@geohar/un-bien 0.7.0

package/dist/daemon/rpc_child.js

@@ -0,0 +1,419 @@
+import { execFileSync, spawn } from "node:child_process";
+import { EventEmitter } from "node:events";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { defaultAgentName, loadLocalConfig, } from "../session/local_config.js";
+export const EXIT_DAEMON_FRESH_SESSION = 42;
+/** Windows extensions `spawn` (without `shell`) can actually launch, in
+ *  preference order: native `.exe` first, then the `.cmd`/`.bat` shims (run via
+ *  cmd.exe). An extensionless `pi` is a Unix shell script Node CANNOT spawn on
+ *  Windows — picking it yields `spawn … ENOENT` and the daemon shows "crashed". */
+const WIN_EXECUTABLE_EXTS = [".exe", ".cmd", ".bat", ".com"];
+/**
+ * Resolve the `pi` executable for `spawn` (plan/40, decision C). On Windows a
+ * bare `pi` is actually `pi.cmd`/`pi.ps1`, and `spawn` won't find it without an
+ * extension → resolve the real path via `where` (rather than `shell:true`,
+ * which risks shell injection). An explicit path or an already-suffixed name is
+ * used as-is. POSIX returns the name unchanged. Best-effort: if `where` fails,
+ * fall back to the bare name (spawn will surface ENOENT honestly).
+ *
+ * `where` lists every match in PATH order, which on pi-node installs puts the
+ * extensionless `pi` (a shell script) BEFORE `pi.cmd`. Naively taking the first
+ * line spawns the unrunnable script → ENOENT → "crashed". So we prefer a result
+ * with a real Windows executable extension and only fall back to the first line.
+ */
+export function resolvePiBin(piBin, plat = process.platform) {
+    if (plat !== "win32")
+        return piBin;
+    if (piBin.includes("\\") ||
+        piBin.includes("/") ||
+        /\.[a-z0-9]+$/i.test(piBin))
+        return piBin;
+    try {
+        const out = execFileSync("where", [piBin], { encoding: "utf8" });
+        const lines = out
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter(Boolean);
+        const runnable = lines.find((l) => WIN_EXECUTABLE_EXTS.some((ext) => l.toLowerCase().endsWith(ext)));
+        const chosen = runnable ?? lines[0];
+        if (chosen)
+            return chosen;
+    }
+    catch {
+        /* `where` unavailable or `pi` not found — fall back to the bare name */
+    }
+    return piBin;
+}
+/**
+ * Resolve `pi` to a directly-spawnable target (plan/40). On Windows `pi` is an
+ * npm `.cmd` shim, which modern Node refuses to `spawn` without `shell:true`
+ * (EINVAL, post CVE-2024-27980). Wrapping it in `cmd.exe` would (a) add a layer
+ * that orphans the real `node` on kill and (b) complicate stdio — both fatal for
+ * a long-lived RPC daemon the supervisor must stop/restart cleanly. Instead we
+ * parse the shim to recover the underlying `node <cli.js>` and spawn that
+ * directly: one process, clean signals, clean stdio.
+ *
+ * Falls back to the bare resolved path when not a parseable shim (e.g. a real
+ * `pi.exe`, or POSIX) so `spawn` surfaces any real error honestly.
+ */
+export function resolvePiSpawn(piBin, plat = process.platform, nodeExe = process.execPath) {
+    const resolved = resolvePiBin(piBin, plat);
+    if (plat !== "win32")
+        return { command: resolved, prefixArgs: [] };
+    if (/\.(cmd|bat)$/i.test(resolved)) {
+        const target = _npmShimTarget(resolved);
+        if (target)
+            return { command: nodeExe, prefixArgs: [target] };
+    }
+    return { command: resolved, prefixArgs: [] };
+}
+/**
+ * Extract the JS entry an npm `.cmd` shim launches. npm shims invoke
+ * `"%_prog%"  "%dp0%\<relative>\entry.js" %*`; we recover `<dir>\<relative>\entry.js`
+ * (dir = the shim's own folder, i.e. `%dp0%`). Returns null when the shim
+ * doesn't match the expected shape or the target is missing.
