@alan-ai-hq/agent-manager 0.1.89 → 0.1.90

package/dist/index.cjs

@@ -15167,6 +15167,10 @@ function hasRunSessionEnv(env) {
     env.ALAN_WS_URL && env.ALAN_SESSION_ID && env.ALAN_TASK_ID && env.ALAN_SESSION_TOKEN && env.ALAN_TASK !== void 0
   );
 }
+function resolveInstallConfigurationMode(args, configured) {
+  if (args.includes("--setup-token")) return "setup";
+  return configured.runtimeId && configured.runtimeToken ? "reuse" : "login";
+}
 function resolveCommand(args, env) {
   const [command, ...commandArgs] = args;
   if (!command) {
@@ -15447,7 +15451,7 @@ function describeError(error61) {
 }
 
 // src/version.ts
-var AGENT_VERSION = "0.1.89";
+var AGENT_VERSION = "0.1.90";
 
 // src/daemon-worktree.ts
 var import_node_child_process3 = require("child_process");
@@ -35648,14 +35652,14 @@ function configuredConfigPathFromEnvironment() {
   const explicit = process.env.ALAN_AGENT_CONFIG_PATH?.trim() || process.env.ALAN_AGENT_CONFIG?.trim();
   return explicit || void 0;
 }
-function resolveIsolatedAgentBaseDir(profile) {
+function resolveIsolatedAgentBaseDir(profile, homeDirectory2 = (0, import_node_os4.homedir)()) {
   switch (profile) {
     case "local":
-      return (0, import_node_path5.join)((0, import_node_os4.homedir)(), ".alan-dev", "agent");
+      return (0, import_node_path5.join)(homeDirectory2, ".alan-dev", "agent");
     case "staging":
-      return (0, import_node_path5.join)((0, import_node_os4.homedir)(), ".alan-staging", "agent");
+      return (0, import_node_path5.join)(homeDirectory2, ".alan-staging", "agent");
     case "custom":
-      return (0, import_node_path5.join)((0, import_node_os4.homedir)(), ".alan-prod", "agent");
+      return (0, import_node_path5.join)(homeDirectory2, ".alan-prod", "agent");
     default:
       return null;
   }
@@ -35732,6 +35736,9 @@ function migrateLegacyAgentConfig(input2) {
     return false;
   }
 }
+function resolveAgentConfigDirectory(profile = "production", homeDirectory2 = (0, import_node_os4.homedir)()) {
+  return resolveIsolatedAgentBaseDir(profile, homeDirectory2) ?? (0, import_node_path5.join)(homeDirectory2, ".alan", "agent");
+}
 function resolveAgentConfigPath(input2) {
   if (input2?.explicitPath?.trim()) return input2.explicitPath.trim();
   const profile = normalizeAgentEndpointProfile(
@@ -35740,10 +35747,8 @@ function resolveAgentConfigPath(input2) {
   if (input2?.baseDir !== void 0) {
     return (0, import_node_path5.join)(input2.baseDir, resolveAgentConfigFileName(profile));
   }
-  const isolatedBaseDir = profile === "production" ? null : resolveIsolatedAgentBaseDir(profile);
-  if (isolatedBaseDir) return (0, import_node_path5.join)(isolatedBaseDir, "config.json");
-  migrateLegacyAgentConfig({ profile });
-  return (0, import_node_path5.join)(DEFAULT_AGENT_DIR, resolveAgentConfigFileName(profile));
+  if (profile === "production") migrateLegacyAgentConfig({ profile });
+  return (0, import_node_path5.join)(resolveAgentConfigDirectory(profile), "config.json");
 }
 function configExistsAtPath(configPath) {
   return (0, import_node_fs5.existsSync)(configPath);
@@ -49460,7 +49465,7 @@ function bindConfigPath(args) {
   return boundAgentConfigPath;
 }
 function getConfigPath() {
-  return process.env.ALAN_AGENT_CONFIG_PATH ?? boundAgentConfigPath ?? resolveAgentConfigPath({ profile: "production" });
+  return boundAgentConfigPath ?? process.env.ALAN_AGENT_CONFIG_PATH ?? resolveAgentConfigPath({ profile: "production" });
 }
 function getEndpointDefaultsPath() {
   return process.env.ALAN_AGENT_ENDPOINTS_PATH ?? (0, import_node_path11.join)((0, import_node_path11.dirname)(getConfigPath()), "endpoints.json");
@@ -49515,7 +49520,7 @@ function readLocalDaemonMaintenanceLease(configPath, nowMs = Date.now()) {
   if (!(0, import_node_fs13.existsSync)(path2)) return null;
   try {
     const lease = JSON.parse((0, import_node_fs13.readFileSync)(path2, "utf8"));
