@waiaas/daemon 2.12.0-rc → 2.12.0-rc.3

package/dist/lifecycle/daemon-startup.js

@@ -9,7 +9,7 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { join, dirname } from 'node:path';
-import { WAIaaSError, BUILT_IN_RPC_DEFAULTS, RpcPool, safeJsonParse } from '@waiaas/core';
+import { WAIaaSError, BUILT_IN_RPC_DEFAULTS, RpcPool, safeJsonParse, ConsoleLogger } from '@waiaas/core';
 import { z } from 'zod';
 import { KillSwitchService } from '../services/kill-switch-service.js';
 import { AutoStopService } from '../services/autostop-service.js';
@@ -48,7 +48,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
         state._config = loadConfig(dataDir);
         // Acquire daemon lock (flock-like via proper-lockfile)
         await state.acquireDaemonLock(dataDir);
-        console.debug('Step 1: Config loaded, daemon lock acquired');
+        // Initialize daemon logger with config log_level (default: 'info')
+        const configLogLevel = (state._config.daemon.log_level ?? 'info');
+        state.logger = new ConsoleLogger('daemon', configLogLevel);
+        state.logger.debug('Step 1: Config loaded, daemon lock acquired');
     })(), 5_000, 'STEP1_CONFIG_LOCK');
     // ------------------------------------------------------------------
     // Step 2: Database initialization (30s, fail-fast)
@@ -72,7 +75,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             });
         }
         if (compatibility.action === 'migrate') {
-            console.debug('Step 2: Schema migration needed, applying...');
+            state.logger.debug('Step 2: Schema migration needed, applying...');
         }
         // Create all tables + run migrations (idempotent)
         pushSchema(sqlite);
@@ -86,9 +89,9 @@ export async function startDaemon(state, dataDir, masterPassword) {
         });
         const importResult = state._settingsService.importFromConfig();
         if (importResult.imported > 0) {
-            console.debug(`Step 2: Settings imported from config.toml (${importResult.imported} keys)`);
+            state.logger.debug(`Step 2: Settings imported from config.toml (${importResult.imported} keys)`);
         }
-        console.debug('Step 2: Database initialized');
+        state.logger.debug('Step 2: Database initialized');
     })(), 30_000, 'STEP2_DATABASE');
     // ------------------------------------------------------------------
     // Step 2b: Master password validation (fail-fast)
@@ -106,7 +109,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
                 console.error('Invalid master password.');
                 process.exit(1);
             }
-            console.debug('Step 2b: Master password verified (DB hash)');
+            state.logger.debug('Step 2b: Master password verified (DB hash)');
         }
         else {
             // Path B: No DB hash -> check for existing keystore files
@@ -153,10 +156,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
                     console.error('Invalid master password. Cannot decrypt existing wallets.');
                     process.exit(1);
                 }
-                console.debug('Step 2b: Master password verified (keystore migration)');
+                state.logger.debug('Step 2b: Master password verified (keystore migration)');
             }
             else {
-                console.debug('Step 2b: First install, no password validation needed');
+                state.logger.debug('Step 2b: First install, no password validation needed');
             }
             // Store hash in DB for future startups
             const hash = await argon2.hash(masterPassword, {
@@ -190,10 +193,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
         // v1.1: just verify keystore infrastructure is accessible
         // Full key decryption happens when agents are accessed
         if (masterPassword) {
-            console.debug('Step 3: Keystore infrastructure verified (master password provided)');
+            state.logger.debug('Step 3: Keystore infrastructure verified (master password provided)');
         }
         else {
-            console.debug('Step 3: Keystore infrastructure verified (no master password)');
+            state.logger.debug('Step 3: Keystore infrastructure verified (no master password)');
         }
     })(), 30_000, 'STEP3_KEYSTORE');
     // ------------------------------------------------------------------
@@ -229,13 +232,33 @@ export async function startDaemon(state, dataDir, masterPassword) {
                     state.rpcPool.register(network, [url]);
                 }
             }
-            // 3. Register built-in defaults (lower priority, appended after config URLs)
+            // 3. Seed Admin Settings rpc_pool.* URLs (higher priority than built-in defaults)
+            if (state._settingsService) {
+                const { SETTING_DEFINITIONS } = await import('../infrastructure/settings/setting-keys.js');
