@astragenie/astramemory-local 0.7.2

package/dist/service/systemd.js

@@ -0,0 +1,150 @@
+import { exec } from 'node:child_process';
+import { mkdirSync, writeFileSync, existsSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const SERVICE_NAME = 'astra-memoryd';
+const UNIT_FILENAME = `${SERVICE_NAME}.service`;
+const BACKUP_SERVICE_FILENAME = `${SERVICE_NAME}-backup.service`;
+const BACKUP_TIMER_FILENAME = `${SERVICE_NAME}-backup.timer`;
+function unitDir() {
+    return join(homedir(), '.config', 'systemd', 'user');
+}
+function unitPath() {
+    return join(unitDir(), UNIT_FILENAME);
+}
+function backupServicePath() {
+    return join(unitDir(), BACKUP_SERVICE_FILENAME);
+}
+function backupTimerPath() {
+    return join(unitDir(), BACKUP_TIMER_FILENAME);
+}
+function buildUnit(execStart, port) {
+    return [
+        '[Unit]',
+        'Description=AstraMemory local memory daemon',
+        'After=network.target',
+        '',
+        '[Service]',
+        'Type=simple',
+        `ExecStart=${execStart} --port ${port}`,
+        'Restart=on-failure',
+        'RestartSec=5',
+        `Environment=ASTRA_MEMORY_PORT=${port}`,
+        '',
+        '[Install]',
+        'WantedBy=default.target',
+        '',
+    ].join('\n');
+}
+function buildBackupService(execCmd, keep) {
+    return [
+        '[Unit]',
+        'Description=AstraMemory nightly backup',
+        '',
+        '[Service]',
+        'Type=oneshot',
+        `ExecStart=${execCmd} backup --keep ${keep}`,
+        '',
+    ].join('\n');
+}
+function buildBackupTimer() {
+    return [
+        '[Unit]',
+        'Description=AstraMemory nightly backup timer',
+        '',
+        '[Timer]',
+        'OnCalendar=03:00',
+        'Persistent=true',
+        '',
+        '[Install]',
+        'WantedBy=timers.target',
+        '',
+    ].join('\n');
+}
+function runCmd(cmd) {
+    return new Promise((resolve, reject) => {
+        exec(cmd, { timeout: 10_000 }, (err, stdout, stderr) => {
+            if (err)
+                reject(new Error(`Command failed: ${cmd}\n${stderr || err.message}`));
+            else
+                resolve(stdout.trim());
+        });
+    });
+}
+export class SystemdAdapter {
+    platform = 'linux';
+    async install(execPath, port) {
+        mkdirSync(unitDir(), { recursive: true });
+        writeFileSync(unitPath(), buildUnit(execPath, port), 'utf8');
+        await runCmd(`systemctl --user daemon-reload`);
+        await runCmd(`systemctl --user enable ${SERVICE_NAME}`);
+        return { kind: 'task' };
+    }
+    async uninstall() {
+        if (existsSync(unitPath())) {
+            try {
+                await runCmd(`systemctl --user stop ${SERVICE_NAME}`);
+            }
+            catch { /* ignore if not running */ }
+            try {
+                await runCmd(`systemctl --user disable ${SERVICE_NAME}`);
+            }
+            catch { /* ignore */ }
+            unlinkSync(unitPath());
+            try {
+                await runCmd(`systemctl --user daemon-reload`);
+            }
+            catch { /* ignore */ }
+        }
+    }
+    async start() {
+        await runCmd(`systemctl --user start ${SERVICE_NAME}`);
+    }
+    async stop() {
+        await runCmd(`systemctl --user stop ${SERVICE_NAME}`);
+    }
+    async status() {
+        const installed = existsSync(unitPath());
+        if (!installed)
+            return { installed: false, running: false };
+        try {
+            const out = await runCmd(`systemctl --user is-active ${SERVICE_NAME}`);
+            const running = out === 'active';
+            return { installed, running, detail: out };
+        }
+        catch {
+            return { installed, running: false, detail: 'inactive' };
+        }
+    }
+    async installBackupTimer(execPath, keep) {
+        mkdirSync(unitDir(), { recursive: true });
+        const execCmd = execPath; // already formatted as `"node" "index.js"`
+        writeFileSync(backupServicePath(), buildBackupService(execCmd, keep), 'utf8');
+        writeFileSync(backupTimerPath(), buildBackupTimer(), 'utf8');
+        await runCmd(`systemctl --user daemon-reload`);
+        await runCmd(`systemctl --user enable --now ${SERVICE_NAME}-backup.timer`);
+    }
+    async uninstallBackupTimer() {
+        const timerPath = backupTimerPath();
+        const svcPath = backupServicePath();
+        if (existsSync(timerPath)) {
+            try {
+                await runCmd(`systemctl --user stop ${SERVICE_NAME}-backup.timer`);
+            }
+            catch { /* ignore */ }
+            try {
+                await runCmd(`systemctl --user disable ${SERVICE_NAME}-backup.timer`);
+            }
+            catch { /* ignore */ }
+            unlinkSync(timerPath);
+        }
+        if (existsSync(svcPath)) {
+            unlinkSync(svcPath);
+        }
+        try {
+            await runCmd(`systemctl --user daemon-reload`);
+        }
+        catch { /* ignore */ }
+    }
+}
+//# sourceMappingURL=systemd.js.map

