niahere 0.3.0 → 0.3.2

package/src/channels/whatsapp.ts

@@ -0,0 +1,376 @@
+/**
+ * WhatsApp channel via Twilio (Sandbox by default).
+ *
+ * Reuses the shared TwilioWebhookServer. Inbound webhook hits
+ * /twilio/whatsapp/incoming; we ack immediately (Twilio's 15s budget)
+ * and reply via REST under a per-sender lock.
+ *
+ * Parity targets with the Telegram channel: text + images + documents +
+ * voice notes (transcribed), /reset to start a new room, WhatsApp-flavored
+ * markdown for outbound, 4096-char chunking, [error] reporting, delivery
+ * status tracking. Outbound media is served from
+ * channels/twilio/media-cache via GET /twilio/media/<sha>.<ext>.
+ *
+ * Sandbox: in Twilio Console → Messaging → Try it out → WhatsApp, point
+ * the inbound webhook at `${PUBLIC_BASE_URL}/twilio/whatsapp/incoming`.
+ * Users opt in by sending `join <two-words>` to `+1 415 523 8886`. Opt-in
+ * expires after 72h of inactivity; the join code stays valid. Outbound
+ * is further gated by Meta's 24-hour customer-service window.
+ */
+import { getMcpServers } from "../mcp";
+import { Message } from "../db/models";
+import { runMigrations } from "../db/migrate";
+import { chainLock, openChatEngine, rotateRoom } from "./common/chat-session";
+import type { Attachment, Channel, ChatState, Outbound, TwilioConfig, WhatsappConfig, PhoneConfig } from "../types";
+import { getConfig } from "../utils/config";
+import { log } from "../utils/log";
+import { classifyMime, prepareImage, validateAttachment } from "../utils/attachment";
+import { sendMessage as twilioSendMessage } from "./twilio/rest";
+import { getTwilioServer } from "./twilio/server";
+import { downloadInboundMedia, extractMedia } from "./twilio/media";
+import { transcribeAudio } from "./twilio/transcribe";
+
+const TWENTY_FOUR_HOURS_MS = 24 * 60 * 60 * 1000;
+const WA_PREFIX = "whatsapp:";
+const EMPTY_TWIML = '<?xml version="1.0" encoding="UTF-8"?><Response></Response>';
+const CHUNK_LIMIT = 4096;
+const RESET_RE = /^\s*\/(reset|new)\s*$/i;
+const VOICE_MIME_PREFIX = "audio/";
+
+class WhatsAppChannel implements Channel {
+  name = "whatsapp" as const;
+  private readonly twilio: TwilioConfig;
+  private readonly whatsapp: WhatsappConfig;
+  private readonly phone: PhoneConfig;
+  private readonly chats = new Map<string, ChatState>();
+  private readonly lastInboundAt = new Map<string, number>();
+
+  constructor(twilio: TwilioConfig, whatsapp: WhatsappConfig, phone: PhoneConfig) {
+    this.twilio = twilio;
+    this.whatsapp = whatsapp;
+    this.phone = phone;
+  }
+
+  async start(): Promise<void> {
+    await runMigrations();
+
+    const server = getTwilioServer();
+    server.configure({
+      port: this.twilio.port,
+      publicBaseUrl: this.twilio.public_base_url,
+      signingToken: this.twilio.auth_token || this.twilio.secret,
+    });
+
+    server.registerHttp("/twilio/whatsapp/incoming", (_req, ctx) => this.handleInbound(ctx.params), {
+      dedupOn: "MessageSid",
+      rateLimitOn: "From",
+    });
+    server.registerHttp("/twilio/whatsapp/status", (_req, ctx) => this.handleStatus(ctx.params), {
+      dedupOn: "MessageSid",
+    });
+
+    if (this.twilio.owner_number) {
+      server.exemptFromRateLimit(`${WA_PREFIX}${this.twilio.owner_number}`);
+    }
+
+    await server.start();
+
+    log.info(
+      {
+        from: this.whatsapp.from_number,
+        owner: this.twilio.owner_number,
+        publicBaseUrl: this.twilio.public_base_url,
+      },
+      "whatsapp channel started",
+    );
+  }
+
+  async stop(): Promise<void> {
+    for (const state of this.chats.values()) state.engine.close();
+    this.chats.clear();
+  }
+
+  /** Outbound to the owner — used by send_message MCP tool. WhatsApp has no threading. */
+  async deliver(out: Outbound): Promise<void> {
+    if (!this.twilio.owner_number) throw new Error("whatsapp: owner_number not set");
+    const to = this.twilio.owner_number;
+    if (out.media) {
+      await this.sendMediaTo(to, Buffer.from(out.media.data), out.media.mimeType, out.media.filename);
+    }
+    if (out.text) {
+      await this.sendTextTo(to, out.text);
+    }
+  }
+
+  // --- Inbound webhook ---
+
+  private async handleInbound(params: Record<string, string>): Promise<Response> {
+    const from = (params.From || "").replace(/^whatsapp:/, "");
+    const body = (params.Body || "").trim();
+
+    if (!this.isAllowed(from)) {
+      log.warn({ from }, "whatsapp: rejecting non-allowlisted sender");
+      return new Response(EMPTY_TWIML, { status: 200, headers: { "Content-Type": "text/xml" } });
+    }
+
+    this.lastInboundAt.set(from, Date.now());
+
+    if (RESET_RE.test(body)) {
+      // Serialize through the same lock so a /reset chasing an in-flight
