@aitne/daemon 0.1.7 → 0.1.9

package/dist/bootstrap/managed-chromium.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Boot-time wiring for the managed Chromium supervisor.
+ *
+ * MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §7.1.
+ *
+ * - Reads the persisted `enabled` flag from runtime_state.
+ * - Resolves the host's sandbox primitive + Chromium binary.
+ * - Registers `ManagedChromiumSupervisor` with the daemon's
+ *   ObserverManager so it ticks alongside the other observers.
+ *
+ * Idempotent: if managed mode is disabled, this is a no-op. If enabled
+ * but the binary or sandbox is unavailable, the supervisor still
+ * registers (so the dashboard can surface the diagnostic) and writes
+ * the appropriate state-machine value into runtime_state.
+ */
+import type Database from "better-sqlite3";
+import type { AgentConfig } from "../config.js";
+import type { MessageHub } from "../adapters/message-hub.js";
+import type { ObserverManager } from "../observers/manager.js";
+export interface ManagedChromiumBootDeps {
+    db: Database.Database;
+    config: AgentConfig;
+    observerManager: ObserverManager;
+    messageHub: MessageHub | null;
+}
+export declare function maybeRegisterManagedChromium(deps: ManagedChromiumBootDeps): Promise<void>;

package/dist/bootstrap/managed-chromium.js

@@ -0,0 +1,66 @@
+/**
+ * Boot-time wiring for the managed Chromium supervisor.
+ *
+ * MANAGED_CHROMIUM_IMPLEMENTATION_PLAN.md §7.1.
+ *
+ * - Reads the persisted `enabled` flag from runtime_state.
+ * - Resolves the host's sandbox primitive + Chromium binary.
+ * - Registers `ManagedChromiumSupervisor` with the daemon's
+ *   ObserverManager so it ticks alongside the other observers.
+ *
+ * Idempotent: if managed mode is disabled, this is a no-op. If enabled
+ * but the binary or sandbox is unavailable, the supervisor still
+ * registers (so the dashboard can surface the diagnostic) and writes
+ * the appropriate state-machine value into runtime_state.
+ */
+import { createLogger } from "../logging.js";
+import { readManagedChromiumState, updateManagedChromiumState, } from "../db/managed-chromium-state.js";
+import { createHostProfile } from "../services/browser-history/lifecycle/platform.js";
+import { ManagedChromiumSupervisor } from "../services/browser-history/managed-chromium/managed-chromium-supervisor.js";
+const logger = createLogger("bootstrap-managed-chromium");
+export async function maybeRegisterManagedChromium(deps) {
+    const state = readManagedChromiumState(deps.db);
+    if (!state.enabled) {
+        logger.info("managed Chromium disabled; supervisor not registered");
+        return;
+    }
+    const host = createHostProfile();
+    // Pre-flight: re-evaluate infra readiness on every boot so the state
+    // machine recovers from a prior `missing_binary` / `missing_sandbox`
+    // automatically (e.g. operator installed Chromium / bwrap between
+    // boots). Persisted `state` is allowed to advance freely between
+    // diagnostic states; transitions out of `ready` / `needs_reauth` only
+    // happen when the infra actually regressed.
+    const hasBinary = host.browserBinaryFor("chromium") !== null;
+    const hasSandbox = host.sandboxPrimitive.kind !== "none" || state.unsandboxedOptIn;
+    updateManagedChromiumState(deps.db, (draft) => {
+        if (!hasBinary) {
+            draft.state = "missing_binary";
+        }
+        else if (!hasSandbox) {
+            draft.state = "missing_sandbox";
+        }
+        else if (draft.state === "off"
+            || draft.state === "disconnected"
+            || draft.state === "missing_binary"
+            || draft.state === "missing_sandbox") {
+            // Infra is satisfied AND prior state was a diagnostic dead-end —
+            // graduate to needs_setup so the dashboard prompts the user. If
+            // the profile dir actually already contains a signed-in session,
+            // the supervisor's first tick will resolve to `ready` via the
+            // reauth-detector's healthy branch.
+            draft.state = "needs_setup";
+        }
+    });
+    const supervisor = new ManagedChromiumSupervisor({
+        db: deps.db,
+        paDataDir: deps.config.dataDir,
+        host,
+        messageHub: deps.messageHub,
+    });
+    deps.observerManager.register(supervisor);
+    logger.info({
+        sandboxKind: host.sandboxPrimitive.kind,
+        binaryFound: host.browserBinaryFor("chromium") !== null,
+    }, "managed Chromium supervisor registered");
+}

package/dist/bootstrap/observers.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Observer bootstrap — §7 of the legacy `startup()` IIFE.
