@aitne/daemon 0.1.8 → 0.1.9

package/dist/core/user-skills-root.d.ts

@@ -0,0 +1,24 @@
+import { type AgentConfig } from "../config.js";
+/**
+ * Absolute path of the user-skills root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — every runtime consumer of the
+ * user-skills location (skills API, session workdir materialization,
+ * dispatcher fallback materializer, backend cores, release-assets shadow
+ * alerts, tests) MUST route through this single helper so the location
+ * cannot drift between modules.
+ *
+ * Skill curation overlay JSON is NOT inside the vault — it lives at
+ * `<dataDir>/skill-curation-overlays/` (see `resolveSkillCurationOverlaysRoot`).
+ */
+export declare function resolveUserSkillsRoot(config: AgentConfig): string;
+/**
+ * Absolute path of the skill-curation overlay JSON root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — overlays are operational, not
+ * content. They stay outside the vault even though the user `SKILL.md`
+ * files moved into `policies/skills/`. The vault-restructure migration
+ * moves any pre-existing overlays from `<dataDir>/skills/overlays/` to
+ * this new root on first boot post-upgrade.
+ */
+export declare function resolveSkillCurationOverlaysRoot(dataDir: string): string;

package/dist/core/user-skills-root.js

@@ -0,0 +1,29 @@
+import { resolve } from "node:path";
+import { getContextDir } from "../config.js";
+/**
+ * Absolute path of the user-skills root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — every runtime consumer of the
+ * user-skills location (skills API, session workdir materialization,
+ * dispatcher fallback materializer, backend cores, release-assets shadow
+ * alerts, tests) MUST route through this single helper so the location
+ * cannot drift between modules.
+ *
+ * Skill curation overlay JSON is NOT inside the vault — it lives at
+ * `<dataDir>/skill-curation-overlays/` (see `resolveSkillCurationOverlaysRoot`).
+ */
+export function resolveUserSkillsRoot(config) {
+    return resolve(getContextDir(config), "policies", "skills");
+}
+/**
+ * Absolute path of the skill-curation overlay JSON root.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V11 — overlays are operational, not
+ * content. They stay outside the vault even though the user `SKILL.md`
+ * files moved into `policies/skills/`. The vault-restructure migration
+ * moves any pre-existing overlays from `<dataDir>/skills/overlays/` to
+ * this new root on first boot post-upgrade.
+ */
+export function resolveSkillCurationOverlaysRoot(dataDir) {
+    return resolve(dataDir, "skill-curation-overlays");
+}

package/dist/core/wiki/approval-queue.d.ts

@@ -28,4 +28,3 @@ export interface EnqueueWikiApprovalResult {
     taskDescription: string;
 }
 export declare function enqueueWikiApproval(db: Database.Database, input: EnqueueWikiApprovalInput): EnqueueWikiApprovalResult;
-//# sourceMappingURL=approval-queue.d.ts.map

package/dist/core/wiki/approval-queue.js

@@ -30,8 +30,13 @@ export function enqueueWikiApproval(db, input) {
         .prepare(`INSERT INTO agent_schedule
          (scheduled_for, task_type, task_description, task_prompt, task_context, correlation_id, status)
        VALUES
-         (CURRENT_TIMESTAMP, 'approval', ?, NULL, json(?), ?, 'pending')`)
-        .run(taskDescription, JSON.stringify(taskContext), input.sourceEvent.correlationId);
+         (CURRENT_TIMESTAMP, 'approval', ?, ?, json(?), ?, 'pending')`)
+        .run(taskDescription, 
+    // On approval, cost-approvals flips task_type to 'approved_task' and
+    // re-dispatches WITHOUT touching task_prompt — and the dispatcher reads
+    // task_prompt directly (no task_description fallback). So carry the body
+    // in task_prompt now, never NULL.
+    taskDescription, JSON.stringify(taskContext), input.sourceEvent.correlationId);
     const scheduleId = Number(info.lastInsertRowid);
     logger.info({
         workspace: input.workspace,
@@ -41,4 +46,3 @@ export function enqueueWikiApproval(db, input) {
     }, "wiki !compile full escalated to Approve tier");
     return { scheduleId, taskDescription };
 }
-//# sourceMappingURL=approval-queue.js.map