+      // engine.send() waits its turn instead of yanking the engine away.
+      const state = await this.getState(from);
+      chainLock(state, async () => {
+        const newState = await this.restartChat(from);
+        await this.sendTextTo(from, `New conversation started (room ${this.roomPrefix(from)}-${newState.roomIndex}).`);
+      });
+      return new Response(EMPTY_TWIML, { status: 200, headers: { "Content-Type": "text/xml" } });
+    }
+
+    const descriptors = extractMedia(params);
+
+    const state = await this.getState(from);
+    chainLock(state, async () => {
+      let userText = body;
+      let attachments: Attachment[] | undefined;
+
+      if (descriptors.length > 0) {
+        const downloaded = await downloadInboundMedia(descriptors, {
+          accountSid: this.twilio.sid!,
+          authSid: this.twilio.sid!,
+          authSecret: this.twilio.secret!,
+        });
+
+        const voiceParts: string[] = [];
+        const built: Attachment[] = [];
+
+        for (const item of downloaded) {
+          if (item.mime.startsWith(VOICE_MIME_PREFIX)) {
+            if (!this.phone.openai_api_key) {
+              voiceParts.push("[voice note: transcription unavailable — channels.phone.openai_api_key not set]");
+              continue;
+            }
+            try {
+              const transcript = await transcribeAudio({
+                apiKey: this.phone.openai_api_key,
+                data: item.data,
+                mime: item.mime,
+              });
+              voiceParts.push(transcript || "[empty voice note]");
+            } catch (err) {
+              log.error({ err, from }, "whatsapp: voice transcription failed");
+              voiceParts.push(
+                `[voice note: transcription failed — ${err instanceof Error ? err.message : String(err)}]`,
+              );
+            }
+            continue;
+          }
+
+          const error = validateAttachment(item.data);
+          if (error) {
+            log.warn({ from, mime: item.mime, error }, "whatsapp: rejecting attachment");
+            await this.sendTextTo(from, `[error] ${error}`).catch(() => {});
+            continue;
+          }
+
+          const attType = classifyMime(item.mime) || "file";
+          let data = item.data;
+          let mime = item.mime;
+          if (attType === "image") {
+            const prepared = await prepareImage(data, mime);
+            data = prepared.data;
+            mime = prepared.mimeType;
+          }
+          built.push({ type: attType, data, mimeType: mime });
+        }
+
+        if (voiceParts.length > 0) {
+          const joined = voiceParts.join("\n\n");
+          userText = userText ? `${userText}\n\n${joined}` : joined;
+        }
+        if (built.length > 0) attachments = built;
+      }
+
+      if (!userText && !attachments) {
+        log.debug({ from }, "whatsapp: empty inbound (no body, no usable media)");
+        return;
+      }
+
+      try {
+        const { result, messageId } = await state.engine.send(userText || "(media only)", {}, attachments);
+        const reply = result.trim() || "(no response)";
+        try {
+          await this.sendTextTo(from, reply);
+          if (messageId) await Message.updateDeliveryStatus(messageId, "sent").catch(() => {});
+        } catch (sendErr) {
+          if (messageId) await Message.updateDeliveryStatus(messageId, "failed").catch(() => {});
+          throw sendErr;
+        }
+      } catch (err) {
+        log.error({ err, from }, "whatsapp: engine error");
+        const errText = err instanceof Error ? err.message : String(err);
+        await this.sendTextTo(from, `[error] ${errText}`).catch(() => {});
+      }
+    });
+
+    return new Response(EMPTY_TWIML, { status: 200, headers: { "Content-Type": "text/xml" } });
+  }
+
+  private handleStatus(params: Record<string, string>): Response {
+    log.info(
+      {
+        messageSid: params.MessageSid,
+        status: params.MessageStatus,
+        errorCode: params.ErrorCode,
+        to: params.To,
+      },
+      "whatsapp: delivery status",
+    );
+    return new Response("", { status: 204 });
+  }
+
+  // --- Outbound ---
+
+  private async sendTextTo(remoteE164: string, body: string): Promise<void> {
+    if (!this.canSend(remoteE164)) return;
+    const converted = toWhatsAppMarkdown(body);
+    const chunks = chunkText(converted, CHUNK_LIMIT);
+    for (const chunk of chunks) {
+      await this.postMessage(remoteE164, chunk, undefined);
+    }
+  }
+
+  private async sendMediaTo(remoteE164: string, data: Buffer, mimeType: string, filename?: string): Promise<void> {
+    if (!this.canSend(remoteE164)) return;
+    const ext = filename ? extOf(filename) : undefined;
+    let mediaUrl: string;
+    try {