+                const rpcPoolKeys = SETTING_DEFINITIONS
+                    .filter(d => d.category === 'rpc_pool')
+                    .map(d => d.key);
+                for (const settingKey of rpcPoolKeys) {
+                    const raw = state._settingsService.get(settingKey);
+                    if (!raw || raw === '[]')
+                        continue;
+                    try {
+                        const parsed = JSON.parse(raw);
+                        if (!Array.isArray(parsed) || parsed.length === 0)
+                            continue;
+                        const network = settingKey.replace('rpc_pool.', '');
+                        state.rpcPool.register(network, parsed);
+                    }
+                    catch { /* skip invalid JSON */ }
+                }
+            }
+            // 4. Register built-in defaults (lower priority, appended after config + admin URLs)
             for (const [network, urls] of Object.entries(BUILT_IN_RPC_DEFAULTS)) {
                 state.rpcPool.register(network, [...urls]);
             }
-            // 4. Create AdapterPool with RpcPool
+            // 5. Create AdapterPool with RpcPool
             state.adapterPool = new AdapterPool(state.rpcPool);
-            console.debug(`Step 4: AdapterPool created with RpcPool (${state.rpcPool.getNetworks().length} networks seeded)`);
+            state.logger.debug(`Step 4: AdapterPool created with RpcPool (${state.rpcPool.getNetworks().length} networks seeded)`);
         })(), 10_000, 'STEP4_ADAPTER');
     }
     catch (err) {
@@ -257,7 +280,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             },
             onApproved: (txId) => state.handleApprovalApproved(txId),
         });
-        console.debug('Step 4b: Workflow instances created (DelayQueue + ApprovalWorkflow)');
+        state.logger.debug('Step 4b: Workflow instances created (DelayQueue + ApprovalWorkflow)');
     }
     // ------------------------------------------------------------------
     // Step 4c: JWT Secret Manager + master password hash
@@ -273,7 +296,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
         });
         // Create mutable ref for live password/hash updates (password change API)
         state.passwordRef = { password: masterPassword, hash: state.masterPasswordHash };
-        console.debug('Step 4c: JWT secret manager initialized, master password hashed');
+        state.logger.debug('Step 4c: JWT secret manager initialized, master password hashed');
     }
     // ------------------------------------------------------------------
     // Step 4c-2: KillSwitchService initialization
@@ -285,7 +308,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             eventBus: state.eventBus,
         });
         state.killSwitchService.ensureInitialized();
-        console.debug('Step 4c-2: KillSwitchService initialized');
+        state.logger.debug('Step 4c-2: KillSwitchService initialized');
     }
     // ------------------------------------------------------------------
     // Step 4d: Notification Service initialization (fail-soft)
@@ -353,7 +376,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             }
         }
         const channelNames = state.notificationService.getChannelNames();
-        console.debug(`Step 4d: NotificationService initialized (${channelNames.length} channels: ${channelNames.join(', ') || 'none'})`);
+        state.logger.debug(`Step 4d: NotificationService initialized (${channelNames.length} channels: ${channelNames.join(', ') || 'none'})`);
     }
     catch (err) {
         console.warn('Step 4d (fail-soft): NotificationService init warning:', err);
@@ -391,10 +414,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
             });
             if (autoStopConfig.enabled) {
                 state.autoStopService.start();
-                console.debug('Step 4c-3: AutoStop engine started');
+                state.logger.debug('Step 4c-3: AutoStop engine started');
             }
             else {
-                console.debug('Step 4c-3: AutoStop engine disabled');
+                state.logger.debug('Step 4c-3: AutoStop engine disabled');
             }
         }
     }
@@ -421,7 +444,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
                 version: daemonVersion,
                 dataDir,
             });
-            console.debug('Step 4c-3b: AdminStatsService created');
+            state.logger.debug('Step 4c-3b: AdminStatsService created');
         }
     }
     catch (err) {
@@ -450,10 +473,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
             });
             if (monitorConfig.enabled) {
                 state.balanceMonitorService.start();
-                console.debug('Step 4c-4: Balance monitor started');
+                state.logger.debug('Step 4c-4: Balance monitor started');
             }
             else {