package/dist/service/systemd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemd.js","sourceRoot":"","sources":["../../src/service/systemd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,YAAY,GAAG,eAAe,CAAC;AACrC,MAAM,aAAa,GAAG,GAAG,YAAY,UAAU,CAAC;AAChD,MAAM,uBAAuB,GAAG,GAAG,YAAY,iBAAiB,CAAC;AACjE,MAAM,qBAAqB,GAAG,GAAG,YAAY,eAAe,CAAC;AAE7D,SAAS,OAAO;IACd,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB,EAAE,IAAY;IAChD,OAAO;QACL,QAAQ;QACR,6CAA6C;QAC7C,sBAAsB;QACtB,EAAE;QACF,WAAW;QACX,aAAa;QACb,aAAa,SAAS,WAAW,IAAI,EAAE;QACvC,oBAAoB;QACpB,cAAc;QACd,iCAAiC,IAAI,EAAE;QACvC,EAAE;QACF,WAAW;QACX,yBAAyB;QACzB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAY;IACvD,OAAO;QACL,QAAQ;QACR,wCAAwC;QACxC,EAAE;QACF,WAAW;QACX,cAAc;QACd,aAAa,OAAO,kBAAkB,IAAI,EAAE;QAC5C,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,QAAQ;QACR,8CAA8C;QAC9C,EAAE;QACF,SAAS;QACT,kBAAkB;QAClB,iBAAiB;QACjB,EAAE;QACF,WAAW;QACX,wBAAwB;QACxB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACrD,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;;gBAC1E,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,QAAQ,GAAG,OAAgB,CAAC;IAErC,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,IAAY;QAC1C,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;YACpG,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxF,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvB,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,CAAC,0BAA0B,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,GAAG,KAAK,QAAQ,CAAC;YACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,IAAY;QACrD,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,2CAA2C;QACrE,aAAa,CAAC,iBAAiB,EAAE,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9E,aAAa,CAAC,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,iCAAiC,YAAY,eAAe,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,yBAAyB,YAAY,eAAe,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAClG,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,4BAA4B,YAAY,eAAe,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACrG,UAAU,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/service/task-xml.d.ts

