@claudexor/cli 3.3.15 → 3.4.0

package/dist/daemon-admission-runtime.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Claudexord's startup-admission runtime, kept out of main() so the
+ * entrypoint stays a thin composition root:
+ *
+ * - C8: the best-effort post-authority diagnostics opener with launch
+ *   provenance (a diagnostics failure never controls daemon lifecycle);
+ * - the quota poller armed only on normal admission (C1a);
+ * - D5 stage 4 as ONE single-flight completion shared by the startup path
+ *   and the C6b recovery-route reopen, which re-runs it with a LIVE
+ *   re-verdict so the daemon transitions to normal without a restart.
+ */
+import { type DaemonServingMode, type JournalManager, type ProjectPartitions, type RootAuthorityGrant } from "@claudexor/daemon";
+import { type DaemonStartupAdmission } from "./daemon-startup.js";
+import { type DaemonStartupDiagnostics } from "./startup-diagnostics.js";
+export interface StartupDiagnosticsHandle {
+    diagnostics: DaemonStartupDiagnostics | null;
+    recordStage(stage: string, message: string): void;
+    recordFailure(message: string, error: unknown): void;
+    close(): void;
+}
+/** C8: open the private post-authority diagnostics with full launch
+ * provenance (runtime identity, entry path, pid, data root, and the
+ * CLAUDEXOR_DAEMON_LAUNCH_SOURCE value coerced to a safe label). */
+export declare function openStartupDiagnostics(identity: {
+    version: string;
+    sha: string;
+    entry: string;
+}): StartupDiagnosticsHandle;
+/** C1a/G-QUOTA-01: quota polling belongs to the NORMAL plane — polling
+ * against unactivated projections is a swallowed throw, and the recovery
+ * plane must stay non-mutating. Arming polls immediately, removing the
+ * one-minute stale window the swallowed stage-2 poll used to leave. */
+export declare function createDaemonQuotaPoller(poll: () => void): {
+    arm(): void;
+    stop(): void;
+};
+/** The composition root's normal-plane duties, run exactly once from either
+ * the startup path or the C6b reopen (C1a quota arming, C2 pid snapshots,
+ * C5a retired-key sweep persistence, setup binding, ghost quarantine,
+ * startup retention). */
+export interface NormalPlaneDuties {
+    requested(): boolean;
+    armQuotaPolling(): void;
+    beginPidSnapshots(): void;
+    startSetup(): Promise<void>;
+    quarantineGhosts(): void;
+    scheduleRetention(): void;
+}
+/** D5 stage 4, single-flight: the startup path runs it with the frozen
+ * stage-2 verdict; the C6b recovery-route reopen re-runs it with a live one.
+ * Concurrent callers join the in-flight completion. */
+export declare function createStartupAdmissionRuntime(input: {
+    admission: DaemonStartupAdmission;
+    grant: Pick<RootAuthorityGrant, "advanceFloor">;
+    global: JournalManager;
+    partitions: ProjectPartitions;
+    diagnostics: StartupDiagnosticsHandle;
+    normalPlane: NormalPlaneDuties;
+}): {
+    runAdmissionCompletion(blockedPartitions: () => string[]): Promise<DaemonServingMode>;
+    wrapQuarantineWithReopen<T>(service: (partition: string, request: unknown) => Promise<T>): (partition: string, request: unknown) => Promise<T>;
+};
+//# sourceMappingURL=daemon-admission-runtime.d.ts.map

package/dist/daemon-admission-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-admission-runtime.d.ts","sourceRoot":"","sources":["../src/daemon-admission-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC7C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACrD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;oEAEoE;AACpE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,wBAAwB,CAoC3B;AAED;;;uEAGuE;AACvE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG;IAAE,GAAG,IAAI,IAAI,CAAC;IAAC,IAAI,IAAI,IAAI,CAAA;CAAE,CAcvF;AAED;;;yBAGyB;AACzB,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,OAAO,CAAC;IACrB,eAAe,IAAI,IAAI,CAAC;IACxB,iBAAiB,IAAI,IAAI,CAAC;IAC1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,gBAAgB,IAAI,IAAI,CAAC;IACzB,iBAAiB,IAAI,IAAI,CAAC;CAC3B;AAED;;uDAEuD;AACvD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,sBAAsB,CAAC;IAClC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,iBAAiB,CAAC;CAChC,GAAG;IACF,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtF,wBAAwB,CAAC,CAAC,EACxB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3D,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CACxD,CA4GA"}

package/dist/daemon-admission-runtime.js

@@ -0,0 +1,180 @@
+/**
+ * Claudexord's startup-admission runtime, kept out of main() so the
+ * entrypoint stays a thin composition root:
+ *
+ * - C8: the best-effort post-authority diagnostics opener with launch
+ *   provenance (a diagnostics failure never controls daemon lifecycle);
+ * - the quota poller armed only on normal admission (C1a);
+ * - D5 stage 4 as ONE single-flight completion shared by the startup path
+ *   and the C6b recovery-route reopen, which re-runs it with a LIVE
+ *   re-verdict so the daemon transitions to normal without a restart.