-                console.debug('Step 4c-4: Balance monitor disabled');
+                state.logger.debug('Step 4c-4: Balance monitor disabled');
             }
         }
     }
@@ -488,10 +511,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
             });
             state.telegramBotService.start();
             state.telegramBotRef.current = state.telegramBotService;
-            console.debug('Step 4c-5: Telegram Bot started');
+            state.logger.debug('Step 4c-5: Telegram Bot started');
         }
         else {
-            console.debug('Step 4c-5: Telegram Bot disabled');
+            state.logger.debug('Step 4c-5: Telegram Bot disabled');
         }
     }
     catch (err) {
@@ -512,10 +535,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
             });
             await state.wcSessionService.initialize();
             state.wcServiceRef.current = state.wcSessionService;
-            console.debug('Step 4c-6: WalletConnect service initialized');
+            state.logger.debug('Step 4c-6: WalletConnect service initialized');
         }
         else {
-            console.debug('Step 4c-6: WalletConnect disabled (no project_id)');
+            state.logger.debug('Step 4c-6: WalletConnect disabled (no project_id)');
         }
     }
     catch (err) {
@@ -536,7 +559,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
                 notificationService: state.notificationService ?? undefined,
                 eventBus: state.eventBus,
             });
-            console.debug('Step 4c-7: WcSigningBridge initialized');
+            state.logger.debug('Step 4c-7: WcSigningBridge initialized');
         }
     }
     catch (err) {
@@ -588,7 +611,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             // Inject signResponseHandler into TelegramBotService for /sign_response command (GAP-2: CHAN-04)
             if (state.telegramBotService) {
                 state.telegramBotService.setSignResponseHandler(signResponseHandler);
-                console.debug('Step 4c-8: signResponseHandler injected into TelegramBotService');
+                state.logger.debug('Step 4c-8: signResponseHandler injected into TelegramBotService');
             }
             // Wallet Notification Side Channel (v2.7)
             const walletNotifChannel = new WalletNotificationChannel({
@@ -596,11 +619,11 @@ export async function startDaemon(state, dataDir, masterPassword) {
                 settingsService: state._settingsService,
             });
             state.notificationService?.setWalletNotificationChannel(walletNotifChannel);
-            console.debug('Step 4c-8: WalletNotificationChannel injected into NotificationService');
-            console.debug('Step 4c-8: Signing SDK initialized (ApprovalChannelRouter + channels)');
+            state.logger.debug('Step 4c-8: WalletNotificationChannel injected into NotificationService');
+            state.logger.debug('Step 4c-8: Signing SDK initialized (ApprovalChannelRouter + channels)');
         }
         else {
-            console.debug('Step 4c-8: Signing SDK disabled');
+            state.logger.debug('Step 4c-8: Signing SDK disabled');
         }
     }
     catch (err) {
@@ -718,10 +741,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
                     config: monitorConfig,
                 });
                 await state.incomingTxMonitorService.start();
-                console.debug('Step 4c-9: Incoming TX monitor started');
+                state.logger.debug('Step 4c-9: Incoming TX monitor started');
             }
             else {
-                console.debug('Step 4c-9: Incoming TX monitor disabled');
+                state.logger.debug('Step 4c-9: Incoming TX monitor disabled');
             }
         }
     }
@@ -756,7 +779,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
                     void state.executeFromStage4(txId, walletId);
                 },
             });
-            console.debug('Step 4c-10: AsyncPollingService initialized (with callbacks)');
+            state.logger.debug('Step 4c-10: AsyncPollingService initialized (with callbacks)');
         }
     }
     catch (err) {
@@ -777,10 +800,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
                     rpcPool: state.rpcPool ?? undefined,
                 });
                 state.positionTracker.start();
-                console.debug('Step 4c-10.5: Position tracker started');
+                state.logger.debug('Step 4c-10.5: Position tracker started');
             }
             else {
-                console.debug('Step 4c-10.5: Position tracker disabled');
+                state.logger.debug('Step 4c-10.5: Position tracker disabled');
             }
         }
     }
@@ -832,7 +855,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             state.defiMonitorService.register(marginMonitor);
         }
         state.defiMonitorService.start();