-    if (lease.version !== 1 || typeof lease.id !== "string" || lease.reason !== "credential_cleanup" && lease.reason !== "daemon_startup" && lease.reason !== "watchdog" || !(lease.reason === "credential_cleanup" && lease.expiresAtMs === null || typeof lease.expiresAtMs === "number" && Number.isFinite(lease.expiresAtMs))) {
+    if (lease.version !== 1 || typeof lease.id !== "string" || lease.reason !== "credential_cleanup" && lease.reason !== "credential_swap" && lease.reason !== "daemon_startup" && lease.reason !== "watchdog" || !(lease.reason === "credential_cleanup" && lease.expiresAtMs === null || typeof lease.expiresAtMs === "number" && Number.isFinite(lease.expiresAtMs))) {
       throw new Error("invalid maintenance lease");
     }
     if (lease.reason !== "credential_cleanup" && lease.expiresAtMs <= nowMs) {
@@ -76529,6 +76534,7 @@ async function createRuntimeSetupGrant(input2) {
 }
 async function exchangeRuntimeSetupGrant(input2) {
   const registrationAttemptId = getOrCreateSetupAttemptId(input2.setupToken);
+  const signal = AbortSignal.timeout(15e3);
   const registrationInit = {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -76547,7 +76553,8 @@ async function exchangeRuntimeSetupGrant(input2) {
         ...await collectRuntimeMetadataWithProviderLimits(),
         installationId: input2.installationId
       }
-    })
+    }),
+    signal
   };
   let response;
   let transportError;
@@ -79398,11 +79405,24 @@ async function startDaemon(args) {
     releaseStartupLease();
     throw error61;
   }
+  let runtimeCredentialOperationTail = Promise.resolve();
+  const runCredentialOperation = (operation) => {
+    const result = runtimeCredentialOperationTail.catch(() => {
+    }).then(operation);
+    runtimeCredentialOperationTail = result.then(
+      () => {
+      },
+      () => {
+      }
+    );
+    return result;
+  };
   let runtimeRenewalInFlight = null;
   const renewRuntimeLease = () => {
     if (runtimeRenewalInFlight) return runtimeRenewalInFlight;
-    const attempt = (async () => {
-      if (!stored.apiUrl || !runtimeRenewalToken) {
+    const attempt = runCredentialOperation(async () => {
+      const renewalToken = runtimeRenewalToken;
+      if (!stored.apiUrl || !renewalToken) {
         return false;
       }
       let response = null;
@@ -79412,7 +79432,7 @@ async function startDaemon(args) {
           response = await fetch(`${stored.apiUrl}/public/runtimes/${runtimeId}/tokens/renew`, {
             method: "POST",
             headers: {
-              authorization: `Bearer ${runtimeRenewalToken}`,
+              authorization: `Bearer ${renewalToken}`,
               "content-type": "application/json"
             },
             body: "{}",
@@ -79448,7 +79468,7 @@ async function startDaemon(args) {
         return false;
       }
       const current = readConfig();
-      if (current.runtimeId !== runtimeId || current.runtimeRenewalToken !== runtimeRenewalToken) {
+      if (current.runtimeId !== runtimeId || current.runtimeRenewalToken !== renewalToken) {
         rememberConnectErrorCode("runtime_renewal_superseded");
         lastConnectError = "Runtime credentials changed while renewal was in progress";
         pushLog("runtime-renewal-superseded");
@@ -79468,7 +79488,7 @@ async function startDaemon(args) {
       pushLog("runtime-renewal-succeeded");
       socket.connect();
       return true;
-    })();
+    });
     runtimeRenewalInFlight = attempt;
     void attempt.finally(() => {
       if (runtimeRenewalInFlight === attempt) runtimeRenewalInFlight = null;
@@ -79476,10 +79496,18 @@ async function startDaemon(args) {
     });
     return attempt;
   };
+  let queueIdentityRestart = () => {
+  };
   let runtimeSetupInFlight = null;
   const adoptRuntimeSetupGrant = (input2) => {
     if (runtimeSetupInFlight) return runtimeSetupInFlight;
-    const attempt = (async () => {
+    const attempt = runCredentialOperation(async () => {
+      const activeRunCount = activeAgents.size + pendingRunStarts.size;
+      if (activeRunCount > 0) {