@@ -0,0 +1,36 @@
+/**
+ * task-xml.ts — Task Scheduler XML for the daemon task (D1).
+ *
+ * Why XML instead of `schtasks /create /sc onlogon ...`:
+ *  - CLI-created tasks carry a DEFAULT ExecutionTimeLimit of 72 hours —
+ *    Task Scheduler silently kills the daemon after 3 days. Only XML can
+ *    express PT0S (no limit).
+ *  - Only XML can express a logon trigger WITH a repetition interval —
+ *    the PT5M repetition is our no-admin watchdog: a healthy daemon makes
+ *    the re-run exit in <100ms (single-instance lock), a dead daemon gets
+ *    restarted within 5 minutes.
+ *  - MultipleInstancesPolicy=IgnoreNew prevents pile-ups if a run is slow.
+ *  - StartWhenAvailable=true catches up a missed logon trigger.
+ */
+export interface TaskXmlOpts {
+    /** Full command to execute (the stable shim .cmd path). */
+    command: string;
+    /** Optional arguments string. */
+    args?: string;
+    /** Working directory for the task. */
+    workingDir?: string;
+    /** User id for the principal — DOMAIN\user or plain username. */
+    userId: string;
+    description?: string;
+}
+/**
+ * Daily-trigger variant (backup timer): CalendarTrigger at `startTime`
+ * every day. Same Settings block reasons as the daemon task — most
+ * importantly registered via XML so it installs without elevation on the
+ * same boxes where the CLI form gets "Access is denied".
+ */
+export declare function buildDailyTaskXml(opts: TaskXmlOpts & {
+    startTime?: string;
+    description?: string;
+}): string;
+export declare function buildTaskXml(opts: TaskXmlOpts): string;

package/dist/service/task-xml.js

@@ -0,0 +1,91 @@
+/**
+ * task-xml.ts — Task Scheduler XML for the daemon task (D1).
+ *
+ * Why XML instead of `schtasks /create /sc onlogon ...`:
+ *  - CLI-created tasks carry a DEFAULT ExecutionTimeLimit of 72 hours —
+ *    Task Scheduler silently kills the daemon after 3 days. Only XML can
+ *    express PT0S (no limit).
+ *  - Only XML can express a logon trigger WITH a repetition interval —
+ *    the PT5M repetition is our no-admin watchdog: a healthy daemon makes
+ *    the re-run exit in <100ms (single-instance lock), a dead daemon gets
+ *    restarted within 5 minutes.
+ *  - MultipleInstancesPolicy=IgnoreNew prevents pile-ups if a run is slow.
+ *  - StartWhenAvailable=true catches up a missed logon trigger.
+ */
+function xmlEscape(s) {
+    return s
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
+/**
+ * Daily-trigger variant (backup timer): CalendarTrigger at `startTime`
+ * every day. Same Settings block reasons as the daemon task — most
+ * importantly registered via XML so it installs without elevation on the
+ * same boxes where the CLI form gets "Access is denied".
+ */
+export function buildDailyTaskXml(opts) {
+    const startTime = opts.startTime ?? '03:00:00';
+    const base = buildTaskXml(opts);
+    // Swap the logon trigger for a daily calendar trigger; keep everything else.
+    const trigger = `    <CalendarTrigger>
+      <StartBoundary>2026-01-01T${startTime}</StartBoundary>
+      <Enabled>true</Enabled>
+      <ScheduleByDay>
+        <DaysInterval>1</DaysInterval>
+      </ScheduleByDay>
+    </CalendarTrigger>`;
+    return base.replace(/    <LogonTrigger>[\s\S]*?<\/LogonTrigger>/, trigger);
+}
+export function buildTaskXml(opts) {
+    const description = opts.description ?? 'AstraMemory local memory daemon (astramem-local). Managed by astramem-local service install / reinstall.';
+    return `<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <RegistrationInfo>
+    <Description>${xmlEscape(description)}</Description>
+  </RegistrationInfo>
+  <Triggers>
+    <LogonTrigger>
+      <Enabled>true</Enabled>
+      <UserId>${xmlEscape(opts.userId)}</UserId>
+      <Repetition>
+        <Interval>PT5M</Interval>
+        <StopAtDurationEnd>false</StopAtDurationEnd>
+      </Repetition>
+    </LogonTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="Author">
+      <UserId>${xmlEscape(opts.userId)}</UserId>
+      <LogonType>InteractiveToken</LogonType>
+      <RunLevel>LeastPrivilege</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <AllowHardTerminate>true</AllowHardTerminate>
+    <StartWhenAvailable>true</StartWhenAvailable>
+    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
+    <AllowStartOnDemand>true</AllowStartOnDemand>
+    <Enabled>true</Enabled>
+    <Hidden>false</Hidden>
+    <RunOnlyIfIdle>false</RunOnlyIfIdle>
+    <WakeToRun>false</WakeToRun>
+    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
+    <Priority>7</Priority>
+  </Settings>
+  <Actions Context="Author">
+    <Exec>
+      <Command>${xmlEscape(opts.command)}</Command>${opts.args ? `
+      <Arguments>${xmlEscape(opts.args)}</Arguments>` : ''}${opts.workingDir ? `
+      <WorkingDirectory>${xmlEscape(opts.workingDir)}</WorkingDirectory>` : ''}
+    </Exec>
+  </Actions>
+</Task>
+`;
+}
+//# sourceMappingURL=task-xml.js.map

