@adaptic/maestro 1.9.2 → 1.9.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adaptic/maestro",
-  "version": "1.9.2",
+  "version": "1.9.3",
   "description": "Maestro — Autonomous AI agent operating system. Deploy AI employees on dedicated Mac minis.",
   "type": "module",
   "bin": {

package/scripts/daemon/maestro-daemon.mjs

@@ -3,18 +3,22 @@
 // Maestro Daemon — Reactive event-driven message processor
 // =============================================================================
 //
-// Generic entry point that loads agent identity from config/agent.ts and
+// Generic entry point that loads agent identity from config/agent.json and
 // delegates to the core daemon logic. This file is agent-name-agnostic.
 //
+// Lifecycle:
+//   1. Honour .emergency-stop BEFORE doing anything (don't acquire singleton
+//      lock, don't start consumer, don't import sophie-daemon). Stops the
+//      launchd restart treadmill cold.
+//   2. Acquire the daemon singleton lock so only one instance runs.
+//   3. Start the cadence consumer (state/cadence-bus/ drain loop).
+//   4. Import the core daemon (sophie-daemon.mjs or legacy <firstName>-daemon.mjs).
+//
 // Run: node scripts/daemon/maestro-daemon.mjs
-// Install: launchd plist with KeepAlive: true
+// Install: launchd plist with KeepAlive.SuccessfulExit: false (clean exits
+// during emergency-stop should NOT trigger restart; non-zero exits should).
 // =============================================================================
 
-// The core daemon implementation is in sophie-daemon.mjs by default, but
-// older agent repos may have a renamed copy at <firstname>-daemon.mjs (a
-// pre-1.7 convention). This entry-point auto-detects the correct file so
-// the launchd plist stays stable regardless of agent identity history.
-
 import { resolve, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
@@ -22,25 +26,44 @@ import { existsSync, readFileSync, readdirSync } from "node:fs";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const AGENT_DIR = process.env.AGENT_DIR || resolve(__dirname, "../..");
 
-// Set AGENT_DIR as env var so all modules can use it
 process.env.AGENT_DIR = AGENT_DIR;
 process.env.AGENT_ROOT = AGENT_DIR;
 
-// Singleton guard — prevent duplicate daemon instances
+// ---------------------------------------------------------------------------
+// 1. Emergency-stop gate
+// ---------------------------------------------------------------------------
+// If the operator dropped .emergency-stop, we exit cleanly (code 0). With
+// KeepAlive.SuccessfulExit:false this means launchd will NOT restart us
+// until the flag is lifted + the plist is reloaded by resume-operations.sh.
+// Older plists with plain KeepAlive:true will still restart, so we hold
+// the process for 30s before exiting to give launchd's ThrottleInterval
+// something to throttle.
+if (existsSync(join(AGENT_DIR, ".emergency-stop"))) {
+  console.error("[DAEMON] .emergency-stop flag present — refusing to start.");
+  console.error("[DAEMON] Lift with: scripts/resume-operations.sh");
+  await new Promise((r) => setTimeout(r, 30_000));
+  process.exit(0);
+}
+
+// ---------------------------------------------------------------------------
+// 2. Singleton guard
+// ---------------------------------------------------------------------------
 try {
   const { acquireLock } = await import(resolve(process.env.HOME, "maestro/lib/singleton.js"));
   if (!acquireLock("daemon")) {
     console.log("[DAEMON] Already running — exiting");
     process.exit(0);
   }
-} catch { /* maestro singleton not available */ }
+} catch { /* maestro singleton not available — proceed without lock */ }
 
-// Start the cadence consumer alongside the reactive event loop. This is the
-// single persistent owner of cadence housekeeping — launchd plists enqueue
-// cadence ticks onto state/cadence-bus/ and the consumer drains them here,
-// either handling them inline or escalating to a sub-session when warranted.
-// Failure to start the consumer must NOT take the reactive daemon down, so
-// we isolate startup errors.
+// ---------------------------------------------------------------------------
+// 3. Cadence consumer (cadence bus drain loop)
+// ---------------------------------------------------------------------------
+// Start alongside the reactive event loop. This is the single persistent
+// owner of cadence housekeeping — launchd plists enqueue cadence ticks
+// onto state/cadence-bus/ and the consumer drains them here, either
+// handling them inline or escalating to a sub-session when warranted.
+// Failure to start the consumer must NOT take the reactive daemon down.
 try {
   const { startConsumer } = await import("./cadence-consumer.mjs");
   const consumer = startConsumer({ agentRoot: AGENT_DIR });
@@ -55,7 +78,10 @@ try {
   // Reactive daemon continues. Doctor / healthcheck will surface this.
 }
 
-// Locate the core daemon module. Try, in order:
+// ---------------------------------------------------------------------------
+// 4. Core daemon import
+// ---------------------------------------------------------------------------
+// Resolve the core daemon module. Try, in order:
 //   1. ./sophie-daemon.mjs  — canonical filename (post-Phase-2.5 SOT)
 //   2. ./<firstName>-daemon.mjs — legacy rename from init-maestro Phase 1
 //   3. The first scripts/daemon/*-daemon.mjs that isn't this file

package/scripts/local-triggers/generate-plists.sh

@@ -129,13 +129,18 @@ PLIST_MID
         cat >> "$FILE" << 'PLIST_KEEPALIVE'
 
     <key>KeepAlive</key>
-    <true/>
+    <dict>
+        <key>SuccessfulExit</key>
+        <false/>
+        <key>Crashed</key>
+        <true/>
+    </dict>
 
     <key>RunAtLoad</key>
     <true/>
 
     <key>ThrottleInterval</key>
-    <integer>5</integer>
+    <integer>30</integer>
 PLIST_KEEPALIVE
     fi
 

package/scripts/local-triggers/generate-plists.test.mjs

@@ -167,7 +167,12 @@ test("daemon plist remains a KeepAlive job (not a cadence enqueue)", async () =>
     runGenerator(root);
     const path = join(root, "scripts/local-triggers/plists/ai.adaptic.erin-daemon.plist");
     const body = readFileSync(path, "utf-8");
-    assert.match(body, /<key>KeepAlive<\/key>\s*<true\/>/);
+    // KeepAlive switched 1.9.2 from plain `<true/>` to a dict with
+    // SuccessfulExit:false / Crashed:true so emergency-stop doesn't trigger
+    // a restart treadmill but real crashes still do.
+    assert.match(body, /<key>KeepAlive<\/key>/);
+    assert.match(body, /<key>SuccessfulExit<\/key>\s*<false\/>/);
+    assert.match(body, /<key>Crashed<\/key>\s*<true\/>/);
     assert.match(body, /launchd-wrapper\.sh/);
     assert.ok(!body.includes("enqueue-cadence-tick.mjs"),
       "daemon plist should not enqueue ticks — it IS the consumer");