@cydm/happy-elves 0.1.0-beta.496 → 0.1.0-beta.498

package/README.md

@@ -2,14 +2,6 @@
 
 Public beta CLI for Happy Elves.
 
-## Hosted relay
+First-time hosted attach (Windows):
 
-```bash
-happy-elves account create --relay https://relay.happyelves.ai --device-name "CLI" --json
-```
-
-## Self-host relay
-
-```bash
-happy-elves relay serve --host 0.0.0.0 --port 8787 --json
-```
+    npm.cmd --yes --package @cydm/happy-elves@0.1.0-beta.498 happy-elves-updater install --autostart

package/apps/cli/dist/commands/lib/args.js

@@ -33,6 +33,11 @@ const valueFlags = new Set([
     "limit",
     "machine",
     "machine-id",
+    "operation-id",
+    "limit-bytes",
+    "max-wait-ms",
+    "manifest-digest",
+    "version",
     "native-identity",
     "memory",
     "memory-mode",

package/apps/cli/dist/commands/lib/usage.js

@@ -35,6 +35,14 @@ Check local controller config, relay reachability, and daemon state.
     machine: `Usage:
   happy-elves machine list [--verbose] [--json]
   happy-elves machine status <machineId> [--verbose] [--json]
+  happy-elves machine update check <machineId> [--json]
+  happy-elves machine update status <machineId> [--operation <operationId>] [--json]
+  happy-elves machine update apply <machineId> --version <version> [--reject] [--max-wait-ms <ms>] [--json]
+  happy-elves machine daemon <status|start|stop|restart|diagnose|logs> <machineId> [--limit-bytes <n>] [--json]
+  happy-elves machine host exec <machineId> <command> [args...] --operation-id <id> [--cwd <path>] [--timeout-ms <ms>] [--json]
+  happy-elves machine host exec <machineId> --shell <command> --operation-id <id> [--cwd <path>] [--timeout-ms <ms>] [--json]
+  happy-elves machine host status <machineId> --operation-id <id> [--json]
+  happy-elves machine host cancel <machineId> <jobId> [--json]
   happy-elves machine diagnose <machineId> [--json]
   happy-elves machine directory <machineId> [--path <path>] [--json]
   happy-elves machine exec <machineId> --shell <command> [--cwd <path>] [--timeout-ms <ms>] [--wait-timeout-ms <ms>] [--json]
@@ -42,7 +50,7 @@ Check local controller config, relay reachability, and daemon state.
   happy-elves machine file info <machineId> --root <cwd> --path <path> [--json]
   happy-elves machine file preview <machineId> --root <cwd> --path <path> [--mode auto|text|image|html-source|html-sandbox] [--output <file>] [--json]
 
-  diagnose/exec are LAN/dev-only. exec requires the daemon to advertise devTools.
+  diagnose/exec are LAN/dev-only. host is the durable updater-managed host command path.
   --timeout-ms limits the remote process. --wait-timeout-ms limits how long this CLI waits for the result.
   file preview is read-only and limited to files inside --root.
 `,
@@ -266,6 +274,9 @@ Happy Elves is a remote controller and orchestration layer for coding agents acr
 Core commands:
   machine list [--json]
   machine status <machineId> [--verbose] [--json]
+  machine update check <machineId> [--json]
+  machine update status <machineId> [--operation <operationId>] [--json]
+  machine update apply <machineId> --version <version> [--reject] [--json]
   machine directory <machineId> [--path <path>] [--json]
 
   session list [--machine <machineId>] [--cwd <path>] [--limit 20] [--json]