+ */
+import { daemonDir, logPath, } from "@claudexor/daemon";
+import { sweepRetiredConfigKeysAtStartup } from "@claudexor/config";
+import { redactSecrets } from "@claudexor/util";
+import { DAEMON_LAUNCH_SOURCE_ENV } from "./daemon-launch.js";
+import { logLine, runStartupCrashGc } from "./daemon-lifecycle.js";
+import { completeStartupAdmission, recoveryBlockedPartitions, } from "./daemon-startup.js";
+import { openDaemonStartupDiagnosticsAfterAuthority, safeDaemonLaunchSource, } from "./startup-diagnostics.js";
+/** C8: open the private post-authority diagnostics with full launch
+ * provenance (runtime identity, entry path, pid, data root, and the
+ * CLAUDEXOR_DAEMON_LAUNCH_SOURCE value coerced to a safe label). */
+export function openStartupDiagnostics(identity) {
+    let diagnostics = null;
+    try {
+        diagnostics = openDaemonStartupDiagnosticsAfterAuthority({
+            runtimeVersion: identity.version,
+            buildSha: identity.sha,
+            entryPath: identity.entry,
+            pid: process.pid,
+            dataRoot: daemonDir(),
+            launchSource: safeDaemonLaunchSource(process.env[DAEMON_LAUNCH_SOURCE_ENV]),
+        });
+        diagnostics.record({
+            stage: "root_authority_won",
+            message: "root authority acquired; startup diagnostics online",
+        });
+    }
+    catch (error) {
+        logLine(logPath(), `startup diagnostics unavailable: ${redactSecrets(error instanceof Error ? error.message : String(error))}`);
+    }
+    const record = (value) => {
+        try {
+            diagnostics?.record(value);
+        }
+        catch {
+            /* diagnostics never control lifecycle */
+        }
+    };
+    return {
+        diagnostics,
+        recordStage: (stage, message) => record({ stage, message }),
+        recordFailure: (message, error) => record({ stage: "startup_failure", message, error }),
+        close: () => diagnostics?.close(),
+    };
+}
+/** C1a/G-QUOTA-01: quota polling belongs to the NORMAL plane — polling
+ * against unactivated projections is a swallowed throw, and the recovery
+ * plane must stay non-mutating. Arming polls immediately, removing the
+ * one-minute stale window the swallowed stage-2 poll used to leave. */
+export function createDaemonQuotaPoller(poll) {
+    let timer = null;
+    return {
+        arm: () => {
+            if (timer)
+                return;
+            timer = setInterval(poll, 60_000);
+            timer.unref();
+            poll();
+        },
+        stop: () => {
+            if (timer)
+                clearInterval(timer);
+            timer = null;
+        },
+    };
+}
+/** D5 stage 4, single-flight: the startup path runs it with the frozen
+ * stage-2 verdict; the C6b recovery-route reopen re-runs it with a live one.
+ * Concurrent callers join the in-flight completion. */
+export function createStartupAdmissionRuntime(input) {
+    // Normal-plane side effects run exactly once, from whichever path opened
+    // normal admission first.
+    let normalAdmissionCompleted = false;
+    const onNormalAdmission = async () => {
+        if (normalAdmissionCompleted || input.normalPlane.requested())
+            return;
+        normalAdmissionCompleted = true;
+        input.normalPlane.armQuotaPolling();
+        // Crash-GC has consumed the previous life's pids.json by now; live
+        // snapshots may own the file again (C2).