package/dist/service/task-xml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-xml.js","sourceRoot":"","sources":["../../src/service/task-xml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAgE;IAChG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;IAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,6EAA6E;IAC7E,MAAM,OAAO,GAAG;kCACgB,SAAS;;;;;uBAKpB,CAAC;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,4CAA4C,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,0GAA0G,CAAC;IACnJ,OAAO;;;mBAGU,SAAS,CAAC,WAAW,CAAC;;;;;gBAKzB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;;;;;;;;;gBAStB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;iBAsBrB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;mBAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;0BACrD,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE;;;;CAI7E,CAAC;AACF,CAAC"}

package/dist/service/types.d.ts

@@ -0,0 +1,47 @@
+export interface ServiceStatus {
+    installed: boolean;
+    running: boolean;
+    pid?: number;
+    detail?: string;
+}
+/**
+ * Discriminated union returned by ServiceAdapter.install().
+ *
+ * - `task`    — a scheduled task (schtasks) / systemd unit / launchd plist was
+ *               created. `service start/stop/status` will work normally.
+ * - `startup` — OS-level task creation failed; a Startup-folder shortcut was
+ *               installed as fallback. `service start/stop` will NOT work.
+ *               `path` is the absolute path to the shortcut file.
+ */
+export type InstallResult = {
+    kind: 'task';
+} | {
+    kind: 'startup';
+    path: string;
+};
+export interface ServiceAdapter {
+    readonly platform: 'linux' | 'darwin' | 'win32';
+    /** Write unit file / plist / task. Does NOT start or enable. */
+    install(execPath: string, port: number): Promise<InstallResult>;
+    /** Remove unit file / plist / task. */
+    uninstall(): Promise<void>;
+    /** Start the service via the OS init system. */
+    start(): Promise<void>;
+    /** Stop the service via the OS init system. */
+    stop(): Promise<void>;
+    /** Query current status. */
+    status(): Promise<ServiceStatus>;
+    /**
+     * Install a nightly backup timer (optional — invoked by
+     * `service install --with-backup-timer`).
+     *
+     * @param execPath  Same exec path used for the main service.
+     * @param keep      Number of backups to retain (forwarded to --keep).
+     */
+    installBackupTimer(execPath: string, keep: number): Promise<void>;
+    /**
+     * Remove the nightly backup timer installed by installBackupTimer().
+     * No-op if the timer was never installed.
+     */
+    uninstallBackupTimer(): Promise<void>;
+}

package/dist/service/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/service/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":""}