package/apps/cli/dist/commands/machine.js

@@ -162,6 +162,57 @@ export async function handleMachine({ domain, action, positional, flags }) {
         return false;
     const config = await readConfig(flags);
     const client = new ControllerClient(config);
+    if (action === "update") {
+        const updateAction = positional[0];
+        const machineId = positional[1] ?? (typeof flags.machine === "string" ? flags.machine : undefined);
+        if (!machineId)
+            throw new CliError("Usage: happy-elves machine update <check|status|apply> <machineId> [--version <version>]", "USAGE");
+        if (updateAction === "check") {
+            const result = await client.machineUpdateCheck(machineId);
+            if (!wantsJson(flags)) {
+                console.log(`${machineId}: ${result.phase}${result.currentVersion ? ` (${result.currentVersion})` : ""}`);
+                return true;
+            }
+            ok("machine.update.check", { machineId, result }, { machineId });
+            return true;
+        }
+        if (updateAction === "status") {
+            const operationId = typeof flags.operation === "string" ? flags.operation : undefined;
+            const result = await client.machineUpdateStatus(machineId, operationId);
+            if (!wantsJson(flags)) {
+                console.log(`${machineId}: ${result.phase}${result.operationId ? ` ${result.operationId}` : ""}`);
+                if (result.error)
+                    console.log(`  ${result.errorCode ?? "error"}: ${result.error}`);
+                return true;
+            }
+            ok("machine.update.status", { machineId, result }, { machineId, ...(result.operationId ? { operationId: result.operationId } : {}) });
+            return true;
+        }
+        if (updateAction === "apply") {
+            const version = typeof flags.version === "string" ? flags.version : positional[2];
+            if (!version)
+                throw new CliError("Missing --version <version>", "INVALID_ARGUMENT");
+            const result = await client.machineUpdateApply({
+                machineId,
+                targetVersion: version,
+                operationId: typeof flags["operation-id"] === "string" ? flags["operation-id"] : undefined,
+                busyPolicy: flags.reject === true ? "reject" : "wait",
+                maxWaitMs: typeof flags["max-wait-ms"] === "string" ? Number(flags["max-wait-ms"]) : undefined,
+            });
+            const success = result.phase === "succeeded" || result.phase === "recovered";
+            if (!success)
+                process.exitCode = 1;
+            if (!wantsJson(flags)) {
+                console.log(`${machineId}: ${result.phase}${result.operationId ? ` ${result.operationId}` : ""}`);
+                if (result.error)
+                    console.log(`  ${result.errorCode ?? "error"}: ${result.error}`);
+                return true;
+            }
+            ok("machine.update.apply", { machineId, result }, { machineId, ...(result.operationId ? { operationId: result.operationId } : {}) }, success);
+            return true;
+        }
+        throw new CliError("Usage: happy-elves machine update <check|status|apply> <machineId>", "USAGE");
+    }
     if (action === "directory" || action === "dir" || action === "ls") {
         const machineId = requirePositional(positional[0], "machineId");
         const listing = await client.listDirectory({
@@ -269,6 +320,77 @@ export async function handleMachine({ domain, action, positional, flags }) {
         ok("machine.diagnose", { machineId, diagnostics }, { machineId });
         return true;
     }
+    if (action === "daemon") {
+        const daemonAction = positional[0];
+        const machineId = requirePositional(positional[1], "machineId");
+        if (!daemonAction || !["status", "start", "stop", "restart", "diagnose", "logs"].includes(daemonAction))
+            throw new CliError("Usage: happy-elves machine daemon <status|start|stop|restart|diagnose|logs> <machineId>", "USAGE");
+        const result = await client.daemonManage(machineId, daemonAction, typeof flags["limit-bytes"] === "string" ? Number(flags["limit-bytes"]) : undefined);
+        if (!wantsJson(flags)) {
+            console.log(`${machineId}: ${result.running ? "running" : "stopped"}${result.pid ? ` pid ${result.pid}` : ""}${result.version ? ` ${result.version}` : ""}`);
+            if (result.error)
+                console.log(`${result.errorCode ?? "error"}: ${result.error}`);
+            if (result.output)
+                console.log(result.output);
+            return true;
+        }
+        const success = !result.errorCode;
+        if (!success)
+            process.exitCode = 1;
+        ok(`machine.daemon.${daemonAction}`, { machineId, result }, { machineId }, success);
+        return true;
+    }
+    if (action === "host") {
+        const hostAction = positional[0];
+        const machineId = requirePositional(positional[1], "machineId");
+        if (hostAction === "exec") {
+            const operationId = typeof flags["operation-id"] === "string" ? flags["operation-id"] : "";
+            if (!operationId)
+                throw new CliError("Missing --operation-id <id>", "INVALID_ARGUMENT");
+            const shell = typeof flags.shell === "string" ? flags.shell : undefined;
+            const command = shell ?? requirePositional(positional[2], "command");
+            const args = shell ? [] : positional.slice(3);
+            const timeoutMs = typeof flags["timeout-ms"] === "string" ? Number(flags["timeout-ms"]) : undefined;
+            if (timeoutMs !== undefined && (!Number.isInteger(timeoutMs) || timeoutMs <= 0))
+                throw new CliError(`Invalid --timeout-ms: ${flags["timeout-ms"]}`, "INVALID_ARGUMENT");
+            const job = await client.hostExec({
+                machineId, operationId, command, args,
+                ...(typeof flags.cwd === "string" ? { cwd: flags.cwd } : {}),
+                ...(shell ? { shell } : {}),
+                ...(timeoutMs ? { timeoutMs } : {}),
+            });
+            if (!wantsJson(flags)) {
+                console.log(`${job.jobId} ${job.status} ${job.operationId}`);
+                if (job.stdout)
+                    console.log(job.stdout);
+                if (job.stderr)
+                    console.error(job.stderr);
+                return true;
+            }
+            ok("machine.host.exec", { machineId, job }, { machineId });
+            return true;
+        }
+        if (hostAction === "status" || hostAction === "cancel") {
+            const jobId = positional[2];
+            const operationId = typeof flags["operation-id"] === "string" ? flags["operation-id"] : undefined;
+            if (hostAction === "status" && !operationId)
+                throw new CliError("Missing --operation-id <id>", "INVALID_ARGUMENT");
+            if (hostAction === "cancel" && !jobId)
+                throw new CliError("Missing jobId", "INVALID_ARGUMENT");
+            const job = hostAction === "status" ? await client.hostOperationStatus(machineId, operationId) : await client.hostJobCancel(machineId, jobId);
+            if (!wantsJson(flags)) {
+                console.log(`${job.jobId} ${job.status}`);
+                if (job.stdout)
+                    console.log(job.stdout);
+                if (job.stderr)
+                    console.error(job.stderr);
+                return true;
+            }
+            ok(`machine.host.${hostAction}`, { machineId, job }, { machineId });
+            return true;
+        }
+        throw new CliError("Usage: happy-elves machine host <exec|status|cancel> <machineId> ...", "USAGE");
+    }
     if (action === "exec" || action === "dev-exec") {
         const machineId = requirePositional(positional[0], "machineId");
         const shell = typeof flags.shell === "string" ? flags.shell : undefined;

