@arc402/daemon 1.2.0

package/dist/handshake-watcher.js

@@ -0,0 +1,157 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HandshakeWatcher = void 0;
+/**
+ * HandshakeWatcher — scans historical and live HandshakeSent events
+ * directed at this agent's wallet address.
+ *
+ * On startup: catch-up scan over the last SCAN_BLOCKS blocks.
+ * Then: subscribes to live events via provider.on().
+ * Idempotency: processed handshake IDs are persisted to processedIdsPath.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const ethers_1 = require("ethers");
+const SCAN_BLOCKS = 10000;
+const HANDSHAKE_SENT_ABI = [
+    "event HandshakeSent(uint256 indexed handshakeId, address indexed from, address indexed to, uint8 hsType, address token, uint256 amount, string note, uint256 timestamp)",
+];
+class HandshakeWatcher {
+    constructor(provider, handshakeAddress, myAddress, onHandshake, processedIdsPath) {
+        this.processedIds = new Set();
+        this.liveListener = null;
+        this.provider = provider;
+        this.contract = new ethers_1.ethers.Contract(handshakeAddress, HANDSHAKE_SENT_ABI, provider);
+        this.myAddress = myAddress.toLowerCase();
+        this.onHandshake = onHandshake;
+        this.processedIdsPath = processedIdsPath;
+    }
+    async start() {
+        this.loadProcessedIds();
+        await this.catchupScan();
+        this.subscribeLive();
+    }
+    async stop() {
+        if (this.liveListener) {
+            this.contract.off("HandshakeSent", this.liveListener);
+            this.liveListener = null;
+        }
+    }
+    // ── Private ──────────────────────────────────────────────────────────────
+    loadProcessedIds() {
+        try {
+            const dir = path.dirname(this.processedIdsPath);
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            if (fs.existsSync(this.processedIdsPath)) {
+                const raw = fs.readFileSync(this.processedIdsPath, "utf-8");
+                const ids = JSON.parse(raw);
+                this.processedIds = new Set(ids);
+            }
+        }
+        catch {
+            // Start fresh — non-fatal
+            this.processedIds = new Set();
+        }
+    }
+    saveProcessedIds() {
+        try {
+            fs.writeFileSync(this.processedIdsPath, JSON.stringify([...this.processedIds]), { mode: 0o600 });
+        }
+        catch {
+            // Non-fatal — will reprocess on next restart at worst
+        }
+    }
+    async catchupScan() {
+        try {
+            const latest = await this.provider.getBlockNumber();
+            const fromBlock = Math.max(0, latest - SCAN_BLOCKS);
+            // Filter: HandshakeSent where `to` = this agent
+            const filter = this.contract.filters.HandshakeSent(null, null, this.myAddress);
+            const logs = await this.contract.queryFilter(filter, fromBlock, latest);
+            for (const log of logs) {
+                await this.handleLog(log);
+            }
+        }
+        catch (err) {
+            console.error("[handshake-watcher] catchup scan error:", err);
+        }
+    }
+    subscribeLive() {
+        const listener = async (...args) => {
+            // ethers v6: last arg is the EventLog
+            const log = args[args.length - 1];
+            await this.handleLog(log).catch((err) => {
+                console.error("[handshake-watcher] live event error:", err);
+            });
+        };
+        this.liveListener = listener;
+        this.contract.on("HandshakeSent", listener);
+    }
+    async handleLog(log) {
+        try {
+            const args = log.args;
+            const handshakeId = args[0].toString();
+            const to = args[2];
+            // Only process events directed at this agent
+            if (to.toLowerCase() !== this.myAddress)
+                return;
+            // Idempotency check
+            if (this.processedIds.has(handshakeId))
+                return;
+            const event = {
+                handshakeId,
+                from: args[1],
+                to,
+                hsType: Number(args[3]),
+                token: args[4],
+                amount: BigInt(args[5].toString()),
+                note: args[6],
+                timestamp: Number(args[7]),
+                blockNumber: log.blockNumber,