+ */
+export function _npmShimTarget(cmdPath) {
+    let content;
+    try {
+        content = readFileSync(cmdPath, "utf8");
+    }
+    catch {
+        return null;
+    }
+    const m = content.match(/"%dp0%\\([^"]+\.[cm]?js)"/i);
+    if (!m)
+        return null;
+    const target = join(dirname(cmdPath), m[1]);
+    return existsSync(target) ? target : null;
+}
+/**
+ * Maps an RPC stdout line to a busy-state transition: `message_start` → true
+ * (a message is streaming), `message_end` → false. Other lines → null (no
+ * change). Pure + exported for tests.
+ *
+ * NOTE (plan/39 detail 1): the Pi RPC stream has NO turn-level event — only
+ * per-message start/end (and `response{command:"prompt"}` is emitted at
+ * PREFLIGHT, i.e. turn START, not end). So this passive flag reflects
+ * "a message is being produced right now"; the authoritative turn-busy signal
+ * is `get_state.isStreaming` (see `RpcChild.refreshBusy`).
+ */
+export function busyTransition(line) {
+    let obj;
+    try {
+        obj = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    const t = obj?.type;
+    if (t === "message_start")
+        return true;
+    if (t === "message_end")
+        return false;
+    return null;
+}
+/** Parses a `get_state` RPC response line, returning its id + isStreaming. */
+function parseGetStateResponse(line) {
+    let obj;
+    try {
+        obj = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    const o = obj;
+    if (o.type !== "response" || o.command !== "get_state")
+        return null;
+    const data = o.data;
+    return {
+        id: typeof o.id === "string" ? o.id : undefined,
+        isStreaming: typeof data?.isStreaming === "boolean" ? data.isStreaming : undefined,
+    };
+}
+/**
+ * CLI args for the daemon's `pi --mode rpc` child.
+ *
+ * `--continue` is the key bit: it resumes the **most recent** session for the
+ * cwd (`SessionManager.continueRecent`, non-interactive — unlike `--resume`
+ * which opens a picker). Without it every supervisor restart spun up a brand
+ * new session file, piling up thousands of JSONLs per folder. With it, a
+ * restart REUSES the one session; the app's `/new` (session_new) still rolls
+ * it over to a fresh one, which the next restart then continues. First boot
+ * (no prior session) just creates the first one.
+ *
+ * `--name <sessionName>`, when given, pins the session's display name to the
+ * daemon's identity (its `agent_name`) so every restart shows up under the
+ * same stable name in the picker/app instead of an auto-generated one. The
+ * daemon's name is set at registration (`unbien create <cwd> --name "…"`).
+ * Omitted when no name resolves, so the arg list stays minimal.
+ *
+ * `--approve` is mandatory for a daemon (pi ≥0.79 project trust): RPC mode is
+ * non-interactive, so without an override Pi resolves an untrusted project
+ * folder (any folder with `.pi/` or CLAUDE.md/AGENTS.md) to NOT trusted and
+ * silently skips its `.pi/settings.json` (model/provider/keys), instructions,
+ * resources and project extensions — the daemon then comes up with no model
+ * and fails on the first turn. The operator already authorized this folder by
+ * registering/launching a daemon in it, so `--approve` (trust-for-this-run) is
+ * the correct non-interactive stance. (Does NOT affect the separate "extension
+ * loaded twice" conflict, which comes from the extension being BOTH installed
+ * in ~/.pi/agent/extensions or cwd/.pi/extensions AND passed via `-e`.)