package/dist/storage/archival.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Memory TTL / archival tiers policy pass (FEAT-404, W4.4).
+ *
+ * Runs on the cleanup job's cadence (src/pipeline/handlers/cleanup.ts).
+ * Both conditions are required to archive an atom (AC-2/AC-3):
+ *   - older than config.archival.ageThresholdDays (measured from created_at)
+ *   - trailing-7-day usefulness rate at/below config.archival.usefulnessFloor
+ *
+ * Non-destructive (AC-5): every archived row survives — MemoryEventRepo.archive
+ * sets valid_to + archived/archived_at in the same transaction supersede()/
+ * invalidate() already established, restorable via MemoryEventRepo.restore().
+ * Off by default (AC-1): config.archival.enabled === false is a hard no-op.
+ */
+import type { DB } from './db.js';
+import type { Config } from '../config/config.js';
+export interface ArchivalRunResult {
+    /** Number of memories archived by this pass. */
+    archived: number;
+    /** Number of memories that met the age threshold and were evaluated
+     *  against the usefulness floor (archived + age-eligible-but-protected). */
+    candidates: number;
+}
+/**
+ * Select every currently-valid, not-yet-archived memory older than the age
+ * threshold, evaluate each against the usefulness floor, and archive the
+ * ones that clear both bars. Returns { archived: 0, candidates: 0 }
+ * immediately when the policy is disabled (AC-1).
+ */
+export declare function runArchivalPass(db: DB, config: Config, now?: number): ArchivalRunResult;

package/dist/storage/archival.js

@@ -0,0 +1,47 @@
+/**
+ * Memory TTL / archival tiers policy pass (FEAT-404, W4.4).
+ *
+ * Runs on the cleanup job's cadence (src/pipeline/handlers/cleanup.ts).
+ * Both conditions are required to archive an atom (AC-2/AC-3):
+ *   - older than config.archival.ageThresholdDays (measured from created_at)
+ *   - trailing-7-day usefulness rate at/below config.archival.usefulnessFloor
+ *
+ * Non-destructive (AC-5): every archived row survives — MemoryEventRepo.archive
+ * sets valid_to + archived/archived_at in the same transaction supersede()/
+ * invalidate() already established, restorable via MemoryEventRepo.restore().
+ * Off by default (AC-1): config.archival.enabled === false is a hard no-op.
+ */
+import { MemoryEventRepo } from './memory-events.js';
+import { perAtomUsefulnessRate7d } from './usefulness.js';
+const DAY_MS = 24 * 60 * 60 * 1000;
+const SEVEN_DAYS_MS = 7 * DAY_MS;
+/**
+ * Select every currently-valid, not-yet-archived memory older than the age
+ * threshold, evaluate each against the usefulness floor, and archive the
+ * ones that clear both bars. Returns { archived: 0, candidates: 0 }
+ * immediately when the policy is disabled (AC-1).
+ */
+export function runArchivalPass(db, config, now = Date.now()) {
+    if (!config.archival.enabled)
+        return { archived: 0, candidates: 0 };
+    const ageCutoffMs = now - config.archival.ageThresholdDays * DAY_MS;
+    const candidateRows = db.prepare(`
+    SELECT id FROM memories
+    WHERE valid_to IS NULL AND archived = 0 AND created_at < ?
+  `).all(ageCutoffMs);
+    if (candidateRows.length === 0)
+        return { archived: 0, candidates: 0 };
+    const candidateIds = candidateRows.map(r => r.id);
+    const rates = perAtomUsefulnessRate7d(db, candidateIds, now - SEVEN_DAYS_MS);
+    const events = new MemoryEventRepo(db);
+    let archived = 0;
+    for (const id of candidateIds) {
+        const rate = rates.get(id) ?? 0;
+        if (rate <= config.archival.usefulnessFloor) {
+            events.archive(id, 'ttl-policy');
+            archived++;
+        }
+    }
+    return { archived, candidates: candidateIds.length };
+}
+//# sourceMappingURL=archival.js.map