package/dist/core/wiki/bridge.d.ts

@@ -71,4 +71,3 @@ export declare function renderBridgeMarkdown(proposal: WikiBridgeProposal, ctx:
  */
 export declare function bridgeFileExists(workspaceRoot: string, relPath: string): boolean;
 export {};
-//# sourceMappingURL=bridge.d.ts.map

package/dist/core/wiki/bridge.js

@@ -402,4 +402,3 @@ export function bridgeFileExists(workspaceRoot, relPath) {
         return false;
     return existsSync(resolve(workspaceRoot, relPath));
 }
-//# sourceMappingURL=bridge.js.map

package/dist/core/wiki/compile-lock.d.ts

@@ -39,4 +39,3 @@ export declare function releaseWikiCompileLock(workspace: string): void;
 export declare function getWikiCompileLockHolder(workspace: string): WikiCompileLockHolder | null;
 /** Test helper — wipes the lock state. Never call outside test setup. */
 export declare function __resetWikiCompileLockForTests(): void;
-//# sourceMappingURL=compile-lock.d.ts.map

package/dist/core/wiki/compile-lock.js

@@ -52,4 +52,3 @@ export function getWikiCompileLockHolder(workspace) {
 export function __resetWikiCompileLockForTests() {
     inFlight.clear();
 }
-//# sourceMappingURL=compile-lock.js.map

package/dist/core/wiki/compile-preview.d.ts

@@ -5,4 +5,3 @@ export interface CompilePreviewInput {
     mode: WikiCompileMode;
 }
 export declare function buildCompilePreview(input: CompilePreviewInput): WikiCompilePreview;
-//# sourceMappingURL=compile-preview.d.ts.map

package/dist/core/wiki/compile-preview.js

@@ -197,4 +197,3 @@ function parseEpoch(timestamp) {
 function round(value) {
     return Math.round(value * 1_000_000) / 1_000_000;
 }
-//# sourceMappingURL=compile-preview.js.map

package/dist/core/wiki/cost-estimate.d.ts

@@ -27,4 +27,3 @@ export declare function estimateFullCompileCost(workspace: Pick<WikiWorkspaceRow
  * input size (system prompt, skills bundle, tool descriptions).
  */
 export declare function approxTokenCount(content: string): number;
-//# sourceMappingURL=cost-estimate.d.ts.map