+ *
+ * Extracted from `index.ts` per
+ * `docs/design/appendices/index-bootstrap-stage-split.md` Phase B-2.
+ * Companion to `bootstrap/db.ts`, `bootstrap/adapters.ts`,
+ * `bootstrap/services.ts`, and `bootstrap/api.ts`; same Pattern-C shape
+ * (file-split-plan.md §10).
+ *
+ * Responsibilities (in run order):
+ *  1. Build the `ObserverManager` and the shared `ObserverState` slot the
+ *     `gitWatcher` lives in (read by §13 webhook-mode upgrade and by the
+ *     B-4 `handleSecretChange` "github" branch).
+ *  2. Construct the `GitAccountRegistry` + the per-repo helpers
+ *     (`getNormalizedGitRepos`, `lookupRepoAlias`,
+ *     `queueGitProjectInitsForCurrentConfig`) that the git observers and
+ *     the §11 ApiDeps record consume.
+ *  3. Wire and conditionally register the five hot-register builders:
+ *     `buildGitWatcher`, `buildGithubPoller`, `buildGitDelegatedCronObserver`,
+ *     `buildCalendarPoller`, `buildNotionPoller`. Three of the five are
+ *     re-exported on the result because B-4 (`handleSecretChange` +
+ *     `handleGoogleServicesReady`) and B-3 (`onIntegrationModeChange`)
+ *     need them for hot-register paths; the other two are exposed for
+ *     symmetry — `applyIntegrationModeChange` already routes through
+ *     all four direct-mode observers.
+ *  4. Register the always-on observers (repository management cron,
+ *     primary vault watcher, imminent event scheduler, context-index
+ *     reconciler, entity-mirror observer, MCP auto-probe).
+ *  5. Conditionally register the §7.2 observation summarizer worker
+ *     (gated on `config.observationSummarizerEnabled`) and the external
+ *     Obsidian vault watcher (gated on `externalObsidianVaultPath` +
+ *     `externalObsidianWatch`).
+ *  6. Conditionally register the mail observers when `services.mail` is
+ *     present (the multi-mail poller + the reconciliation job).
+ *
+ * Mutable state shape (`ObserverState`) mirrors `AdapterState` from
+ * `bootstrap/adapters.ts`: the factory writes the slot when a builder
+ * runs, the caller reads it back to apply the webhook-mode fallback,
+ * and the integration-lifecycle layer clears it on a git mode flip via
+ * `clearGitWatcher()`.
+ *
+ * Ordering invariants this module preserves (design §11):
+ *  - `mergeRuntimeSettingsFromDb` (Phase B-1) runs before this factory
+ *    is invoked. Observer builders read the merged `config` directly.
+ *  - The wiki workspace token resolver (Phase B-1) is registered before
+ *    any observer reads it through the skill compiler.
+ *  - The context-index reconciler is constructed here but its prompt-
+ *    context-changed sink is filled by `setPromptContextChangedSink`
+ *    after the dispatcher and session manager exist (B-4). Until that
+ *    call lands the sink stays null and the observer logs but does not
+ *    invalidate caches — exactly matching the pre-extraction behavior.
+ *  - `triggerRoadmapRefresh` is a closure passed in by the caller; it
+ *    captures `emitRoadmapRefreshSink` (assigned by the caller after the
+ *    dispatcher is constructed). Pollers store the callback and only
+ *    invoke it after `observerManager.startAll()` runs, by which time
+ *    the dispatcher has been wired — preserving the §7 forward-reference
+ *    indirection from the pre-extraction code.
