@aitne/daemon 0.1.9 → 0.1.11

package/dist/services/mcp/probe.js

@@ -3,6 +3,7 @@ import { mkdir } from "node:fs/promises";
 import { join } from "node:path";
 import { randomUUID } from "node:crypto";
 import { toSafeErrorMessage } from "../../logging.js";
+import { resolveWin32Invocation } from "../../core/backends/cli-utils.js";
 const PROBE_TIMEOUT_MS = 10_000;
 /**
  * MCP protocol version we send in `initialize`. The three official clients
@@ -93,7 +94,32 @@ async function probeStdio(server, options, timeoutMs) {
     // required arrays, but the DB row can carry `args` as null, so only that
     // path is genuinely observable from tests.
     const env = buildStdioEnv(server.envKeys, options.secrets);
-    const child = spawn(server.command, server.args ?? [], {
+    // MCP stdio commands are overwhelmingly npx/uvx/pnpm launchers, which
+    // resolve to .cmd/.ps1 batch shims on Windows. The earlier stopgap used
+    // `shell: process.platform === "win32"`, which let cmd.exe re-parse
+    // metacharacters in the registered command/args (a corruption + injection
+    // surface for any DB-registered server whose command/args contain
+    // %VAR%/&/|/^). Instead route through the same injection-safe path
+    // runLineCommand uses: resolve the bare name via PATHEXT and launch a
+    // resolved `.cmd`/`.bat` through an explicit, hand-escaped `cmd.exe`
+    // wrapper with windowsVerbatimArguments. POSIX is byte-identical
+    // (resolveWin32Invocation is win32-only; the block below never runs, and
+    // windowsVerbatimArguments:false is inert there). The taskkill /T
+    // parent-pid walk in killTree still reaps the added cmd.exe wrapper.
+    let spawnCommand = server.command;
+    let spawnArgs = server.args ?? [];
+    let windowsVerbatim = false;
+    /* c8 ignore start — Windows-only .cmd/.bat shim resolution, untestable on POSIX CI. */
+    if (process.platform === "win32") {
+        const win = resolveWin32Invocation(server.command, server.args ?? []);
+        if (win) {
+            spawnCommand = win.command;
+            spawnArgs = win.args;
+            windowsVerbatim = win.windowsVerbatimArguments;
+        }
+    }
+    /* c8 ignore stop */
+    const child = spawn(spawnCommand, spawnArgs, {
         cwd: server.cwd ?? sandboxCwd,
         env,
         stdio: ["pipe", "pipe", "pipe"],
@@ -104,13 +130,9 @@ async function probeStdio(server, options, timeoutMs) {
         // hidden-window helps avoid a flashing console for child binaries.
         detached: process.platform !== "win32",
         windowsHide: true,
-        // MCP stdio commands are overwhelmingly npx/uvx/pnpm launchers, which
-        // resolve to .cmd/.ps1 batch shims on Windows; those need a shell to
-        // launch (shell:false spawn of a bare `npx` ENOENTs). POSIX keeps
-        // shell:false — bare npx/node resolve via PATH+exec-bit there. Same
-        // win32-gated pattern as scripts/run-node.mjs / bin/aitne.mjs spawns;
-        // the taskkill /T parent-pid walk above reaps the added cmd.exe wrapper.
-        shell: process.platform === "win32",
+        // The cmd.exe wrapper's args are pre-escaped for cmd.exe; tell Node not
+        // to re-quote them. Inert/false on POSIX and the direct-.exe path.