package/dist/core/wiki/cost-estimate.js

@@ -52,8 +52,8 @@ const PESSIMISTIC_MULT = 2.0;
 export function estimateFullCompileCost(workspace, options = {}) {
     const unitCost = options.unitCostUsdPerKToken ?? DEFAULT_UNIT_COST_USD_PER_KTOKEN;
     const threshold = workspace.full_compile_approval_threshold_usd;
-    // Legacy flat-heuristic branch — preserved for existing P2 tests and
-    // any caller that explicitly opts into the cheap mode.
+    // Cheap flat-heuristic branch — opt-in via `avgInputTokensPerRaw`. Use
+    // when a raw-layer scan would cost more than the estimate it produces.
     if (options.avgInputTokensPerRaw !== undefined) {
         const rawCount = options.rawCountOverride ?? countRawNotes(join(workspace.root_path, "10_raw"));
         const estimatedInputTokens = Math.max(0, rawCount * options.avgInputTokensPerRaw);
@@ -84,6 +84,11 @@ export function estimateFullCompileCost(workspace, options = {}) {
             let tokenCount = PER_FILE_MIN_TOKENS;
             try {
                 const stat = statSync(full);
+                // Race-condition defensive: walkRawLayer already filtered for
+                // `entry.isFile()` via dirent, so this can only trip if the file
+                // was replaced with a non-file (e.g. directory, FIFO) between the
+                // readdir and the stat. Unreachable via the public API surface.
+                /* c8 ignore next */
                 if (!stat.isFile())
                     continue;
                 const content = readFileSync(full, "utf-8");
@@ -146,6 +151,10 @@ export function approxTokenCount(content) {
             cjkChars += 1;
     }
     const totalCodepoints = [...content].length;
+    // Defensive: `content.length === 0` returned early above, and any
+    // non-empty UTF-16 string yields at least one codepoint when iterated.
+    // This guard exists to keep the divide safe under future refactors.
+    /* c8 ignore next */
     const cjkRatio = totalCodepoints === 0 ? 0 : cjkChars / totalCodepoints;
     const divisor = cjkRatio > 0.5 ? CJK_CHARS_PER_TOKEN : LATIN_CHARS_PER_TOKEN;
     const tokens = Math.ceil(content.length / divisor);
@@ -153,6 +162,10 @@ export function approxTokenCount(content) {
 }
 function isCjkChar(ch) {
     const cp = ch.codePointAt(0);
+    // Defensive: callers iterate `for (const ch of content)`, which always
+    // yields a non-empty 1-2 UTF-16 unit string, so codePointAt(0) cannot
+    // return undefined. Guard preserved for safety under refactor.
+    /* c8 ignore next */
     if (cp === undefined)
         return false;
     // U+3040–U+309F Hiragana, U+30A0–U+30FF Katakana,
@@ -212,6 +225,13 @@ function countRawNotes(rawDir) {
             continue;
         if (entry.isDirectory()) {
             const full = join(rawDir, entry.name);
+            // Defensive: dirent already reported `entry.isDirectory()` true, and
+            // a stat on a direct child of the readable rawDir cannot fail on
+            // permissions. The try/catch + `stat.isDirectory()` guard exists for
+            // the race where the dir is deleted/replaced between readdirSync and
+            // statSync. Wrap the whole block in c8-ignore so v8 doesn't count
+            // the unreachable branch arms.
+            /* c8 ignore start */
             try {
                 const stat = statSync(full);
                 if (stat.isDirectory()) {
@@ -221,6 +241,7 @@ function countRawNotes(rawDir) {
             catch {
                 /* skip unreadable directory */
             }
+            /* c8 ignore stop */
         }
     }
     return count;
@@ -240,4 +261,3 @@ function countMarkdownRecursive(dir) {
 function round(value) {
     return Math.round(value * 1_000_000) / 1_000_000;
 }
-//# sourceMappingURL=cost-estimate.js.map

package/dist/core/wiki/dispatcher.d.ts

@@ -1,16 +1,4 @@
-import { type Event, type WikiReplyTarget } from "@aitne/shared";
-/**
- * Every wiki-tier process key the daemon dispatches. Kept ordered by
- * Phase (P1 ingest/compile/ask, P3 operational triad lint/trace/connect)
- * so a quick visual scan tells you which surfaces ship in which phase.
- */
-export declare const WIKI_PROCESS_KEYS: readonly ["wiki.ingest_url", "wiki.compile", "wiki.ask", "wiki.lint", "wiki.trace", "wiki.connect"];
-/** Back-compat alias for the P1 surface. Prefer {@link WIKI_PROCESS_KEYS}. */
-export declare const WIKI_P1_PROCESS_KEYS: readonly ["wiki.ingest_url", "wiki.compile", "wiki.ask", "wiki.lint", "wiki.trace", "wiki.connect"];
-export type WikiProcessKey = (typeof WIKI_PROCESS_KEYS)[number];
-/** @deprecated use {@link WikiProcessKey}. */
-export type WikiP1ProcessKey = WikiProcessKey;
-export declare function isWikiProcessKey(value: string): value is WikiProcessKey;
+import { type Event, type WikiProcessKey, type WikiReplyTarget } from "@aitne/shared";
 export interface WikiCommandEventInput {
     processKey: WikiProcessKey;
     workspace: string;
@@ -36,13 +24,5 @@ export declare function createWikiCommandEvent(input: WikiCommandEventInput): Ev
  *     or wiki event minted without a sourceEvent), or
  *   - the field shape is corrupt (defensive — a daemon downgrade reading
  *     a payload from a future schema version).
- *
- * `readWikiReplyTarget` is exported as a back-compat alias so older
- * external consumers keep working; new code should prefer
- * `readEventReplyTarget`.
  */
 export declare function readEventReplyTarget(event: Event): WikiReplyTarget | null;
-/** @deprecated Renamed to {@link readEventReplyTarget} — kept as an
- *  alias to avoid breaking external callers during the rename window. */
-export declare const readWikiReplyTarget: typeof readEventReplyTarget;
-//# sourceMappingURL=dispatcher.d.ts.map

