@agfpd/iapeer 0.2.79 → 0.2.80

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer",
-  "version": "0.2.79",
+  "version": "0.2.80",
   "description": "Foundation core for the iapeer multi-agent ecosystem: identity, registry, storage, codec.",
   "license": "Apache-2.0",
   "author": "agfpd",

package/src/cli/index.ts

@@ -61,7 +61,7 @@ import {
   validateProfileStandard,
 } from '../identity/profileStandard.ts'
 import { runAlwaysOn } from '../launch/launchdRun.ts'
-import { installDaemonPlist, startConfiguredDaemon } from '../daemon/main.ts'
+import { ensureDaemonStarted, installDaemonPlist, startConfiguredDaemon } from '../daemon/main.ts'
 import { MARKETPLACE_NAME, onboardHost } from '../onboard/index.ts'
 import { readMemoryProvider } from '../status/index.ts'
 import { appendLifecycleEvent } from '../lifecycle/eventlog.ts'
@@ -969,6 +969,14 @@ export async function runCli(argv: string[], env: NodeJS.ProcessEnv = process.en
         // reports the would-be actions without touching anything. --infra <csv> ALSO
         // onboards infra runtimes (§6): npx-install each package (auto-resolved) + deploy
         // its declared set. notifier → timer+watcher auto; telegram → operator-add after.
+        // STEP 0 (non-disableable): ensure the router daemon is up. Onboard is the
+        // explicit "set up the host" action, so starting the always-on daemon belongs
+        // here — the operator never types raw `launchctl bootstrap`. Idempotent (no-op
+        // if already loaded). A failure here is a real, host-breaking problem → exit 1.
+        const dstart = await ensureDaemonStarted({ dryRun: flags['dry-run'] === true, env })
+        const dLabel = dstart.state === 'would-start' ? 'would-start (dry-run)' : dstart.state
+        out(`daemon: ${dLabel}${dstart.healthy === false ? ' — UNHEALTHY' : ''}${dstart.detail ? ` — ${dstart.detail}` : ''}\n`)
+        const daemonFailed = dstart.state === 'failed' || dstart.healthy === false
         const r = onboardHost({ dryRun: flags['dry-run'] === true, env })
         for (const m of r.marketplaces) {
           out(`marketplace ${MARKETPLACE_NAME} @ ${m.runtime}: ${m.state}${m.detail ? ` — ${m.detail}` : ''}\n`)
@@ -1038,7 +1046,7 @@ export async function runCli(argv: string[], env: NodeJS.ProcessEnv = process.en
         })
         const memLabel = mem.provider ? `${mem.provider.provider} ${mem.provider.version}` : 'none'
         out(`memory: ${mem.state}${mem.detail ? ` — ${mem.detail}` : ''} (slot: ${memLabel})\n`)
-        return r.marketplaces.some(m => m.state === 'failed') || infraFailed ? 1 : 0
+        return daemonFailed || r.marketplaces.some(m => m.state === 'failed') || infraFailed ? 1 : 0
       }
       case 'native-memory': {
         // The canonized runtime-memory lever (контракт «Слот памяти» §Native-память):

package/src/daemon/main.ts

@@ -23,11 +23,13 @@ import { DAEMON_PLIST_LABEL } from '../core/constants.ts'
 import { IapError } from '../core/errors.ts'
 import { pluginLogsDir } from '../storage/index.ts'
 import {
+  bootstrapDaemon,
   isFoundationOwnedPlist,
   launchAgentsDir,
   renderLaunchdPlist,
 } from '../launch/launchd.ts'
-import type { LaunchdPlistSpec } from '../launch/launchd.ts'
+import type { BootstrapState, LaunchdPlistSpec } from '../launch/launchd.ts'
+import { waitForDaemonHealthy } from '../update/index.ts'
 import {
   drainAllEphemeralQueues,
   drainEphemeralQueue,
@@ -450,6 +452,40 @@ export function installDaemonPlist(opts: InstallDaemonPlistOptions = {}): Instal
   return { path, changed: true }
 }
 