+        windowsVerbatimArguments: windowsVerbatim,
     });
     let settled = false;
     const stderrBuf = [];

package/dist/services/observations-batch.d.ts

@@ -58,7 +58,7 @@ export interface ProcessBatchResult {
 export declare function inferIntegrationKeyFromSource(source: string): IntegrationKey | null;
 /**
  * Normalize pre-pass mail payloads at the ingest chokepoint so the
- * hourly-check gate can read a canonical shape regardless of mode. See
+ * activity-scan gate can read a canonical shape regardless of mode. See
  * HOURLY_CHECK_GATE_REDESIGN_PLAN.md for the full rationale; the rules:
  *   - mail integration source AND `payload.raw.from` is a string → set
  *     `is_read = 0` and `from_email = <lowercased extracted address>`

package/dist/services/observations-batch.js

@@ -50,7 +50,7 @@ export function inferIntegrationKeyFromSource(source) {
 }
 /** Per-integration source prefixes whose pre-pass payload carries the
  *  mail shape (`payload.raw.from`, no `is_read`). Drives
- *  {@link normalizeMailObservationPayload} so the hourly-check gate can
+ *  {@link normalizeMailObservationPayload} so the activity-scan gate can
  *  read a canonical `is_read` + `from_email` shape regardless of mode. */
 const MAIL_OBSERVATION_INTEGRATION_KEYS = new Set(INTEGRATION_KEYS.filter((k) => {
     const partial = INTEGRATION_DESCRIPTORS[k].prePassPartial;
@@ -65,7 +65,7 @@ function extractEmailAddress(raw) {
 }
 /**
  * Normalize pre-pass mail payloads at the ingest chokepoint so the
- * hourly-check gate can read a canonical shape regardless of mode. See
+ * activity-scan gate can read a canonical shape regardless of mode. See
  * HOURLY_CHECK_GATE_REDESIGN_PLAN.md for the full rationale; the rules:
  *   - mail integration source AND `payload.raw.from` is a string → set
  *     `is_read = 0` and `from_email = <lowercased extracted address>`

package/dist/settings/runtime-settings.d.ts

@@ -13,7 +13,7 @@ import { z } from "zod";
  * contract — `chmod`, `chown`, destructive `git` flags. Allow mode skips
  * these per design, Safe mode keeps them.
  */
-export declare const DEFAULT_DISALLOWED_TOOLS: readonly ["Bash(rm -rf *)", "Bash(rm -rf /*)", "Bash(rm -rf ~*)", "Bash(rm -rf .*)", "Bash(rm -r *)", "Bash(rm -rf*)", "Bash(rm -rv*)", "Bash(rm -ri*)", "Bash(rm -rd*)", "Bash(rm -rI*)", "Bash(rm -fr*)", "Bash(rm -vr*)", "Bash(rm -ir*)", "Bash(rm -dr*)", "Bash(rm -Ir*)", "Bash(rm -R*)", "Bash(rm -fR*)", "Bash(rm -vR*)", "Bash(rm -iR*)", "Bash(rm -dR*)", "Bash(rm -IR*)", "Bash(rm --recursive*)", "Bash(rm --force --recursive*)", "Bash(rm --recursive --force*)", "Bash(sudo *)", "Bash(doas *)", "Bash(su *)", "Bash(curl * | sh*)", "Bash(curl * | bash*)", "Bash(wget * | sh*)", "Bash(wget * | bash*)", "Bash(bash <(*)*)", "Bash(sh <(*)*)", "Bash(bash<*)", "Bash(sh<*)", "Bash(eval *)", "Bash(source *)", "Bash(security *)", "Bash(secret-tool *)", "Bash(cmdkey *)", "Bash(certutil *)", "Bash(rundll32.exe *)", "Read(.env)", "Read(.env.*)", "Read(**/.env)", "Read(**/.env.*)", "Read(id_rsa*)", "Read(id_ed25519*)", "Read(~/.ssh/**)", "Read(~/.gnupg/**)", "Read(~/.aws/**)", "Read(~/.config/gcloud/**)", "Read(~/.config/gh/hosts.yml)", "Read(~/.netrc)", "Read(~/Library/Keychains/**)", "Read(~/.local/share/keyrings/**)", "Read(~/.personal-agent/backups/**)", "Read(~/.personal-agent/whatsapp/auth/**)", "Read(~/.personal-agent/secrets/**)", "Write(.env)", "Edit(.env)", "Write(.env.*)", "Edit(.env.*)", "Write(**/.env)", "Edit(**/.env)", "Write(**/.env.*)", "Edit(**/.env.