+                txHash: log.transactionHash,
+            };
+            await this.onHandshake(event);
+            this.processedIds.add(handshakeId);
+            this.saveProcessedIds();
+        }
+        catch (err) {
+            console.error("[handshake-watcher] error processing event:", err);
+        }
+    }
+}
+exports.HandshakeWatcher = HandshakeWatcher;
+//# sourceMappingURL=handshake-watcher.js.map

package/dist/handshake-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-watcher.js","sourceRoot":"","sources":["../src/handshake-watcher.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;GAOG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAgC;AAEhC,MAAM,WAAW,GAAG,KAAM,CAAC;AAE3B,MAAM,kBAAkB,GAAG;IACzB,yKAAyK;CAC1K,CAAC;AAeF,MAAa,gBAAgB;IAS3B,YACE,QAAyB,EACzB,gBAAwB,EACxB,SAAiB,EACjB,WAAqD,EACrD,gBAAwB;QARlB,iBAAY,GAAgB,IAAI,GAAG,EAAE,CAAC;QACtC,iBAAY,GAA0C,IAAI,CAAC;QASjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,4EAA4E;IAEpE,gBAAgB;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACzC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;YAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,EACtC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;YAEpD,gDAAgD;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAExE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,SAAS,CAAC,GAAsB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;YAC5C,sCAAsC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAoB,CAAC;YACrD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtC,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAoB;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,EAAE,GAAW,IAAI,CAAC,CAAC,CAAC,CAAC;YAE3B,6CAA6C;YAC7C,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO;YAEhD,oBAAoB;YACpB,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO;YAE/C,MAAM,KAAK,GAAmB;gBAC5B,WAAW;gBACX,IAAI,EAAE,IAAI,CAAC,CAAC,CAAW;gBACvB,EAAE;gBACF,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACvB,KAAK,EAAE,IAAI,CAAC,CAAC,CAAW;gBACxB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAW;gBACvB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,MAAM,EAAE,GAAG,CAAC,eAAe;aAC5B,CAAC;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAE9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF;AAhID,4CAgIC"}

package/dist/hire-listener.d.ts

@@ -0,0 +1,32 @@
+import type { DaemonConfig } from "./config";
+import type { DaemonDB } from "./server";
+import type { Notifier } from "./notify";
+export interface HireProposal {
+    messageId: string;
+    hirerAddress: string;
+    capability: string;
+    priceEth: string;
+    deadlineUnix: number;
+    specHash: string;
+    agreementId?: string;
+    signature?: string;
+    taskDescription?: string;
+}
+export interface PolicyResult {
+    allowed: boolean;
+    reason?: string;
+}
+export declare function evaluatePolicy(proposal: HireProposal, config: DaemonConfig, activeCount: number): PolicyResult;
+export declare class HireListener {
+    private config;
+    private db;
+    private notifier;
+    private walletAddress;
+    private lastSeenMessageId;
+    private onApprove;
+    constructor(config: DaemonConfig, db: DaemonDB, notifier: Notifier, walletAddress: string);
+    setApproveCallback(cb: (hireId: string) => Promise<void>): void;
+    poll(): Promise<void>;
+    private handleMessage;
+}
+//# sourceMappingURL=hire-listener.d.ts.map

package/dist/hire-listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hire-listener.d.ts","sourceRoot":"","sources":["../src/hire-listener.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAiCD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,GAClB,YAAY,CAmCd;AAoBD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,EAAE,CAAW;IACrB,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,SAAS,CAAoD;gBAGnE,MAAM,EAAE,YAAY,EACpB,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,MAAM;IAQvB,kBAAkB,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIzD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAsBb,aAAa;CA6F5B"}

package/dist/hire-listener.js

@@ -0,0 +1,237 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HireListener = void 0;
+exports.evaluatePolicy = evaluatePolicy;
+/**
+ * Hire listener — polls relay for incoming hire proposals,
+ * evaluates against policy, and queues for approval or auto-accepts.