+export interface DaemonStartResult {
+  /** 'would-start' = dryRun report; otherwise the bootstrap outcome. */
+  state: BootstrapState | 'would-start'
+  /** Socket health after a (non-sandbox) bootstrap; undefined when not probed. */
+  healthy?: boolean
+  detail?: string
+}
+
+/**
+ * `iapeer onboard`'s first, non-disableable step: ensure the foundation daemon is up.
+ * Writes the plist if missing (idempotent write-if-changed — defensive when onboard
+ * runs on a host where the plist is absent), idempotently bootstraps it (no-op when
+ * already loaded — NOT a restart), then health-checks the socket. dryRun reports the
+ * intent without touching launchctl. Sandbox-safe: bootstrapDaemon + waitForDaemonHealthy
+ * both short-circuit under IAPEER_TEST_SANDBOX, so this never loads a real job in tests.
+ */
+export async function ensureDaemonStarted(
+  opts: { env?: NodeJS.ProcessEnv; dryRun?: boolean } = {},
+): Promise<DaemonStartResult> {
+  const env = opts.env ?? process.env
+  if (opts.dryRun) {
+    return {
+      state: 'would-start',
+      detail: 'install plist if missing + launchctl bootstrap com.agfpd.iapeer (idempotent) + health-check',
+    }
+  }
+  installDaemonPlist({ env })
+  const b = bootstrapDaemon(env)
+  if (b.state === 'failed') return { state: 'failed', detail: b.detail }
+  if (b.state === 'skipped-sandbox') return { state: 'skipped-sandbox', detail: b.detail }
+  const h = await waitForDaemonHealthy({ env })
+  return { state: b.state, healthy: h.healthy, detail: h.healthy ? undefined : h.detail }
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // CLI — launchd-held process / foreground acceptance entrypoint
 // ─────────────────────────────────────────────────────────────────────────────
@@ -463,7 +499,7 @@ if (import.meta.main) {
     const { path: p, changed } = installDaemonPlist()
     process.stdout.write(
       `daemon plist ${changed ? 'written' : 'unchanged'}: ${p}\n` +
-        `NOT loaded. To start it live: launchctl bootstrap gui/$(id -u) ${p}\n`,
+        `NOT loaded. \`iapeer onboard\` starts it (idempotent); or manually: launchctl bootstrap gui/$(id -u) ${p}\n`,
     )
     process.exit(0)
   } else {

package/src/launch/launchd.ts

@@ -382,6 +382,33 @@ export function cycleDaemon(env: NodeJS.ProcessEnv = process.env): DaemonRestart
   return cycleLaunchdJob(DAEMON_PLIST_LABEL, join(launchAgentsDir(env), `${DAEMON_PLIST_LABEL}.plist`), env)
 }
 
+/**
+ * Ensure the foundation daemon (`com.agfpd.iapeer`) is LOADED in the gui domain — an
+ * IDEMPOTENT `launchctl bootstrap` (no-op when already loaded), NOT a restart. This is
+ * the "start it now" step `iapeer onboard` runs, so an operator never types raw
+ * launchctl. Composed on bootstrapJobCore (undead-job-safe wait-for-gone + backoff).
+ * SANDBOX FAIL-SAFE: under IAPEER_TEST_SANDBOX it never calls launchctl (`bootstrap
+ * gui/<uid>` is host-global regardless of IAPEER_ROOT), consulting BOTH the passed env
+ * and the process env — mirror of launchctlBootstrap's guard.
+ */
+export function bootstrapDaemon(env: NodeJS.ProcessEnv = process.env): BootstrapResult {
+  if (env.IAPEER_TEST_SANDBOX === '1' || process.env.IAPEER_TEST_SANDBOX === '1') {
+    return { state: 'skipped-sandbox', label: DAEMON_PLIST_LABEL, detail: 'IAPEER_TEST_SANDBOX=1 — not loading a real launchd job' }
+  }
+  const uid = currentUid()
+  const plistPath = join(launchAgentsDir(env), `${DAEMON_PLIST_LABEL}.plist`)
+  const core = bootstrapJobCore(uid, DAEMON_PLIST_LABEL, plistPath, {
+    run: args => {
+      const r = spawnSync('launchctl', args, { encoding: 'utf8' })
+      return { status: r.status, stderr: r.stderr ?? '' }
+    },
+    sleepMs: ms => spawnSync('sleep', [String(ms / 1000)]),
+  })
+  return core.state === 'failed'
+    ? { state: 'failed', label: DAEMON_PLIST_LABEL, detail: core.detail }
+    : { state: core.state, label: DAEMON_PLIST_LABEL }
+}
+
 /**
  * Restart any launchd job onto the executable(s) currently referenced by its plist:
  * bootout → bootstrap, never kickstart. Used by the daemon update path AND by