*)", "Write(id_rsa*)", "Edit(id_rsa*)", "Write(id_ed25519*)", "Edit(id_ed25519*)", "Write(~/.ssh/**)", "Edit(~/.ssh/**)", "Write(~/.gnupg/**)", "Edit(~/.gnupg/**)", "Write(~/.aws/**)", "Edit(~/.aws/**)", "Write(~/.config/gcloud/**)", "Edit(~/.config/gcloud/**)", "Write(~/.config/gh/hosts.yml)", "Edit(~/.config/gh/hosts.yml)", "Write(~/.netrc)", "Edit(~/.netrc)", "Write(~/Library/Keychains/**)", "Edit(~/Library/Keychains/**)", "Write(~/.local/share/keyrings/**)", "Edit(~/.local/share/keyrings/**)", "Write(~/.personal-agent/backups/**)", "Edit(~/.personal-agent/backups/**)", "Write(~/.personal-agent/whatsapp/auth/**)", "Edit(~/.personal-agent/whatsapp/auth/**)", "Write(~/.personal-agent/secrets/**)", "Edit(~/.personal-agent/secrets/**)", "Bash(sqlite3 *)", "Bash(cp ~/Library/Application Support/Google/Chrome/*)", "Bash(cp ~/Library/Application Support/Chromium/*)", "Bash(cp ~/Library/Application Support/Microsoft Edge/*)", "Bash(cp ~/Library/Application Support/BraveSoftware/*)", "Bash(cp ~/Library/Application Support/Comet/*)", "Bash(cp ~/Library/Application Support/Perplexity Comet/*)", "Bash(cp ~/Library/Application Support/com.openai.atlas/*)", "Bash(cp ~/.config/google-chrome/*)", "Bash(cp ~/.config/chromium/*)", "Bash(cp ~/.config/microsoft-edge/*)", "Bash(cp ~/.config/BraveSoftware/*)", "Bash(cp ~/.config/Comet/*)", "Bash(cp ~/.var/app/com.google.Chrome/*)", "Bash(cp /mnt/c/Users/*)", "Bash(curl file://*)", "Read(~/Library/Application Support/Google/Chrome/**)", "Read(~/Library/Application Support/Chromium/**)", "Read(~/Library/Application Support/Microsoft Edge/**)", "Read(~/Library/Application Support/BraveSoftware/**)", "Read(~/Library/Application Support/Comet/**)", "Read(~/Library/Application Support/Perplexity Comet/**)", "Read(~/Library/Application Support/com.openai.atlas/**)", "Read(~/.config/google-chrome/**)", "Read(~/.config/chromium/**)", "Read(~/.config/microsoft-edge/**)", "Read(~/.config/BraveSoftware/**)", "Read(~/.config/Comet/**)", "Read(~/.var/app/com.google.Chrome/**)", "Read(/mnt/c/Users/**)", "Write(~/Library/Application Support/Google/Chrome/**)", "Edit(~/Library/Application Support/Google/Chrome/**)", "Write(~/Library/Application Support/Chromium/**)", "Edit(~/Library/Application Support/Chromium/**)", "Write(~/Library/Application Support/Microsoft Edge/**)", "Edit(~/Library/Application Support/Microsoft Edge/**)", "Write(~/Library/Application Support/BraveSoftware/**)", "Edit(~/Library/Application Support/BraveSoftware/**)", "Write(~/Library/Application Support/Comet/**)", "Edit(~/Library/Application Support/Comet/**)", "Write(~/Library/Application Support/Perplexity Comet/**)", "Edit(~/Library/Application Support/Perplexity Comet/**)", "Write(~/Library/Application Support/com.openai.atlas/**)", "Edit(~/Library/Application Support/com.openai.atlas/**)", "Write(~/.config/google-chrome/**)", "Edit(~/.config/google-chrome/**)", "Write(~/.config/chromium/**)", "Edit(~/.config/chromium/**)", "Write(~/.config/microsoft-edge/**)", "Edit(~/.config/microsoft-edge/**)", "Write(~/.config/BraveSoftware/**)", "Edit(~/.config/BraveSoftware/**)", "Write(~/.config/Comet/**)", "Edit(~/.config/Comet/**)", "Write(~/.var/app/com.google.Chrome/**)", "Edit(~/.var/app/com.google.Chrome/**)", "Write(/mnt/c/Users/**)", "Edit(/mnt/c/Users/**)", "Bash(cp ~/.personal-agent/chromium-*)", "Bash(mv ~/.personal-agent/chromium-*)", "Bash(tar ~/.personal-agent/chromium-*)", "Bash(zip ~/.personal-agent/chromium-*)", "Bash(rsync ~/.personal-agent/chromium-*)", "Bash(cp $HOME/.personal-agent/chromium-*)", "Bash(mv $HOME/.personal-agent/chromium-*)", "Bash(tar $HOME/.personal-agent/chromium-*)", "Bash(zip $HOME/.personal-agent/chromium-*)", "Bash(rsync $HOME/.personal-agent/chromium-*)", "Read(~/.personal-agent/chromium-sync/**)", "Read(~/.personal-agent/chromium-automation/**)", "Read(~/.personal-agent/chromium-automation-anon/**)", "Read(~/.personal-agent/chromium-automation-auth/**)", "Read(~/.personal-agent/chromium-automation-purchase/**)", "Write(~/.personal-agent/chromium-sync/**)", "Edit(~/.personal-agent/chromium-sync/**)", "Write(~/.personal-agent/chromium-automation/**)", "Edit(~/.personal-agent/chromium-automation/**)", "Write(~/.personal-agent/chromium-automation-anon/**)", "Edit(~/.personal-agent/chromium-automation-anon/**)", "Write(~/.personal-agent/chromium-automation-auth/**)", "Edit(~/.personal-agent/chromium-automation-auth/**)", "Write(~/.personal-agent/chromium-automation-purchase/**)", "Edit(~/.personal-agent/chromium-automation-purchase/**)", "CronCreate", "CronList", "CronDelete", "RemoteTrigger", "PushNotification", "Bash(chmod *)", "Bash(chown *)", "Bash(git push --force *)", "Bash(git push -f *)", "Bash(git reset --hard *)", "Bash(git clean *)"];
+export declare const DEFAULT_DISALLOWED_TOOLS: readonly ["Bash(rm -rf *)", "Bash(rm -rf /*)", "Bash(rm -rf ~*)", "Bash(rm -rf .*)", "Bash(rm -r *)", "Bash(rm -rf*)", "Bash(rm -rv*)", "Bash(rm -ri*)", "Bash(rm -rd*)", "Bash(rm -rI*)", "Bash(rm -fr*)", "Bash(rm -vr*)", "Bash(rm -ir*)", "Bash(rm -dr*)", "Bash(rm -Ir*)", "Bash(rm -R*)", "Bash(rm -fR*)", "Bash(rm -vR*)", "Bash(rm -iR*)", "Bash(rm -dR*)", "Bash(rm -IR*)", "Bash(rm --recursive*)", "Bash(rm --force --recursive*)", "Bash(rm --recursive --force*)", "Bash(sudo *)", "Bash(doas *)", "Bash(su *)", "Bash(curl * | sh*)", "Bash(curl * | bash*)", "Bash(wget * | sh*)", "Bash(wget * | bash*)", "Bash(bash <(*)*)", "Bash(sh <(*)*)", "Bash(bash<*)", "Bash(sh<*)", "Bash(eval *)", "Bash(source *)", "Bash(security *)", "Bash(secret-tool *)", "Bash(cmdkey *)", "Bash(certutil *)", "Bash(rundll32.exe *)", "Read(.env)", "Read(.env.*)", "Read(**/.env)", "Read(**/.env.*)", "Read(id_rsa*)", "Read(id_ed25519*)", "Read(~/.ssh/**)", "Read(~/.gnupg/**)", "Read(~/.aws/**)", "Read(~/.config/gcloud/**)", "Read(~/.config/gh/hosts.yml)", "Read(~/.netrc)", "Read(~/Library/Keychains/**)", "Read(~/.local/share/keyrings/**)", "Read(~/.personal-agent/backups/**)", "Read(~/.personal-agent/whatsapp/auth/**)", "Read(~/.personal-agent/secrets/**)", "Read(~/.claude/.credentials.json)", "Read(~/.claude.json)", "Read(~/.codex/auth.json)", "Read(~/.gemini/gemini-credentials.json)", "Read(~/.gemini/oauth_creds.json)", "Read(~/.config/anthropic/**)", "Write(.env)", "Edit(.env)", "Write(.env.*)", "Edit(.env.*)", "Write(**/.env)", "Edit(**/.env)", "Write(**/.env.*)", "Edit(**/.env.*)", "Write(id_rsa*)", "Edit(id_rsa*)", "Write(id_ed25519*)", "Edit(id_ed25519*)", "Write(~/.ssh/**)", "Edit(~/.ssh/**)", "Write(~/.gnupg/**)", "Edit(~/.gnupg/**)", "Write(~/.aws/**)", "Edit(~/.aws/**)", "Write(~/.config/gcloud/**)", "Edit(~/.config/gcloud/**)", "Write(~/.config/gh/hosts.yml)", "Edit(~/.config/gh/hosts.yml)", "Write(~/.netrc)", "Edit(~/.netrc)", "Write(~/Library/Keychains/**)", "Edit(~/Library/Keychains/**)", "Write(~/.local/share/keyrings/**)", "Edit(~/.local/share/keyrings/**)", "Write(~/.personal-agent/backups/**)", "Edit(~/.personal-agent/backups/**)", "Write(~/.personal-agent/whatsapp/auth/**)", "Edit(~/.personal-agent/whatsapp/auth/**)", "Write(~/.personal-agent/secrets/**)", "Edit(~/.personal-agent/secrets/**)", "Write(~/.claude/.credentials.json)", "Edit(~/.claude/.credentials.json)", "Write(~/.claude.json)", "Edit(~/.claude.json)", "Write(~/.codex/auth.json)", "Edit(~/.codex/auth.json)", "Write(~/.gemini/gemini-credentials.json)", "Edit(~/.gemini/gemini-credentials.json)", "Write(~/.gemini/oauth_creds.json)", "Edit(~/.gemini/oauth_creds.json)", "Write(~/.config/anthropic/**)", "Edit(~/.config/anthropic/**)", "Bash(sqlite3 *)", "Bash(cp ~/Library/Application Support/Google/Chrome/*)", "Bash(cp ~/Library/Application Support/Chromium/*)", "Bash(cp ~/Library/Application Support/Microsoft Edge/*)", "Bash(cp ~/Library/Application Support/BraveSoftware/*)", "Bash(cp ~/Library/Application Support/Comet/*)", "Bash(cp ~/Library/Application