+ */
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const ethers_1 = require("ethers");
+const prompt_guard_1 = require("./prompt-guard");
+function relayGet(relayUrl, urlPath) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(urlPath, relayUrl);
+        const isHttps = parsed.protocol === "https:";
+        const mod = isHttps ? https : http;
+        const options = {
+            hostname: parsed.hostname,
+            port: parsed.port || (isHttps ? 443 : 80),
+            path: parsed.pathname + (parsed.search || ""),
+            method: "GET",
+            headers: { "Content-Type": "application/json" },
+        };
+        const req = mod.request(options, (res) => {
+            let raw = "";
+            res.on("data", (c) => { raw += c.toString(); });
+            res.on("end", () => {
+                try {
+                    resolve({ status: res.statusCode ?? 0, data: JSON.parse(raw) });
+                }
+                catch {
+                    resolve({ status: res.statusCode ?? 0, data: raw });
+                }
+            });
+        });
+        req.on("error", reject);
+        req.end();
+    });
+}
+function evaluatePolicy(proposal, config, activeCount) {
+    const policy = config.policy;
+    // Concurrency check
+    if (activeCount >= config.relay.max_concurrent_agreements) {
+        return { allowed: false, reason: "at_capacity" };
+    }
+    // Price check
+    try {
+        const priceWei = ethers_1.ethers.parseEther(proposal.priceEth || "0");
+        const maxWei = ethers_1.ethers.parseEther(policy.max_price_eth);
+        if (priceWei > maxWei) {
+            return { allowed: false, reason: "price_exceeds_policy" };
+        }
+    }
+    catch {
+        return { allowed: false, reason: "invalid_price" };
+    }
+    // Capability check (empty list = accept all)
+    if (policy.allowed_capabilities.length > 0 && proposal.capability) {
+        if (!policy.allowed_capabilities.includes(proposal.capability)) {
+            return { allowed: false, reason: "capability_not_allowed" };
+        }
+    }
+    // Deadline check
+    const now = Math.floor(Date.now() / 1000);
+    if (proposal.deadlineUnix > 0) {
+        if (proposal.deadlineUnix < now + policy.min_hire_lead_time_seconds) {
+            return { allowed: false, reason: "deadline_too_soon" };
+        }
+    }
+    return { allowed: true };
+}
+function parseProposal(msg) {
+    const payload = (msg.payload ?? msg);
+    if (!payload.hirerAddress && !payload.hirer_address && !payload.from)
+        return null;
+    const taskDesc = String(payload.task ?? payload.taskDescription ?? payload.task_description ?? "");
+    return {
+        messageId: String(msg.messageId ?? msg.id ?? `msg_${Date.now()}`),
+        hirerAddress: String(payload.hirerAddress ?? payload.hirer_address ?? msg.from ?? ""),
+        capability: String(payload.capability ?? payload.serviceType ?? ""),
+        priceEth: String(payload.priceEth ?? payload.price_eth ?? "0"),
+        deadlineUnix: Number(payload.deadlineUnix ?? payload.deadline ?? 0),
+        specHash: String(payload.specHash ?? payload.spec_hash ?? ""),
+        agreementId: payload.agreementId ? String(payload.agreementId) : undefined,
+        signature: payload.signature ? String(payload.signature) : undefined,
+        taskDescription: taskDesc || undefined,
+    };
+}
+class HireListener {
+    constructor(config, db, notifier, walletAddress) {
+        this.lastSeenMessageId = null;
+        this.onApprove = null;
+        this.config = config;
+        this.db = db;
+        this.notifier = notifier;
+        this.walletAddress = walletAddress;
+    }
+    setApproveCallback(cb) {
+        this.onApprove = cb;
+    }
+    async poll() {
+        const relayUrl = this.config.relay.relay_url;
+        if (!relayUrl)
+            return;
+        try {
+            const qs = `?address=${encodeURIComponent(this.walletAddress)}` +
+                (this.lastSeenMessageId ? `&since=${encodeURIComponent(this.lastSeenMessageId)}` : "");
+            const result = await relayGet(relayUrl, `/poll${qs}`);
+            const data = result.data;
+            const messages = data.messages ?? [];
+            for (const msg of messages) {
+                this.lastSeenMessageId = String(msg.messageId ?? "");
+                await this.handleMessage(msg);
+            }