-        console.debug('Step 4c-11: DeFi monitor service started with', state.defiMonitorService.monitorCount, 'monitors');
+        state.logger.debug(`Step 4c-11: DeFi monitor service started with ${state.defiMonitorService.monitorCount} monitors`);
     }
     catch (err) {
         console.warn('Step 4c-11 (fail-soft): DeFi monitor service init warning:', err);
@@ -857,7 +880,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             cache: priceCache,
             crossValidationThreshold,
         });
-        console.debug(`Step 4e: PriceOracle initialized (Pyth primary${coingeckoOracle ? ' + CoinGecko fallback' : ''})`);
+        state.logger.debug(`Step 4e: PriceOracle initialized (Pyth primary${coingeckoOracle ? ' + CoinGecko fallback' : ''})`);
     }
     catch (err) {
         console.warn('Step 4e (fail-soft): PriceOracle init warning:', err);
@@ -874,7 +897,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
         const coingeckoApiKey = state._settingsService?.get('oracle.coingecko_api_key') ?? '';
         const forexProvider = new CoinGeckoForexProvider(coingeckoApiKey);
         state.forexRateService = new ForexRateService({ forexProvider, cache: forexCache });
-        console.debug('Step 4e-2: ForexRateService initialized (30min cache)');
+        state.logger.debug('Step 4e-2: ForexRateService initialized (30min cache)');
     }
     catch (err) {
         console.warn('Step 4e-2 (fail-soft): ForexRateService init warning:', err);
@@ -923,9 +946,15 @@ export async function startDaemon(state, dataDir, masterPassword) {
         state.rpcCaller = rpcCaller;
         // Register built-in action providers from @waiaas/actions (reads from SettingsService)
         const { registerBuiltInProviders } = await import('@waiaas/actions');
-        const { ConsoleLogger } = await import('@waiaas/core');
-        const actionLogger = new ConsoleLogger('actions');
-        const builtIn = registerBuiltInProviders(state.actionProviderRegistry, state._settingsService, { rpcCaller, logger: actionLogger });
+        const actionDebugEnv = process.env.WAIAAS_ACTION_DEBUG === 'true';
+        const actionLogLevel = actionDebugEnv ? 'debug' : state.logger.level;
+        const actionLogger = new ConsoleLogger('actions', actionLogLevel);
+        // #419/#420: Pass RPC URL resolver + failure reporter so Kamino/Drift use pool rotation on 429
+        const rpcPool = state.rpcPool;
+        const sSvc = state._settingsService;
+        const solanaRpcResolver = () => resolveRpcUrlFromPool(rpcPool, sSvc.get.bind(sSvc), 'solana', 'solana-mainnet');
+        const reportSolanaRpcFailure = (url) => rpcPool?.reportFailure('solana-mainnet', url);
+        const builtIn = registerBuiltInProviders(state.actionProviderRegistry, sSvc, { rpcCaller, logger: actionLogger, solanaRpcResolver, reportSolanaRpcFailure });
         // Capture HyperliquidMarketData for HTTP routes (Phase 349)
         if (builtIn.hyperliquidMarketData) {
             state.hyperliquidMarketData = builtIn.hyperliquidMarketData;
@@ -980,7 +1009,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
                 state.actionProviderRegistry.register(pmInfra.orderProvider);
                 state.actionProviderRegistry.register(pmInfra.ctfProvider);
                 state.polymarketInfra = pmInfra;
-                console.debug('Step 4f-pm: Polymarket providers registered (order + ctf)');
+                state.logger.debug('Step 4f-pm: Polymarket providers registered (order + ctf)');
             }
             catch (err) {
                 console.warn('Step 4f-pm (fail-soft): Polymarket registration failed:', err);
@@ -990,10 +1019,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
         const actionsDir = join(dataDir, 'actions');
         if (existsSync(actionsDir)) {
             const result = await state.actionProviderRegistry.loadPlugins(actionsDir);
-            console.debug(`Step 4f: ActionProviderRegistry initialized (${builtIn.loaded.length} built-in, ${result.loaded.length} plugins loaded, ${result.failed.length} failed)`);
+            state.logger.debug(`Step 4f: ActionProviderRegistry initialized (${builtIn.loaded.length} built-in, ${result.loaded.length} plugins loaded, ${result.failed.length} failed)`);
         }
         else {
-            console.debug(`Step 4f: ActionProviderRegistry initialized (${builtIn.loaded.length} built-in, no plugins directory)`);
+            state.logger.debug(`Step 4f: ActionProviderRegistry initialized (${builtIn.loaded.length} built-in, no plugins directory)`);
         }
     }
     catch (err) {
@@ -1015,7 +1044,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             };
             state._asyncPollingService.registerTracker(new BridgeStatusTracker(lifiConfig));
             state._asyncPollingService.registerTracker(new BridgeMonitoringTracker(lifiConfig));
