@felan-ai/daemon 0.0.0-stage → 0.1.0

package/dist/daemon/main.js

@@ -0,0 +1,83 @@
+import { resolveDaemonTarget } from './target.js';
+import { startDaemonService } from './service.js';
+import { publishDaemonReadiness } from './supervisor.js';
+import { DAEMON_VERSION } from '../version.js';
+import { DaemonIdentitySchema, parseSchema } from '@felan-ai/session-protocol';
+export async function runDaemonProcess(args, manager) {
+    if (args.length < 1 || args[0].length > 65_536)
+        throw new Error('Invalid daemon launch arguments.');
+    const target = parseTarget(args[0]);
+    let foreground = false;
+    let hostConfigPath;
+    let replacing;
+    for (let index = 1; index < args.length; index++) {
+        const option = args[index];
+        if (option === '--foreground' && !foreground) {
+            foreground = true;
+            continue;
+        }
+        if ((option === '--host-config' || option === '--replace') && index + 1 < args.length) {
+            const value = args[++index];
+            if (!value || value.length > 65_536)
+                throw new Error('Invalid daemon launch arguments.');
+            if (option === '--host-config' && hostConfigPath === undefined)
+                hostConfigPath = value;
+            else if (option === '--replace' && replacing === undefined)
+                replacing = parseSchema(DaemonIdentitySchema, JSON.parse(value));
+            else
+                throw new Error('Invalid daemon launch arguments.');
+            continue;
+        }
+        throw new Error('Invalid daemon launch arguments.');
+    }
+    const activeManager = manager ?? { packageName: '@felan-ai/daemon', version: DAEMON_VERSION,
+        resolveFrom: new URL('../index.js', import.meta.url).href };
+    const service = await startDaemonService(target, { ...(replacing ? { replacing } : {}), ...(hostConfigPath ? { hostConfigPath } : {}), manager: activeManager });
+    let failed = false;
+    const stop = () => {
+        void service.requestStop().then(response => {
+            if (response.outcome !== 'accepted')
+                throw new Error('Shutdown was not accepted.');
+        }).catch(() => { failed = true; process.stderr.write('Daemon shutdown is blocked. Inspect status and use explicit force only when appropriate.\n'); });
+    };
+    const fail = () => { failed = true; stop(); };
+    process.on('SIGINT', stop);
+    process.on('SIGTERM', stop);
+    process.on('uncaughtException', fail);
+    process.on('unhandledRejection', fail);
+    try {
+        if (foreground)
+            process.stdout.write(`Felan daemon ${DAEMON_VERSION}: ${service.lifecycle.state}\n`);
+        else {
+            try {
+                await publishDaemonReadiness(service.owner, DAEMON_VERSION, 10_000);
+            }
+            catch {
+                failed = true;
+                stop();
+            }
+        }
+        await service.stopped;
+    }
+    finally {
+        process.off('SIGINT', stop);
+        process.off('SIGTERM', stop);
+        process.off('uncaughtException', fail);
+        process.off('unhandledRejection', fail);
+        if (failed)
+            process.exitCode = 1;
+    }
+}
+function parseTarget(text) {
+    const value = JSON.parse(text);
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Invalid daemon target.');
+    const kind = Reflect.get(value, 'kind');
+    const keys = kind === 'production' ? ['kind', 'agentDir', 'storeRoots'] : kind === 'isolated' ? ['kind', 'directory', 'namespaceId', 'storeRoots'] : [];
+    if (!keys.length || Object.keys(value).some(key => !keys.includes(key)))
+        throw new Error('Invalid daemon target fields.');
+    const target = value;
+    resolveDaemonTarget(target);
+    return target;
+}
+//# sourceMappingURL=main.js.map