package/apps/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cydm/happy-elves-cli",
-  "version": "0.1.0-beta.496",
+  "version": "0.1.0-beta.498",
   "private": true,
   "type": "module"
 }

package/apps/daemon/dist/direct/server.js

@@ -13,6 +13,7 @@ import { handleInboundPromptCommand } from "../relay/inbound-prompt.js";
 import { markDirectSocket, sendMachineMessageToRelay } from "../relay/send.js";
 import { setCurrentDirectTransportMetadata } from "./state.js";
 import { DirectGrantVerifier, DirectTicketStore, directAuthError, directTicketConfigFromEnv } from "./tickets.js";
+import { isUpdateAdmissionCommand, updateAdmissionBlocked, updateAdmissionError } from "../update-barrier.js";
 const DIRECT_PROTOCOL = "he-direct-v1";
 const DEFAULT_DIRECT_PORT = 8790;
 const MAX_FRAME_BYTES = 8 * 1024 * 1024;
@@ -282,6 +283,20 @@ class DirectState {
             this.ackStoredPacket(connection, message.packet);
             return;
         }
+        if (isUpdateAdmissionCommand(command.type)) {
+            const barrier = await updateAdmissionBlocked();
+            if (barrier) {
+                await this.sendMachinePacket({
+                    type: "machine:error",
+                    requestId: command.requestId,
+                    sessionId: sessionIdFromMachineCommand(command),
+                    code: updateAdmissionError(barrier).code,
+                    message: updateAdmissionError(barrier).message,
+                }, connection);
+                this.ackStoredPacket(connection, message.packet);
+                return;
+            }
+        }
         if (command.type === "machine:prompt") {
             await handleInboundPromptCommand({
                 ws: this.handlerSocket(connection),

