

package/dist/core/output-language-policy.d.ts

@@ -71,4 +71,3 @@ export declare function applyOutputLanguagePointerRewrite(content: string): stri
  * mid-session. See design §13.4 / §13.5.
  */
 export declare function renderOutputLanguagePolicyPointer(): string;
-//# sourceMappingURL=output-language-policy.d.ts.map

package/dist/core/output-language-policy.js

@@ -63,13 +63,13 @@ export function renderOutputLanguagePolicyBlock(primaryLanguage) {
         "      (Identity, Work Pattern, Annual Goals, etc.) — keep English so",
         "      parsers (management-md, profile-importer, journal readers) keep",
         "      working",
-        "    - YAML frontmatter keys, wiki-link targets ([[user/profile]]),",
+        "    - YAML frontmatter keys, wiki-link targets ([[identity/profile]]),",
         "      file paths, tool names, identifiers, env vars",
         "    - Fenced code blocks, JSON, CLI commands, URLs",
-        "    - The agent journal (agent/journal.md is English by",
-        "      rules/journal-format.md)",
-        "    - rules/*.md files (management, redaction, mcp, policies) — these",
-        "      are a structured registry, not prose",
+        "    - The agent journal (journal/agent.md is English by",
+        "      policies/journal-format.md)",
+        "    - policies/*.md files (management, redaction, mcp, management-captures)",
+        "      — these are a structured registry, not prose",
         "",
         "  User-customized headers win:",
         "    - If the running file already uses a translated header (e.g.",
@@ -185,10 +185,9 @@ export function renderOutputLanguagePolicyPointer() {
         "  or the turn is system-initiated. Character block (tone, formality,",
         "  emoji) overrides locale defaults.",
         "- **Agent-internal surfaces** (this file, skill bodies, the agent",
-        "  journal, API/log/audit, `rules/*.md` registry) → English. Always.",
+        "  journal, API/log/audit, `policies/*.md` registry) → English. Always.",
         "",
         "See `docs/design/appendices/output-language-policy.md` for the full",
         "rule and policy taxonomy.",
     ].join("\n");
 }
-//# sourceMappingURL=output-language-policy.js.map

package/dist/core/overview-write-lock.d.ts

@@ -45,4 +45,3 @@
 export declare function withOverviewWriteLock<T>(path: string, fn: () => T | Promise<T>): Promise<T>;
 /** Test-only: drop all queued work. Never call from production code. */
 export declare function _resetOverviewWriteLocksForTests(): void;
-//# sourceMappingURL=overview-write-lock.d.ts.map

package/dist/core/overview-write-lock.js

@@ -53,4 +53,3 @@ export async function withOverviewWriteLock(path, fn) {
 export function _resetOverviewWriteLocksForTests() {
     tails.clear();
 }
-//# sourceMappingURL=overview-write-lock.js.map

package/dist/core/path-compat.d.ts

@@ -19,4 +19,3 @@ export declare function shellPathForms(absPath: string, homeDir: string): string
  * Windows backslashes are doubled.
  */
 export declare function jsonStringPathForms(forms: string[]): string[];
-//# sourceMappingURL=path-compat.d.ts.map

package/dist/core/path-compat.js

@@ -64,4 +64,3 @@ export function shellPathForms(absPath, homeDir) {
 export function jsonStringPathForms(forms) {
     return unique(forms.map((form) => JSON.stringify(form).slice(1, -1)));
 }
-//# sourceMappingURL=path-compat.js.map

package/dist/core/path-rewrite.d.ts

@@ -13,7 +13,7 @@ import type Database from "better-sqlite3";
  *     watcher writes external-vault paths (not rewritten here), but other
  *     producers may write primary-context paths.
  *   - `md_file_snapshots.file_path` — logical keys like `today`,
- *     `rules/management`. Already relative; NOT rewritten (left as-is).
+ *     `rules/management`. Already relative; NOT rewritten (left as-is). // drift-allow
  *   - `messages.metadata` — currently unused at runtime but open-ended;
  *     generic walk for defense in depth.
  *   - `receipts.obsidian_path` — external vault relative path. NOT
@@ -55,4 +55,3 @@ export declare function rewriteJsonPaths(value: unknown, oldPrefix: string, newP
  */
 export declare function rewritePathsInDb(db: Database.Database, oldPrefix: string, newPrefix: string, targets?: RewriteTarget[]): RewriteStats;
 export {};
-//# sourceMappingURL=path-rewrite.d.ts.map

