@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/trust-manager.js

@@ -0,0 +1,220 @@
+import { Buffer } from "node:buffer";
+import { existsSync, lstatSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import lockfile from "proper-lockfile";
+import { CONFIG_DIR_NAME } from "../config.js";
+import { writeDurableAtomicFileSync } from "../utils/durable-atomic-write.js";
+import { canonicalizePath, resolvePath } from "../utils/paths.js";
+import { ensurePrivateDirectorySync, hardenPrivateRegularFileSync } from "../utils/private-files.js";
+const MAX_TRUST_FILE_BYTES = 4 * 1024 * 1024;
+const TRUST_REQUIRING_PROJECT_CONFIG_RESOURCES = [
+    "settings.json",
+    "mcp.json",
+    "extensions",
+    "skills",
+    "prompts",
+    "themes",
+    "SYSTEM.md",
+    "APPEND_SYSTEM.md",
+];
+function normalizeCwd(cwd) {
+    return canonicalizePath(resolvePath(cwd));
+}
+function findNearestTrustEntry(data, cwd) {
+    let currentDir = normalizeCwd(cwd);
+    while (true) {
+        const value = data[currentDir];
+        if (value === true || value === false) {
+            return { path: currentDir, decision: value };
+        }
+        const parentDir = dirname(currentDir);
+        if (parentDir === currentDir) {
+            return null;
+        }
+        currentDir = parentDir;
+    }
+}
+export function getProjectTrustParentPath(cwd) {
+    const trustPath = normalizeCwd(cwd);
+    const parentDir = dirname(trustPath);
+    return parentDir === trustPath ? undefined : parentDir;
+}
+export function getProjectTrustOptions(cwd, options) {
+    const trustPath = normalizeCwd(cwd);
+    const trustOptions = [
+        { label: "Trust", trusted: true, updates: [{ path: trustPath, decision: true }], savedPath: trustPath },
+    ];
+    const parentPath = getProjectTrustParentPath(cwd);
+    if (parentPath !== undefined) {
+        trustOptions.push({
+            label: `Trust parent folder (${parentPath})`,
+            trusted: true,
+            updates: [
+                { path: parentPath, decision: true },
+                { path: trustPath, decision: null },
+            ],
+            savedPath: parentPath,
+        });
+    }
+    if (options?.includeSessionOnly) {
+        trustOptions.push({ label: "Trust (this session only)", trusted: true, updates: [] });
+    }
+    trustOptions.push({
+        label: "Do not trust",
+        trusted: false,
+        updates: [{ path: trustPath, decision: false }],
+        savedPath: trustPath,
+    });
+    if (options?.includeSessionOnly) {
+        trustOptions.push({ label: "Do not trust (this session only)", trusted: false, updates: [] });
+    }
+    return trustOptions;
+}
+function readTrustFile(path) {
+    if (!existsSync(path)) {
+        return {};
+    }
+    hardenPrivateRegularFileSync(path);
+    if (lstatSync(path).size > MAX_TRUST_FILE_BYTES) {
+        throw new Error(`Trust store exceeds ${MAX_TRUST_FILE_BYTES} bytes: ${path}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to read trust store ${path}: ${message}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error(`Invalid trust store ${path}: expected an object`);
+    }
+    const data = {};
+    for (const [key, value] of Object.entries(parsed)) {
+        if (value !== true && value !== false && value !== null) {
+            throw new Error(`Invalid trust store ${path}: value for ${JSON.stringify(key)} must be true, false, or null`);
+        }
+        data[key] = value;
+    }
+    return data;
+}
+function writeTrustFile(path, data) {
+    const sorted = {};
+    for (const key of Object.keys(data).sort()) {
+        const value = data[key];
+        if (value === true || value === false || value === null) {
+            sorted[key] = value;
+        }
+    }
+    const serialized = `${JSON.stringify(sorted, null, 2)}\n`;
+    if (Buffer.byteLength(serialized, "utf8") > MAX_TRUST_FILE_BYTES) {
+        throw new Error(`Refusing to write trust store larger than ${MAX_TRUST_FILE_BYTES} bytes`);
+    }
+    ensurePrivateDirectorySync(dirname(path));
+    writeDurableAtomicFileSync(path, serialized);
+}
+function acquireTrustLockSync(path) {
+    const trustDir = dirname(path);
+    ensurePrivateDirectorySync(trustDir);
+    const maxAttempts = 10;
+    const delayMs = 20;
+    let lastError;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        try {
+            return lockfile.lockSync(trustDir, { realpath: false, lockfilePath: `${path}.lock` });
+        }
+        catch (error) {
+            const code = typeof error === "object" && error !== null && "code" in error
+                ? String(error.code)
+                : undefined;
+            if (code !== "ELOCKED" || attempt === maxAttempts) {
+                throw error;
+            }
+            lastError = error;
+            const start = Date.now();
+            while (Date.now() - start < delayMs) {
+                // Sleep synchronously to avoid changing trust store callers to async.