package/apps/daemon/dist/local-control.d.ts

@@ -0,0 +1,4 @@
+export type LocalControlServer = {
+    close: () => Promise<void>;
+};
+export declare function startLocalControl(machineId: string): Promise<LocalControlServer>;

package/apps/daemon/dist/local-control.js

@@ -0,0 +1,111 @@
+import crypto from "node:crypto";
+import fs from "node:fs/promises";
+import net from "node:net";
+import os from "node:os";
+import path from "node:path";
+import { configDir } from "./paths.js";
+import { readDaemonIdentity } from "./process.js";
+import { beginUpdateBarrier, clearUpdateBarrier, markUpdateBarrierPending } from "./update-barrier.js";
+import { pendingOptionsForSession } from "./state.js";
+import { sessionTurns } from "./state.js";
+import { sessions } from "./state.js";
+function localControlPath(machineId) {
+    return process.platform === "win32"
+        ? `\\\\.\\pipe\\happy-elves-daemon-${machineId}`
+        : unixControlPath(configDir);
+}
+function unixControlPath(root) {
+    const preferred = path.join(root, "daemon-control.sock");
+    if (preferred.length < 96)
+        return preferred;
+    const digest = crypto.createHash("sha256").update(path.resolve(root)).digest("hex").slice(0, 24);
+    return path.join(os.tmpdir(), `happy-elves-daemon-${digest}.sock`);
+}
+export async function startLocalControl(machineId) {
+    const socketPath = localControlPath(machineId);
+    if (process.platform !== "win32")
+        await fs.rm(socketPath, { force: true }).catch(() => undefined);
+    const server = net.createServer((socket) => {
+        let buffer = "";
+        socket.setEncoding("utf8");
+        socket.on("data", (chunk) => {
+            buffer += chunk;
+            let index = buffer.indexOf("\n");
+            while (index >= 0) {
+                const line = buffer.slice(0, index);
+                buffer = buffer.slice(index + 1);
+                index = buffer.indexOf("\n");
+                void handleControlRequest(line, socket);
+            }
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(socketPath, () => resolve());
+    });
+    if (process.platform !== "win32")
+        await fs.chmod(socketPath, 0o600).catch(() => undefined);
+    return {
+        close: async () => {
+            await new Promise((resolve) => server.close(() => resolve()));
+            if (process.platform !== "win32")
+                await fs.rm(socketPath, { force: true }).catch(() => undefined);
+        },
+    };
+}
+async function handleControlRequest(raw, socket) {
+    try {
+        const request = JSON.parse(raw);
+        if (request.type === "identity") {
+            const identity = await readDaemonIdentity();
+            if (!identity || identity.pid !== process.pid || identity.stateRoot !== path.resolve(configDir)) {
+                write(socket, { ok: false, code: "DAEMON_IDENTITY_UNAVAILABLE" });
+                return;
+            }
+            write(socket, { ok: true, pid: process.pid, stateRoot: identity.stateRoot, machineId: identity.machineId, nonce: identity.nonce, ...(identity.generation ? { generation: identity.generation } : {}), startedAt: identity.startedAt });
+            return;
+        }
+        if (request.type === "status") {
+            const activeTurns = sessionTurns.activeCount();
+            const pendingOptions = [...sessions.values()].reduce((count, session) => count + (sessionTurns.activeTurnId(session.sessionId) ? pendingOptionsForSession(session.sessionId, sessionTurns.activeTurnId(session.sessionId)).length : 0), 0);
+            write(socket, { ok: true, activeTurns, pendingOptions, busy: activeTurns > 0 || pendingOptions > 0 });
+            return;
+        }
+        if (request.type === "begin-update") {
+            const releasePending = markUpdateBarrierPending({ operationId: request.operationId, generation: request.generation, leaseMs: request.leaseMs ?? 120_000 });
+            try {
+                const activeTurns = sessionTurns.activeCount();
+                const pendingOptions = [...sessions.values()].reduce((count, session) => count + (sessionTurns.activeTurnId(session.sessionId) ? pendingOptionsForSession(session.sessionId, sessionTurns.activeTurnId(session.sessionId)).length : 0), 0);
+                if (activeTurns > 0 || pendingOptions > 0) {
+                    write(socket, { ok: false, code: "DAEMON_BUSY", activeTurns, pendingOptions });
+                    return;
+                }
+                const barrier = await beginUpdateBarrier({ operationId: request.operationId, generation: request.generation, leaseMs: request.leaseMs ?? 120_000 });
+                write(socket, { ok: true, barrier });
+            }
+            finally {
+                releasePending();
+            }
+            return;
+        }
+        if (request.type === "end-update") {
+            await clearUpdateBarrier(request.operationId);
+            write(socket, { ok: true });
+            return;
+        }
+        if (request.type === "shutdown") {
+            write(socket, { ok: true });
+            setTimeout(() => process.kill(process.pid, "SIGTERM"), 25).unref?.();
+            return;
+        }
+        write(socket, { ok: false, code: "INVALID_CONTROL_COMMAND" });
+    }
+    catch (error) {
+        write(socket, { ok: false, code: "INVALID_CONTROL_COMMAND", error: error instanceof Error ? error.message : String(error) });
+    }
+}
+function write(socket, value) {
+    if (!socket.destroyed)
+        socket.write(`${JSON.stringify(value)}\n`);
+}
+//# sourceMappingURL=local-control.js.map