package/dist/storage/archival.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archival.js","sourceRoot":"","sources":["../../src/storage/archival.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC;AAUjC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAM,EAAE,MAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAEpE,MAAM,WAAW,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACpE,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC;;;GAGhC,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;IAE7C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAEtE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,GAAG,aAAa,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IAEvC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACjC,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;AACvD,CAAC"}

package/dist/storage/bearer-keystore.d.ts

@@ -0,0 +1,34 @@
+export type BearerSource = 'cli' | 'env' | 'credential-store' | 'secrets-env' | 'default';
+export interface ResolvedBearer {
+    token: string;
+    source: BearerSource;
+}
+export interface ResolveBearerOpts {
+    /** Value of the CLI `--token` flag, if provided. */
+    cliToken?: string;
+    /** Value of `ASTRA_MEMORY_TOKEN`, if set. */
+    envToken?: string;
+    /**
+     * Config dirs to probe for secrets.env, in priority order. Defaults to
+     * [defaultConfigDir(), legacyConfigDir()]. Injectable so tests can isolate
+     * the filesystem probe without env-var games — on darwin the real dirs
+     * ignore XDG_CONFIG_HOME entirely, so env stubbing does NOT isolate there.
+     */
+    secretsDirs?: string[];
+}
+/**
+ * Read MEMORY_BEARER from secrets.env — canonical config dir first, then the
+ * legacy dir (%APPDATA%\AstraMemory on Windows). Read-only; never mutates
+ * either file. Mirrors the pre-SEC-10 `readBearerFromSecrets` in serve.ts.
+ */
+export declare function readBearerFromSecretsFile(secretsDirs?: string[]): string | null;
+/**
+ * Resolve the daemon's bearer token per the precedence documented above.
+ *
+ * Side effect: when the token is found only in secrets.env, it is
+ * opportunistically written into the OS credential store (best-effort —
+ * failure is silently tolerated since storeBearer already owns its own
+ * WARN-on-fallback logging). This is a one-way promotion; secrets.env is
+ * never rewritten or deleted here.
+ */
+export declare function resolveBearerToken(opts?: ResolveBearerOpts): ResolvedBearer;

package/dist/storage/bearer-keystore.js

@@ -0,0 +1,75 @@
+/**
+ * bearer-keystore.ts — bearer token resolution + one-way credential-store
+ * migration (SEC-10, Wave 1 task 1d).
+ *
+ * Resolution order (used by serve.ts):
+ *   1. CLI `--token` flag
+ *   2. `ASTRA_MEMORY_TOKEN` env var
+ *   3. OS credential store (service 'astramem-local', account 'bearer' —
+ *      see storage/keystore.ts)
+ *   4. secrets.env — canonical config dir, then legacy dir (kept as a
+ *      read-only fallback; existing files are never deleted)
+ *   5. 'devtok' default (dev/test convenience, matches pre-SEC-10 behavior)
+ *
+ * When the bearer is found only in secrets.env (step 4), it is
+ * opportunistically promoted into the credential store — a one-way
+ * migration, best-effort, and the secrets.env file itself is left
+ * untouched (no destructive rewrite of a file that might also carry Azure
+ * keys).
+ */
+import { join } from 'node:path';
+import { existsSync, readFileSync } from 'node:fs';
+import { defaultConfigDir, legacyConfigDir } from '../config/datadir.js';
+import { storeBearer, readBearer } from './keystore.js';
+const DEFAULT_TOKEN = 'devtok';
+/**
+ * Read MEMORY_BEARER from secrets.env — canonical config dir first, then the
+ * legacy dir (%APPDATA%\AstraMemory on Windows). Read-only; never mutates
+ * either file. Mirrors the pre-SEC-10 `readBearerFromSecrets` in serve.ts.
+ */
+export function readBearerFromSecretsFile(secretsDirs) {
+    const dirs = (secretsDirs ?? [defaultConfigDir(), legacyConfigDir()]).filter((d, i, arr) => arr.indexOf(d) === i);
+    for (const dir of dirs) {
+        try {
+            const path = join(dir, 'secrets.env');
+            if (!existsSync(path))
+                continue;
+            const text = readFileSync(path, 'utf8');
+            const match = text.split('\n').find(l => l.startsWith('MEMORY_BEARER='));
+            if (!match)
+                continue;
+            const bearer = match.slice('MEMORY_BEARER='.length).trim();
+            if (bearer)
+                return bearer;
+        }
+        catch {
+            // continue to next candidate
+        }
+    }
+    return null;
+}
+/**
+ * Resolve the daemon's bearer token per the precedence documented above.
+ *
+ * Side effect: when the token is found only in secrets.env, it is
+ * opportunistically written into the OS credential store (best-effort —
+ * failure is silently tolerated since storeBearer already owns its own
+ * WARN-on-fallback logging). This is a one-way promotion; secrets.env is
+ * never rewritten or deleted here.
+ */
+export function resolveBearerToken(opts = {}) {
+    if (opts.cliToken)
+        return { token: opts.cliToken, source: 'cli' };
+    if (opts.envToken)
+        return { token: opts.envToken, source: 'env' };
+    const stored = readBearer();
+    if (stored)
+        return { token: stored, source: 'credential-store' };
+    const fileToken = readBearerFromSecretsFile(opts.secretsDirs);
+    if (fileToken) {
+        storeBearer(fileToken); // opportunistic one-way promotion; best-effort
+        return { token: fileToken, source: 'secrets-env' };
+    }
+    return { token: DEFAULT_TOKEN, source: 'default' };
+}
+//# sourceMappingURL=bearer-keystore.js.map