+ */
+import type Database from "better-sqlite3";
+import type { AgentConfig } from "../config.js";
+import type { EventBus } from "../core/event-bus.js";
+import type { SecretBroker } from "../secrets/secret-broker.js";
+import type { EncryptedBlobStore } from "../secrets/encrypted-blob-store.js";
+import type { ServiceRegistry } from "../services/service-registry.js";
+import type { MessageHub } from "../adapters/message-hub.js";
+import type { TodayWriteLockManager } from "../core/today-write-lock.js";
+import type { AgentWriteTracker } from "../safety/agent-write-tracker.js";
+import type { PromptContextChangedCallback } from "../core/context-staleness.js";
+import { ObserverManager } from "../observers/manager.js";
+import { PrimaryVaultWatcher } from "../observers/primary-vault-watcher.js";
+import { ContextIndexReconcilerObserver } from "../observers/context-index-reconciler-observer.js";
+import { GitWatcher } from "../observers/git-watcher.js";
+import { GitHubPoller } from "../observers/github-poller.js";
+import { GitAccountRegistry } from "../services/git-account-registry.js";
+import { GitDelegatedCronObserver } from "../observers/git-delegated-cron.js";
+import { CalendarPoller } from "../observers/calendar-poller.js";
+import { NotionPoller } from "../observers/notion-poller.js";
+import type { BootstrapSecretState } from "./services.js";
+export interface BootstrapObserversDeps {
+    readonly db: Database.Database;
+    readonly config: AgentConfig;
+    readonly eventBus: EventBus;
+    readonly secretBroker: SecretBroker;
+    readonly services: ServiceRegistry;
+    readonly writeTracker: AgentWriteTracker;
+    readonly blobStore: EncryptedBlobStore;
+    readonly messageHub: MessageHub;
+    readonly morningRoutineLock: TodayWriteLockManager;
+    readonly secretState: BootstrapSecretState;
+    /**
+     * Roadmap-refresh trampoline owned by the caller. The closure here
+     * reads from a `let` slot the caller assigns once the dispatcher
+     * exists. The indirection preserves the §7 ordering invariant that
+     * observers may register before the dispatcher is constructed.
+     */
+    readonly triggerRoadmapRefresh: (source: string) => void;
+}
+export interface BootstrapObserversResult {
+    readonly observerManager: ObserverManager;
+    readonly primaryVaultWatcher: PrimaryVaultWatcher;
+    readonly contextIndexReconciler: ContextIndexReconcilerObserver;
+    readonly gitAccountRegistry: GitAccountRegistry;
+    /**
+     * Hot-register builders for B-3 (`applyIntegrationModeChange`) and B-4
+     * (`handleSecretChange` + `handleGoogleServicesReady`). All five are
+     * exposed: in addition to the `buildCalendarPoller` / `buildNotionPoller`
+     * / `buildGitWatcher` paths the B-2 design draft called out, the
+     * github + git-delegated builders are also called by
+     * `applyIntegrationModeChange` for runtime mode flips — see
+     * `bootstrap/api.ts:onIntegrationModeChange`.
+     */
+    readonly buildGitWatcher: () => GitWatcher | null;
+    readonly buildGithubPoller: () => GitHubPoller;
+    readonly buildGitDelegatedCronObserver: () => GitDelegatedCronObserver;
+    readonly buildCalendarPoller: () => CalendarPoller | null;
+    readonly buildNotionPoller: () => NotionPoller | null;
+    /**
+     * Drop the cached `gitWatcher` reference. Called by the
+     * integration-lifecycle helper when `git.mode` flips out of `direct`
+     * so the next §13 / `handleSecretChange` read does not see a stale
+     * instance after the observer was stopped.
+     */
+    readonly clearGitWatcher: () => void;
+    /** Snapshot accessor; null when no watcher has been built. */
+    readonly getGitWatcher: () => GitWatcher | null;
+    /**
+     * Best-effort backfill of missing `git_project_docs.queued_init` rows
+     * for the current config. Re-exposed so the API surface (PATCH
+     * `gitWatchedRepos` etc.) can request it after rows shift at runtime.
+     */
+    readonly queueGitProjectInitsForCurrentConfig: (source: string) => void;
+    /**
+     * Install the prompt-context-changed sink consumed by the
+     * context-index reconciler. Called by B-4 (event-pipeline) once the
+     * dispatcher and session manager exist. Idempotent: re-installs
+     * replace the previous sink.
+     */
+    readonly setPromptContextChangedSink: (cb: PromptContextChangedCallback) => void;
+}
+/**
+ * Assemble every observer-tier registration that used to live inline in
+ * `startup()` §7 of `index.ts`. Async because the primary vault watcher
+ * is `setVaultPath`'d before registration and several secondary
+ * observers are loaded via dynamic import (`SkillCurationWalker`,
+ * `scanAndRecordOrphanOverlays`, `McpAutoProbe`).
+ */
+export declare function createObservers(deps: BootstrapObserversDeps): Promise<BootstrapObserversResult>;