package/apps/daemon/dist/paths.d.ts

@@ -13,6 +13,7 @@ export declare const orchestrationStorePath: string;
 export declare const artifactStorePath: string;
 export declare const memoryRootDir: string;
 export declare const pidPath: string;
+export declare const identityPath: string;
 export declare const daemonScriptPath: string;
 export declare const daemonScriptRelativePath: string;
 export declare const daemonScriptRepoSuffix: string;

package/apps/daemon/dist/paths.js

@@ -18,6 +18,7 @@ export const orchestrationStorePath = path.join(configDir, "orchestration.json")
 export const artifactStorePath = path.join(configDir, "artifacts.json");
 export const memoryRootDir = path.join(configDir, "memory");
 export const pidPath = path.join(configDir, "daemon.pid");
+export const identityPath = path.join(configDir, "daemon.identity.json");
 export const daemonScriptPath = fileURLToPath(new URL(import.meta.url.endsWith(".ts") ? "./cli.ts" : "./cli.js", import.meta.url));
 export const daemonScriptRelativePath = path.relative(process.cwd(), daemonScriptPath);
 export const daemonScriptRepoSuffix = path.join("apps", "daemon", "dist", "cli.js");

package/apps/daemon/dist/process.d.ts

@@ -1,10 +1,20 @@
+export type DaemonIdentity = {
+    pid: number;
+    stateRoot: string;
+    machineId: string;
+    nonce: string;
+    generation?: string;
+    startedAt: string;
+};
 export declare function isManagedDaemonCommand(command: string | undefined): boolean;
-export declare function writePid(): Promise<void>;
+export declare function readDaemonIdentity(): Promise<DaemonIdentity | undefined>;
+export declare function writePid(machineId: string): Promise<void>;
 export declare function removePidIfCurrent(): Promise<void>;
 export declare function localStatus(): Promise<{
     pidPath: string;
     pid?: number;
     running: boolean;
+    identityVerified?: boolean;
 }>;
 export declare function stopDaemon(timeoutMs?: number): Promise<{
     pidPath: string;