package/dist/core/path-rewrite.js

@@ -138,4 +138,3 @@ export function rewritePathsInDb(db, oldPrefix, newPrefix, targets = DEFAULT_TAR
     logger.info({ oldPrefix, newPrefix, stats }, "rewritePathsInDb complete");
     return stats;
 }
-//# sourceMappingURL=path-rewrite.js.map

package/dist/core/policy-files.d.ts

@@ -1,9 +1,9 @@
 /**
  * Per-file byte cap. Files larger than this are skipped with a warning —
- * a user who accidentally pastes a 50MB transcript into rules/management.md
- * should not silently blow up prompt assembly. 32KB is comfortably above
- * the size of any realistic policy file (the largest templates under
- * `agent-assets/templates/` are under 4KB).
+ * a user who accidentally pastes a 50MB transcript into
+ * policies/management.md should not silently blow up prompt assembly. 32KB
+ * is comfortably above the size of any realistic policy file (the largest
+ * templates under `agent-assets/templates/` are under 4KB).
  */
 export declare const POLICY_FILE_MAX_BYTES: number;
 /**
@@ -28,12 +28,12 @@ export declare function createPromptInjectionBudget(maxBytes?: number): PromptIn
  * A "policy file" is a natural-language rulebook stored in the vault that
  * the agent should read when executing a particular ProcessKey. Examples:
  *
- *   - `rules/mcp.md` — MCP usage rules (B-003; inject when any MCP enabled)
- *   - `rules/journal-format.md` — daily journal format (morning routine)
- *   - `rules/redaction.md` — secret patterns (all flows)
- *   - `routines/hourly.md` — hourly check list
- *   - `routines/morning.md` — 04:00 checks (morning routine)
- *   - `routines/custom/<slug>.md` — per-custom-routine check list
+ *   - `policies/mcp.md` — MCP usage rules (B-003; inject when any MCP enabled)
+ *   - `policies/journal-format.md` — daily journal format (morning routine)
+ *   - `policies/redaction.md` — secret patterns (all flows)
+ *   - `policies/routines/hourly.md` — hourly check list
+ *   - `policies/routines/morning.md` — 04:00 checks (morning routine)
+ *   - `policies/routines/custom/<slug>.md` — per-custom-routine check list
  *
  * `appendPolicyBlocks` resolves the set of policy files relevant to a
  * ProcessKey, reads each from the runtime context dir, and returns a
@@ -43,7 +43,7 @@ export declare function createPromptInjectionBudget(maxBytes?: number): PromptIn
  * task-flow assembly time. Phase 3 layers morning-routine-specific blocks
  * on top (journal-format + journal-export).
  *
- * Note: `rules/management.md` is NOT in this registry — `ContextBuilder`
+ * Note: `policies/management.md` is NOT in this registry — `ContextBuilder`
  * injects it once at the top of every session prompt as the
  * `<management_rules>` block (see `context-builder.ts`). Task-flows
  * (`routine.morning_routine.md`, `setup.update.md`, …) reference that
@@ -60,7 +60,7 @@ export declare function createPromptInjectionBudget(maxBytes?: number): PromptIn
  * safety contract is preserved.
  */
 export interface PolicyFileRef {
-    /** Relative path under contextDir, e.g. `rules/management.md`. */
+    /** Relative path under contextDir, e.g. `policies/management.md`. */
     path: string;
     /** Short label used in the rendered block header. */
     label: string;
@@ -82,9 +82,19 @@ export declare const POLICY_FILE_REGISTRY: Record<string, PolicyFileRef[]>;
 /**
  * Pull the set of policy refs for a processKey. Process-specific entries
  * are appended to the global `*` set. Custom routines (keys starting with
- * `routine.custom.`) resolve to their slugged file automatically. Keys
- * in `POLICY_KEY_GLOBAL_OPTOUT` skip the `*` merge entirely and see only
- * their own entries.
+ * `routine.custom.`) resolve to their slugged file automatically.
+ *
+ * Whether the `*` merge applies is decided by
+ * `injection-policy.ts:getInjectionPolicy(processKey).policyFileGlobalMerge`
+ * (v4.2 V20 consolidation). The legacy `POLICY_KEY_GLOBAL_OPTOUT` set
+ * that used to live here was retired in favour of that single table —
+ * see `injection-policy.ts` for the architectural rationale.
+ *
+ * Stage B (`routine.morning_routine_journal`) is currently the only
+ * process key with `policyFileGlobalMerge=false`; its
+ * `POLICY_FILE_REGISTRY` row above re-declares `policies/redaction.md`
+ * inline so the lite-tier journal author still respects redaction even
+ * after opting out of the `*` merge.
  */
 export declare function resolvePolicyRefs(processKey: string): PolicyFileRef[];
 export interface AppendPolicyBlocksOptions {
@@ -122,4 +132,3 @@ export declare function loadPolicyBlocks(opts: AppendPolicyBlocksOptions): Polic
  */
 export declare function renderPolicyBlocks(blocks: PolicyBlock[]): string;
 export declare function appendPolicyBlocks(basePrompt: string, opts: AppendPolicyBlocksOptions): string;
-//# sourceMappingURL=policy-files.d.ts.map