+        input.normalPlane.beginPidSnapshots();
+        // Same-root config evolution hygiene (B9): persist the retired-key sweep
+        // only on the NORMAL plane (C5a). Pre-admission parses already tolerate
+        // retired keys via loadConfig's in-memory strip; unknown keys NOT on the
+        // retired registry still fail loud (INV-021).
+        for (const sweep of sweepRetiredConfigKeysAtStartup()) {
+            logLine(logPath(), `swept retired config keys from ${sweep.path}: ${sweep.removed.join(", ")}`);
+        }
+        await input.normalPlane.startSetup();
+        input.normalPlane.quarantineGhosts();
+        input.normalPlane.scheduleRetention();
+    };
+    let admissionCompletion = null;
+    const runAdmissionCompletion = (blockedPartitions) => {
+        if (input.admission.snapshot() === "normal")
+            return Promise.resolve("normal");
+        admissionCompletion ??= (async () => {
+            try {
+                const servingMode = await completeStartupAdmission({
+                    grant: input.grant,
+                    blockedPartitions: blockedPartitions(),
+                    global: {
+                        // A manager already reopened by a recovery-route quarantine
+                        // (openGeneration) is live authority; only still-prepared state
+                        // revalidates (the reopen runs over a mix of both).
+                        revalidatePreparation: () => {
+                            if (!input.global.ready())
+                                input.global.revalidatePreparation();
+                        },
+                        activatePrepared: () => input.global.activatePrepared(),
+                        recoverAfterStartup: () => input.global.recoverAfterStartup(),
+                    },
+                    partitions: input.partitions,
+                    crashGc: () => runStartupCrashGc({
+                        daemonDir: daemonDir(),
+                        logPath: logPath(),
+                        ...(input.diagnostics.diagnostics
+                            ? { diagnostics: input.diagnostics.diagnostics }
+                            : {}),
+                    }),
+                    admission: input.admission,
+                    log: (message) => {
+                        logLine(logPath(), message);
+                        input.diagnostics.recordStage("startup_admission", message);
+                    },
+                });
+                if (servingMode === "normal")
+                    await onNormalAdmission();
+                return servingMode;
+            }
+            finally {
+                admissionCompletion = null;
+            }
+        })();
+        return admissionCompletion;
+    };
+    // C6b: after a successful recovery-route quarantine the daemon transitions
+    // to normal WITHOUT a restart, re-verdicting the CURRENT partition state.
+    const reopenAfterRecovery = async () => {
+        while (input.admission.snapshot() !== "normal") {
+            const joined = admissionCompletion;
+            if (joined) {
+                await joined.catch(() => { });
+                continue;
+            }
+            const servingMode = await runAdmissionCompletion(() => recoveryBlockedPartitions({
+                globalPreparation: { inspection: input.global.inspect() },
+                partitionsPreparation: input.partitions.refreshPreparation(),
+            }));
+            if (servingMode !== "normal")
+                return; // partitions still block: stay protected
+        }
+    };
+    return {
+        runAdmissionCompletion,
+        wrapQuarantineWithReopen: (service) => async (partition, request) => {
+            const receipt = await service(partition, request);
+            try {
+                await reopenAfterRecovery();
+            }
+            catch (error) {
+                // The quarantine itself SUCCEEDED; a failed reopen stays on the
+                // protected recovery plane and is disclosed.