Support/Perplexity Comet/*)", "Bash(cp ~/Library/Application Support/com.openai.atlas/*)", "Bash(cp ~/.config/google-chrome/*)", "Bash(cp ~/.config/chromium/*)", "Bash(cp ~/.config/microsoft-edge/*)", "Bash(cp ~/.config/BraveSoftware/*)", "Bash(cp ~/.config/Comet/*)", "Bash(cp ~/.var/app/com.google.Chrome/*)", "Bash(cp /mnt/c/Users/*)", "Bash(curl file://*)", "Read(~/Library/Application Support/Google/Chrome/**)", "Read(~/Library/Application Support/Chromium/**)", "Read(~/Library/Application Support/Microsoft Edge/**)", "Read(~/Library/Application Support/BraveSoftware/**)", "Read(~/Library/Application Support/Comet/**)", "Read(~/Library/Application Support/Perplexity Comet/**)", "Read(~/Library/Application Support/com.openai.atlas/**)", "Read(~/.config/google-chrome/**)", "Read(~/.config/chromium/**)", "Read(~/.config/microsoft-edge/**)", "Read(~/.config/BraveSoftware/**)", "Read(~/.config/Comet/**)", "Read(~/.var/app/com.google.Chrome/**)", "Read(/mnt/c/Users/**)", "Write(~/Library/Application Support/Google/Chrome/**)", "Edit(~/Library/Application Support/Google/Chrome/**)", "Write(~/Library/Application Support/Chromium/**)", "Edit(~/Library/Application Support/Chromium/**)", "Write(~/Library/Application Support/Microsoft Edge/**)", "Edit(~/Library/Application Support/Microsoft Edge/**)", "Write(~/Library/Application Support/BraveSoftware/**)", "Edit(~/Library/Application Support/BraveSoftware/**)", "Write(~/Library/Application Support/Comet/**)", "Edit(~/Library/Application Support/Comet/**)", "Write(~/Library/Application Support/Perplexity Comet/**)", "Edit(~/Library/Application Support/Perplexity Comet/**)", "Write(~/Library/Application Support/com.openai.atlas/**)", "Edit(~/Library/Application Support/com.openai.atlas/**)", "Write(~/.config/google-chrome/**)", "Edit(~/.config/google-chrome/**)", "Write(~/.config/chromium/**)", "Edit(~/.config/chromium/**)", "Write(~/.config/microsoft-edge/**)", "Edit(~/.config/microsoft-edge/**)", "Write(~/.config/BraveSoftware/**)", "Edit(~/.config/BraveSoftware/**)", "Write(~/.config/Comet/**)", "Edit(~/.config/Comet/**)", "Write(~/.var/app/com.google.Chrome/**)", "Edit(~/.var/app/com.google.Chrome/**)", "Write(/mnt/c/Users/**)", "Edit(/mnt/c/Users/**)", "Bash(cp ~/.personal-agent/chromium-*)", "Bash(mv ~/.personal-agent/chromium-*)", "Bash(tar ~/.personal-agent/chromium-*)", "Bash(zip ~/.personal-agent/chromium-*)", "Bash(rsync ~/.personal-agent/chromium-*)", "Bash(cp $HOME/.personal-agent/chromium-*)", "Bash(mv $HOME/.personal-agent/chromium-*)", "Bash(tar $HOME/.personal-agent/chromium-*)", "Bash(zip $HOME/.personal-agent/chromium-*)", "Bash(rsync $HOME/.personal-agent/chromium-*)", "Read(~/.personal-agent/chromium-sync/**)", "Read(~/.personal-agent/chromium-automation/**)", "Read(~/.personal-agent/chromium-automation-anon/**)", "Read(~/.personal-agent/chromium-automation-auth/**)", "Read(~/.personal-agent/chromium-automation-purchase/**)", "Write(~/.personal-agent/chromium-sync/**)", "Edit(~/.personal-agent/chromium-sync/**)", "Write(~/.personal-agent/chromium-automation/**)", "Edit(~/.personal-agent/chromium-automation/**)", "Write(~/.personal-agent/chromium-automation-anon/**)", "Edit(~/.personal-agent/chromium-automation-anon/**)", "Write(~/.personal-agent/chromium-automation-auth/**)", "Edit(~/.personal-agent/chromium-automation-auth/**)", "Write(~/.personal-agent/chromium-automation-purchase/**)", "Edit(~/.personal-agent/chromium-automation-purchase/**)", "CronCreate", "CronList", "CronDelete", "RemoteTrigger", "PushNotification", "Bash(chmod *)", "Bash(chown *)", "Bash(git push --force *)", "Bash(git push -f *)", "Bash(git reset --hard *)", "Bash(git clean *)"];
 /**
  * Shape of a "watched git repository" — projected from the unified
  * `repositories` table by `selectGitWatchedRepos` for legacy consumers