package/apps/daemon/dist/process.js

@@ -1,7 +1,8 @@
 import fs from "node:fs/promises";
 import path from "node:path";
+import crypto from "node:crypto";
 import { execFileSync, spawn } from "node:child_process";
-import { daemonScriptPath, daemonScriptRelativePath, daemonScriptRepoSuffix, pidPath } from "./paths.js";
+import { configDir, daemonScriptPath, daemonScriptRelativePath, daemonScriptRepoSuffix, identityPath, pidPath } from "./paths.js";
 import { sleep } from "./utils.js";
 function isPidAlive(pid) {
     if (!Number.isInteger(pid) || pid <= 0)
@@ -47,31 +48,74 @@ export function isManagedDaemonCommand(command) {
             command.includes(path.join("apps", "daemon", "src", "cli.ts"))) &&
         /\bstart\b/.test(command));
 }
-async function readPid() {
+async function readPidRecord() {
     try {
         const raw = await fs.readFile(pidPath, "utf8");
         const pid = Number(raw.trim());
-        return Number.isInteger(pid) && pid > 0 ? pid : undefined;
+        return Number.isInteger(pid) && pid > 0 ? { pid } : undefined;
     }
     catch (error) {
         if (error.code === "ENOENT")
             return undefined;
-        throw error;
+        return undefined;
+    }
+}
+export async function readDaemonIdentity() {
+    try {
+        const value = JSON.parse(await fs.readFile(identityPath, "utf8"));
+        if (typeof value.pid !== "number" || !Number.isInteger(value.pid) || value.pid <= 0 ||
+            typeof value.stateRoot !== "string" || !path.isAbsolute(value.stateRoot) ||
+            typeof value.machineId !== "string" || !value.machineId ||
+            typeof value.nonce !== "string" || !value.nonce ||
+            typeof value.startedAt !== "string" || !value.startedAt)
+            return undefined;
+        return {
+            pid: value.pid,
+            stateRoot: path.resolve(value.stateRoot),
+            machineId: value.machineId,
+            nonce: value.nonce,
+            ...(typeof value.generation === "string" && value.generation ? { generation: value.generation } : {}),
+            startedAt: value.startedAt,
+        };
+    }
+    catch {
+        return undefined;
     }
 }
-export async function writePid() {
+export async function writePid(machineId) {
     await fs.mkdir(path.dirname(pidPath), { recursive: true });
+    const identity = {
+        pid: process.pid,
+        stateRoot: path.resolve(configDir),
+        machineId,
+        nonce: crypto.randomUUID(),
+        ...(process.env.HAPPY_ELVES_UPDATER_GENERATION ? { generation: process.env.HAPPY_ELVES_UPDATER_GENERATION } : {}),
+        startedAt: new Date().toISOString(),
+    };
     await fs.writeFile(pidPath, `${process.pid}\n`, { mode: 0o600 });
+    await fs.chmod(pidPath, 0o600);
+    const temporary = `${identityPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+    await fs.writeFile(temporary, `${JSON.stringify(identity)}\n`, { mode: 0o600 });
+    await fs.rename(temporary, identityPath);
+    await fs.chmod(identityPath, 0o600);
 }
 export async function removePidIfCurrent() {
-    const pid = await readPid();
-    if (pid === process.pid) {
+    const record = await readPidRecord();
+    const identity = await readDaemonIdentity();
+    if (record?.pid === process.pid && identity?.pid === process.pid && identity.stateRoot === path.resolve(configDir)) {
         await fs.rm(pidPath, { force: true });
+        await fs.rm(identityPath, { force: true });
     }
 }
 export async function localStatus() {
-    const pid = await readPid();
-    return { pidPath, pid, running: pid !== undefined && isPidAlive(pid) && isManagedDaemonPid(pid) };
+    const record = await readPidRecord();
+    const pid = record?.pid;
+    const alive = pid !== undefined && isPidAlive(pid) && isManagedDaemonPid(pid);
+    if (!alive)
+        return { pidPath, ...(pid ? { pid } : {}), running: false };
+    const identity = await readDaemonIdentity();
+    const verified = identity?.pid === pid && identity.stateRoot === path.resolve(configDir);
+    return { pidPath, pid, running: true, identityVerified: verified };
 }
 export async function stopDaemon(timeoutMs = 5000) {
     const status = await localStatus();
@@ -79,6 +123,8 @@ export async function stopDaemon(timeoutMs = 5000) {
         await fs.rm(pidPath, { force: true });
         return { ...status, stopped: false, running: false };
     }
+    if (status.identityVerified !== true)
+        throw Object.assign(new Error("The daemon PID is alive but its state-root identity cannot be verified; refusing to stop it"), { code: "DAEMON_IDENTITY_UNVERIFIED" });
     process.kill(status.pid, "SIGTERM");
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {

package/apps/daemon/dist/relay/connection.js

@@ -23,9 +23,11 @@ import { loadSessionProjections } from "../session/store.js";
 import { relayWsUrl } from "../relay-http.js";
 import { applyRelayMachinePresence, applyRelayMachineSnapshot, reconcileRelayMachinePresence, relayMachineRegistry, sessions, sessionTurns } from "../state.js";
 import { handleDevExec, handleDiagnose } from "./devtools.js";
+import { isUpdateAdmissionCommand, updateAdmissionBlocked, updateAdmissionError } from "../update-barrier.js";
 import { handleInboundPromptCommand, recoverInboundPromptAdmissions } from "./inbound-prompt.js";
 import { registerMachine } from "./register.js";
 import { clearActiveRelaySocket, configureRelaySender, flushRelayOutbox, handleMachineMessageAck, handleMachineMessageError, handleRetainedPacketAck, handleRetainedPacketError, sendCommandResponse, setActiveRelaySocket, } from "./send.js";
+const daemonInternalChannel = "product:daemon-internal";
 async function applyMachineManifest(config, retained, presence) {
     try {
         const message = parseMachineClientMessage(await decryptJson(config.accountSecret, retained.encryptedPayload));
@@ -297,12 +299,14 @@ async function handleRelayWireMessage(ws, config, message) {
     if (message.type !== "server:packet")
         return;
     let payload;
+    let internalPayload = false;
     try {
         const decrypted = await decryptJson(config.accountSecret, message.packet.encryptedPayload);
         try {
             payload = parseControllerClientMessage(decrypted);
         }
         catch {
+            internalPayload = true;
             payload = parseInternalControllerMessage(decrypted);
         }
     }
@@ -313,6 +317,17 @@ async function handleRelayWireMessage(ws, config, message) {
         ackIncomingPacket(ws, message);
         return;
     }
+    if (internalPayload && message.packet.channelId !== daemonInternalChannel) {
+        await sendCommandResponse(ws, {
+            type: "machine:error",
+            requestId: requestIdFromControllerMessage(payload),
+            sessionId: sessionIdFromControllerMessage(payload),
+            code: "DAEMON_INTERNAL_CHANNEL_REQUIRED",
+            message: "Daemon-internal commands must arrive on the machine-only internal channel.",
+        });
+        ackIncomingPacket(ws, message);
+        return;
+    }
     let command;
     try {
         command = await machineCommandFromController(ws, config, payload, message.packet.fromNodeId);
@@ -328,6 +343,20 @@ async function handleRelayWireMessage(ws, config, message) {
         ackIncomingPacket(ws, message);
         return;
     }
+    if (command && isUpdateAdmissionCommand(command.type)) {
+        const barrier = await updateAdmissionBlocked();
+        if (barrier) {
+            await sendCommandResponse(ws, {
+                type: "machine:error",
+                requestId: command.requestId,
+                sessionId: sessionIdFromMachineCommand(command),
+                code: updateAdmissionError(barrier).code,
+                message: updateAdmissionError(barrier).message,
+            });
+            ackIncomingPacket(ws, message);
+            return;
+        }
+    }
     if (command?.type === "machine:prompt") {
         await handleInboundPromptCommand({
             ws,
@@ -462,10 +491,32 @@ async function machineCommandFromController(ws, config, message, senderNodeId) {
         return { ...message, type: "machine:dispatch" };
     if (message.type === "controller:queue")
         return { ...message, type: "machine:queue" };
-    if (message.type === "controller:crewQueueEnqueue")
+    if (message.type === "controller:crewQueueEnqueue") {
+        if (senderNodeId !== message.consumerMachineId) {
+            await sendCommandResponse(ws, {
+                type: "machine:error",
+                requestId: message.requestId,
+                code: "INTERNAL_SENDER_MISMATCH",
+                capability: "crewQueue.enqueue",
+                message: "Crew queue enqueue sender must be the declared consumer machine.",
+            });
+            return null;
+        }
         return { ...message, type: "machine:crewQueueEnqueue" };
-    if (message.type === "controller:crewQueueUpdate")
+    }
+    if (message.type === "controller:crewQueueUpdate") {
+        if (senderNodeId !== message.crewMachineId) {
+            await sendCommandResponse(ws, {
+                type: "machine:error",
+                requestId: message.requestId,
+                code: "INTERNAL_SENDER_MISMATCH",
+                capability: "crewQueue.update",
+                message: "Crew queue update sender must be the declared Crew owner machine.",
+            });
+            return null;
+        }
         return { ...message, type: "machine:crewQueueUpdate" };
+    }
     if (message.type === "controller:artifactReplication") {
         if (!senderNodeId) {
             await sendCommandResponse(ws, {