+                logLine(logPath(), `recovery reopen failed; still serving recovery only: ${redactSecrets(error instanceof Error ? error.message : String(error))}`);
+            }
+            return receipt;
+        },
+    };
+}
+//# sourceMappingURL=daemon-admission-runtime.js.map

package/dist/daemon-admission-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-admission-runtime.js","sourceRoot":"","sources":["../src/daemon-admission-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,SAAS,EACT,OAAO,GAKR,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0CAA0C,EAC1C,sBAAsB,GAEvB,MAAM,0BAA0B,CAAC;AASlC;;oEAEoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,QAItC;IACC,IAAI,WAAW,GAAoC,IAAI,CAAC;IACxD,IAAI,CAAC;QACH,WAAW,GAAG,0CAA0C,CAAC;YACvD,cAAc,EAAE,QAAQ,CAAC,OAAO;YAChC,QAAQ,EAAE,QAAQ,CAAC,GAAG;YACtB,SAAS,EAAE,QAAQ,CAAC,KAAK;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,SAAS,EAAE;YACrB,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;SAC5E,CAAC,CAAC;QACH,WAAW,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CACL,OAAO,EAAE,EACT,oCAAoC,aAAa,CAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,KAAwD,EAAQ,EAAE;QAChF,IAAI,CAAC;YACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,WAAW;QACX,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC3D,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACvF,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;;uEAGuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,IAAgB;IACtD,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,EAAE,CAAC;QACT,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAeD;;uDAEuD;AACvD,MAAM,UAAU,6BAA6B,CAAC,KAO7C;IAMC,yEAAyE;IACzE,0BAA0B;IAC1B,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;QAClD,IAAI,wBAAwB,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE;YAAE,OAAO;QACtE,wBAAwB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACpC,mEAAmE;QACnE,yCAAyC;QACzC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACtC,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,8CAA8C;QAC9C,KAAK,MAAM,KAAK,IAAI,+BAA+B,EAAE,EAAE,CAAC;YACtD,OAAO,CACL,OAAO,EAAE,EACT,kCAAkC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,mBAAmB,GAAsC,IAAI,CAAC;IAClE,MAAM,sBAAsB,GAAG,CAC7B,iBAAiC,EACL,EAAE;QAC9B,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9E,mBAAmB,KAAK,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;oBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,iBAAiB,EAAE,iBAAiB,EAAE;oBACtC,MAAM,EAAE;wBACN,4DAA4D;wBAC5D,gEAAgE;wBAChE,oDAAoD;wBACpD,qBAAqB,EAAE,GAAG,EAAE;4BAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;gCAAE,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;wBAClE,CAAC;wBACD,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;wBACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;qBAC9D;oBACD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,GAAG,EAAE,CACZ,iBAAiB,CAAC;wBAChB,SAAS,EAAE,SAAS,EAAE;wBACtB,OAAO,EAAE,OAAO,EAAE;wBAClB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW;4BAC/B,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE;4BAChD,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;wBACf,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;wBAC5B,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;oBAC9D,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,WAAW,KAAK,QAAQ;oBAAE,MAAM,iBAAiB,EAAE,CAAC;gBACxD,OAAO,WAAW,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,mBAAmB,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,mBAAmB,CAAC;IAC7B,CAAC,CAAC;IAEF,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;QACpD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,CACpD,yBAAyB,CAAC;gBACxB,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE;gBACzD,qBAAqB,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE;aAC7D,CAAC,CACH,CAAC;YACF,IAAI,WAAW,KAAK,QAAQ;gBAAE,OAAO,CAAC,yCAAyC;QACjF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,sBAAsB;QACtB,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,6CAA6C;gBAC7C,OAAO,CACL,OAAO,EAAE,EACT,wDAAwD,aAAa,CACnE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,EAAE,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/daemon-launch.d.ts

@@ -0,0 +1,53 @@
+import { CliError } from "./cli-error.js";
+export declare const DAEMON_LAUNCH_SOURCE_ENV = "CLAUDEXOR_DAEMON_LAUNCH_SOURCE";
+export declare const CLI_DAEMON_LAUNCH_SOURCES: {
+    readonly ensureDaemon: "cli_ensure_daemon";
+    readonly explicitStart: "cli_explicit_start";
+};
+export type CliDaemonLaunchSource = (typeof CLI_DAEMON_LAUNCH_SOURCES)[keyof typeof CLI_DAEMON_LAUNCH_SOURCES];
+export type DaemonLaunchStderrEvidence = {
+    kind: "empty";
+} | {
+    kind: "retained";
+    byteLength: number;
+    message: string;
+} | {
+    kind: "oversize_discarded";
+    observedBytes: number;
+    limitBytes: number;
+};
+export type DaemonLaunchFailure = {
+    kind: "spawn_error";
+    message: string;
+    code?: string;
+} | {
+    kind: "preclaim_exit";
+    exitCode: number | null;
+    signal: NodeJS.Signals | null;
+    stderr: DaemonLaunchStderrEvidence;
+} | {
+    kind: "startup_timeout";
+    timeoutMs: number;
+    stderr: DaemonLaunchStderrEvidence;
+};
+export interface DetachedDaemonLaunch {
+    readonly pid: number | null;
+    failure(): DaemonLaunchFailure | null;
+    waitForFailure(): Promise<DaemonLaunchFailure>;
+    markReady(): void;
+    callerError(stage: string, timeoutMs: number): CliError;
+}
+export interface LaunchDetachedDaemonOptions {
+    entryPath: string;
+    launchSource: CliDaemonLaunchSource;
+    env?: NodeJS.ProcessEnv;
+    nodePath?: string;
+}
+export declare function daemonLaunchEnvironment(source: NodeJS.ProcessEnv, launchSource: CliDaemonLaunchSource): NodeJS.ProcessEnv;
+/**
+ * Spawn without an inherited canonical-log descriptor. Import, spawn and
+ * pre-claim exits remain bounded caller evidence; the daemon may start its own
+ * permanent diagnostic writer only after a separate root-authority decision.