+        }
+        catch {
+            // Transient relay failure — retry next poll
+        }
+    }
+    async handleMessage(msg) {
+        const proposal = parseProposal(msg);
+        if (!proposal)
+            return;
+        // Dedup — skip if already in DB
+        const existing = this.db.getHireRequest(proposal.messageId);
+        if (existing)
+            return;
+        // Count active agreements
+        const activeCount = this.db.countActiveHireRequests();
+        // Policy evaluation
+        const policyResult = evaluatePolicy(proposal, this.config, activeCount);
+        if (!policyResult.allowed) {
+            // Reject
+            const hireId = proposal.messageId;
+            this.db.insertHireRequest({
+                id: hireId,
+                agreement_id: proposal.agreementId ?? null,
+                hirer_address: proposal.hirerAddress,
+                capability: proposal.capability,
+                price_eth: proposal.priceEth,
+                deadline_unix: proposal.deadlineUnix,
+                spec_hash: proposal.specHash,
+                task_description: proposal.taskDescription ?? null,
+                status: "rejected",
+                reject_reason: policyResult.reason ?? "policy_violation",
+            });
+            if (this.config.notifications.notify_on_hire_rejected) {
+                await this.notifier.notifyHireRejected(hireId, policyResult.reason ?? "policy_violation");
+            }
+            return;
+        }
+        if (proposal.taskDescription) {
+            const guardResult = (0, prompt_guard_1.guardTaskContent)(proposal.taskDescription);
+            if (!guardResult.safe) {
+                const hireId = proposal.messageId;
+                this.db.insertHireRequest({
+                    id: hireId,
+                    agreement_id: proposal.agreementId ?? null,
+                    hirer_address: proposal.hirerAddress,
+                    capability: proposal.capability,
+                    price_eth: proposal.priceEth,
+                    deadline_unix: proposal.deadlineUnix,
+                    spec_hash: proposal.specHash,
+                    task_description: proposal.taskDescription,
+                    status: "rejected",
+                    reject_reason: `prompt_guard:${guardResult.category}`,
+                });
+                await this.notifier.send("hire_rejected", "PromptGuard Rejected Hire", [
+                    `Hire: ${hireId}`,
+                    `Category: ${guardResult.category}`,
+                    `Severity: ${guardResult.severity}`,
+                    `Excerpt: ${guardResult.excerpt}`,
+                ].join("\n")).catch(() => { });
+                return;
+            }
+        }
+        // Insert as pending_approval or auto-accept
+        const hireId = proposal.messageId;
+        const status = this.config.policy.auto_accept ? "accepted" : "pending_approval";
+        this.db.insertHireRequest({
+            id: hireId,
+            agreement_id: proposal.agreementId ?? null,
+            hirer_address: proposal.hirerAddress,
+            capability: proposal.capability,
+            price_eth: proposal.priceEth,
+            deadline_unix: proposal.deadlineUnix,
+            spec_hash: proposal.specHash,
+            task_description: proposal.taskDescription ?? null,
+            status,
+            reject_reason: null,
+        });
+        if (status === "pending_approval") {
+            if (this.config.notifications.notify_on_hire_request) {
+                await this.notifier.notifyHireRequest(hireId, proposal.hirerAddress, proposal.priceEth, proposal.capability);
+            }
+        }
+        else if (status === "accepted" && this.onApprove) {
+            await this.onApprove(hireId);
+        }
+    }
+}
+exports.HireListener = HireListener;
+//# sourceMappingURL=hire-listener.js.map