+      mediaUrl = await getTwilioServer().serveMedia(new Uint8Array(data), mimeType, ext);
+    } catch (err) {
+      log.error({ err }, "whatsapp: serveMedia failed");
+      return;
+    }
+    await this.postMessage(remoteE164, "", [mediaUrl]);
+  }
+
+  private async postMessage(remoteE164: string, body: string, mediaUrl: string[] | undefined): Promise<void> {
+    try {
+      const res = await twilioSendMessage({
+        accountSid: this.twilio.sid!,
+        authSid: this.twilio.sid!,
+        authSecret: this.twilio.secret!,
+        to: `${WA_PREFIX}${remoteE164}`,
+        from: `${WA_PREFIX}${this.whatsapp.from_number}`,
+        body,
+        mediaUrl,
+        statusCallbackUrl: this.twilio.public_base_url
+          ? `${this.twilio.public_base_url}/twilio/whatsapp/status`
+          : undefined,
+      });
+      log.info({ to: remoteE164, sid: res.messageSid, status: res.status, hasMedia: !!mediaUrl }, "whatsapp: sent");
+    } catch (err) {
+      log.error({ err, to: remoteE164 }, "whatsapp: send failed");
+      throw err;
+    }
+  }
+
+  /** Returns true if we have credentials AND we're inside the 24h window. */
+  private canSend(remoteE164: string): boolean {
+    if (!this.twilio.sid || !this.twilio.secret) {
+      log.warn("whatsapp: twilio sid/secret missing, cannot send");
+      return false;
+    }
+    if (!this.whatsapp.from_number) {
+      log.warn("whatsapp: from_number not configured");
+      return false;
+    }
+    const lastIn = this.lastInboundAt.get(remoteE164);
+    const now = Date.now();
+    if (!lastIn || now - lastIn > TWENTY_FOUR_HOURS_MS) {
+      log.warn(
+        {
+          remoteE164,
+          lastInboundAt: lastIn ? new Date(lastIn).toISOString() : null,
+        },
+        "whatsapp: outside 24h customer-service window — drop (Twilio rejects free-form; approved template needed)",
+      );
+      return false;
+    }
+    return true;
+  }
+
+  // --- Helpers ---
+
+  private isAllowed(remoteE164: string): boolean {
+    if (this.twilio.owner_number && remoteE164 === this.twilio.owner_number) return true;
+    return this.twilio.allowlist.includes(remoteE164);
+  }
+
+  private roomPrefix(remoteE164: string): string {
+    return `wa-${remoteE164}`;
+  }
+
+  private async getState(remoteE164: string): Promise<ChatState> {
+    let state = this.chats.get(remoteE164);
+    if (state) return state;
+    state = await openChatEngine(this.roomPrefix(remoteE164), () => ({
+      channel: "whatsapp",
+      mcpServers: getMcpServers(),
+    }));
+    this.chats.set(remoteE164, state);
+    return state;
+  }
+
+  private async restartChat(remoteE164: string): Promise<ChatState> {
+    const state = await rotateRoom(this.roomPrefix(remoteE164), this.chats.get(remoteE164), () => ({
+      channel: "whatsapp",
+      mcpServers: getMcpServers(),
+    }));
+    this.chats.set(remoteE164, state);
+    return state;
+  }
+}
+
+/**
+ * Translate the slice of Markdown the agent uses to WhatsApp's flavor.
+ * WhatsApp's renderer accepts `*bold*`, `_italic_`, `~strike~`, and
+ * triple-backtick code blocks. We only rewrite forms that would render
+ * as literal punctuation otherwise (`**bold**`, `~~strike~~`); single
+ * `*italic*` is left alone since detecting it without false positives
+ * around bold is more trouble than it's worth.
+ */
+export function toWhatsAppMarkdown(text: string): string {
+  return text.replace(/\*\*(.+?)\*\*/gs, "*$1*").replace(/~~(.+?)~~/gs, "~$1~");
+}
+
+/** Split text into chunks bounded by `limit` chars, preferring paragraph then line breaks. */
+export function chunkText(text: string, limit: number): string[] {
+  if (text.length <= limit) return [text];
+  const chunks: string[] = [];
+  let remaining = text;
+  while (remaining.length > limit) {
+    let cut = remaining.lastIndexOf("\n\n", limit);
+    if (cut < limit / 2) cut = remaining.lastIndexOf("\n", limit);
+    if (cut < limit / 2) cut = remaining.lastIndexOf(" ", limit);
+    if (cut <= 0) cut = limit;
+    chunks.push(remaining.slice(0, cut).trimEnd());
+    remaining = remaining.slice(cut).trimStart();
+  }
+  if (remaining.length > 0) chunks.push(remaining);
+  return chunks;
+}
+
+function extOf(filename: string): string | undefined {
+  const dot = filename.lastIndexOf(".");
+  if (dot < 0 || dot === filename.length - 1) return undefined;
+  return filename.slice(dot + 1).toLowerCase();
+}
+
+export function createWhatsAppChannel(): WhatsAppChannel | null {
+  const { twilio, whatsapp, phone } = getConfig().channels;
+  if (!whatsapp.enabled) return null;
+  if (!twilio.sid || !twilio.secret) return null;
+  if (!whatsapp.from_number) return null;
+  return new WhatsAppChannel(twilio, whatsapp, phone);
+}
+
+export type { WhatsAppChannel };