package/dist/storage/bearer-keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-keystore.js","sourceRoot":"","sources":["../../src/storage/bearer-keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAuBxD,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAAsB;IAC9D,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,gBAAgB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAC1E,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CACpC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B,EAAE;IAC7D,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClE,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAElE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAEjE,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,SAAS,EAAE,CAAC;QACd,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,+CAA+C;QACvE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACrD,CAAC"}

package/dist/storage/db.d.ts

@@ -0,0 +1,37 @@
+import Database from 'better-sqlite3-multiple-ciphers';
+export type DB = Database.Database;
+export interface OpenDbOpts {
+    /**
+     * Encryption key (SEC-1/2). Applied via `PRAGMA key` immediately after
+     * open, before any other pragma and before the sqlite-vec extension load.
+     * Ignored for `:memory:` databases — SQLCipher rejects `PRAGMA key` on
+     * in-memory/temporary databases (confirmed by the 1a spike), so in-memory
+     * opens are always plaintext regardless of whether a key is supplied.
+     */
+    key?: string;
+}
+/**
+ * Thrown by `openDb` when the file on disk cannot be trusted as an intact
+ * datadir (FEAT-420 AC-3), and NO encryption key was in play. Distinct from
+ * a raw `SqliteError` so callers and operators get an actionable message
+ * instead of a low-level driver string.
+ */
+export declare class CorruptDatadirError extends Error {
+    constructor(path: string, reason: string);
+}
+/**
+ * Thrown by `openDb` when a key WAS supplied but the file could not be read
+ * with it (FEAT-420 AC-3 review fix). SQLCipher cannot distinguish
+ * "wrong/missing key" from "corrupted file" at the driver level — both
+ * surface as the exact same `SqliteError: file is not a database`
+ * (SQLITE_NOTADB), which is also the documented stale-v0.3.4-global-install
+ * symptom (CLAUDE.md "Do NOT use bare astramem-local"). Reusing
+ * CorruptDatadirError's corruption-and-delete advice here would actively
+ * steer an operator with a recoverable key/config problem toward destroying
+ * a healthy encrypted database — so this is a distinct class with distinct,
+ * non-destructive advice and NO deletion suggestion.
+ */
+export declare class EncryptionKeyError extends Error {
+    constructor(path: string, reason: string);
+}
+export declare function openDb(path: string, opts?: OpenDbOpts): DB;