package/dist/hire-listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hire-listener.js","sourceRoot":"","sources":["../src/hire-listener.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,wCAuCC;AAnGD;;;GAGG;AACH,2CAA6B;AAC7B,6CAA+B;AAC/B,mCAAgC;AAIhC,iDAAkD;AAmBlD,SAAS,QAAQ,CACf,QAAgB,EAChB,OAAe;IAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,MAAM,OAAO,GAAwB;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAC7C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvC,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,cAAc,CAC5B,QAAsB,EACtB,MAAoB,EACpB,WAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,oBAAoB;IACpB,IAAI,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IAED,cAAc;IACd,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,eAAM,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,YAAY,GAAG,GAAG,GAAG,MAAM,CAAC,0BAA0B,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAA4B,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAElF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACnG,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACrF,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QACnE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;QAC9D,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC7D,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1E,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,eAAe,EAAE,QAAQ,IAAI,SAAS;KACvC,CAAC;AACJ,CAAC;AAED,MAAa,YAAY;IAQvB,YACE,MAAoB,EACpB,EAAY,EACZ,QAAkB,EAClB,aAAqB;QAPf,sBAAiB,GAAkB,IAAI,CAAC;QACxC,cAAS,GAA+C,IAAI,CAAC;QAQnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,kBAAkB,CAAC,EAAqC;QACtD,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,IAAI,CAAC;YACH,MAAM,EAAE,GACN,YAAY,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;gBACpD,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAEzF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAqD,CAAC;YAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YAErC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBACrD,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAA4B;QACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,gCAAgC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,QAAQ;YAAE,OAAO;QAErB,0BAA0B;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,uBAAuB,EAAE,CAAC;QAEtD,oBAAoB;QACpB,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAExE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,SAAS;YACT,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC;YAClC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC;gBACxB,EAAE,EAAE,MAAM;gBACV,YAAY,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;gBAC1C,aAAa,EAAE,QAAQ,CAAC,YAAY;gBACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;gBACpC,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,gBAAgB,EAAE,QAAQ,CAAC,eAAe,IAAI,IAAI;gBAClD,MAAM,EAAE,UAAU;gBAClB,aAAa,EAAE,YAAY,CAAC,MAAM,IAAI,kBAAkB;aACzD,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC;gBACtD,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,IAAA,+BAAgB,EAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC/D,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC;gBAClC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC;oBACxB,EAAE,EAAE,MAAM;oBACV,YAAY,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;oBAC1C,aAAa,EAAE,QAAQ,CAAC,YAAY;oBACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,SAAS,EAAE,QAAQ,CAAC,QAAQ;oBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;oBACpC,SAAS,EAAE,QAAQ,CAAC,QAAQ;oBAC5B,gBAAgB,EAAE,QAAQ,CAAC,eAAe;oBAC1C,MAAM,EAAE,UAAU;oBAClB,aAAa,EAAE,gBAAgB,WAAW,CAAC,QAAQ,EAAE;iBACtD,CAAC,CAAC;gBAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,2BAA2B,EAAE;oBACrE,SAAS,MAAM,EAAE;oBACjB,aAAa,WAAW,CAAC,QAAQ,EAAE;oBACnC,aAAa,WAAW,CAAC,QAAQ,EAAE;oBACnC,YAAY,WAAW,CAAC,OAAO,EAAE;iBAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAEhF,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC;YACxB,EAAE,EAAE,MAAM;YACV,YAAY,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;YAC1C,aAAa,EAAE,QAAQ,CAAC,YAAY;YACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;YACpC,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,gBAAgB,EAAE,QAAQ,CAAC,eAAe,IAAI,IAAI;YAClD,MAAM;YACN,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,EAAE,CAAC;gBACrD,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CACnC,MAAM,EACN,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,UAAU,CACpB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF;AA3ID,oCA2IC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @arc402/daemon — entrypoint.
+ *
+ * Phase 1.2 (Spec 46 §16 Pattern 1): Two-process split.
+ *   - arc402-signer: isolated child, holds machine key, Unix socket only
+ *   - arc402-api:    public child, HTTPS/Express, zero machine key access
+ *
+ * The machine key env var is stripped from the API process environment
+ * to enforce the isolation at the OS level.