package/dist/daemon/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/daemon/main.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAuB,MAAM,4BAA4B,CAAC;AAGpG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAuB,EAAE,OAAqB;IACnF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACrC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,cAAkC,CAAC;IACvC,IAAI,SAAqC,CAAC;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,MAAM,KAAK,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,WAAW,CAAC,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,CAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACzF,IAAI,MAAM,KAAK,eAAe,IAAI,cAAc,KAAK,SAAS;gBAAE,cAAc,GAAG,KAAK,CAAC;iBAClF,IAAI,MAAM,KAAK,WAAW,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS,GAAG,WAAW,CAAC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;;gBACxH,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,aAAa,GAAgB,OAAO,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc;QACtG,WAAW,EAAE,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IACjK,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE;QAAG,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC9D,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC;IAC1J,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IACvI,IAAI,CAAC;QACH,IAAI,UAAU;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,cAAc,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;aAChG,CAAC;YACJ,IAAI,CAAC;gBAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAC5E,MAAM,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,IAAI,EAAE,CAAC;YAAC,CAAC;QAClC,CAAC;QACD,MAAM,OAAO,CAAC,OAAO,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAC3I,IAAI,MAAM;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxJ,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,KAAqB,CAAC;IACrC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,MAAM,CAAC;AAC7C,CAAC"}

package/dist/daemon/message-display.d.ts

@@ -0,0 +1,4 @@
+import type { AgentSession } from '@felan-ai/agent-core';
+import { type MessageDisplay } from '@felan-ai/session-protocol';
+export declare function messageDisplay(message: AgentSession['messages'][number]): MessageDisplay | undefined;
+//# sourceMappingURL=message-display.d.ts.map

package/dist/daemon/message-display.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-display.d.ts","sourceRoot":"","sources":["../../src/daemon/message-display.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAgD,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE/G,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,GAAG,SAAS,CAapG"}

package/dist/daemon/message-display.js

@@ -0,0 +1,20 @@
+import { ProtocolValidationError, parseMessageDisplay } from '@felan-ai/session-protocol';
+export function messageDisplay(message) {
+    try {
+        if (message.role === 'toolResult')
+            return parseMessageDisplay({ kind: 'tool', name: message.toolName, timestamp: message.timestamp });
+        if (message.role !== 'assistant')
+            return undefined;
+        const usage = message.usage;
+        return parseMessageDisplay({ kind: 'assistant', timestamp: message.timestamp, api: message.api, provider: message.provider, model: message.model,
+            stopReason: message.stopReason, ...(message.errorMessage === undefined ? {} : { errorMessage: message.errorMessage }),
+            usage: { input: usage?.input, output: usage?.output, cacheRead: usage?.cacheRead, cacheWrite: usage?.cacheWrite, totalTokens: usage?.totalTokens,
+                cost: { input: usage?.cost?.input, output: usage?.cost?.output, cacheRead: usage?.cost?.cacheRead, cacheWrite: usage?.cost?.cacheWrite, total: usage?.cost?.total } } });
+    }
+    catch (error) {
+        if (error instanceof ProtocolValidationError)
+            return undefined;
+        throw error;
+    }
+}
+//# sourceMappingURL=message-display.js.map

package/dist/daemon/message-display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-display.js","sourceRoot":"","sources":["../../src/daemon/message-display.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAuB,MAAM,4BAA4B,CAAC;AAE/G,MAAM,UAAU,cAAc,CAAC,OAAyC;IACtE,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACtI,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,OAAO,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;YAC9I,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACrH,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW;gBAC9I,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/K,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB;YAAE,OAAO,SAAS,CAAC;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/daemon/native-ownership.d.ts

@@ -0,0 +1,13 @@
+import { Socket } from 'node:net';
+export declare class DaemonSecurityError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function requireOwnershipPlatform(): 'darwin' | 'linux';
+export declare function tryKernelLock(fd: number): boolean;
+export declare function socketPathLimit(): number;
+export declare function protectSocket(path: string): void;
+export declare function listenUnix(path: string): number;
+export declare function peerUid(fd: number): number;
+export declare function connectUnix(path: string, uid: number, timeoutMs?: number): Promise<Socket>;
+//# sourceMappingURL=native-ownership.d.ts.map

package/dist/daemon/native-ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-ownership.d.ts","sourceRoot":"","sources":["../../src/daemon/native-ownership.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGlC,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAInD;AAED,wBAAgB,wBAAwB,IAAI,QAAQ,GAAG,OAAO,CAQ7D;AAgCD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAIjD;AAED,wBAAgB,eAAe,IAAI,MAAM,CAAgE;AACzG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIhD;AAwBD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ/C;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAU1C;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB/F"}