package/src/chat/identity.ts

@@ -8,8 +8,7 @@ import { getEmployeesSummary } from "../core/employees";
 import { Session } from "../db/models";
 import type { Mode } from "../types";
 
-// Re-export for backwards compat
-export { scanSkills as loadSkills, getSkillNames as loadSkillNames, type SkillInfo } from "../core/skills";
+export { type SkillInfo } from "../core/skills";
 
 function loadFile(dir: string, name: string): string {
   const filePath = join(dir, name);

package/src/cli/phone.ts

@@ -45,20 +45,20 @@ async function phoneCallCommand(): Promise<void> {
   const channel = createPhoneChannel();
   if (!channel) {
     fail(
-      "Phone channel not configured. Set channels.phone.{twilio_sid,twilio_secret,from_number} in ~/.niahere/config.yaml (also channels.phone.{openai_api_key,public_base_url} for the realtime voice loop). Env vars TWILIO_SID / TWILIO_SECRET / PHONE_FROM_NUMBER / OPENAI_API_KEY / PUBLIC_BASE_URL override if you prefer .env.",
+      "Phone channel not configured. Set channels.twilio.{sid,secret} and channels.phone.from_number in ~/.niahere/config.yaml (also channels.phone.openai_api_key and channels.twilio.public_base_url for the realtime voice loop). Env vars TWILIO_SID / TWILIO_SECRET / PHONE_FROM_NUMBER / OPENAI_API_KEY / PUBLIC_BASE_URL override if you prefer .env.",
     );
   }
 