package/dist/core/policy-files.js

@@ -1,14 +1,15 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { CONTEXT_RELATIVE_PATHS } from "./context-paths.js";
+import { getInjectionPolicy } from "./injection-policy.js";
 import { createLogger } from "../logging.js";
 const logger = createLogger("policy-files");
 /**
  * Per-file byte cap. Files larger than this are skipped with a warning —
- * a user who accidentally pastes a 50MB transcript into rules/management.md
- * should not silently blow up prompt assembly. 32KB is comfortably above
- * the size of any realistic policy file (the largest templates under
- * `agent-assets/templates/` are under 4KB).
+ * a user who accidentally pastes a 50MB transcript into
+ * policies/management.md should not silently blow up prompt assembly. 32KB
+ * is comfortably above the size of any realistic policy file (the largest
+ * templates under `agent-assets/templates/` are under 4KB).
  */
 export const POLICY_FILE_MAX_BYTES = 32 * 1024;
 /**
@@ -27,7 +28,7 @@ export function createPromptInjectionBudget(maxBytes = POLICY_TOTAL_MAX_BYTES) {
  */
 export const POLICY_FILE_REGISTRY = {
     "*": [
-        // `rules/management.md` is intentionally NOT in this registry.
+        // `policies/management.md` is intentionally NOT in this registry.
         // ContextBuilder's `<management_rules>` block is the authoritative
         // injection (task-flows reference the XML tag by name); re-adding
         // a heading-form copy here would duplicate the SoT text in every
@@ -67,11 +68,11 @@ export const POLICY_FILE_REGISTRY = {
             label: "Journal export rules",
         },
     ],
-    // `routine.morning_routine_initial` retired by
-    // morning-routine-optimization.md Phase 7 (2026-05-16) — first-run
-    // branch routes through `routine.morning_routine_today` below.
-    // morning-routine-optimization.md Phase 5 — Stage A inherits the
-    // global `*` set (redaction + mcp when enabled) PLUS the user-editable
+    // `routine.morning_routine_initial` is retired — first-run branches
+    // through `routine.morning_routine_today` below. See
+    // morning-routine-optimization.md.
+    // Stage A inherits the global `*` set (redaction + mcp when enabled)
+    // PLUS the user-editable
     // morning checks. Journal-format / journal-export are deliberately
     // NOT injected on Stage A — those are Stage B's policy blocks now.
     // The Vault review context (dossiers/morning.md) is injected by the
@@ -83,13 +84,15 @@ export const POLICY_FILE_REGISTRY = {
         },
     ],
     // morning-routine-optimization.md Phase 5 — Stage B opts OUT of every
-    // `*` default except `rules/redaction.md`. `resolvePolicyRefs` honours
-    // the `POLICY_KEY_GLOBAL_OPTOUT` set below by skipping the `*` merge
-    // entirely; Stage B re-declares the redaction ref here so it still
-    // flows through the same vault-write protections every other writer
-    // sees. `rules/mcp.md` is deliberately omitted — Stage B uses no MCP
-    // tools (skill bundle is `context` + `_safety` only), so injecting
-    // the rulebook would waste lite-tier prompt budget for no behaviour.
+    // `*` default except `policies/redaction.md`. The opt-out lives in
+    // `injection-policy.ts:getInjectionPolicy("routine.morning_routine_journal").policyFileGlobalMerge=false`
+    // (v4.2 V20 consolidation); `resolvePolicyRefs` reads that flag and
+    // skips the `*` merge entirely. Stage B re-declares the redaction
+    // ref here so it still flows through the same vault-write protections
+    // every other writer sees. `policies/mcp.md` is deliberately omitted —
+    // Stage B uses no MCP tools (skill bundle is `context` + `_safety`
+    // only), so injecting the rulebook would waste lite-tier prompt