+ */
+export declare function launchDetachedDaemon(options: LaunchDetachedDaemonOptions): DetachedDaemonLaunch;
+//# sourceMappingURL=daemon-launch.d.ts.map

package/dist/daemon-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-launch.d.ts","sourceRoot":"","sources":["../src/daemon-launch.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,eAAO,MAAM,yBAAyB;aACpC,YAAY,EAAE,mBAAmB;aACjC,aAAa,EAAE,oBAAoB;CAC3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,OAAO,yBAAyB,CAAC,CAAC;AAI7E,MAAM,MAAM,0BAA0B,GAClC;IACE,IAAI,EAAE,OAAO,CAAC;CACf,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GACD;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,0BAA0B,CAAC;CACpC,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,0BAA0B,CAAC;CACpC,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,IAAI,mBAAmB,GAAG,IAAI,CAAC;IACtC,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C,SAAS,IAAI,IAAI,CAAC;IAClB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;CACzD;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,qBAAqB,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,UAAU,EACzB,YAAY,EAAE,qBAAqB,GAClC,MAAM,CAAC,UAAU,CAEnB;AAoHD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,oBAAoB,CAuF/F"}

package/dist/daemon-launch.js

@@ -0,0 +1,211 @@
+/** Caller-visible daemon launch evidence before root authority exists. */
+import { spawn } from "node:child_process";
+import { lstatSync } from "node:fs";
+import { logPath } from "@claudexor/daemon";
+import { safeProblemContext, safeProblemMessage, safeProblemRequiredActions, } from "@claudexor/util";
+import { CliError } from "./cli-error.js";
+export const DAEMON_LAUNCH_SOURCE_ENV = "CLAUDEXOR_DAEMON_LAUNCH_SOURCE";
+export const CLI_DAEMON_LAUNCH_SOURCES = {
+    ensureDaemon: "cli_ensure_daemon",
+    explicitStart: "cli_explicit_start",
+};
+const DAEMON_LAUNCH_STDERR_RAW_LIMIT_BYTES = 64 * 1_024;
+export function daemonLaunchEnvironment(source, launchSource) {
+    return { ...source, [DAEMON_LAUNCH_SOURCE_ENV]: launchSource };
+}
+function missingEntryError(entryPath, reason) {
+    return new CliError("operational", `cannot start the daemon: the selected entry is unavailable (${safeProblemMessage(reason)})`, {
+        code: "daemon_entry_missing",
+        retryable: false,
+        requiredActions: [
+            "Reinstall Claudexor or rebuild the matching runtime before retrying.",
+            "Use an eligible fixed runtime; do not fall back to an older daemon for this data root.",
+        ],
+        context: safeProblemContext({ entryPath }),
+    });
+}
+function proveEntry(entryPath) {
+    try {
+        const stat = lstatSync(entryPath);
+        if (!stat.isFile() && !stat.isSymbolicLink()) {
+            throw missingEntryError(entryPath, "entry is not a file");
+        }
+    }
+    catch (error) {
+        if (error instanceof CliError)
+            throw error;
+        throw missingEntryError(entryPath, error);
+    }
+}
+function canonicalLogRemedy() {
+    try {
+        return `Run \`claudexor daemon logs\` for the canonical post-authority log at ${logPath()}; a pre-authority failure may have no log record.`;
+    }
+    catch {
+        return "Run `claudexor daemon logs` for the canonical post-authority log; a pre-authority failure may have no log record.";
+    }
+}
+function capturePreAuthorityStderr(stream) {
+    let chunks = [];
+    let retainedBytes = 0;
+    let observedBytes = 0;
+    let oversize = false;
+    let discarded = false;
+    const onData = (chunk) => {
+        if (discarded)
+            return;
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        observedBytes += bytes.length;
+        if (oversize)
+            return;
+        if (observedBytes > DAEMON_LAUNCH_STDERR_RAW_LIMIT_BYTES) {
+            oversize = true;
+            chunks = [];
+            retainedBytes = 0;
+            return;
+        }
+        chunks.push(Buffer.from(bytes));
+        retainedBytes += bytes.length;
+    };
+    stream?.on("data", onData);
+    return {
+        evidence: () => {
+            if (oversize) {
+                return {
+                    kind: "oversize_discarded",
+                    observedBytes,
+                    limitBytes: DAEMON_LAUNCH_STDERR_RAW_LIMIT_BYTES,
+                };