+ */
+export function rpcSpawnArgs(extensionPath, sessionName, useContinue = true) {
+    return [
+        "--mode",
+        "rpc",
+        "--approve",
+        ...(useContinue ? ["--continue"] : []),
+        ...(sessionName ? ["--name", sessionName] : []),
+        "-e",
+        extensionPath,
+    ];
+}
+export class RpcChild extends EventEmitter {
+    opts;
+    child = null;
+    _state = "stopped";
+    _startedAt = null;
+    _restartCount = 0;
+    /** True while a deliberate `stop()` is in flight. The process dies by
+     *  signal (SIGTERM/SIGKILL), which would otherwise look like a crash and
+     *  trip the supervisor's auto-restart — re-spawning a daemon the operator
+     *  just stopped/removed. Gating `isCrash` on this makes a deliberate stop a
+     *  clean exit (no restart). Reset on every `spawn()`. */
+    _stopping = false;
+    /** Next spawn should create a fresh session instead of --continue. */
+    forceFreshSessionOnNextSpawn = false;
+    /** Accumulates partial stdout lines while waiting for `\n`. */
+    stdoutBuf = "";
+    /** Passive busy flag derived from the RPC stream (message_start/end). Hint
+     *  only; `refreshBusy` syncs it authoritatively via get_state.isStreaming. */
+    _busy = false;
+    /** In-flight `get_state` requests, keyed by request id. */
+    _statePending = new Map();
+    constructor(opts) {
+        super();
+        this.opts = opts;
+    }
+    get state() {
+        return this._state;
+    }
+    /** Passive busy hint from the stream. Prefer `refreshBusy()` for an
+     *  authoritative check before acting on it (cron skip_if_busy). */
+    get isBusy() {
+        return this._busy;
+    }
+    get pid() {
+        return this.child?.pid;
+    }
+    get restartCount() {
+        return this._restartCount;
+    }
+    get uptimeMs() {
+        return this._startedAt === null ? undefined : Date.now() - this._startedAt;
+    }
+    /**
+     * Spawn the child process. Idempotent for the same instance: a second
+     * call while already running is a no-op.
+     */
+    spawn() {
+        if (this.child)
+            return;
+        this._stopping = false; // fresh start — a later signal IS a real crash
+        this._busy = false;
+        this._state = "starting";
+        const piTarget = resolvePiSpawn(this.opts.piBin ?? "pi");
+        // Name the (single) daemon session after the daemon's configured identity,
+        // so it shows up stably instead of an auto-generated name on each restart.
+        // Prefer the supervisor-injected config; fall back to the on-disk file.
+        const cfg = this.opts.config ?? loadLocalConfig(this.opts.cwd);
+        const sessionName = cfg.agent_name ?? defaultAgentName(this.opts.cwd);
+        const useContinue = !this.forceFreshSessionOnNextSpawn;
+        this.forceFreshSessionOnNextSpawn = false;
+        // On Windows `prefixArgs` carries pi's cli.js (we spawn node directly); on
+        // POSIX it's empty and `command` is `pi` itself.
+        const args = [
+            ...piTarget.prefixArgs,
+            ...rpcSpawnArgs(this.opts.extensionPath, sessionName, useContinue),
+        ];
+        const env = {
+            ...process.env,
+            ...this.opts.env,
+            // Mandatory daemon marker — `_cmdRoot` in index.ts can use this to
+            // bail early if local config is missing (no wizard in RPC mode).
+            UNBIEN_DAEMON: "1",
+            // Inject the daemon config inline so the child needs no config file.
+            ...(this.opts.config
+                ? { UNBIEN_DIRECT_CONFIG: JSON.stringify(this.opts.config) }
+                : {}),
+        };
+        const child = spawn(piTarget.command, args, {
+            cwd: this.opts.cwd,
+            env,
+            stdio: ["pipe", "pipe", "pipe"],
+            // Windows: suppress any console window the child might allocate. With the
+            // node+cli.js path (resolvePiSpawn) there's no cmd.exe layer, but keep this
+            // as belt-and-suspenders alongside the supervisor's hidden wscript launcher
+            // (service-templates/task-launcher.vbs.template). No-op on POSIX.
+            windowsHide: process.platform === "win32",
+        });
+        this.child = child;
+        this._startedAt = Date.now();
+        this._state = "running";
+        child.stdout?.on("data", (chunk) => this._onStdout(chunk));
+        child.stderr?.on("data", (chunk) => {
+            // Forward stderr to our own stderr so `journalctl --user -u unbien-supervisord`
+            // sees daemon logs (with cwd prefix for disambiguation).
+            process.stderr.write(`[${this.opts.cwd}] ${chunk.toString()}`);
+        });
+        child.on("exit", (code, signal) => this._onExit(code, signal));
+        child.on("error", (err) => {
+            // spawn() itself failed (e.g. `pi` binary not found).
+            this._state = "crashed";
+            process.stderr.write(`[unbien-supervisord] spawn failed for ${this.opts.cwd}: ${String(err)}\n`);
+            this.emit("exit", { code: null, signal: null, isCrash: true });
+        });
+        this.emit("spawn", { pid: child.pid });
+    }
+    /**
+     * Sends a Pi RPC `prompt` command to the child's stdin. Fire-and-forget
+     * — we don't wait for the response (response would be the success ack;
+     * the actual agent output streams via the relay/UDS, not back through
+     * stdout).