+    // budget for no behaviour.
     "routine.morning_routine_journal": [
         {
             path: CONTEXT_RELATIVE_PATHS.rules.redaction,
@@ -132,43 +135,33 @@ export const POLICY_FILE_REGISTRY = {
         },
     ],
 };
-/**
- * Process keys that opt OUT of the global `*` registry merge. A key in
- * this set sees ONLY its own entries in `POLICY_FILE_REGISTRY[<key>]`
- * — the policies it actually needs must be re-declared inline (the
- * Stage B `routine.morning_routine_journal` entry above re-lists
- * `rules/redaction.md` for exactly this reason).
- *
- * Motivation (`morning-routine-optimization.md` Phase 5): Stage B runs
- * on the lite tier and ships with a `context` + `_safety` skill bundle
- * only. Inheriting `rules/mcp.md` (any time any MCP server is enabled
- * anywhere in the daemon) would pay prompt budget for behaviour Stage
- * B cannot exhibit, defeating the cold-start-floor sizing that makes
- * lite viable. Re-declaring `rules/redaction.md` inline keeps every
- * vault-write surface bound by the same patterns regardless of whether
- * the key opted out.
- */
-const POLICY_KEY_GLOBAL_OPTOUT = new Set([
-    "routine.morning_routine_journal",
-]);
 /**
  * Pull the set of policy refs for a processKey. Process-specific entries
  * are appended to the global `*` set. Custom routines (keys starting with
- * `routine.custom.`) resolve to their slugged file automatically. Keys
- * in `POLICY_KEY_GLOBAL_OPTOUT` skip the `*` merge entirely and see only
- * their own entries.
+ * `routine.custom.`) resolve to their slugged file automatically.
+ *
+ * Whether the `*` merge applies is decided by
+ * `injection-policy.ts:getInjectionPolicy(processKey).policyFileGlobalMerge`
+ * (v4.2 V20 consolidation). The legacy `POLICY_KEY_GLOBAL_OPTOUT` set
+ * that used to live here was retired in favour of that single table —
+ * see `injection-policy.ts` for the architectural rationale.
+ *
+ * Stage B (`routine.morning_routine_journal`) is currently the only
+ * process key with `policyFileGlobalMerge=false`; its
+ * `POLICY_FILE_REGISTRY` row above re-declares `policies/redaction.md`
+ * inline so the lite-tier journal author still respects redaction even
+ * after opting out of the `*` merge.
  */
 export function resolvePolicyRefs(processKey) {
-    const global = POLICY_KEY_GLOBAL_OPTOUT.has(processKey)
-        ? []
-        : POLICY_FILE_REGISTRY["*"];
+    const policy = getInjectionPolicy(processKey);
+    const global = policy.policyFileGlobalMerge ? POLICY_FILE_REGISTRY["*"] : [];
     const specific = POLICY_FILE_REGISTRY[processKey] ?? [];
     if (processKey.startsWith("routine.custom.")) {
         const slug = processKey.slice("routine.custom.".length);
         return [
             ...global,
             {
-                path: `routines/custom/${slug}.md`,
+                path: `policies/routines/custom/${slug}.md`,
                 label: `Custom routine: ${slug}`,
             },
         ];
@@ -253,4 +246,3 @@ function readPolicyFile(absolute, reader) {
         return null;
     }
 }
-//# sourceMappingURL=policy-files.js.map

package/dist/core/pre-pass-freshness.d.ts

@@ -25,4 +25,3 @@ export declare const PRE_PASS_LAST_RUN_KEY_PREFIX = "pre_pass_last_run";
  * last successfully fetch this integration's window?".
  */
 export declare function prePassLastRunRuntimeStateKey(integrationKey: IntegrationKey): string;
-//# sourceMappingURL=pre-pass-freshness.d.ts.map

package/dist/core/pre-pass-freshness.js

@@ -7,4 +7,3 @@ export const PRE_PASS_LAST_RUN_KEY_PREFIX = "pre_pass_last_run";
 export function prePassLastRunRuntimeStateKey(integrationKey) {
     return `${PRE_PASS_LAST_RUN_KEY_PREFIX}:${integrationKey}`;
 }
-//# sourceMappingURL=pre-pass-freshness.js.map