+ *
+ * Legacy single-process mode preserved when --legacy flag is passed.
+ */
+const child_process_1 = require("child_process");
+const path = __importStar(require("path"));
+const config_1 = require("./config");
+const legacy = process.argv.includes("--legacy") ||
+    process.env.ARC402_DAEMON_LEGACY === "1";
+const foreground = process.argv.includes("--foreground") ||
+    process.env.ARC402_DAEMON_FOREGROUND === "1";
+if (legacy) {
+    // ── Legacy single-process mode (Phase 1.1 server.ts) ──────────────────────
+    // Preserved for backward compatibility. Removed in a future release.
+    const { runDaemon } = require("./server");
+    runDaemon(foreground).catch((err) => {
+        process.stderr.write(`Daemon fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    });
+}
+else {
+    // ── Two-process split ──────────────────────────────────────────────────────
+    runStartupPreflight();
+    startTwoProcessDaemon();
+}
+function runStartupPreflight() {
+    let config;
+    try {
+        config = (0, config_1.loadDaemonConfig)();
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`ARC-402 daemon startup blocked during config: ${detail}\n`);
+        process.stderr.write("\nNext steps:\n");
+        process.stderr.write("  1. Run `arc402 daemon init` to create ~/.arc402/daemon.toml.\n");
+        process.stderr.write("  2. Fill in wallet.contract_address and network.rpc_url before starting the daemon.\n");
+        process.stderr.write("  3. Retry with `arc402-daemon` or `arc402 daemon start`.\n");
+        process.exit(1);
+    }
+    try {
+        (0, config_1.loadMachineKey)(config);
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        const envVarName = (0, config_1.getMachineKeyEnvVarName)(config);
+        process.stderr.write(`ARC-402 daemon startup blocked during machine-key: ${detail}\n`);
+        process.stderr.write("\nNext steps:\n");
+        process.stderr.write(`  1. Export ${envVarName} with your machine key before starting the daemon.\n`);
+        process.stderr.write("  2. Confirm wallet.machine_key in ~/.arc402/daemon.toml points at that env var.\n");
+        process.stderr.write("  3. Retry after the machine key is available.\n");
+        process.exit(1);
+    }
+}
+function startTwoProcessDaemon() {
+    try {
+        const cfg = (0, config_1.loadDaemonConfig)();
+        (0, config_1.loadMachineKey)(cfg);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        process.stderr.write("ARC-402 daemon is not ready to start.\n");
+        process.stderr.write(`${message}\n\n`);
+        process.stderr.write("Next steps:\n");
+        process.stderr.write("  • Run `arc402 setup` for guided onboarding, or `arc402 daemon init` to create daemon.toml.\n");
+        process.stderr.write("  • Export the required machine key environment variable before starting the daemon.\n");
+        process.stderr.write("  • If this should be a remote operator machine, use `arc402 chat --setup` and choose Remote instead of starting a local daemon.\n");
+        process.exit(1);
+    }
+    const signerPath = path.join(__dirname, "signer.js");
+    const apiPath = path.join(__dirname, "api.js");
+    // ── Start signer first (creates the Unix socket) ──────────────────────────
+    // Signer inherits full env (including ARC402_MACHINE_KEY).
+    const signerProcess = (0, child_process_1.fork)(signerPath, [], {
+        stdio: foreground ? "inherit" : "pipe",
+    });
+    if (!foreground && signerProcess.stdout) {
+        signerProcess.stdout.on("data", (d) => {
+            process.stdout.write(d);
+        });
+    }
+    if (!foreground && signerProcess.stderr) {
+        signerProcess.stderr.on("data", (d) => {
+            process.stderr.write(d);
+        });
+    }
+    signerProcess.on("exit", (code) => {
+        process.stderr.write(`[index] signer exited with code ${String(code)} — shutting down\n`);
+        apiProcess?.kill("SIGTERM");
+        process.exit(1);
+    });
+    // ── Start API after 1s (socket must exist before api connects) ────────────
+    // API env: strip ARC402_MACHINE_KEY so the API process cannot access it.