+     *
+     * Returns false if the child isn't running (caller decides how to report).
+     */
+    sendPrompt(text, requestId) {
+        if (!this.child || !this.child.stdin || this._state !== "running")
+            return false;
+        const cmd = {
+            id: requestId ?? `sv-${Date.now()}`,
+            type: "prompt",
+            message: text,
+        };
+        try {
+            this.child.stdin.write(JSON.stringify(cmd) + "\n");
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Asks the child to exit gracefully. Sends SIGTERM; if the child doesn't
+     * exit within `timeoutMs`, escalates to SIGKILL. Resolves when the
+     * `exit` event fires.
+     */
+    async stop(timeoutMs = 5000) {
+        if (!this.child)
+            return;
+        this._stopping = true; // deliberate — the upcoming signal-exit is NOT a crash
+        const child = this.child;
+        return new Promise((resolve) => {
+            const onExit = () => {
+                resolve();
+            };
+            this.once("exit", onExit);
+            try {
+                child.kill("SIGTERM");
+            }
+            catch {
+                /* already dead */
+            }
+            const t = setTimeout(() => {
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch {
+                    /* race — already dead */
+                }
+            }, timeoutMs);
+            this.once("exit", () => clearTimeout(t));
+        });
+    }
+    _onStdout(chunk) {
+        this.stdoutBuf += chunk.toString();
+        let nl;
+        while ((nl = this.stdoutBuf.indexOf("\n")) >= 0) {
+            const line = this.stdoutBuf.slice(0, nl);
+            this.stdoutBuf = this.stdoutBuf.slice(nl + 1);
+            if (!line.trim())
+                continue;
+            this._handleStdoutLine(line);
+        }
+    }
+    _handleStdoutLine(line) {
+        const t = busyTransition(line);
+        if (t !== null)
+            this._busy = t;
+        const gs = parseGetStateResponse(line);
+        if (gs && gs.id) {
+            const pending = this._statePending.get(gs.id);
+            if (pending) {
+                clearTimeout(pending.timer);
+                this._statePending.delete(gs.id);
+                if (typeof gs.isStreaming === "boolean")
+                    this._busy = gs.isStreaming;
+                pending.resolve(this._busy);
+            }
+        }
+        this.emit("stdout", line);
+    }
+    /**
+     * Authoritative busy check: queries the child's `get_state` and syncs
+     * `_busy` to `isStreaming`. Resolves the passive flag on timeout (no
+     * response) or when the child isn't running. Used by the cron `skip_if_busy`
+     * gate, where a false "not busy" would pile a prompt onto a live turn.
+     */
+    async refreshBusy(timeoutMs = 1500) {
+        if (this._state !== "running" || !this.child?.stdin)
+            return this._busy;
+        const id = `gs-${Date.now()}-${Math.round(Math.random() * 1e6)}`;
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                this._statePending.delete(id);
+                resolve(this._busy);
+            }, timeoutMs);
+            this._statePending.set(id, { resolve, timer });
+            try {
+                this.child.stdin.write(JSON.stringify({ id, type: "get_state" }) + "\n");
+            }
+            catch {
+                clearTimeout(timer);
+                this._statePending.delete(id);
+                resolve(this._busy);
+            }
+        });
+    }
+    /** Test-only: feed a raw stdout line through the same handler. */
+    _ingestStdoutForTest(line) {
+        this._handleStdoutLine(line);
+    }
+    _onExit(code, signal) {
+        // Daemon app-action `/new`: child exits with a private code, supervisor
+        // restarts it, and the next spawn omits --continue once to create a fresh
+        // session. Later restarts go back to --continue.
+        if (code === EXIT_DAEMON_FRESH_SESSION)
+            this.forceFreshSessionOnNextSpawn = true;
+        // A deliberate stop() kills by signal — not a crash, so the supervisor
+        // must NOT auto-restart it. Only an UNexpected exit counts as a crash.