package/dist/daemon/native-ownership.js

@@ -0,0 +1,173 @@
+import { closeSync } from 'node:fs';
+import { Socket } from 'node:net';
+import koffi from 'koffi';
+export class DaemonSecurityError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'DaemonSecurityError';
+    }
+}
+export function requireOwnershipPlatform() {
+    if ((process.platform !== 'darwin' && process.platform !== 'linux') || !['arm64', 'x64'].includes(process.arch)) {
+        throw new DaemonSecurityError('platform_blocked', 'Daemon ownership is not available on this platform: Windows requires reviewed token, DACL and handle-lock support; other native ABIs require verification. No fallback is permitted.');
+    }
+    if (process.getuid() !== process.geteuid() || process.getgid() !== process.getegid()) {
+        throw new DaemonSecurityError('platform_blocked', 'Daemon ownership refuses set-ID execution.');
+    }
+    return process.platform;
+}
+let api;
+function loadApi() {
+    const platform = requireOwnershipPlatform();
+    let libc;
+    try {
+        libc = koffi.load(platform === 'darwin' ? '/usr/lib/libSystem.B.dylib' : 'libc.so.6');
+    }
+    catch {
+        throw new DaemonSecurityError('platform_blocked', 'Native ownership backend unavailable; Linux requires glibc. No lease-lock or TCP fallback is permitted.');
+    }
+    return {
+        platform,
+        flock: libc.func('int flock(int fd, int operation)'),
+        socket: libc.func('int socket(int domain, int type, int protocol)'),
+        bind: libc.func('int bind(int fd, const void *address, uint32_t length)'),
+        listen: libc.func('int listen(int fd, int backlog)'),
+        connect: libc.func('int connect(int fd, const void *address, uint32_t length)'),
+        fcntl: libc.func('int fcntl(int fd, int command, ...)'),
+        getpeereid: platform === 'darwin' ? libc.func('int getpeereid(int fd, _Out_ uint32_t *uid, _Out_ uint32_t *gid)') : undefined,
+        getsockopt: libc.func('int getsockopt(int fd, int level, int option, void *value, void *length)'),
+        chmodNoFollow: platform === 'darwin' ? libc.func('int lchmod(const char *path, uint32_t mode)') : libc.func('int fchmodat(int dirfd, const char *path, uint32_t mode, int flags)'),
+    };
+}
+function native() { return api ??= loadApi(); }
+function failure(operation) {
+    const errno = koffi.errno();
+    let code = 'native_failure';
+    if (operation === 'connect') {
+        if (errno === koffi.os.errno.ECONNREFUSED)
+            code = 'stale_endpoint';
+        else if (errno === koffi.os.errno.ENOENT)
+            code = 'unavailable';
+    }
+    throw new DaemonSecurityError(code, `${operation} failed (errno ${errno}).`);
+}
+export function tryKernelLock(fd) {
+    if (native().flock(fd, 2 | 4) === 0)
+        return true;
+    if (koffi.errno() === koffi.os.errno.EWOULDBLOCK || koffi.errno() === koffi.os.errno.EAGAIN)
+        return false;
+    return failure('flock');
+}
+export function socketPathLimit() { return requireOwnershipPlatform() === 'darwin' ? 103 : 107; }
+export function protectSocket(path) {
+    const n = native();
+    const result = n.platform === 'darwin' ? n.chmodNoFollow(path, 0o600) : n.chmodNoFollow(-100, path, 0o600, 0x100);
+    if (result !== 0)
+        failure('no-follow socket chmod');
+}
+function address(path) {
+    if (path.includes('\0') || Buffer.byteLength(path) > socketPathLimit()) {
+        throw new DaemonSecurityError('invalid_endpoint', `Unix socket path exceeds the ${socketPathLimit()}-byte platform limit or contains NUL.`);
+    }
+    const bytes = Buffer.from(path);
+    const result = Buffer.alloc(bytes.length + 3);
+    if (native().platform === 'darwin') {
+        result[0] = result.length;
+        result[1] = 1;
+    }
+    else
+        result.writeUInt16LE(1);
+    bytes.copy(result, 2);
+    return result;
+}
+function configure(fd) {
+    const n = native();
+    if (n.fcntl(fd, 2, 'int', 1) !== 0)
+        failure('FD_CLOEXEC');
+    const flags = n.fcntl(fd, 3);
+    if (flags < 0 || n.fcntl(fd, 4, 'int', flags | (n.platform === 'darwin' ? 4 : 2048)) !== 0)
+        failure('O_NONBLOCK');
+}
+function openSocket() {
+    const fd = native().socket(1, 1, 0);
+    if (fd < 0)
+        failure('socket');
+    try {
+        configure(fd);
+        return fd;
+    }
+    catch (error) {
+        closeSync(fd);
+        throw error;
+    }
+}
+export function listenUnix(path) {
+    const addr = address(path);
+    const fd = openSocket();
+    try {
+        if (native().bind(fd, addr, addr.length) !== 0)
+            failure('bind');
+        if (native().listen(fd, 64) !== 0)
+            failure('listen');
+        return fd;
+    }
+    catch (error) {
+        closeSync(fd);
+        throw error;
+    }
+}
+export function peerUid(fd) {
+    const n = native();
+    if (n.getpeereid) {
+        const uid = [0];
+        const gid = [0];
+        if (n.getpeereid(fd, uid, gid) !== 0)
+            failure('getpeereid');
+        return uid[0];
+    }
+    const value = Buffer.alloc(12);
+    const length = Buffer.alloc(4);
+    length.writeUInt32LE(12);
+    if (n.getsockopt(fd, 1, 17, value, length) !== 0 || length.readUInt32LE() !== 12)
+        failure('SO_PEERCRED');
+    return value.readUInt32LE(4);
+}
+export async function connectUnix(path, uid, timeoutMs = 2_000) {
+    const addr = address(path);
+    const fd = openSocket();
+    try {
+        const n = native();
+        const result = n.connect(fd, addr, addr.length);
+        if (result !== 0 && koffi.errno() !== koffi.os.errno.EINPROGRESS)
+            failure('connect');
+        const deadline = performance.now() + timeoutMs;
+        for (;;) {
+            const value = Buffer.alloc(4);
+            const length = Buffer.alloc(4);
+            length.writeUInt32LE(4);
+            if (n.getsockopt(fd, n.platform === 'darwin' ? 0xffff : 1, n.platform === 'darwin' ? 0x1007 : 4, value, length) !== 0)
+                failure('SO_ERROR');
+            if (value.readInt32LE() !== 0)
+                throw new DaemonSecurityError('unavailable', 'Unix connection failed.');
+            try {
+                if (peerUid(fd) !== uid)
+                    throw new DaemonSecurityError('forbidden', 'Unix server belongs to another OS account.');
+                return new Socket({ fd, readable: true, writable: true });
+            }
+            catch (error) {
+                if (!(error instanceof DaemonSecurityError) || error.code !== 'native_failure')
+                    throw error;
+                if (performance.now() >= deadline)
+                    throw new DaemonSecurityError('unavailable', 'Unix connection timed out.');
+                await new Promise(resolve => setTimeout(resolve, 10));
+            }
+        }
+    }
+    catch (error) {
+        closeSync(fd);
+        throw error;
+    }
+}
+//# sourceMappingURL=native-ownership.js.map