package/dist/core/wiki/dispatcher.js

@@ -1,22 +1,4 @@
 import { EventPriority, createEvent, isMessageEvent, wikiReplyTargetSchema, } from "@aitne/shared";
-/**
- * Every wiki-tier process key the daemon dispatches. Kept ordered by
- * Phase (P1 ingest/compile/ask, P3 operational triad lint/trace/connect)
- * so a quick visual scan tells you which surfaces ship in which phase.
- */
-export const WIKI_PROCESS_KEYS = [
-    "wiki.ingest_url",
-    "wiki.compile",
-    "wiki.ask",
-    "wiki.lint",
-    "wiki.trace",
-    "wiki.connect",
-];
-/** Back-compat alias for the P1 surface. Prefer {@link WIKI_PROCESS_KEYS}. */
-export const WIKI_P1_PROCESS_KEYS = WIKI_PROCESS_KEYS;
-export function isWikiProcessKey(value) {
-    return WIKI_PROCESS_KEYS.includes(value);
-}
 export function createWikiCommandEvent(input) {
     // WIKI_BUILDER_DESIGN.md §3.4 — derive the reply routing tuple from the
     // originating MessageEvent so the per-URL completion DMs from
@@ -74,10 +56,6 @@ export function createWikiCommandEvent(input) {
  *     or wiki event minted without a sourceEvent), or
  *   - the field shape is corrupt (defensive — a daemon downgrade reading
  *     a payload from a future schema version).
- *
- * `readWikiReplyTarget` is exported as a back-compat alias so older
- * external consumers keep working; new code should prefer
- * `readEventReplyTarget`.
  */
 export function readEventReplyTarget(event) {
     const raw = event.data?.reply_target;
@@ -86,7 +64,3 @@ export function readEventReplyTarget(event) {
     const parsed = wikiReplyTargetSchema.safeParse(raw);
     return parsed.success ? parsed.data : null;
 }
-/** @deprecated Renamed to {@link readEventReplyTarget} — kept as an
- *  alias to avoid breaking external callers during the rename window. */
-export const readWikiReplyTarget = readEventReplyTarget;
-//# sourceMappingURL=dispatcher.js.map

package/dist/core/wiki/git-precompile.d.ts

@@ -92,4 +92,3 @@ export interface GitPreCompileDeps {
 export declare function previewGitPreCompile(workspace: WikiWorkspaceRow, deps?: GitPreCompileDeps): Promise<GitPreCompilePreview>;
 export declare function runGitPreCompile(workspace: WikiWorkspaceRow, deps?: GitPreCompileDeps): Promise<GitPreCompileOutcome>;
 export declare function isGitRepo(rootPath: string): boolean;
-//# sourceMappingURL=git-precompile.d.ts.map

package/dist/core/wiki/git-precompile.js

@@ -99,4 +99,3 @@ async function defaultRun(file, args, options) {
     });
     return { stdout, stderr };
 }
-//# sourceMappingURL=git-precompile.js.map

package/dist/core/wiki/import-migrate.d.ts

@@ -35,4 +35,3 @@ export interface ApplyMigrationOptions {
     allowConflicts?: boolean;
 }
 export declare function applyImportMigration(plan: WikiImportMigrationPlan, options?: ApplyMigrationOptions): ApplyImportMigrationResult;
-//# sourceMappingURL=import-migrate.d.ts.map