+        throw new Error(
+          `credential setup is deferred while ${activeRunCount} active run${activeRunCount === 1 ? " finishes" : "s finish"}`
+        );
+      }
       const current = readConfig();
       if (current.runtimeId !== runtimeId || current.installationId !== installationId || input2.installationId !== installationId) {
         throw new Error("credential setup does not belong to this daemon installation");
@@ -79489,7 +79517,23 @@ async function startDaemon(args) {
       }
       const bundle = await exchangeRuntimeSetupGrant(input2);
       if (bundle.runtimeId !== runtimeId) {
-        throw new Error("credential setup resolved to a different runtime");
+        writeConfig({
+          ...current,
+          runtimeId: bundle.runtimeId,
+          runtimeToken: bundle.runtimeToken,
+          runtimeRenewalToken: bundle.runtimeRenewalToken,
+          displayName: bundle.displayName
+        });
+        clearPendingSetupIntent();
+        pushLog(
+          `runtime-identity-switch-queued from=${runtimeId} to=${bundle.runtimeId} generation=${bundle.credentialGeneration}`
+        );
+        const restartTimer = setTimeout(queueIdentityRestart, 100);
+        restartTimer.unref?.();
+        return {
+          runtimeId: bundle.runtimeId,
+          credentialGeneration: bundle.credentialGeneration
+        };
       }
       writeConfig({
         ...current,
@@ -79526,7 +79570,7 @@ async function startDaemon(args) {
         runtimeId: bundle.runtimeId,
         credentialGeneration: bundle.credentialGeneration
       };
-    })();
+    });
     runtimeSetupInFlight = attempt;
     void attempt.finally(() => {
       if (runtimeSetupInFlight === attempt) runtimeSetupInFlight = null;
@@ -79741,6 +79785,16 @@ async function startDaemon(args) {
     const wsHint = isLocalEndpoint(wsUrl) ? ` Nothing is listening at ${wsUrl}. For local dev run setup with --profile local and start the stack (WS on ws://localhost:8401).` : ` Verify wsUrl in ${getConfigPath()} and that you can reach ${wsUrl}.`;
     console.warn("[alan-agent] Daemon connection error:", `${error61.message}.${wsHint}`);
   });
+  socket.on("connection_directive", (value2) => {
+    if (!value2 || typeof value2 !== "object") return;
+    const directive = value2;
+    if (directive.retryable !== false || typeof directive.code !== "string") return;
+    rememberConnectErrorCode(directive.code);
+    if (typeof directive.reason === "string") lastConnectError = directive.reason;
+    pushLog(
+      `connection_directive ${directive.code}${lastConnectError ? ` reason=${lastConnectError}` : ""}`
+    );
+  });
   socket.on("disconnect", (reason) => {
     setConnectedRuntimeSocket(null);
     relocationInFlight.clear();
@@ -80093,6 +80147,9 @@ async function startDaemon(args) {
   queueFullShutdown = () => {
     void stop().then(() => controller.whenExternallyStopped?.());
   };
+  queueIdentityRestart = () => {
+    void stop().then(() => controller.whenExternallyStopped?.("runtime_identity_changed"));
+  };
   return controller;
 }
 
@@ -80191,17 +80248,23 @@ async function setupDaemon(args) {
     if (!liveConfig.localApiToken) {
       throw new Error("running daemon could not be authenticated for credential setup");
     }
+    const liveSetup = {
+      ...setup,
+      apiUrl: liveConfig.apiUrl ?? setup.apiUrl,
+      wsUrl: liveConfig.wsUrl ?? setup.wsUrl,
+      endpointProfile: liveConfig.endpointProfile ?? setup.endpointProfile
+    };
     const body2 = await handoffRuntimeSetupGrant({
       port: localApiPort,
       localApiToken: liveConfig.localApiToken,
-      setup
+      setup: liveSetup
     });
     console.info("[alan-agent] Runtime credentials adopted by running daemon", {
       runtimeId: body2.runtimeId,
       credentialGeneration: body2.credentialGeneration,
       configPath: getConfigPath()
     });
-    return;
+    return { daemonAlreadyRunning: true };
   }