+    let apiProcess;
+    setTimeout(() => {
+        const apiEnv = { ...process.env };
+        // Determine which env var holds the machine key and remove it
+        const machineKeyVar = apiEnv.ARC402_MACHINE_KEY
+            ? "ARC402_MACHINE_KEY"
+            : Object.keys(apiEnv).find(k => k.startsWith("ARC402_") && apiEnv[k]?.startsWith("0x"));
+        if (machineKeyVar) {
+            delete apiEnv[machineKeyVar];
+        }
+        // Also strip any private key look-alikes under common names
+        for (const k of ["PRIVATE_KEY", "MACHINE_PRIVATE_KEY", "ARC402_SIGNER_KEY"]) {
+            delete apiEnv[k];
+        }
+        apiProcess = (0, child_process_1.fork)(apiPath, [], {
+            env: apiEnv,
+            stdio: foreground ? "inherit" : "pipe",
+        });
+        if (!foreground && apiProcess.stdout) {
+            apiProcess.stdout.on("data", (d) => {
+                process.stdout.write(d);
+            });
+        }
+        if (!foreground && apiProcess.stderr) {
+            apiProcess.stderr.on("data", (d) => {
+                process.stderr.write(d);
+            });
+        }
+        apiProcess.on("exit", (code) => {
+            process.stderr.write(`[index] api exited with code ${String(code)} — shutting down\n`);
+            signerProcess.kill("SIGTERM");
+            process.exit(1);
+        });
+        process.stdout.write("[index] Two-process daemon started (signer + api)\n");
+    }, 1000);
+    // ── Graceful shutdown ─────────────────────────────────────────────────────
+    function shutdown(signal) {
+        process.stderr.write(`[index] ${signal} received — shutting down\n`);
+        apiProcess?.kill("SIGTERM");
+        signerProcess.kill("SIGTERM");
+        setTimeout(() => process.exit(0), 3000);
+    }
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA;;;;;;;;;;;GAWG;AACH,iDAAwD;AACxD,2CAA6B;AAC7B,qCAAqF;AAErF,MAAM,MAAM,GACV,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG,CAAC;AAE3C,MAAM,UAAU,GACd,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,CAAC;AAE/C,IAAI,MAAM,EAAE,CAAC;IACX,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,UAAU,CAAkD,CAAC;IAC3F,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,8EAA8E;IAC9E,mBAAmB,EAAE,CAAC;IACtB,qBAAqB,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,yBAAgB,GAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,MAAM,IAAI,CAAC,CAAC;QAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAC/G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,IAAA,uBAAc,EAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAA,gCAAuB,EAAC,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,MAAM,IAAI,CAAC,CAAC;QACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,UAAU,sDAAsD,CAAC,CAAC;QACtG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QAC3G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,yBAAgB,GAAE,CAAC;QAC/B,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gGAAgG,CAAC,CAAC;QACvH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAC/G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oIAAoI,CAAC,CAAC;QAC3J,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,OAAO,GAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAElD,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,aAAa,GAAiB,IAAA,oBAAI,EAAC,UAAU,EAAE,EAAE,EAAE;QACvD,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACxC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACxC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1F,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,UAAoC,CAAC;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,MAAM,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAErD,8DAA8D;QAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB;YAC7C,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1F,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC;QACD,4DAA4D;QAC5D,KAAK,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,UAAU,GAAG,IAAA,oBAAI,EAAC,OAAO,EAAE,EAAE,EAAE;YAC7B,GAAG,EAAE,MAAM;YACX,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACrC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACrC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACvF,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9E,CAAC,EAAE,IAAI,CAAC,CAAC;IAET,6EAA6E;IAC7E,SAAS,QAAQ,CAAC,MAAc;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,6BAA6B,CAAC,CAAC;QACrE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClD,CAAC"}