package/dist/daemon/native-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-ownership.js","sourceRoot":"","sources":["../../src/daemon/native-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACvB;IAArB,YAAqB,IAAY,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,sLAAsL,CAAC,CAAC;IAC5O,CAAC;IACD,IAAI,OAAO,CAAC,MAAO,EAAE,KAAK,OAAO,CAAC,OAAQ,EAAE,IAAI,OAAO,CAAC,MAAO,EAAE,KAAK,OAAO,CAAC,OAAQ,EAAE,EAAE,CAAC;QACzF,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,IAAI,GAA2C,CAAC;AAChD,SAAS,OAAO;IACd,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,IAAI,IAAmC,CAAC;IACxC,IAAI,CAAC;QAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAC9F,MAAM,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,yGAAyG,CAAC,CAAC;IAAC,CAAC;IACvK,OAAO;QACL,QAAQ;QACR,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC;QACpD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,gDAAgD,CAAC;QACnE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,wDAAwD,CAAC;QACzE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC;QACpD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,2DAA2D,CAAC;QAC/E,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC;QACvD,UAAU,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7H,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,0EAA0E,CAAC;QACjG,aAAa,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE,CAAC;KACnL,CAAC;AACJ,CAAC;AACD,SAAS,MAAM,KAAK,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/C,SAAS,OAAO,CAAC,SAAiB;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,gBAAgB,CAAC;IAC5B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY;YAAE,IAAI,GAAG,gBAAgB,CAAC;aAC9D,IAAI,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM;YAAE,IAAI,GAAG,aAAa,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,GAAG,SAAS,kBAAkB,KAAK,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1G,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,KAAa,OAAO,wBAAwB,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzG,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,MAAM,GAAW,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1H,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACtD,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,gCAAgC,eAAe,EAAE,uCAAuC,CAAC,CAAC;IAC9I,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,MAAM,EAAE,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;;QAC5E,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AACpH,CAAC;AACD,SAAS,UAAU;IACjB,MAAM,EAAE,GAAW,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,SAAS,GAAG,KAAK;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,MAAM,GAAW,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC/C,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3I,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACvG,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG;oBAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;gBAClH,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;oBAAE,MAAM,KAAK,CAAC;gBAC5F,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;gBAC9G,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACjD,CAAC"}