-            console.debug('Step 4f-2: Bridge status trackers registered (bridge + bridge-monitoring)');
+            state.logger.debug('Step 4f-2: Bridge status trackers registered (bridge + bridge-monitoring)');
         }
         catch (err) {
             console.warn('Step 4f-2 (fail-soft): Bridge tracker registration failed:', err);
@@ -1038,7 +1067,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             };
             state._asyncPollingService.registerTracker(new AcrossBridgeStatusTracker(acrossConfig));
             state._asyncPollingService.registerTracker(new AcrossBridgeMonitoringTracker(acrossConfig));
-            console.debug('Step 4f-2a: Across bridge status trackers registered (across-bridge + across-bridge-monitoring)');
+            state.logger.debug('Step 4f-2a: Across bridge status trackers registered (across-bridge + across-bridge-monitoring)');
         }
         catch (err) {
             console.warn('Step 4f-2a (fail-soft): Across bridge tracker registration failed:', err);
@@ -1052,12 +1081,12 @@ export async function startDaemon(state, dataDir, masterPassword) {
             if (state._settingsService?.get('actions.lido_staking_enabled') === 'true') {
                 const { LidoWithdrawalTracker } = await import('@waiaas/actions');
                 state._asyncPollingService.registerTracker(new LidoWithdrawalTracker());
-                console.debug('Step 4f-3: Lido withdrawal tracker registered');
+                state.logger.debug('Step 4f-3: Lido withdrawal tracker registered');
             }
             if (state._settingsService?.get('actions.jito_staking_enabled') === 'true') {
                 const { JitoEpochTracker } = await import('@waiaas/actions');
                 state._asyncPollingService.registerTracker(new JitoEpochTracker());
-                console.debug('Step 4f-3: Jito epoch tracker registered');
+                state.logger.debug('Step 4f-3: Jito epoch tracker registered');
             }
         }
         catch (err) {
@@ -1073,10 +1102,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
             if (gasConditionEnabled) {
                 const { GasConditionTracker } = await import('../pipeline/gas-condition-tracker.js');
                 state._asyncPollingService.registerTracker(new GasConditionTracker());
-                console.debug('Step 4f-4: GasConditionTracker registered');
+                state.logger.debug('Step 4f-4: GasConditionTracker registered');
             }
             else {
-                console.debug('Step 4f-4: GasConditionTracker disabled');
+                state.logger.debug('Step 4f-4: GasConditionTracker disabled');
             }
         }
         catch (err) {
@@ -1093,10 +1122,10 @@ export async function startDaemon(state, dataDir, masterPassword) {
                 const provider = state.actionProviderRegistry.getProvider(meta.name);
                 if (provider && 'getPositions' in provider && 'getSupportedCategories' in provider && 'getProviderName' in provider) {
                     state.positionTracker.registerProvider(provider);
-                    console.debug(`Step 4f-5: Registered ${meta.name} with PositionTracker`);
+                    state.logger.debug(`Step 4f-5: Registered ${meta.name} with PositionTracker`);
                 }
             }
-            console.debug(`Step 4f-5: PositionTracker has ${state.positionTracker.providerCount} providers`);
+            state.logger.debug(`Step 4f-5: PositionTracker has ${state.positionTracker.providerCount} providers`);
             // Trigger immediate sync for all categories now that providers are registered
             if (state.positionTracker.providerCount > 0) {
                 void state.positionTracker.syncCategory('LENDING');
@@ -1118,7 +1147,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
         if (state.notificationService) {
             state._versionCheckService.setNotificationService(state.notificationService);
         }
-        console.debug('Step 4g: VersionCheckService created');
+        state.logger.debug('Step 4g: VersionCheckService created');
     }
     // ------------------------------------------------------------------
     // Step 4h: EncryptedBackupService (fail-soft)
@@ -1130,7 +1159,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             const backupDir = state._config.backup?.dir ?? 'backups';
             const backupsDir = isAbsolute(backupDir) ? backupDir : join(dataDir, backupDir);
             state._encryptedBackupService = new EncryptedBackupService(dataDir, backupsDir, state.sqlite);
-            console.debug('Step 4h: EncryptedBackupService created');
+            state.logger.debug('Step 4h: EncryptedBackupService created');
         }
     }
     catch (err) {
@@ -1143,7 +1172,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
         if (state.sqlite && state.eventBus) {
             const { WebhookService } = await import('../services/webhook-service.js');