   if (readLocalDaemonOwnerLease(getConfigPath())) {
     throw new Error(
@@ -80215,7 +80278,7 @@ async function setupDaemon(args) {
     if (setupToken && error61 instanceof RuntimeSetupGrantExpiredError) {
       console.info("[alan-agent] Setup link expired; continuing with browser authorization");
       await loginWithDeviceCode(args);
-      return;
+      return { daemonAlreadyRunning: false };
     }
     throw error61;
   }
@@ -80240,6 +80303,7 @@ async function setupDaemon(args) {
     runtimeId: body.runtimeId,
     configPath: getConfigPath()
   });
+  return { daemonAlreadyRunning: false };
 }
 async function loginWithDeviceCode(args) {
   bindConfigPath(args);
@@ -80428,8 +80492,8 @@ async function runDaemon(args) {
     return;
   }
   const controller = await startDaemon(args);
-  const shutdown = () => {
-    void controller.stop().finally(() => process.exit(0));
+  const shutdown = (reason) => {
+    void controller.stop().finally(() => process.exit(daemonExternalStopExitCode(reason)));
   };
   controller.whenExternallyStopped = shutdown;
   process.once("SIGINT", shutdown);
@@ -80437,6 +80501,9 @@ async function runDaemon(args) {
   await new Promise(() => {
   });
 }
+function daemonExternalStopExitCode(reason) {
+  return reason === "runtime_identity_changed" ? 1 : 0;
+}
 async function recoverDaemonConnection(args = [], options) {
   bindConfigPath(args);
   const getStatus = async () => {
@@ -95676,17 +95743,50 @@ function deriveSandboxOutboxKey(sessionToken) {
 function sandboxOutboxSpoolPath(conversationId) {
   return `/tmp/alan-agent-outbox-${conversationId}.enc`;
 }
+function sandboxOutboxKeyPath(spoolPath) {
+  return `${spoolPath}.key`;
+}
+function assertValidOutboxKey(key, path2) {
+  if (Buffer.from(key, "base64url").length !== 32) {
+    throw new Error(`sandbox event outbox key at ${path2} must contain exactly 32 bytes`);
+  }
+  return key;
+}
+function loadOrCreateSandboxOutboxKey(input2) {
+  const keyPath = sandboxOutboxKeyPath(input2.spoolPath);
+  if ((0, import_node_fs27.existsSync)(keyPath)) {
+    (0, import_node_fs27.chmodSync)(keyPath, 384);
+    return assertValidOutboxKey((0, import_node_fs27.readFileSync)(keyPath, "utf8").trim(), keyPath);
+  }
+  const initialKey = deriveSandboxOutboxKey(input2.sessionToken);
+  try {
+    (0, import_node_fs27.writeFileSync)(keyPath, initialKey, { encoding: "utf8", flag: "wx", mode: 384 });
+    return initialKey;
+  } catch (error61) {
+    if (error61.code !== "EEXIST") throw error61;
+    (0, import_node_fs27.chmodSync)(keyPath, 384);
+    return assertValidOutboxKey((0, import_node_fs27.readFileSync)(keyPath, "utf8").trim(), keyPath);
+  }
+}
+function quarantineUnusableOutbox(path2) {
+  const suffix = `corrupt-${Date.now()}-${process.pid}`;
+  for (const candidate of [path2, eventJournalDir(path2)]) {
+    if ((0, import_node_fs27.existsSync)(candidate)) (0, import_node_fs27.renameSync)(candidate, `${candidate}.${suffix}`);
+  }
+}
 function createSandboxEventOutbox(input2) {
   const path2 = input2.spoolPath ?? sandboxOutboxSpoolPath(input2.conversationId);
-  const key = deriveSandboxOutboxKey(input2.sessionToken);
+  const key = loadOrCreateSandboxOutboxKey({
+    spoolPath: path2,
+    sessionToken: input2.sessionToken
+  });
   try {
     return new EncryptedEventOutbox(path2, key, input2.pushLog, input2.options);
   } catch (error61) {
     input2.pushLog?.(
-      `sandbox_outbox_spool_reset ${error61 instanceof Error ? error61.message : String(error61)}`
+      `sandbox_outbox_spool_quarantined ${error61 instanceof Error ? error61.message : String(error61)}`
     );
-    (0, import_node_fs27.rmSync)(path2, { force: true });
-    (0, import_node_fs27.rmSync)(eventJournalDir(path2), { recursive: true, force: true });
+    quarantineUnusableOutbox(path2);
     return new EncryptedEventOutbox(path2, key, input2.pushLog, input2.options);
   }
 }
@@ -95758,6 +95858,10 @@ var SandboxEventDispatcher = class {
   pendingCount() {
     return this.outbox.pendingCount();