package/apps/daemon/dist/relay/remote-command.js

@@ -1,6 +1,7 @@
 import { decryptJson, encryptJson, parseMachineClientMessage, parseRelayServerWireMessage, randomId, } from "../../../../packages/shared/dist/index.js";
 import { relayWsUrl } from "../relay-http.js";
 const controllerProjectionChannel = "product:controllers";
+const daemonInternalChannel = "product:daemon-internal";
 export class RemoteCommandError extends Error {
     code;
     retryable;
@@ -147,6 +148,7 @@ async function remoteCommandPacket(config, packetId, targetMachineId, command) {
         packet: {
             packetId,
             toNodeId: targetMachineId,
+            ...(isInternalControllerMessage(command) ? { channelId: daemonInternalChannel } : {}),
             streamId: "sessionId" in command ? command.sessionId : "machineId" in command ? command.machineId : undefined,
             correlationId: command.requestId,
             idempotencyKey: command.requestId,
@@ -156,4 +158,7 @@ async function remoteCommandPacket(config, packetId, targetMachineId, command) {
         },
     };
 }
+function isInternalControllerMessage(command) {
+    return command.type === "controller:artifactReplication" || command.type === "controller:crewQueueEnqueue" || command.type === "controller:crewQueueUpdate";
+}
 //# sourceMappingURL=remote-command.js.map

package/apps/daemon/dist/start.js

@@ -11,6 +11,7 @@ import { localStatus, removePidIfCurrent, writePid } from "./process.js";
 import { configureRuntimeDaemonContext, disposeRuntime, initializeRuntime } from "./runtime.js";
 import { sleep } from "./utils.js";
 import { loadSessionProjections } from "./session/store.js";
+import { startLocalControl } from "./local-control.js";
 export async function start(argv) {
     const flags = parseDaemonFlags(argv);
     const config = await readConfig();
@@ -40,7 +41,8 @@ export async function start(argv) {
     void drainPendingArtifactFeedbackAttentions(config).catch((error) => {
         console.error(`Artifact feedback attention recovery failed: ${error instanceof Error ? error.message : String(error)}`);
     });
-    await writePid();
+    await writePid(config.machineId);
+    const localControl = await startLocalControl(config.machineId);
     const cleanup = () => {
         disposeRuntime();
         void Promise.resolve()
@@ -48,6 +50,7 @@ export async function start(argv) {
             .then(() => directTransport?.close())
             .catch(() => undefined)
             .then(() => stopGatewayRuntime())
+            .then(() => localControl.close())
             .finally(() => removePidIfCurrent().finally(() => process.exit(0)));
     };
     process.once("SIGINT", cleanup);

package/apps/daemon/dist/turn-coordinator.d.ts

@@ -25,4 +25,6 @@ export declare class SessionTurnCoordinator<Turn> {
     activeTurn(sessionId: string): Turn | undefined;
     activeTurnId(sessionId: string): string | undefined;
     activeClaim(sessionId: string): SessionTurnClaim | undefined;
+    activeCount(): number;
+    hasActiveWork(): boolean;
 }