   await channel!.start();
-  const cfg = getConfig().channels.phone;
-  console.log(`${ICON_PASS} phone server up on :${cfg.port}`);
-  if (!cfg.public_base_url) {
+  const { twilio, phone } = getConfig().channels;
+  console.log(`${ICON_PASS} phone server up on :${twilio.port}`);
+  if (!twilio.public_base_url) {
     console.log(`${ICON_WARN} public_base_url not set — Twilio cannot reach this server.`);
-    console.log(`         Start cloudflared (or your tunnel) and set channels.phone.public_base_url in config.yaml.`);
+    console.log(`         Start cloudflared (or your tunnel) and set channels.twilio.public_base_url in config.yaml.`);
     await channel!.stop();
     process.exit(1);
   }
-  if (!cfg.openai_api_key) {
+  if (!phone.openai_api_key) {
     console.log(`${ICON_WARN} openai_api_key not set — realtime voice loop will fall back to TwiML <Say>.`);
   }
 
@@ -91,17 +91,23 @@ async function phoneCallCommand(): Promise<void> {
 }
 
 function phoneStatusCommand(): void {
-  const cfg = getConfig().channels.phone;
+  const { twilio, phone, sms, whatsapp } = getConfig().channels;
   const lines = [
-    `from:           ${cfg.from_number ?? "(not set)"}`,
-    `owner:          ${cfg.owner_number ?? "(not set)"}`,
-    `allowlist:      ${cfg.allowlist.length ? cfg.allowlist.join(", ") : "(empty)"}`,
-    `port:           ${cfg.port}`,
-    `public_base_url:${cfg.public_base_url ?? "(not set)"}`,
-    `realtime_model: ${cfg.realtime_model}`,
-    `voice:          ${cfg.voice}`,
-    `twilio creds:   ${cfg.twilio_sid && cfg.twilio_secret ? "configured" : "MISSING"}`,
-    `openai key:     ${cfg.openai_api_key ? "configured" : "MISSING"}`,
+    `phone enabled:    ${phone.enabled}`,
+    `phone from:       ${phone.from_number ?? "(not set)"}`,
+    `sms enabled:      ${sms.enabled}`,
+    `sms from:         ${sms.from_number ?? `(defaults to phone: ${phone.from_number ?? "unset"})`}`,
+    `whatsapp enabled: ${whatsapp.enabled}`,
+    `whatsapp from:    ${whatsapp.from_number ?? "(not set)"}`,
+    `owner:            ${twilio.owner_number ?? "(not set)"}`,
+    `allowlist:        ${twilio.allowlist.length ? twilio.allowlist.join(", ") : "(empty)"}`,
+    `port:             ${twilio.port}`,
+    `public_base_url:  ${twilio.public_base_url ?? "(not set)"}`,
+    `realtime_model:   ${phone.realtime_model}`,
+    `voice:            ${phone.voice}`,
+    `twilio creds:     ${twilio.sid && twilio.secret ? "configured" : "MISSING"}`,
+    `twilio auth_token:${twilio.auth_token ? "configured" : "(falling back to secret)"}`,
+    `openai key:       ${phone.openai_api_key ? "configured" : "MISSING"}`,
   ];
   console.log(lines.join("\n"));
 }
@@ -119,11 +125,14 @@ function helpText(): string {
     "                                phone server, dials, waits, prints transcript.",
     "  status                        Show phone channel configuration.",
     "",
-    "Config lives in ~/.niahere/config.yaml under channels.phone:",
-    "  twilio_sid, twilio_secret, from_number          (required)",
-    "  openai_api_key, public_base_url                 (required for realtime voice loop)",
-    "  twilio_auth_token                               (required if twilio_sid is an API Key SID)",
-    "  port, voice, realtime_model, allowlist          (optional)",
+    "Config lives in ~/.niahere/config.yaml:",
+    "  channels.twilio.{sid, secret}                       (required)",
+    "  channels.phone.from_number                          (required)",
+    "  channels.phone.openai_api_key, channels.twilio.public_base_url",
+    "                                                      (required for realtime voice loop)",
+    "  channels.twilio.auth_token                          (required if sid is an API Key SID)",
+    "  channels.twilio.{owner_number, allowlist, port}     (optional)",
+    "  channels.phone.{voice, realtime_model}              (optional)",
     "",
     "Each field can be overridden by the matching env var (TWILIO_SID, OPENAI_API_KEY, etc.)",
     "if you prefer .env. See the nia-phone skill for full deploy walkthrough.",