package/dist/daemon/operational-log.d.ts

@@ -0,0 +1,23 @@
+import { type HostBlocked, type OperationParams, type OperationResult } from '@felan-ai/session-protocol';
+import { BoundedDaemonLogs } from './supervisor.js';
+declare const messages: {
+    readonly started: "Daemon is ready.";
+    readonly stop_requested: "Explicit daemon stop requested.";
+    readonly restart_requested: "Explicit daemon restart requested.";
+    readonly drain_blocked: "Daemon shutdown is blocked; ownership remains held.";
+    readonly drain_cancelled: "Daemon drain did not finish because work is still active; the daemon keeps running. Use force to interrupt it.";
+    readonly releasing: "Owned work settled; releasing daemon ownership.";
+    readonly ownership_lost: "Daemon ownership was lost; admission is fenced.";
+    readonly startup_failed: "Daemon startup could not complete.";
+    readonly legacy_warmup_failed: "Pre-daemon session titles could not be read in the background; listings read them on request.";
+};
+export declare class DaemonOperationalLog {
+    private readonly sink;
+    private readonly now;
+    constructor(sink: BoundedDaemonLogs, now?: () => number);
+    record(event: keyof typeof messages): void;
+    blocked(blocked: HostBlocked): void;
+    page(input: OperationParams<'host.logs'>): OperationResult<'host.logs'>;
+}
+export {};
+//# sourceMappingURL=operational-log.d.ts.map

package/dist/daemon/operational-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operational-log.d.ts","sourceRoot":"","sources":["../../src/daemon/operational-log.ts"],"names":[],"mappings":"AACA,OAAO,EAAwD,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAEhK,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,QAAA,MAAM,QAAQ;;;;;;;;;;CAUJ,CAAC;AAIX,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAqB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAA7C,IAAI,EAAE,iBAAiB,EAAmB,GAAG,GAAE,MAAM,MAAiB;IAEnG,MAAM,CAAC,KAAK,EAAE,MAAM,OAAO,QAAQ,GAAG,IAAI;IAM1C,OAAO,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAKnC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,WAAW,CAAC,GAAG,eAAe,CAAC,WAAW,CAAC;CA2BxE"}