package/dist/core/wiki/import-migrate.js

@@ -307,4 +307,3 @@ function writeImportReport(rootPath, dateStamp, plan, outcome) {
     ];
     writeFileAtomically(reportPath, lines.join("\n"));
 }
-//# sourceMappingURL=import-migrate.js.map

package/dist/core/wiki/import-probe.d.ts

@@ -73,4 +73,3 @@ export declare function probeExistingWikiVault(rootPath: string): WikiImportProb
 export declare function extractFrontmatter(content: string): Record<string, string> | null;
 export declare function formatProbeRelativePath(rootPath: string, abs: string): string;
 export {};
-//# sourceMappingURL=import-probe.d.ts.map

package/dist/core/wiki/import-probe.js

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, readdirSync, statSync, } from "node:fs";
+import { existsSync, lstatSync, readFileSync, readdirSync, statSync, } from "node:fs";
 import { join, relative } from "node:path";
 const LAYER_DIRS = ["00_inbox", "10_raw", "20_wiki", "30_outputs", "90_meta"];
 const EXPECTED_SCHEMAS = {
@@ -48,9 +48,12 @@ function inventoryLayer(rootPath, dir) {
             lastModifiedAt: null,
         };
     }
-    let stat;
+    // `lstatSync` does NOT follow symlinks; `statSync` does. The probe
+    // needs the symlink-itself state so the wizard can flag a layer-dir
+    // symlink (§7 — refusing the import is the safe default).
+    let lstat;
     try {
-        stat = statSync(full);
+        lstat = lstatSync(full);
     }
     catch {
         return {
@@ -86,7 +89,7 @@ function inventoryLayer(rootPath, dir) {
     return {
         dir,
         exists: true,
-        isSymlink: stat.isSymbolicLink(),
+        isSymlink: lstat.isSymbolicLink(),
         fileCount,
         subdirectories: subdirectories.sort(),
         lastModifiedAt,
@@ -242,4 +245,3 @@ function* walkMarkdown(rootDir) {
 export function formatProbeRelativePath(rootPath, abs) {
     return relative(rootPath, abs).split(/[\\/]/).join("/");
 }
-//# sourceMappingURL=import-probe.js.map

package/dist/core/wiki/index-cache.d.ts

@@ -36,4 +36,3 @@ export declare class WikiIndexCache {
     release(workspaceId: number): Promise<void>;
     shutdown(): Promise<void>;
 }
-//# sourceMappingURL=index-cache.d.ts.map

package/dist/core/wiki/index-cache.js

@@ -149,4 +149,3 @@ function readSnapshotFromDisk(workspace) {
         return { exists: false, content: null, mtimeMs: null, loadedAtMs: Date.now() };
     }
 }
-//# sourceMappingURL=index-cache.js.map

package/dist/core/wiki/multi-url-dispatch.d.ts

@@ -49,4 +49,3 @@ export interface DispatchWikiUrlBatchResult {
  * where a failed enqueue is a daemon-level fault, not a per-URL one.
  */
 export declare function dispatchWikiUrlBatch(input: DispatchWikiUrlBatchInput): Promise<DispatchWikiUrlBatchResult>;
-//# sourceMappingURL=multi-url-dispatch.d.ts.map

package/dist/core/wiki/multi-url-dispatch.js

@@ -54,19 +54,29 @@ export async function dispatchWikiUrlBatch(input) {
     }
     const cap = Math.max(1, Math.min(10, Math.floor(input.concurrencyCap)));
     let cursor = 0;
+    let aborted = false;
     async function worker() {
-        while (cursor < urls.length) {
+        while (!aborted && cursor < urls.length) {
             const url = urls[cursor++];
-            await input.enqueue(createWikiCommandEvent({
-                processKey: "wiki.ingest_url",
-                workspace: input.workspace,
-                sourceEvent: input.sourceEvent,
-                batchId,
-                data: { url },
-            }));
+            try {
+                await input.enqueue(createWikiCommandEvent({
+                    processKey: "wiki.ingest_url",
+                    workspace: input.workspace,
+                    sourceEvent: input.sourceEvent,
+                    batchId,
+                    data: { url },
+                }));
+            }
+            catch (err) {
+                // Honour the "abort the rest of the batch" contract: one failed
+                // enqueue stops sibling workers from claiming more URLs. Without
+                // this flag, Promise.all rejects fast but the other workers keep
+                // running, producing partial-then-unobserved enqueues.
+                aborted = true;
+                throw err;
+            }
         }
     }
     await Promise.all(Array.from({ length: Math.min(cap, urls.length) }, worker));
     return { batchId, queued: urls.length, mode: "parallel" };
 }
-//# sourceMappingURL=multi-url-dispatch.js.map