package/src/commands/init.ts

@@ -215,14 +215,18 @@ export async function runInit(): Promise<void> {
       }
     }
 
-    // Phone (Twilio Voice + OpenAI Realtime)
+    // Phone (Twilio Voice + OpenAI Realtime). Shared Twilio creds (sid,
+    // secret, auth_token, owner_number, public_base_url) live under
+    // channels.twilio so SMS and WhatsApp can reuse them; voice-specific
+    // fields stay under channels.phone.
+    const exTw = (exCh.twilio || {}) as Record<string, unknown>;
     const exPh = (exCh.phone || {}) as Record<string, unknown>;
-    let phoneTwilioSid = (exPh.twilio_sid as string) || "";
-    let phoneTwilioSecret = (exPh.twilio_secret as string) || "";
-    let phoneTwilioAuthToken = (exPh.twilio_auth_token as string) || "";
+    let phoneTwilioSid = (exTw.sid as string) || "";
+    let phoneTwilioSecret = (exTw.secret as string) || "";
+    let phoneTwilioAuthToken = (exTw.auth_token as string) || "";
     let phoneFromNumber = (exPh.from_number as string) || "";
-    let phoneOwnerNumber = (exPh.owner_number as string) || "";
-    let phonePublicBaseUrl = (exPh.public_base_url as string) || "";
+    let phoneOwnerNumber = (exTw.owner_number as string) || "";
+    let phonePublicBaseUrl = (exTw.public_base_url as string) || "";
     let phoneOpenAiKey = (exPh.openai_api_key as string) || "";
     let phoneVoice = (exPh.voice as string) || "";
 
@@ -485,14 +489,13 @@ export async function runInit(): Promise<void> {
       channels.default = "slack";
     }
     if (phoneTwilioSid && phoneTwilioSecret && phoneFromNumber) {
-      const ph: Record<string, unknown> = {
-        twilio_sid: phoneTwilioSid,
-        twilio_secret: phoneTwilioSecret,
-        from_number: phoneFromNumber,
-      };
-      if (phoneTwilioAuthToken) ph.twilio_auth_token = phoneTwilioAuthToken;
-      if (phoneOwnerNumber) ph.owner_number = phoneOwnerNumber;
-      if (phonePublicBaseUrl) ph.public_base_url = phonePublicBaseUrl.replace(/\/$/, "");
+      const tw: Record<string, unknown> = { sid: phoneTwilioSid, secret: phoneTwilioSecret };
+      if (phoneTwilioAuthToken) tw.auth_token = phoneTwilioAuthToken;
+      if (phoneOwnerNumber) tw.owner_number = phoneOwnerNumber;
+      if (phonePublicBaseUrl) tw.public_base_url = phonePublicBaseUrl.replace(/\/$/, "");
+      channels.twilio = tw;
+
+      const ph: Record<string, unknown> = { from_number: phoneFromNumber };
       if (phoneOpenAiKey) ph.openai_api_key = phoneOpenAiKey;
       if (phoneVoice && phoneVoice !== "marin") ph.voice = phoneVoice;
       channels.phone = ph;

package/src/commands/service.ts

@@ -1,5 +1,5 @@
 import { existsSync, mkdirSync, writeFileSync, unlinkSync } from "fs";
-import { join } from "path";
+import { join, resolve } from "path";
 import { homedir } from "os";
 import { getPaths } from "../utils/paths";
 import { findDaemonPids } from "../core/daemon";
@@ -29,6 +29,9 @@ function plistPath(): string {
 function buildPlist(): string {
   const paths = getPaths();
   const [execPath, cliPath] = getExecCommand();
+  // Bun auto-loads .env from cwd. Without WorkingDirectory, launchd
+  // spawns the daemon with cwd=/ and any credentials in .env never load.
+  const workingDir = resolve(cliPath, "../../..");
 