@@ -137,6 +137,13 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     dmStalenessStrict: z.ZodDefault<z.ZodBoolean>;
     proactiveForwardChannelTimelineEnabled: z.ZodDefault<z.ZodBoolean>;
     proactiveForwardForceFreshSession: z.ZodDefault<z.ZodBoolean>;
+    feedbackLearningEnabled: z.ZodDefault<z.ZodBoolean>;
+    selfTuningEnabled: z.ZodDefault<z.ZodBoolean>;
+    feedbackPromotionThreshold: z.ZodDefault<z.ZodNumber>;
+    feedbackLessonMaxBytesGlobal: z.ZodDefault<z.ZodNumber>;
+    feedbackLessonMaxBytesPerAgent: z.ZodDefault<z.ZodNumber>;
+    feedbackLessonStaleDays: z.ZodDefault<z.ZodNumber>;
+    feedbackSignalRetentionDays: z.ZodDefault<z.ZodNumber>;
     agentDisplayName: z.ZodDefault<z.ZodString>;
     character: z.ZodDefault<z.ZodString>;
     timezone: z.ZodDefault<z.ZodString>;
@@ -146,19 +153,27 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     browserTaskPendingQueueTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
     browserTaskRespectQuietHours: z.ZodDefault<z.ZodBoolean>;
     browserTaskHostnameDenylist: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    hourlyCheckEnabled: z.ZodDefault<z.ZodBoolean>;
-    hourlyCheckIntervalMinutes: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckActiveStartHour: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckActiveEndHour: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckMinObservations: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckStage2Enabled: z.ZodDefault<z.ZodBoolean>;
-    hourlyCheckHeartbeatHours: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckLowSignalPendingCeiling: z.ZodDefault<z.ZodNumber>;
-    hourlyCheckPrePassFreshnessMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskMaxConcurrent: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskClarificationTtlMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskPendingQueueTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskDigestCadenceHours: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskDedupWindowMinutes: z.ZodDefault<z.ZodNumber>;
+    backgroundTaskResumeAcrossRestart: z.ZodDefault<z.ZodBoolean>;
+    autonomousForwardNaturalDelivery: z.ZodDefault<z.ZodBoolean>;
+    activityScanEnabled: z.ZodDefault<z.ZodBoolean>;
+    activityScanIntervalMinutes: z.ZodDefault<z.ZodNumber>;
+    activityScanActiveStartHour: z.ZodDefault<z.ZodNumber>;
+    activityScanActiveEndHour: z.ZodDefault<z.ZodNumber>;
+    activityScanMinObservations: z.ZodDefault<z.ZodNumber>;
+    activityScanStage2Enabled: z.ZodDefault<z.ZodBoolean>;
+    activityScanHeartbeatHours: z.ZodDefault<z.ZodNumber>;
+    activityScanLowSignalPendingCeiling: z.ZodDefault<z.ZodNumber>;
+    activityScanPrePassFreshnessMinutes: z.ZodDefault<z.ZodNumber>;
     authProbeDisabled: z.ZodDefault<z.ZodBoolean>;
     authPreflightFreshnessMs: z.ZodDefault<z.ZodNumber>;
     schedulePollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     maxBriefingDelayMinutes: z.ZodDefault<z.ZodNumber>;
+    ownerActivityIdleThresholdMinutes: z.ZodDefault<z.ZodNumber>;
     maxNotificationsPerHour: z.ZodDefault<z.ZodNumber>;
     maxNotificationsPerDay: z.ZodDefault<z.ZodNumber>;
     quietHoursStart: z.ZodDefault<z.ZodString>;
@@ -186,6 +201,11 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     }>>;
     opencodeBaseUrl: z.ZodDefault<z.ZodString>;
     opencodeServerUsername: z.ZodDefault<z.ZodString>;
+    preventSleepMode: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        ac: "ac";
+        always: "always";
+    }>>;
     obsidianDebounceSeconds: z.ZodDefault<z.ZodNumber>;
     gitPollIntervalSeconds: z.ZodDefault<z.ZodNumber>;
     gitPushOverdueMinutes: z.ZodDefault<z.ZodNumber>;