+        const isCrash = !this._stopping && (code !== 0 || signal !== null);
+        this._state = isCrash ? "crashed" : "stopped";
+        this.child = null;
+        this._startedAt = null;
+        this._busy = false;
+        for (const p of this._statePending.values()) {
+            clearTimeout(p.timer);
+            p.resolve(false);
+        }
+        this._statePending.clear();
+        this.emit("exit", { code, signal, isCrash });
+    }
+    /** Bumps the restart counter — called by the supervisor when it
+     *  decides to re-spawn after a crash. Exposed so tests can drive it. */
+    noteRestart() {
+        this._restartCount += 1;
+    }
+}
+//# sourceMappingURL=rpc_child.js.map

package/dist/daemon/rpc_child.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc_child.js","sourceRoot":"","sources":["../../src/daemon/rpc_child.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,gBAAgB,EAChB,eAAe,GAEhB,MAAM,4BAA4B,CAAC;AAiDpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;;mFAGmF;AACnF,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,OAAwB,OAAO,CAAC,QAAQ;IAExC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,IACE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAE3B,OAAO,KAAK,CAAC;IACf,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,GAAG;aACd,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACjE,CAAC;QACF,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,OAAwB,OAAO,CAAC,QAAQ,EACxC,UAAkB,OAAO,CAAC,QAAQ;IAElC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACnE,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAI,GAAiC,EAAE,IAAI,CAAC;IACnD,IAAI,CAAC,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,qBAAqB,CAC5B,IAAY;IAEZ,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,GAKT,CAAC;IACF,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,IAAI,GAAG,CAAC,CAAC,IAA6C,CAAC;IAC7D,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC/C,WAAW,EACT,OAAO,IAAI,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,YAAY,CAC1B,aAAqB,EACrB,WAAoB,EACpB,WAAW,GAAG,IAAI;IAElB,OAAO;QACL,QAAQ;QACR,KAAK;QACL,WAAW;QACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,IAAI;QACJ,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,QAAS,SAAQ,YAAY;IAwBX;IAvBrB,KAAK,GAAwB,IAAI,CAAC;IAClC,MAAM,GAAgB,SAAS,CAAC;IAChC,UAAU,GAAkB,IAAI,CAAC;IACjC,aAAa,GAAG,CAAC,CAAC;IAC1B;;;;6DAIyD;IACjD,SAAS,GAAG,KAAK,CAAC;IAC1B,sEAAsE;IAC9D,4BAA4B,GAAG,KAAK,CAAC;IAC7C,+DAA+D;IACvD,SAAS,GAAG,EAAE,CAAC;IACvB;kFAC8E;IACtE,KAAK,GAAG,KAAK,CAAC;IACtB,2DAA2D;IAC1C,aAAa,GAAG,IAAI,GAAG,EAGrC,CAAC;IAEJ,YAA6B,IAAqB;QAChD,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAAiB;IAElD,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD;uEACmE;IACnE,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;IACzB,CAAC;IACD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,+CAA+C;QACvE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QAEzB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;QACzD,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC;QACvD,IAAI,CAAC,4BAA4B,GAAG,KAAK,CAAC;QAC1C,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,IAAI,GAAG;YACX,GAAG,QAAQ,CAAC,UAAU;YACtB,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC;SACnE,CAAC;QACF,MAAM,GAAG,GAAsB;YAC7B,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG;YAChB,mEAAmE;YACnE,iEAAiE;YACjE,aAAa,EAAE,GAAG;YAClB,qEAAqE;YACrE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAClB,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE;YAC1C,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,0EAA0E;YAC1E,4EAA4E;YAC5E,4EAA4E;YAC5E,kEAAkE;YAClE,WAAW,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAExB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,gFAAgF;YAChF,yDAAyD;YACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,sDAAsD;YACtD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAC3E,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAY,EAAE,SAAkB;QACzC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAC/D,OAAO,KAAK,CAAC;QACf,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,SAAS,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;SACd,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,uDAAuD;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjC,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC;gBACrE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QACvE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,IAAI,CAAC,KAAM,CAAC,KAAM,CAAC,KAAK,CACtB,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,CACjD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,oBAAoB,CAAC,IAAY;QAC/B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEO,OAAO,CAAC,IAAmB,EAAE,MAA6B;QAChE,wEAAwE;QACxE,0EAA0E;QAC1E,iDAAiD;QACjD,IAAI,IAAI,KAAK,yBAAyB;YACpC,IAAI,CAAC,4BAA4B,GAAG,IAAI,CAAC;QAC3C,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAA8B,CAAC,CAAC;IAC3E,CAAC;IAED;4EACwE;IACxE,WAAW;QACT,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/daemon/supervisor.d.ts

@@ -0,0 +1,93 @@
+import { type CronResult } from "./cron_log.js";
+/** Thrown by `start()` when another live supervisor already holds the UDS.