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -42,6 +45,8 @@ function buildPlist(): string {
     <string>${cliPath}</string>
     <string>run</string>
   </array>
+  <key>WorkingDirectory</key>
+  <string>${workingDir}</string>
   <key>RunAtLoad</key>
   <true/>
   <key>KeepAlive</key>
@@ -108,6 +113,7 @@ function unitPath(): string {
 function buildUnit(): string {
   const paths = getPaths();
   const [execPath, cliPath] = getExecCommand();
+  const workingDir = resolve(cliPath, "../../..");
 
   return `[Unit]
 Description=nia personal AI assistant
@@ -115,6 +121,7 @@ After=network.target
 
 [Service]
 ExecStart=${execPath} ${cliPath} run
+WorkingDirectory=${workingDir}
 Restart=always
 RestartSec=5
 StandardOutput=append:${paths.daemonLog}
@@ -137,7 +144,10 @@ async function installSystemd(): Promise<void> {
   const reload = Bun.spawn(["systemctl", "--user", "daemon-reload"], { stdout: "pipe", stderr: "pipe" });
   await reload.exited;
 
-  const enable = Bun.spawn(["systemctl", "--user", "enable", "--now", SYSTEMD_UNIT], { stdout: "pipe", stderr: "pipe" });
+  const enable = Bun.spawn(["systemctl", "--user", "enable", "--now", SYSTEMD_UNIT], {
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   const exitCode = await enable.exited;
 
   if (exitCode !== 0) {
@@ -150,10 +160,17 @@ async function uninstallSystemd(): Promise<void> {
   const path = unitPath();
   if (!existsSync(path)) return;
 
-  const disable = Bun.spawn(["systemctl", "--user", "disable", "--now", SYSTEMD_UNIT], { stdout: "pipe", stderr: "pipe" });
+  const disable = Bun.spawn(["systemctl", "--user", "disable", "--now", SYSTEMD_UNIT], {
+    stdout: "pipe",
+    stderr: "pipe",
+  });
   await disable.exited;
 
-  try { unlinkSync(path); } catch { /* already gone */ }
+  try {
+    unlinkSync(path);
+  } catch {
+    /* already gone */
+  }
 
   const reload = Bun.spawn(["systemctl", "--user", "daemon-reload"], { stdout: "pipe", stderr: "pipe" });
   await reload.exited;
@@ -197,7 +214,7 @@ export async function restartService(opts: { force?: boolean } = {}): Promise<vo
     const path = plistPath();
     // Unload — sends SIGTERM and disables KeepAlive respawn
     const unload = Bun.spawn(["launchctl", "unload", path], { stdout: "pipe", stderr: "pipe" });
-    if (await unload.exited !== 0) {
+    if ((await unload.exited) !== 0) {
       const stderr = await new Response(unload.stderr).text();
       console.error(`  warning: launchctl unload failed: ${stderr.trim()}`);
     }
@@ -206,7 +223,7 @@ export async function restartService(opts: { force?: boolean } = {}): Promise<vo
     if (opts.force) clearForceShutdownRequest();
     // Load — starts a fresh single instance
     const load = Bun.spawn(["launchctl", "load", path], { stdout: "pipe", stderr: "pipe" });
-    if (await load.exited !== 0) {
+    if ((await load.exited) !== 0) {
       const stderr = await new Response(load.stderr).text();
       console.error(`  warning: launchctl load failed: ${stderr.trim()}`);
     }
@@ -227,6 +244,8 @@ async function waitForDaemonExit(timeoutMs: number): Promise<void> {
   }
   // Force kill any stragglers
   for (const pid of findDaemonPids()) {
-    try { process.kill(pid, "SIGKILL"); } catch {}
+    try {
+      process.kill(pid, "SIGKILL");
+    } catch {}
   }
 }