fix(agents): resolve layer violations, security issues, add 9 test files

- decision-journal.ts: typed payload interfaces, remove EventBus/logger imports (L0 fix)
- context-layers.ts: local MemoryManagerLike/LearningMachineLike interfaces (L2 fix)
- executor.ts: DI + dynamic import + policy queue replaces static L4 import (L3 fix)
- e2e/runner.ts: shell injection sanitizer with VALID_PLAYWRIGHT_CATEGORIES allowlist
- gmail-receiver.ts: typed ImapMessagePart interface replaces any type
- scheduler.ts: stagger 4-way 7AM cron collision across unique times
- gateway.ts: emit system:ready event on start
- telegram bot.ts: emit user:active event on message
- 9 new test files: food-journal, youtube-tracker, shorts-pipeline, seo-engine,
  playwright-runner, transcript-processor, model-evolution-monitor,
  notification-pipeline
- Executor tests: inject PolicyEngine for synchronous permission checking
- pre-commit hook: add homebrew node@22 to PATH
- health-monitor test: fix flaky timing assertion

Author: ARI-Assistant

.husky/pre-commit

@@ -1 +1,3 @@
+#!/bin/sh
+export PATH="/opt/homebrew/opt/node@22/bin:$PATH"
 npm run scan:pii && npx lint-staged && npm run typecheck && npm test

src/agents/executor.ts

@@ -1,7 +1,15 @@
 import type { AuditLogger } from '../kernel/audit.js';
 import type { EventBus } from '../kernel/event-bus.js';
 import type { AgentId, TrustLevel, ToolDefinition } from '../kernel/types.js';
-import { PolicyEngine } from '../governance/policy-engine.js';
+// L3 Agents layer — cannot import L4 Governance statically (ADR-004).
+// PolicyEngine instantiation via dynamic import; interface uses kernel types (L1 — allowed).
+import type { ToolPolicy, PermissionCheckResult } from '../kernel/types.js';
+
+export interface PolicyEngineLike {
+  getPolicy(toolId: string): ToolPolicy | undefined;
+  checkPermissions(agentId: string, trustLevel: string, policy: ToolPolicy): PermissionCheckResult;
+  registerPolicy(policy: ToolPolicy): void;
+}
 import { ToolRegistry } from '../execution/tool-registry.js';
 import type { ToolHandler } from '../execution/types.js';
 import fs from 'node:fs/promises';
@@ -72,30 +80,40 @@ export class Executor {
   private activeExecutions = new Map<string, { startTime: number; sessionId?: string }>();
 
   /** PolicyEngine for separated permission decisions (Constitutional) */
-  private readonly policyEngine: PolicyEngine;
+  private policyEngine: PolicyEngineLike | null = null;
+
+  /** Policies queued before policyEngine initializes */
+  private _pendingPolicies: Array<ToolPolicy> = [];
 
   /** ToolRegistry for separated capability catalog */
   private readonly toolRegistry: ToolRegistry;
 
   private readonly MAX_CONCURRENT_EXECUTIONS = 10;
   private readonly DEFAULT_TIMEOUT_MS = 30000;
 
-  constructor(auditLogger: AuditLogger, eventBus: EventBus) {
+  constructor(auditLogger: AuditLogger, eventBus: EventBus, policyEngineOverride?: PolicyEngineLike) {
     this.auditLogger = auditLogger;
     this.eventBus = eventBus;
-
-    // Initialize constitutional governance components
-    this.policyEngine = new PolicyEngine(auditLogger, eventBus);
     this.toolRegistry = new ToolRegistry(auditLogger, eventBus);
 
-    // Register built-in tools
-    this.registerBuiltInTools();
+    if (policyEngineOverride) {
+      // Synchronous path — used in tests for deterministic behavior
+      this.policyEngine = policyEngineOverride;
+      this.registerBuiltInTools();
+    } else {
+      // Production path — deferred L4 import (ADR-004: L3 cannot statically import L4)
+      this.registerBuiltInTools(); // tools registered; policies queued until policyEngine loads
+      void import('../governance/policy-engine.js').then(({ PolicyEngine }) => {
+        this.policyEngine = new PolicyEngine(auditLogger, eventBus);
+        this._drainPolicyQueue();
+      });
+    }
   }
 
   /**
    * Get the PolicyEngine instance (for testing/integration).
    */
-  getPolicyEngine(): PolicyEngine {
+  getPolicyEngine(): PolicyEngineLike | null {
     return this.policyEngine;
   }
 