   }
+  /** Drain the async writer so a replacement process can recover the journal. */
+  flushDurable() {
+    return this.outbox.flushDurable();
+  }
 };
 
 // src/ws-client.ts
@@ -96641,15 +96745,28 @@ function systemdArg(value2) {
 function powershellLiteral(value2) {
   return `'${value2.replaceAll("'", "''")}'`;
 }
+function serviceNames(profile) {
+  if (profile === "production") {
+    return { launchd: SERVICE_LABEL, systemd: SYSTEMD_UNIT, windows: WINDOWS_TASK };
+  }
+  const suffix = profile === "custom" ? "prod" : profile;
+  const title = `${suffix[0]?.toUpperCase()}${suffix.slice(1)}`;
+  return {
+    launchd: `${SERVICE_LABEL}.${suffix}`,
+    systemd: `alan-agent-${suffix}.service`,
+    windows: `${WINDOWS_TASK} ${title}`
+  };
+}
 function buildDaemonServicePlan(input2) {
   const daemonArgs = [input2.nodeExecutable, input2.cliEntry, "daemon", "--profile", input2.profile];
+  const names = serviceNames(input2.profile);
   if (input2.platform === "darwin") {
     const userId = input2.userId ?? process.getuid?.();
     if (userId === void 0) throw new Error("Cannot determine the current macOS user ID");
     const domain2 = `gui/${userId}`;
-    const serviceTarget = `${domain2}/${SERVICE_LABEL}`;
-    const manifestPath = (0, import_node_path29.join)(input2.homeDir, "Library", "LaunchAgents", `${SERVICE_LABEL}.plist`);
-    const logDir = (0, import_node_path29.join)(input2.homeDir, ".alan", "agent", "logs");
+    const serviceTarget = `${domain2}/${names.launchd}`;
+    const manifestPath = (0, import_node_path29.join)(input2.homeDir, "Library", "LaunchAgents", `${names.launchd}.plist`);
+    const logDir = (0, import_node_path29.join)(resolveAgentConfigDirectory(input2.profile, input2.homeDir), "logs");
     const programArguments = daemonArgs.map((arg) => `    <string>${xml(arg)}</string>`).join("\n");
     const environmentEntries = Object.entries(input2.environment ?? {}).map(([key, value2]) => `    <key>${xml(key)}</key>
     <string>${xml(value2)}</string>`).join("\n");
@@ -96663,7 +96780,7 @@ ${environmentEntries}
 <plist version="1.0">
 <dict>
   <key>Label</key>
-  <string>${SERVICE_LABEL}</string>
+  <string>${names.launchd}</string>
   <key>ProgramArguments</key>
   <array>
 ${programArguments}
@@ -96688,6 +96805,7 @@ ${environmentBlock}  <key>RunAtLoad</key>
       platform: "darwin",
       manifestPath,
       manifest,
+      logDirectory: logDir,
       loadDefinitionCommands: [
         {
           command: "launchctl",
@@ -96695,6 +96813,18 @@ ${environmentBlock}  <key>RunAtLoad</key>
           tolerateFailure: true
         }
       ],
+      reloadDefinitionCommands: [
+        {
+          command: "launchctl",
+          args: ["bootout", domain2, manifestPath],
+          tolerateFailure: true
+        },
+        {
+          command: "launchctl",
+          args: ["bootstrap", domain2, manifestPath],
+          tolerateFailure: false
+        }
+      ],
       enableCommands: [
         {
           command: "launchctl",
@@ -96754,7 +96884,7 @@ ${environmentBlock}  <key>RunAtLoad</key>
     };
   }
   if (input2.platform === "linux") {
-    const manifestPath = (0, import_node_path29.join)(input2.homeDir, ".config", "systemd", "user", SYSTEMD_UNIT);
+    const manifestPath = (0, import_node_path29.join)(input2.homeDir, ".config", "systemd", "user", names.systemd);
     const environmentLines = Object.entries(input2.environment ?? {}).map(([key, value2]) => `Environment=${systemdArg(`${key}=${value2}`)}`).join("\n");
     const manifest = `[Unit]
 Description=Alan local agent daemon
@@ -96777,6 +96907,7 @@ WantedBy=default.target
       platform: "linux",
       manifestPath,
       manifest,
+      logDirectory: null,
       loadDefinitionCommands: [
         {
           command: "systemctl",
@@ -96784,24 +96915,31 @@ WantedBy=default.target
           tolerateFailure: false
         }
       ],
+      reloadDefinitionCommands: [
+        {