+ *  Prevents a second supervisor from orphaning the first's children. */
+export declare class SupervisorAlreadyRunningError extends Error {
+    readonly sockPath: string;
+    constructor(sockPath: string);
+}
+export interface SupervisorOptions {
+    /** Absolute path to un-bien's dist/index.js — passed as -e to each
+     *  spawned `pi`. Defaults to the location relative to where this file
+     *  is bundled (so the supervisor finds itself). */
+    extensionPath: string;
+    /** Override the `pi` binary path. Defaults to "pi" on PATH. */
+    piBin?: string;
+}
+/** Pure decision for `fireJob` (plan/39) — picks the action from the daemon's
+ *  liveness/busy state + the job's flags. Tested in isolation for all 4 ramos. */
+export type FireAction = "send" | "wake_and_send" | "skip_down" | "skip_busy";
+export declare function decideFireAction(o: {
+    running: boolean;
+    busy: boolean;
+    wake: boolean;
+    skipIfBusy: boolean;
+}): FireAction;
+export declare class Supervisor {
+    private readonly opts;
+    private server;
+    private readonly children;
+    /** Live croner schedules, keyed by cron job id (plan/39). */
+    private readonly cronJobs;
+    private shuttingDown;
+    constructor(opts: SupervisorOptions);
+    /** Bind the control UDS + spawn all registered daemons. */
+    start(): Promise<void>;
+    /** Graceful shutdown: stop all children, close UDS. */
+    stop(): Promise<void>;
+    private _mkdirParent;
+    private _bindUds;
+    private _onConnection;
+    private _handleRequest;
+    private _listInfo;
+    private _opStartAll;
+    /** Spawn a single registered daemon by id. Idempotent: a daemon already
+     *  running returns `started: false`. Unknown id → ok:false. This is what
+     *  `/unbien create` calls so a freshly-registered folder boots its Pi
+     *  immediately instead of waiting for the next supervisor restart. */
+    private _opStart;
+    private _opStopAll;
+    /** Stop a single registered daemon by id. Idempotent: a daemon that isn't
+     *  running returns `stopped: false`. Unknown id → ok:false. Mirrors the
+     *  per-id semantics of `_opStart`. Cancels any pending restart backoff so a
+     *  deliberate stop stays stopped. */
+    private _opStop;
+    /** Restart a single registered daemon by id (stop-if-running, then spawn).
+     *  Unknown id → ok:false. Resets the crash backoff. */
+    private _opRestart;
+    private _opRestartAll;
+    private _opSend;
+    private _opRegister;
+    private _opUnregister;
+    private _opCronAdd;
+    private _opCronList;
+    private _opCronRemove;
+    private _opCronEnable;
+    private _opCronRun;
+    private _opCronLog;
+    private _jobView;
+    /** Rebuild all live `Cron` schedules from the registry (enabled jobs only).
+     *  Called on start; mutations reconcile incrementally via _scheduleCron/_stopCron. */
+    private _reconcileCron;
+    private _scheduleCron;
+    private _stopCron;
+    /** Detail 2: on start, run a catchup job once if its previous scheduled run
+     *  was missed while the supervisor was down. Opt-in (`catchup`), at most 1×. */
+    private _runCatchup;
+    /**
+     * Fires a cron job: resolves the daemon, decides the action (decideFireAction),
+     * acts, and records the outcome — ALWAYS one `last_status` update + one JSONL
+     * line, for both fires and skips. Returns the result. `manual` bypasses the
+     * disabled-skip (used by `cron run` + catchup).
+     */
+    fireJob(jobId: string, opts?: {
+        manual?: boolean;
+    }): Promise<CronResult | "missing">;
+    private _spawnAllFromRegistry;
+    private _spawnEntry;
+    private _onChildExit;
+}
+/** Test helper: derive id from cwd without going through the registry. */
+export declare function _idForCwdForTest(cwd: string): string;
+/** Exported for the bin/supervisord entry + tests to know where the
+ *  supervisor will bind. */
+export declare function getSupervisorSockPath(): string;