+            }
+            if (retainedBytes === 0)
+                return { kind: "empty" };
+            const raw = Buffer.concat(chunks, retainedBytes).toString("utf8");
+            return {
+                kind: "retained",
+                byteLength: retainedBytes,
+                message: safeProblemMessage(raw),
+            };
+        },
+        destroyAndDiscard: () => {
+            if (discarded)
+                return;
+            discarded = true;
+            chunks = [];
+            retainedBytes = 0;
+            stream?.off("data", onData);
+            stream?.destroy();
+        },
+    };
+}
+function stderrMessage(evidence) {
+    switch (evidence.kind) {
+        case "empty":
+            return "; pre-authority stderr: empty";
+        case "retained":
+            return `; pre-authority stderr (retained): ${evidence.message}`;
+        case "oversize_discarded":
+            return `; pre-authority stderr: oversize_discarded after ${evidence.observedBytes} bytes (limit ${evidence.limitBytes})`;
+    }
+}
+function failureMessage(failure) {
+    switch (failure.kind) {
+        case "spawn_error":
+            return `daemon launch failed before root authority: ${failure.message}`;
+        case "preclaim_exit":
+            return `daemon exited before it became ready (exit ${failure.exitCode ?? "null"}${failure.signal ? `, signal ${failure.signal}` : ""})${stderrMessage(failure.stderr)}`;
+        case "startup_timeout":
+            return `daemon did not become ready within ${Math.round(failure.timeoutMs / 1_000)}s${stderrMessage(failure.stderr)}`;
+    }
+}
+/**
+ * Spawn without an inherited canonical-log descriptor. Import, spawn and
+ * pre-claim exits remain bounded caller evidence; the daemon may start its own
+ * permanent diagnostic writer only after a separate root-authority decision.
+ */
+export function launchDetachedDaemon(options) {
+    proveEntry(options.entryPath);
+    let failure = null;
+    let ready = false;
+    let stderrCapture;
+    let resolveFailure;
+    const failurePromise = new Promise((resolve) => {
+        resolveFailure = resolve;
+    });
+    const settleFailure = (value) => {
+        if (failure || ready)
+            return;
+        failure = value;
+        resolveFailure?.(value);
+    };
+    const discardStderr = () => {
+        stderrCapture?.destroyAndDiscard();
+        stderrCapture = undefined;
+    };
+    let child;
+    try {
+        child = spawn(options.nodePath ?? process.execPath, [options.entryPath], {
+            detached: true,
+            stdio: ["ignore", "ignore", "pipe"],
+            env: daemonLaunchEnvironment(options.env ?? process.env, options.launchSource),
+        });
+        stderrCapture = capturePreAuthorityStderr(child.stderr);
+        child.once("error", (error) => {
+            const code = typeof error.code === "string"
+                ? error.code
+                : undefined;
+            settleFailure({ kind: "spawn_error", message: safeProblemMessage(error), code });
+            discardStderr();
+        });
+        child.once("close", (exitCode, signal) => {
+            const stderr = stderrCapture?.evidence() ?? { kind: "empty" };
+            discardStderr();
+            settleFailure({ kind: "preclaim_exit", exitCode, signal, stderr });
+        });
+        child.unref();
+    }
+    catch (error) {
+        const code = typeof error.code === "string"
+            ? error.code
+            : undefined;
+        settleFailure({ kind: "spawn_error", message: safeProblemMessage(error), code });
+    }
+    const callerError = (stage, timeoutMs) => {
+        let observed = failure;
+        if (!observed) {
+            const timeoutFailure = {
+                kind: "startup_timeout",
+                timeoutMs,
+                stderr: stderrCapture?.evidence() ?? { kind: "empty" },
+            };
+            settleFailure(timeoutFailure);
+            discardStderr();
+            observed = failure ?? timeoutFailure;
+        }
+        return new CliError("operational", safeProblemMessage(failureMessage(observed)), {
+            code: "daemon_start_failed",
+            retryable: true,
+            requiredActions: safeProblemRequiredActions([