package/dist/core/wiki/wiki-fts.d.ts

@@ -72,4 +72,3 @@ export declare function backfillWikiFulltext(db: Database.Database, workspaces:
  * route module from a core helper (one-way dependency: routes → core).
  */
 export declare function classifyWikiPathForFts(relPath: string): WikiFtsLayer | null;
-//# sourceMappingURL=wiki-fts.d.ts.map

package/dist/core/wiki/wiki-fts.js

@@ -262,4 +262,3 @@ export function classifyWikiPathForFts(relPath) {
             return null;
     }
 }
-//# sourceMappingURL=wiki-fts.js.map

package/dist/core/wiki/workspaces.d.ts

@@ -26,7 +26,23 @@ export interface WikiWorkspaceRow {
     created_at: string;
     updated_at: string;
 }
-export declare function defaultWikiRoot(dataDir: string): string;
+/**
+ * Fresh-install default root for internal wiki workspaces.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V12 — the internal wiki workspace
+ * tree moves under the vault at `<contextDir>/knowledge/wiki/`. The
+ * vault-restructure migration moves any pre-existing internal
+ * workspaces and rewrites `wiki_workspaces.root_path` for them. Fresh
+ * installs land directly on the new layout via this helper.
+ *
+ * The function accepts an `AgentConfig` so it can resolve the runtime
+ * `contextDir` (which may live inside an external Obsidian vault when
+ * `vaultMode="obsidian"`). The legacy `defaultWikiRoot(dataDir)` shape
+ * is preserved for callers that haven't been migrated yet — it falls
+ * back to `<dataDir>/context/knowledge/wiki`, matching the canonical
+ * destination of pre-migration `<dataDir>/wiki/` content.
+ */
+export declare function defaultWikiRoot(configOrDataDir: AgentConfig | string): string;
 export declare function ensureDefaultWikiWorkspace(db: Database.Database, config: AgentConfig): WikiWorkspaceRow;
 /**
  * Create (or re-activate) an external-mode wiki workspace pointed at a
@@ -98,4 +114,3 @@ export interface WikiWorkspaceStats {
     lastCompileAt: string | null;
 }
 export declare function buildWikiWorkspaceStats(row: WikiWorkspaceRow): WikiWorkspaceStats;
-//# sourceMappingURL=workspaces.d.ts.map