package/dist/daemon/operational-log.js

@@ -0,0 +1,79 @@
+import { createHash } from 'node:crypto';
+import { DiagnosticTextSchema, PageRequestSchema, parseSchema } from '@felan-ai/session-protocol';
+import { commandError } from './commands.js';
+import { BoundedDaemonLogs } from './supervisor.js';
+import { shutdownText } from './shutdown-error.js';
+const messages = {
+    started: 'Daemon is ready.',
+    stop_requested: 'Explicit daemon stop requested.',
+    restart_requested: 'Explicit daemon restart requested.',
+    drain_blocked: 'Daemon shutdown is blocked; ownership remains held.',
+    drain_cancelled: 'Daemon drain did not finish because work is still active; the daemon keeps running. Use force to interrupt it.',
+    releasing: 'Owned work settled; releasing daemon ownership.',
+    ownership_lost: 'Daemon ownership was lost; admission is fenced.',
+    startup_failed: 'Daemon startup could not complete.',
+    legacy_warmup_failed: 'Pre-daemon session titles could not be read in the background; listings read them on request.',
+};
+const blockedPrefix = 'Daemon shutdown failed at ';
+export class DaemonOperationalLog {
+    sink;
+    now;
+    constructor(sink, now = Date.now) {
+        this.sink = sink;
+        this.now = now;
+    }
+    record(event) {
+        if (!Object.hasOwn(messages, event))
+            throw new Error('Unknown operational event.');
+        const entry = { timestamp: this.now(), level: ['drain_blocked', 'ownership_lost', 'startup_failed'].includes(event) ? 'error' : event === 'drain_cancelled' || event === 'legacy_warmup_failed' ? 'warning' : 'info', message: messages[event] };
+        this.sink.write('stdout', JSON.stringify(entry));
+    }
+    blocked(blocked) {
+        const message = shutdownText(`${blockedPrefix}${blocked.step ?? 'settlement'}${blocked.session ? ` (session ${blocked.session})` : ''}: ${blocked.message}`, 2000);
+        this.sink.write('stdout', JSON.stringify({ timestamp: this.now(), level: 'error', message }));
+    }
+    page(input) {
+        const params = parseSchema(PageRequestSchema, input);
+        const known = new Set(Object.values(messages));
+        const entries = [];
+        for (const line of this.sink.read('stdout').split('\n')) {
+            let value;
+            try {
+                value = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            if (value === null || typeof value !== 'object')
+                continue;
+            const row = value;
+            if (!Number.isSafeInteger(row.timestamp) || row.timestamp < 0 || !['info', 'warning', 'error'].includes(row.level ?? ''))
+                continue;
+            if (!known.has(row.message ?? '')) {
+                if (row.level !== 'error' || typeof row.message !== 'string' || !row.message.startsWith(blockedPrefix) || row.message.length > 2000)
+                    continue;
+                try {
+                    parseSchema(DiagnosticTextSchema, row.message);
+                }
+                catch {
+                    continue;
+                }
+                if (shutdownText(row.message, 2000) !== row.message)
+                    continue;
+            }
+            entries.push({ timestamp: row.timestamp, level: row.level, message: row.message });
+        }
+        const generation = createHash('sha256').update(JSON.stringify(entries)).digest('hex');
+        let offset = 0;
+        if (params.cursor) {
+            const match = /^([a-f0-9]{64}):(\d{1,6})$/.exec(params.cursor);
+            if (!match || match[1] !== generation || Number(match[2]) > entries.length)
+                throw commandError('resync_required');
+            offset = Number(match[2]);
+        }
+        const result = entries.slice(offset, offset + (params.limit ?? 64));
+        const next = offset + result.length;
+        return { entries: result, ...(next < entries.length ? { cursor: `${generation}:${next}` } : {}) };
+    }
+}
+//# sourceMappingURL=operational-log.js.map