             state.webhookService = new WebhookService(state.sqlite, state.eventBus, () => state.masterPassword);
-            console.debug('Step 4i: WebhookService created');
+            state.logger.debug('Step 4i: WebhookService created');
         }
     }
     catch (err) {
@@ -1171,6 +1200,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             incomingTxMonitorService: state.incomingTxMonitorService,
             actionProviderRegistryRef: { current: state.actionProviderRegistry },
             rpcCaller: state.rpcCaller ?? undefined,
+            daemonLogger: state.logger,
         });
         // [Phase 320] Create ReputationCacheService for REPUTATION_THRESHOLD policy evaluation
         const { ReputationCacheService } = await import('../services/erc8004/index.js');
@@ -1260,7 +1290,7 @@ export async function startDaemon(state, dataDir, masterPassword) {
             server.once('listening', onListening);
             server.once('error', onError);
         });
-        console.debug(`Step 5: HTTP server listening on ${hostname}:${port}`);
+        state.logger.debug(`Step 5: HTTP server listening on ${hostname}:${port}`);
     })(), 5_000, 'STEP5_HTTP_SERVER');
     // ------------------------------------------------------------------
     // Step 6: Background workers + PID (no timeout, fail-soft)
@@ -1455,7 +1485,7 @@ async function startWorkers(state, dataDir) {
                     const now = Math.floor(Date.now() / 1000);
                     const result = state.sqlite.prepare('DELETE FROM wallet_credentials WHERE expires_at IS NOT NULL AND expires_at < ?').run(now);
                     if (result.changes > 0) {
-                        console.log(`[credential-cleanup] Deleted ${result.changes} expired credential(s)`);
+                        state.logger.info(`[credential-cleanup] Deleted ${result.changes} expired credential(s)`);
                     }
                 }
             },
@@ -1480,10 +1510,10 @@ async function startWorkers(state, dataDir) {
                 runImmediately: true,
                 handler: async () => { await state._versionCheckService.check(); },
             });
-            console.debug('Step 6: Version check worker registered');
+            state.logger.debug('Step 6: Version check worker registered');
         }
         else {
-            console.debug('Step 6: Version check disabled');
+            state.logger.debug('Step 6: Version check disabled');
         }
         // Register backup worker (auto-backup scheduler)
         if (state._encryptedBackupService && state._config.backup.interval > 0) {
@@ -1498,10 +1528,10 @@ async function startWorkers(state, dataDir) {
                         return;
                     try {
                         const info = await backupService.createBackup(masterPwd);
-                        console.log(`Auto-backup created: ${info.filename} (${info.size} bytes)`);
+                        state.logger.info(`Auto-backup created: ${info.filename} (${info.size} bytes)`);
                         const pruned = backupService.pruneBackups(retentionCount);
                         if (pruned > 0) {
-                            console.log(`Auto-backup: pruned ${pruned} old backup(s), keeping ${retentionCount}`);
+                            state.logger.info(`Auto-backup: pruned ${pruned} old backup(s), keeping ${retentionCount}`);
                         }
                     }
                     catch (err) {
@@ -1509,17 +1539,17 @@ async function startWorkers(state, dataDir) {
                     }
                 },
             });
-            console.debug(`Step 6: Backup worker registered (interval=${state._config.backup.interval}s, retention=${retentionCount})`);
+            state.logger.debug(`Step 6: Backup worker registered (interval=${state._config.backup.interval}s, retention=${retentionCount})`);
         }
         else {
-            console.debug('Step 6: Backup worker disabled (interval=0 or no backup service)');
+            state.logger.debug('Step 6: Backup worker disabled (interval=0 or no backup service)');
         }
         state.workers.startAll();
         // Write PID file
         state.pidPath = join(dataDir, state._config.daemon.pid_file);
         writeFileSync(state.pidPath, String(process.pid), 'utf-8');
-        console.debug(`Step 6: Workers started, PID file written`);
-        console.log(`WAIaaS daemon ready on http://${state._config.daemon.hostname}:${state._config.daemon.port} (PID: ${process.pid})\n` +
+        state.logger.debug(`Step 6: Workers started, PID file written`);
+        state.logger.info(`WAIaaS daemon ready on http://${state._config.daemon.hostname}:${state._config.daemon.port} (PID: ${process.pid})\n` +
             `  Admin UI: http://${state._config.daemon.hostname}:${state._config.daemon.port}/admin`);
     }
     catch (err) {