package/dist/core/wiki/workspaces.js

@@ -1,6 +1,6 @@
 import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, } from "node:fs";
 import { join, resolve } from "node:path";
-import { validatePrimaryVaultPath } from "../../config.js";
+import { getContextDir, validatePrimaryVaultPath } from "../../config.js";
 import { writeFileAtomically } from "../atomic-write.js";
 export const DEFAULT_WIKI_WORKSPACE_NAME = "default";
 export const DEFAULT_WIKI_SCHEMA_VERSION = 1;
@@ -56,28 +56,41 @@ const FALLBACK_SEEDS = {
         "",
     ].join("\n"),
 };
-export function defaultWikiRoot(dataDir) {
-    return resolve(dataDir, "wiki");
+/**
+ * Fresh-install default root for internal wiki workspaces.
+ *
+ * CONTEXT_VAULT_REDESIGN_PLAN.md v4 V12 — the internal wiki workspace
+ * tree moves under the vault at `<contextDir>/knowledge/wiki/`. The
+ * vault-restructure migration moves any pre-existing internal
+ * workspaces and rewrites `wiki_workspaces.root_path` for them. Fresh
+ * installs land directly on the new layout via this helper.
+ *
+ * The function accepts an `AgentConfig` so it can resolve the runtime
+ * `contextDir` (which may live inside an external Obsidian vault when
+ * `vaultMode="obsidian"`). The legacy `defaultWikiRoot(dataDir)` shape
+ * is preserved for callers that haven't been migrated yet — it falls
+ * back to `<dataDir>/context/knowledge/wiki`, matching the canonical
+ * destination of pre-migration `<dataDir>/wiki/` content.
+ */
+export function defaultWikiRoot(configOrDataDir) {
+    if (typeof configOrDataDir === "string") {
+        return resolve(configOrDataDir, "context", "knowledge", "wiki");
+    }
+    return resolve(getContextDir(configOrDataDir), "knowledge", "wiki");
 }
 export function ensureDefaultWikiWorkspace(db, config) {
-    const rootPath = defaultWikiRoot(config.dataDir);
+    const rootPath = defaultWikiRoot(config);
     // §P5.C — multi-workspace: check the named default specifically
     // rather than "first active workspace". With multiple active rows,
     // `readDefaultWikiWorkspace` returns the oldest active row by id,
     // which may not be the named default at all.
+    //
+    // If the row exists (in any state — including archived `active=0` or
+    // re-targeted to an external path) we leave it alone: the operator
+    // owns that state. Only insert when the row is genuinely missing.
     const existing = readWikiWorkspaceByName(db, DEFAULT_WIKI_WORKSPACE_NAME);
     if (!existing) {
-        const existingNamed = readWikiWorkspaceByName(db, DEFAULT_WIKI_WORKSPACE_NAME);
-        if (existingNamed) {
-            db.prepare(`UPDATE wiki_workspaces
-         SET active = 1,
-             kind = 'internal',
-             root_path = ?,
-             updated_at = CURRENT_TIMESTAMP
-         WHERE name = ?`).run(rootPath, DEFAULT_WIKI_WORKSPACE_NAME);
-        }
-        else {
-            db.prepare(`INSERT INTO wiki_workspaces (
+        db.prepare(`INSERT INTO wiki_workspaces (
          name,
          kind,
          root_path,
@@ -91,7 +104,6 @@ export function ensureDefaultWikiWorkspace(db, config) {
          active,
          updated_at
         ) VALUES (?, 'internal', ?, ?, 'parallel', 3, 0, 0, ?, ?, 1, CURRENT_TIMESTAMP)`).run(DEFAULT_WIKI_WORKSPACE_NAME, rootPath, DEFAULT_WIKI_LANGUAGE, DEFAULT_WIKI_FULL_COMPILE_APPROVAL_USD, DEFAULT_WIKI_SCHEMA_VERSION);
-        }
     }
     seedWikiWorkspaceFiles(rootPath, config.workspaceDir);
     return readWikiWorkspaceByName(db, DEFAULT_WIKI_WORKSPACE_NAME) ?? {
@@ -349,4 +361,3 @@ function writeIfMissing(path, content) {
     }
     writeFileAtomically(path, content.endsWith("\n") ? content : `${content}\n`);
 }
-//# sourceMappingURL=workspaces.js.map

package/dist/core/wiki/write-strategy.d.ts

@@ -67,4 +67,3 @@ export declare function probeWikiWriteStrategyHealth(workspace: WikiWorkspaceRow
  */
 export declare function resolveWikiPath(workspace: WikiWorkspaceRow, relPath: string): string;
 export declare function indexCachePathFor(workspace: WikiWorkspaceRow): string;
-//# sourceMappingURL=write-strategy.d.ts.map