package/dist/daemon/operational-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operational-log.js","sourceRoot":"","sources":["../../src/daemon/operational-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,WAAW,EAAgE,MAAM,4BAA4B,CAAC;AAChK,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,kBAAkB;IAC3B,cAAc,EAAE,iCAAiC;IACjD,iBAAiB,EAAE,oCAAoC;IACvD,aAAa,EAAE,qDAAqD;IACpE,eAAe,EAAE,gHAAgH;IACjI,SAAS,EAAE,iDAAiD;IAC5D,cAAc,EAAE,iDAAiD;IACjE,cAAc,EAAE,oCAAoC;IACpD,oBAAoB,EAAE,+FAA+F;CAC7G,CAAC;AAEX,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAEnD,MAAM,OAAO,oBAAoB;IACF;IAA0C;IAAvE,YAA6B,IAAuB,EAAmB,MAAoB,IAAI,CAAC,GAAG;QAAtE,SAAI,GAAJ,IAAI,CAAmB;QAAmB,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAEvG,MAAM,CAAC,KAA4B;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnF,MAAM,KAAK,GAAU,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxP,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,OAAoB;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QACnK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAkB,CAAC,CAAC,CAAC;IAChH,CAAC;IAED,IAAI,CAAC,KAAmC;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAY,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,IAAI,KAAc,CAAC;YAAC,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAC1D,MAAM,GAAG,GAAG,KAAuB,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAU,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAAE,SAAS;YACpI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBAClC,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI;oBAAE,SAAS;gBAC9I,IAAI,CAAC;oBAAC,WAAW,CAAC,oBAAoB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC3E,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO;oBAAE,SAAS;YAChE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtF,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM;gBAAE,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;YAClH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpG,CAAC;CACF"}

package/dist/daemon/ownership.d.ts

@@ -0,0 +1,35 @@
+import type { DaemonIdentity } from '@felan-ai/session-protocol';
+import { DaemonSecurityError } from './native-ownership.js';
+import { type DaemonTarget, type PathIdentity, type ResolvedDaemonTarget } from './target.js';
+export declare function namespaceLockName(target: ResolvedDaemonTarget): string;
+export declare class DaemonOwnership {
+    readonly instanceId: string;
+    private readonly fds;
+    private readonly pins;
+    private readonly lockedRoots;
+    readonly identity: DaemonIdentity;
+    private lost;
+    private released;
+    private releasePromise;
+    private timer;
+    private listeners;
+    private extraPins;
+    private current;
+    private readonly owning;
+    private refreshedAt;
+    constructor(target: ResolvedDaemonTarget, instanceId: string, fds: number[], pins: readonly PathIdentity[], lockedRoots?: string[]);
+    get target(): ResolvedDaemonTarget;
+    assertCurrent(): void;
+    /** Wall-clock throttling refreshes on the first tick after sleep, when reapers may run immediately. */
+    private refreshTimestamps;
+    watchPath(path: string): () => void;
+    assertOwnsPath(path: string): string;
+    /** Adds a session directory to the owned stores, locking it against other daemons. */
+    ownRoot(directory: string): Promise<void>;
+    private lockRoot;
+    onLost(listener: (error: DaemonSecurityError) => void): () => void;
+    release(): Promise<void>;
+    private releaseOnce;
+}
+export declare function acquireDaemonOwnership(input: DaemonTarget): Promise<DaemonOwnership>;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/daemon/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../../src/daemon/ownership.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAiB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAoP,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAkGhV,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAEtE;AA+BD,qBAAa,eAAe;IAYgB,QAAQ,CAAC,UAAU,EAAE,MAAM;IAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAY,OAAO,CAAC,QAAQ,CAAC,IAAI;IAC1H,OAAO,CAAC,QAAQ,CAAC,WAAW;IAZ9B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,OAAO,CAAC,IAAI,CAAkC;IAC9C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,SAAS,CAAmD;IACpE,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,WAAW,CAAK;gBAEZ,MAAM,EAAE,oBAAoB,EAAW,UAAU,EAAE,MAAM,EAAmB,GAAG,EAAE,MAAM,EAAE,EAAmB,IAAI,EAAE,SAAS,YAAY,EAAE,EAClI,WAAW,GAAE,MAAM,EAAwB;IAO9D,IAAI,MAAM,IAAI,oBAAoB,CAAyB;IAC3D,aAAa,IAAI,IAAI;IAcrB,uGAAuG;IACvG,OAAO,CAAC,iBAAiB;IAQzB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,IAAI;IAInC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAOpC,sFAAsF;IACtF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAW3B,QAAQ;IAoBtB,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAAG,MAAM,IAAI;IAKlE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YACV,WAAW;CAgB1B;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAoC1F"}