@@ -246,7 +266,7 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     mailIdleFallbackRecoveryMinutes: z.ZodDefault<z.ZodNumber>;
     mailMaxMessagesPerPoll: z.ZodDefault<z.ZodNumber>;
     mailAuthFailureRetryHours: z.ZodDefault<z.ZodNumber>;
-    hourlyObservationCharBudget: z.ZodDefault<z.ZodNumber>;
+    activityScanObservationCharBudget: z.ZodDefault<z.ZodNumber>;
     prePassMaxAttemptsPerIntegration: z.ZodDefault<z.ZodNumber>;
     prePassBackoffMs: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
     prePassRetryEscalationTier: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
@@ -281,8 +301,21 @@ export declare const runtimeSettingsSchema: z.ZodObject<{
     voiceTranscriptionPrimaryLanguage: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export type RuntimeSettings = z.infer<typeof runtimeSettingsSchema>;
-export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "monthlyReviewEnabled", "browserTaskMaxConcurrent", "browserTaskPendingQueueTimeoutMinutes", "browserTaskRespectQuietHours", "browserTaskHostnameDenylist", "hourlyCheckEnabled", "hourlyCheckIntervalMinutes", "hourlyCheckActiveStartHour", "hourlyCheckActiveEndHour", "hourlyCheckMinObservations", "hourlyCheckStage2Enabled", "hourlyCheckHeartbeatHours", "hourlyCheckLowSignalPendingCeiling", "hourlyCheckPrePassFreshnessMinutes", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "opencodeExecutionPermissionMode", "opencodeBaseUrl", "opencodeServerUsername", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "browserHistoryConsentAccepted", "browserHistoryBrowserOverrides", "browserHistoryCategories", "browserHistoryRetentionDays", "browserHistorySearchQueryRetentionDays", "browserHistoryLifecycle", "browserHistoryResearchDomainAllowlist", "browserHistoryResearchDomainDenylist", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "hourlyObservationCharBudget", "prePassMaxAttemptsPerIntegration", "prePassBackoffMs", "prePassRetryEscalationTier", "prePassFanOutConcurrency", "prePassMaxBudgetUsdPerIntegration", "prePassMaxBudgetUsdPerRoutine", "prePassRetryOnPartial", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled", "voiceTranscriptionPrimaryLanguage"];
+export declare const RUNTIME_SETTING_KEYS: readonly ["slackOwnerUserId", "telegramOwnerChatId", "discordOwnerUserId", "whatsappEnabled", "whatsappOwnerPhone", "whatsappAuthDir", "googleCalendarId", "notionDatabaseIds", "primaryVaultPath", "primaryVaultName", "externalObsidianVaultPath", "externalObsidianVaultName", "externalObsidianWatch", "gitAccounts", "advisorEnabled", "advisorModel", "enforceReadToken", "maxConcurrentSessions", "maxReactiveSessions", "delegatedProxyMaxConcurrent", "delegatedTaskModeEnabled", "delegatedTaskMaxPerDay", "delegatedTaskDefaultMaxToolCalls", "delegatedTaskDefaultMaxBudgetUsd", "delegatedTaskDefaultTimeoutMs", "delegatedTaskHeavyEnabled", "delegatedTaskStructuredOutputEnabled", "delegatedTaskSubprocessPoolEnabled", "delegatedTaskSubprocessPoolTtlSeconds", "delegatedTaskCacheEnabled", "delegatedTaskCacheTtlSeconds", "delegatedTaskCacheMaxEntries", "executeTimeoutMinutes", "sessionTimeoutDmMinutes", "sessionTimeoutChannelMinutes", "sessionTimeoutDashboardMinutes", "historyInjectionMaxMessages", "historyInjectionMaxTokens", "historyOtherSurfaceWindowMinutes", "dmStalenessStrict", "proactiveForwardChannelTimelineEnabled", "proactiveForwardForceFreshSession", "feedbackLearningEnabled", "selfTuningEnabled", "feedbackPromotionThreshold", "feedbackLessonMaxBytesGlobal", "feedbackLessonMaxBytesPerAgent", "feedbackLessonStaleDays", "feedbackSignalRetentionDays", "agentDisplayName", "character", "timezone", "dayBoundaryHour", "monthlyReviewEnabled", "browserTaskMaxConcurrent", "browserTaskPendingQueueTimeoutMinutes", "browserTaskRespectQuietHours", "browserTaskHostnameDenylist", "backgroundTaskMaxConcurrent