+                canonicalLogRemedy(),
+                "Verify that this CLI uses an eligible fixed runtime, then retry; stop an older root claimant explicitly if it still owns the root.",
+            ]),
+            context: safeProblemContext({
+                stage,
+                timeoutMs,
+                entryPath: options.entryPath,
+                launchSource: options.launchSource,
+                failure: observed,
+            }),
+        });
+    };
+    return {
+        pid: child?.pid ?? null,
+        failure: () => failure,
+        waitForFailure: () => (failure ? Promise.resolve(failure) : failurePromise),
+        markReady: () => {
+            ready = true;
+            discardStderr();
+        },
+        callerError,
+    };
+}
+//# sourceMappingURL=daemon-launch.js.map

package/dist/daemon-launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-launch.js","sourceRoot":"","sources":["../src/daemon-launch.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAEzE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,mBAAmB;IACjC,aAAa,EAAE,oBAAoB;CAC3B,CAAC;AAKX,MAAM,oCAAoC,GAAG,EAAE,GAAG,KAAK,CAAC;AAkDxD,MAAM,UAAU,uBAAuB,CACrC,MAAyB,EACzB,YAAmC;IAEnC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,YAAY,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,MAAe;IAC3D,OAAO,IAAI,QAAQ,CACjB,aAAa,EACb,+DAA+D,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAC5F;QACE,IAAI,EAAE,sBAAsB;QAC5B,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE;YACf,sEAAsE;YACtE,wFAAwF;SACzF;QACD,OAAO,EAAE,kBAAkB,CAAC,EAAE,SAAS,EAAE,CAAC;KAC3C,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC7C,MAAM,iBAAiB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,OAAO,yEAAyE,OAAO,EAAE,mDAAmD,CAAC;IAC/I,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mHAAmH,CAAC;IAC7H,CAAC;AACH,CAAC;AAOD,SAAS,yBAAyB,CAAC,MAAuB;IACxD,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAQ,EAAE;QAC9C,IAAI,SAAS;YAAE,OAAO;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,QAAQ;YAAE,OAAO;QACrB,IAAI,aAAa,GAAG,oCAAoC,EAAE,CAAC;YACzD,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,GAAG,EAAE,CAAC;YACZ,aAAa,GAAG,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3B,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE;YACb,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,aAAa;oBACb,UAAU,EAAE,oCAAoC;iBACjD,CAAC;YACJ,CAAC;YACD,IAAI,aAAa,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClE,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;aACjC,CAAC;QACJ,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE;YACtB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,EAAE,CAAC;YACZ,aAAa,GAAG,CAAC,CAAC;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAoC;IACzD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,OAAO,+BAA+B,CAAC;QACzC,KAAK,UAAU;YACb,OAAO,sCAAsC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAClE,KAAK,oBAAoB;YACvB,OAAO,oDAAoD,QAAQ,CAAC,aAAa,iBAAiB,QAAQ,CAAC,UAAU,GAAG,CAAC;IAC7H,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAA4B;IAClD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,aAAa;YAChB,OAAO,+CAA+C,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1E,KAAK,eAAe;YAClB,OAAO,8CAA8C,OAAO,CAAC,QAAQ,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1K,KAAK,iBAAiB;YACpB,OAAO,sCAAsC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1H,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAoC;IACvE,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,OAAO,GAA+B,IAAI,CAAC;IAC/C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,aAAoD,CAAC;IACzD,IAAI,cAAkE,CAAC;IACvE,MAAM,cAAc,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;QAClE,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,CAAC,KAA0B,EAAQ,EAAE;QACzD,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO;QAC7B,OAAO,GAAG,KAAK,CAAC;QAChB,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,aAAa,EAAE,iBAAiB,EAAE,CAAC;QACnC,aAAa,GAAG,SAAS,CAAC;IAC5B,CAAC,CAAC;IACF,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YACvE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,GAAG,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC;SAC/E,CAAC,CAAC;QACH,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,IAAI,GACR,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBACvD,CAAC,CAAE,KAA+B,CAAC,