package/dist/core/wiki/write-strategy.js

@@ -1,4 +1,4 @@
-import { dirname, join, relative, resolve } from "node:path";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { writeFileAtomically } from "../atomic-write.js";
 const FALLBACK_ERROR_CODES = new Set(["EPERM", "EACCES", "EROFS", "EBUSY"]);
 export class WikiWriteStrategyResolver {
@@ -44,6 +44,10 @@ export class WikiWriteStrategyResolver {
             return { strategy: "fs", durationMs: Date.now() - start };
         }
         catch (err) {
+            // Errors thrown from atomic-write / fs always carry a `code`; the
+            // `?? ""` fallback is a defensive guard against future callers that
+            // throw a non-fs Error here. Unreachable from the public surface.
+            /* c8 ignore next */
             const code = err.code ?? "";
             if (!FALLBACK_ERROR_CODES.has(code))
                 throw err;
@@ -65,6 +69,12 @@ export class WikiWriteStrategyResolver {
         await this.deps.obsidian.updateNote(input.relPath, ensureTrailingNewline(input.content));
     }
     persistResolved(workspace, strategy) {
+        // Idempotent guard for concurrent auto-mode writes — the caller path
+        // enters this method only when `resolveStrategy` returned "auto",
+        // which by construction means `write_strategy === 'auto'` is the only
+        // pre-state. Hence `'auto' === ('fs'|'cli')` is always false here.
+        // Preserve the guard so two in-flight writes don't double-UPDATE.
+        /* c8 ignore next */
         if (workspace.write_strategy === strategy)
             return;
         this.deps.db
@@ -96,7 +106,14 @@ function ensureTrailingNewline(content) {
 }
 function ensureWithinRoot(root, fullPath) {
     const rel = relative(root, fullPath);
-    return !rel.startsWith("..") && !rel.startsWith("/");
+    // `relative()` returns an absolute path when the two paths are on
+    // different Windows drive letters (e.g. C:\ → D:\evil). The `..` and
+    // empty-string checks are not sufficient there — `isAbsolute` catches
+    // it across platforms. An empty `rel` means fullPath === root, which
+    // is a directory write and never a legal file target.
+    if (rel === "" || rel.startsWith("..") || isAbsolute(rel))
+        return false;
+    return true;
 }
 /**
  * Resolve the workspace-relative directory of a vault-local file. Exposed
@@ -109,4 +126,3 @@ export function resolveWikiPath(workspace, relPath) {
 export function indexCachePathFor(workspace) {
     return dirname(resolveWikiPath(workspace, "20_wiki/_index.md"));
 }
-//# sourceMappingURL=write-strategy.js.map

package/dist/core/workdir.d.ts

@@ -93,6 +93,14 @@ export declare function createSessionWorkdir(projectRoot: string, eventType: str
     /** Inbound DM message text for the *ForDm trigger-phrase fallback.
      *  Undefined / null for routine and scheduled events. */
     messageText?: string | null;
+    /** AGENT_DEFINITIONS_DESIGN.md §4.2 — the firing Agent's `tools.skills`,
+     *  composed onto the process-key bundle by `materializeSessionBundle`
+     *  (union, or replace when `skillsReplace`). Empty/undefined is a no-op.
+     *  This disposable path is the ONLY one that carries the override —
+     *  every Agent firing runs in a fresh temp dir created here. */
+    extraSkills?: readonly string[];
+    /** AGENT_DEFINITIONS_DESIGN.md §4.2 — `tools.skills_replace`. */
+    skillsReplace?: boolean;
 }): string;
 export declare function ensureSessionWorkdir(projectRoot: string, dataDir: string, dbSessionId: number, eventType: string, options?: {
     backendId?: BackendId;
@@ -163,7 +171,7 @@ export declare function cleanupStaleWorkdirs(dataDir: string, activeSessionIds:
  * pass `getContextDir(config, db)` — without it, a fallback re-materialize
  * for evening_review evaluates the gate as "rulebook inactive" and drops
  * `notify` from the fallback backend's manifest even when the operator's
- * `routines/evening.md` is active, breaking the contract that the
+ * `policies/routines/evening.md` is active, breaking the contract that the
  * fallback backend behaves identically to the main one
  * (`evening-review-slimdown.md` §3.5).
  */
@@ -274,4 +282,3 @@ export declare function buildConfiguredServices(config: {
     calendar?: unknown;
     github?: unknown;
 }): Set<string>;
-//# sourceMappingURL=workdir.d.ts.map