", "backgroundTaskClarificationTtlMinutes", "backgroundTaskPendingQueueTimeoutMinutes", "backgroundTaskDigestCadenceHours", "backgroundTaskDedupWindowMinutes", "backgroundTaskResumeAcrossRestart", "autonomousForwardNaturalDelivery", "activityScanEnabled", "activityScanIntervalMinutes", "activityScanActiveStartHour", "activityScanActiveEndHour", "activityScanMinObservations", "activityScanStage2Enabled", "activityScanHeartbeatHours", "activityScanLowSignalPendingCeiling", "activityScanPrePassFreshnessMinutes", "authProbeDisabled", "authPreflightFreshnessMs", "schedulePollIntervalSeconds", "maxBriefingDelayMinutes", "ownerActivityIdleThresholdMinutes", "maxNotificationsPerHour", "maxNotificationsPerDay", "quietHoursStart", "quietHoursEnd", "batchIntervalMinutes", "primaryPlatform", "defaultNotificationPlatforms", "disallowedTools", "allowedToolsOverride", "claudeExecutionPermissionMode", "codexExecutionPermissionMode", "geminiExecutionPermissionMode", "opencodeExecutionPermissionMode", "opencodeBaseUrl", "opencodeServerUsername", "preventSleepMode", "obsidianDebounceSeconds", "gitPollIntervalSeconds", "gitPushOverdueMinutes", "gitProjectUpdateDebounceMinutes", "notionPollIntervalSeconds", "calendarPollIntervalSeconds", "gmailPollIntervalSeconds", "githubPollIntervalSeconds", "browserHistoryConsentAccepted", "browserHistoryBrowserOverrides", "browserHistoryCategories", "browserHistoryRetentionDays", "browserHistorySearchQueryRetentionDays", "browserHistoryLifecycle", "browserHistoryResearchDomainAllowlist", "browserHistoryResearchDomainDenylist", "mcpAutoProbeIntervalMinutes", "delegatedProbeIntervalMinutes", "enabledMailProviders", "mailPollIntervalSeconds", "mailIdleEnabled", "mailIdleInstabilityThreshold", "mailIdleFallbackRecoveryMinutes", "mailMaxMessagesPerPoll", "mailAuthFailureRetryHours", "activityScanObservationCharBudget", "prePassMaxAttemptsPerIntegration", "prePassBackoffMs", "prePassRetryEscalationTier", "prePassFanOutConcurrency", "prePassMaxBudgetUsdPerIntegration", "prePassMaxBudgetUsdPerRoutine", "prePassRetryOnPartial", "observationSummarizerEnabled", "observationSummarizerConcurrency", "observationSummarizerMaxCallsPerMinute", "observationSummarizerQueueLimit", "observationSummarizerTimeoutMs", "vipMailSenders", "outlookDeltaPageSize", "outlookGraphConcurrency", "imapReconnectBaseMs", "imapReconnectMaxMs", "autonomousDailyCostCapUsd", "autonomousMonthlyCostCapUsd", "primaryLanguage", "vaultMode", "useReviewDossiers", "useContextIndex", "voiceTranscriptionEnabled", "voiceTranscriptionPrimaryLanguage"];
 export type RuntimeSettingKey = (typeof RUNTIME_SETTING_KEYS)[number];
 export declare const INTERNAL_RUNTIME_SETTING_KEYS: readonly ["enforceReadToken", "useReviewDossiers", "useContextIndex"];
 export type InternalRuntimeSettingKey = (typeof INTERNAL_RUNTIME_SETTING_KEYS)[number];
 export declare function isRuntimeSettingKey(value: string): value is RuntimeSettingKey;
+/**
+ * v0.1.10 → v0.1.11: the "Hourly Check" agent became "Activity Scan" and its
+ * settings keys moved from `hourlyCheck*` / `hourlyObservationCharBudget` to
+ * `activityScan*`. Migration `0010-hourly-check-to-activity-scan` renames the
+ * persisted `settings` rows, but `loadPersistedSettings` runs BEFORE
+ * `runMigrations` (the merge is load-bearing for `getContextDir`, see
+ * bootstrap/db.ts), so on the first post-upgrade boot the rows still carry the
+ * legacy names when they are parsed. This map lets the settings store read
+ * them under the canonical key for that one boot (and tolerates DBs restored
+ * from old backups). Drop after a deprecation window once the migration has
+ * been in the wild for a few releases.
+ */
+export declare const LEGACY_RUNTIME_SETTING_KEY_ALIASES: Readonly<Record<string, RuntimeSettingKey>>;