IAAI;gBACvC,CAAC,CAAC,SAAS,CAAC;YAChB,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,aAAa,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9D,aAAa,EAAE,CAAC;YAChB,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GACR,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACvD,CAAC,CAAE,KAA+B,CAAC,IAAI;YACvC,CAAC,CAAC,SAAS,CAAC;QAChB,aAAa,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,SAAiB,EAAY,EAAE;QACjE,IAAI,QAAQ,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,cAAc,GAAwB;gBAC1C,IAAI,EAAE,iBAAiB;gBACvB,SAAS;gBACT,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;aACvD,CAAC;YACF,aAAa,CAAC,cAAc,CAAC,CAAC;YAC9B,aAAa,EAAE,CAAC;YAChB,QAAQ,GAAG,OAAO,IAAI,cAAc,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE;YAC/E,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,0BAA0B,CAAC;gBAC1C,kBAAkB,EAAE;gBACpB,oIAAoI;aACrI,CAAC;YACF,OAAO,EAAE,kBAAkB,CAAC;gBAC1B,KAAK;gBACL,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,OAAO,EAAE,QAAQ;aAClB,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI;QACvB,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3E,SAAS,EAAE,GAAG,EAAE;YACd,KAAK,GAAG,IAAI,CAAC;YACb,aAAa,EAAE,CAAC;QAClB,CAAC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/daemon-lifecycle.d.ts

@@ -1,6 +1,10 @@
+import type { DaemonStartupDiagnostics } from "./startup-diagnostics.js";
 interface LifecycleDeps {
     daemonDir: string;
-    logPath: string;
+    /** Compatibility fallback until the shared composition root wires the sink. */
+    logPath?: string;
+    /** Narrow post-authority diagnostic port; it never controls lifecycle. */
+    diagnostics?: Pick<DaemonStartupDiagnostics, "record">;
     /** Enter the shutdown state machine (DaemonRuntimeShutdown.beginShutdown). */
     beginShutdown: (reason: string) => Promise<void>;
     signals?: Pick<NodeJS.Process, "on" | "off">;
@@ -9,13 +13,21 @@ interface LifecycleDeps {
 export declare const logLine: (path: string, message: string) => void;
 /** Pre-start: kill surviving children of a previous daemon life, then GC
  * envelopes/branches/tmp-homes nothing owns anymore. */
-export declare function runStartupCrashGc(deps: Pick<LifecycleDeps, "daemonDir" | "logPath">): Promise<void>;
+export declare function runStartupCrashGc(deps: Pick<LifecycleDeps, "daemonDir" | "diagnostics" | "logPath">): Promise<void>;
 /**
  * Post-start: periodic live-children snapshots (the reap list a crash leaves
  * behind) and SIGTERM/SIGINT -> the shutdown state machine (abort children,
  * persist, close, bounded escalation). Returns the finalizer for main()'s tail.
+ *
+ * The snapshot timer is NOT armed here: with zero live children a snapshot
+ * DELETES pids.json, and until stage-4 crash-GC has consumed the previous
+ * life's file that file is the only record of surviving children (C2). The
+ * composition root calls `beginPidSnapshots()` once admission is normal;
+ * recovery-only serving leaves the previous pids.json byte-untouched, and the
+ * finalizer writes a final snapshot only when snapshots were armed.
  */
 export declare function armDaemonLifecycle(deps: LifecycleDeps): {
+    beginPidSnapshots: () => void;
     finalize: () => void;
 };
 export {};

package/dist/daemon-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-lifecycle.d.ts","sourceRoot":"","sources":["../src/daemon-lifecycle.ts"],"names":[],"mappings":"AAaA,UAAU,aAAa;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,eAAO,MAAM,OAAO,SAAU,MAAM,WAAW,MAAM,KAAG,IAMvD,CAAC;AAEF;wDACwD;AACxD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,SAAS,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG;IAAE,QAAQ,EAAE,MAAM,IAAI,CAAA;CAAE,CA8ChF"}
+{"version":3,"file":"daemon-lifecycle.d.ts","sourceRoot":"","sources":["../src/daemon-lifecycle.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAEV,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAElC,UAAU,aAAa;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;IACvD,8EAA8E;IAC9E,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,eAAO,MAAM,OAAO,SAAU,MAAM,WAAW,MAAM,KAAG,IAMvD,CAAC;AAiBF;wDACwD;AACxD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC,GACjE,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG;IACvD,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,IAAI,CAAC;CACtB,CA0DA"}