@@ -181,6 +199,10 @@ export class Executor {
     call: ToolCall,
     tool: ToolDefinition
   ): { allowed: boolean; reason?: string; requires_approval?: boolean } {
+    if (!this.policyEngine) {
+      // policyEngine not yet initialized — deny by default until ready
+      return { allowed: false, requires_approval: false, reason: 'PolicyEngine not yet initialized', risk_score: 0.5, violations: [] } as PermissionCheckResult;
+    }
     const policy = this.policyEngine.getPolicy(tool.id);
     if (!policy) {
       return { allowed: false, reason: `No policy found for tool ${tool.id}` };
@@ -576,6 +598,28 @@ export class Executor {
     }
   }
 
+  /**
+   * Register a policy — queues it if PolicyEngine not yet initialized.
+   */
+  private _registerPolicy(policy: ToolPolicy): void {
+    if (this.policyEngine) {
+      this.policyEngine.registerPolicy(policy);
+    } else {
+      this._pendingPolicies.push(policy);
+    }
+  }
+
+  /**
+   * Flush queued policies into PolicyEngine once it initializes.
+   */
+  private _drainPolicyQueue(): void {
+    if (!this.policyEngine) return;
+    for (const policy of this._pendingPolicies) {
+      this.policyEngine.registerPolicy(policy);
+    }
+    this._pendingPolicies = [];
+  }
+
   /**
    * Register built-in tools in both legacy and new systems
    */
@@ -794,7 +838,7 @@ export class Executor {
         handler
       );
 
-      this.policyEngine.registerPolicy({
+      this._registerPolicy({
         tool_id: definition.id,
         permission_tier: definition.permission_tier,
         required_trust_level: definition.required_trust_level,

src/autonomous/scheduler.ts

@@ -425,7 +425,7 @@ const DEFAULT_TASKS: Omit<ScheduledTask, 'lastRun' | 'nextRun'>[] = [
   {
     id: 'opportunity-daily',
     name: 'Daily Opportunity Scan',
-    cron: '0 7 * * *', // 7:00 AM daily
+    cron: '5 7 * * *', // 7:05 AM daily
     handler: 'opportunity_daily',
     enabled: true,
     essential: false,
@@ -639,7 +639,7 @@ const DEFAULT_TASKS: Omit<ScheduledTask, 'lastRun' | 'nextRun'>[] = [
   {
     id: 'content-daily-drafts',
     name: 'Content Draft Generation',
-    cron: '0 7 * * *', // 7:00 AM daily
+    cron: '10 7 * * *', // 7:10 AM daily
     handler: 'content_daily_drafts',
     enabled: true,
     essential: false,
@@ -713,7 +713,7 @@ const DEFAULT_TASKS: Omit<ScheduledTask, 'lastRun' | 'nextRun'>[] = [
   {
     id: "earnings-analyzer",
     name: "Earnings Analyzer",
-    cron: "0 7 * * *", // 7:00 AM daily
+    cron: "15 7 * * *", // 7:15 AM daily
     handler: "earnings_analyzer",
     enabled: true,
     essential: false,

src/autonomous/weekly-wisdom-digest.ts

@@ -360,14 +360,15 @@ export class WeeklyWisdomDigest {
     const avgArousal = withEmotion.reduce((s, d) => s + d.emotional_context!.arousal, 0) / withEmotion.length;
     const avgDominance = withEmotion.reduce((s, d) => s + d.emotional_context!.dominance, 0) / withEmotion.length;
 
-    // Simple trend: compare first half vs second half valence
-    const half = Math.floor(withEmotion.length / 2);
+    // Sort ascending (oldest first) so first half = past, second half = recent
+    const sorted = [...withEmotion].sort((a, b) => a.timestamp.getTime() - b.timestamp.getTime());
+    const half = Math.floor(sorted.length / 2);
     if (half < 2) {
       return { avgValence, avgArousal, avgDominance, trend: 'stable' };
     }
 
-    const firstHalf = withEmotion.slice(0, half);
-    const secondHalf = withEmotion.slice(half);
+    const firstHalf = sorted.slice(0, half);
+    const secondHalf = sorted.slice(half);
     const firstAvg = firstHalf.reduce((s, d) => s + d.emotional_context!.valence, 0) / firstHalf.length;
     const secondAvg = secondHalf.reduce((s, d) => s + d.emotional_context!.valence, 0) / secondHalf.length;