+          command: "systemctl",
+          args: ["--user", "daemon-reload"],
+          tolerateFailure: false
+        }
+      ],
       enableCommands: [
         {
           command: "systemctl",
-          args: ["--user", "enable", SYSTEMD_UNIT],
+          args: ["--user", "enable", names.systemd],
           tolerateFailure: false
         }
       ],
       startCommands: [
         {
           command: "systemctl",
-          args: ["--user", "start", SYSTEMD_UNIT],
+          args: ["--user", "start", names.systemd],
           tolerateFailure: false
         }
       ],
       stopCommands: [
         {
           command: "systemctl",
-          args: ["--user", "stop", SYSTEMD_UNIT],
+          args: ["--user", "stop", names.systemd],
           tolerateFailure: true
         }
       ],
@@ -96813,14 +96951,14 @@ WantedBy=default.target
         },
         {
           command: "systemctl",
-          args: ["--user", "restart", SYSTEMD_UNIT],
+          args: ["--user", "restart", names.systemd],
           tolerateFailure: false
         }
       ],
       uninstallCommands: [
         {
           command: "systemctl",
-          args: ["--user", "disable", "--now", SYSTEMD_UNIT],
+          args: ["--user", "disable", "--now", names.systemd],
           tolerateFailure: true
         },
         {
@@ -96831,12 +96969,12 @@ WantedBy=default.target
       ],
       statusCommand: {
         command: "systemctl",
-        args: ["--user", "status", SYSTEMD_UNIT, "--no-pager"],
+        args: ["--user", "status", names.systemd, "--no-pager"],
         tolerateFailure: true
       },
       isActiveCommand: {
         command: "systemctl",
-        args: ["--user", "is-active", SYSTEMD_UNIT],
+        args: ["--user", "is-active", names.systemd],
         tolerateFailure: true
       },
       lingerStatusCommand: {
@@ -96858,12 +96996,13 @@ WantedBy=default.target
     "$trigger = New-ScheduledTaskTrigger -AtLogOn -User $currentUser",
     "$principal = New-ScheduledTaskPrincipal -UserId $currentUser -LogonType Interactive -RunLevel Limited",
     "$settings = New-ScheduledTaskSettingsSet -RestartCount 3 -RestartInterval (New-TimeSpan -Minutes 1) -ExecutionTimeLimit ([TimeSpan]::Zero)",
-    `Register-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)} -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null`
+    `Register-ScheduledTask -TaskName ${powershellLiteral(names.windows)} -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null`
   ].join("; ");
   return {
     platform: "win32",
     manifestPath: null,
     manifest: null,
+    logDirectory: null,
     loadDefinitionCommands: [
       {
         command: "powershell.exe",
@@ -96871,6 +97010,13 @@ WantedBy=default.target
         tolerateFailure: false
       }
     ],
+    reloadDefinitionCommands: [
+      {
+        command: "powershell.exe",
+        args: ["-NoProfile", "-NonInteractive", "-Command", registerScript],
+        tolerateFailure: false
+      }
+    ],
     enableCommands: [],
     startCommands: [
       {
@@ -96879,7 +97025,7 @@ WantedBy=default.target
           "-NoProfile",
           "-NonInteractive",
           "-Command",
-          `Start-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)}`
+          `Start-ScheduledTask -TaskName ${powershellLiteral(names.windows)}`
         ],
         tolerateFailure: false
       }
@@ -96891,7 +97037,7 @@ WantedBy=default.target
           "-NoProfile",
           "-NonInteractive",
           "-Command",
-          `Stop-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)} -ErrorAction SilentlyContinue`
+          `Stop-ScheduledTask -TaskName ${powershellLiteral(names.windows)} -ErrorAction SilentlyContinue`
         ],
         tolerateFailure: true
       }
@@ -96903,7 +97049,7 @@ WantedBy=default.target
           "-NoProfile",
           "-NonInteractive",
           "-Command",
-          `${registerScript}; Start-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)}`
+          `${registerScript}; Start-ScheduledTask -TaskName ${powershellLiteral(names.windows)}`
         ],
         tolerateFailure: false
       }
@@ -96915,7 +97061,7 @@ WantedBy=default.target
           "-NoProfile",
           "-NonInteractive",
           "-Command",
-          `Unregister-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)} -Confirm:$false -ErrorAction SilentlyContinue`
+          `Unregister-ScheduledTask -TaskName ${powershellLiteral(names.windows)} -Confirm:$false -ErrorAction SilentlyContinue`
         ],
         tolerateFailure: true
       }
@@ -96926,7 +97072,7 @@ WantedBy=default.target
         "-NoProfile",
         "-NonInteractive",
         "-Command",
-        `Get-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)} | Format-List TaskName,State`
+        `Get-ScheduledTask -TaskName ${powershellLiteral(names.windows)} | Format-List TaskName,State`
       ],
       tolerateFailure: true
     },
@@ -96936,7 +97082,7 @@ WantedBy=default.target
         "-NoProfile",
         "-NonInteractive",
         "-Command",
-        `(Get-ScheduledTask -TaskName ${powershellLiteral(WINDOWS_TASK)} -ErrorAction SilentlyContinue).State`
+        `(Get-ScheduledTask -TaskName ${powershellLiteral(names.windows)} -ErrorAction SilentlyContinue).State`
       ],
       tolerateFailure: true
     },
@@ -97075,9 +97221,7 @@ function createHostContext(options = {}) {
   const writeManifest = options.writeManifest ?? writeManifestAtomic;
   const removeManifest = options.removeManifest ?? ((path2) => (0, import_node_fs28.rmSync)(path2, { force: true }));
   const ensureLogDir = options.ensureLogDir ?? (() => {
-    if (plan.platform === "darwin") {
-      (0, import_node_fs28.mkdirSync)((0, import_node_path29.join)((0, import_node_os18.homedir)(), ".alan", "agent", "logs"), { recursive: true, mode: 448 });
-    }
+    if (plan.logDirectory) (0, import_node_fs28.mkdirSync)(plan.logDirectory, { recursive: true, mode: 448 });
   });
   return {
     args,
@@ -97125,7 +97269,11 @@ function ensureDaemonServiceDefinition(options = {}) {
   if (outcome.updatePending) {
     return outcome;
   }
-  for (const command of plan.loadDefinitionCommands) run(command);
+  if (inspection.state === "running" || inspection.state === "starting") {
+    return outcome;
+  }
+  const definitionCommands = inspection.state === "stopped" ? plan.reloadDefinitionCommands : plan.loadDefinitionCommands;
+  for (const command of definitionCommands) run(command);
   return outcome;
 }
 function enableDaemonService(options = {}) {
@@ -97390,11 +97538,10 @@ async function main() {
   if (command === "install") {
     bindConfigPath(commandArgs);
     const configured = readConfig();
-    if (!configured.runtimeId || !configured.runtimeToken) {
-      if (commandArgs.includes("--setup-token")) await setupDaemon(commandArgs);
-      else await loginWithDeviceCode(commandArgs);
-    }
-    installDaemonService(commandArgs);
+    const configurationMode = resolveInstallConfigurationMode(commandArgs, configured);
+    const setup = configurationMode === "setup" ? await setupDaemon(commandArgs) : null;
+    if (configurationMode === "login") await loginWithDeviceCode(commandArgs);
+    if (!setup?.daemonAlreadyRunning) installDaemonService(commandArgs);
     runMcpIntegrationCommand(["reconcile", ...commandArgs]);
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alan-ai-hq/agent-manager",
-  "version": "0.1.89",
+  "version": "0.1.90",
   "type": "module",
   "description": "Alan agent runtime — cloud sandbox and local daemon (alan-agent CLI)",
   "bin": {

package/dist/__tests__/binding-switch-git.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=binding-switch-git.test.d.ts.map

package/dist/__tests__/binding-switch-git.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binding-switch-git.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/binding-switch-git.test.ts"],"names":[],"mappings":""}