+            }
+        }
+    }
+    if (lastError instanceof Error) {
+        throw lastError;
+    }
+    throw new Error("Failed to acquire trust store lock");
+}
+function withTrustFileLock(path, fn) {
+    const release = acquireTrustLockSync(path);
+    try {
+        return fn();
+    }
+    finally {
+        release();
+    }
+}
+/**
+ * Returns true when cwd has project-local resources that must be gated by
+ * project trust: trust-requiring entries under cwd/.volt, or .agents/skills in
+ * cwd or one of its ancestors. Returns false when no such project resources
+ * exist. The user/global ~/.agents/skills directory is always treated as a
+ * trusted user resource and is ignored here, even when cwd is $HOME.
+ */
+export function hasTrustRequiringProjectResources(cwd) {
+    const homeDirs = new Set([process.env.HOME, homedir()]
+        .filter((homeDir) => homeDir !== undefined && homeDir.length > 0)
+        .map((homeDir) => canonicalizePath(resolvePath(homeDir))));
+    let currentDir = canonicalizePath(resolvePath(cwd));
+    const configDir = join(currentDir, CONFIG_DIR_NAME);
+    if (existsSync(join(currentDir, ".mcp.json"))) {
+        return true;
+    }
+    if (TRUST_REQUIRING_PROJECT_CONFIG_RESOURCES.some((entry) => existsSync(join(configDir, entry)))) {
+        return true;
+    }
+    const userAgentsSkillsDirs = new Set([...homeDirs].map((homeDir) => canonicalizePath(resolvePath(join(homeDir, ".agents", "skills")))));
+    while (true) {
+        const agentsSkillsDir = canonicalizePath(resolvePath(join(currentDir, ".agents", "skills")));
+        if (!userAgentsSkillsDirs.has(agentsSkillsDir) && existsSync(agentsSkillsDir)) {
+            return true;
+        }
+        const parentDir = dirname(currentDir);
+        if (parentDir === currentDir) {
+            return false;
+        }
+        currentDir = parentDir;
+    }
+}
+export class ProjectTrustStore {
+    trustPath;
+    constructor(agentDir) {
+        this.trustPath = join(resolvePath(agentDir), "trust.json");
+    }
+    get(cwd) {
+        return this.getEntry(cwd)?.decision ?? null;
+    }
+    getEntry(cwd) {
+        return withTrustFileLock(this.trustPath, () => {
+            const data = readTrustFile(this.trustPath);
+            return findNearestTrustEntry(data, cwd);
+        });
+    }
+    set(cwd, decision) {
+        this.setMany([{ path: cwd, decision }]);
+    }
+    setMany(decisions) {
+        withTrustFileLock(this.trustPath, () => {
+            const data = readTrustFile(this.trustPath);
+            for (const { path, decision } of decisions) {
+                const key = normalizeCwd(path);
+                if (decision === null) {
+                    delete data[key];
+                }
+                else {
+                    data[key] = decision;
+                }
+            }
+            writeTrustFile(this.trustPath, data);
+        });
+    }
+}
+//# sourceMappingURL=trust-manager.js.map

package/dist/core/trust-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-manager.js","sourceRoot":"","sources":["../../src/core/trust-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAsBrG,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7C,MAAM,wCAAwC,GAAG;IAChD,eAAe;IACf,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,WAAW;IACX,kBAAkB;CACT,CAAC;AAEX,SAAS,YAAY,CAAC,GAAW,EAAU;IAC1C,OAAO,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,qBAAqB,CAAC,IAAe,EAAE,GAAW,EAAiC;IAC3F,IAAI,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,UAAU,GAAG,SAAS,CAAC;IACxB,CAAC;AAAA,CACD;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAsB;IAC1E,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACvD;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,OAA0C,EAAwB;IACrH,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,YAAY,GAAyB;QAC1C,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE;KACvG,CAAC;IACF,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,wBAAwB,UAAU,GAAG;YAC5C,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACpC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;aACnC;YACD,SAAS,EAAE,UAAU;SACrB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACjC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,YAAY,CAAC,IAAI,CAAC;QACjB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC/C,SAAS,EAAE,SAAS;KACpB,CAAC,CAAC;IACH,IAAI,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACjC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,YAAY,CAAC;AAAA,CACpB;AAED,SAAS,aAAa,CAAC,IAAY,EAAa;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,uBAAuB,oBAAoB,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,sBAAsB,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAe,EAAQ;IAC5D,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,oBAAoB,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6CAA6C,oBAAoB,QAAQ,CAAC,CAAC;IAC5F,CAAC;IACD,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAAA,CAC7C;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAc;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,IAAI,SAAkB,CAAC;IAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC;YACJ,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,GACT,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;gBAC7D,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,IAAI,CAAC;gBAC5C,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBACnD,MAAM,KAAK,CAAC;YACb,CAAC;YACD,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;gBACrC,sEAAsE;YACvE,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,SAAS,YAAY,KAAK,EAAE,CAAC;QAChC,MAAM,SAAS,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAAA,CACtD;AAED,SAAS,iBAAiB,CAAI,IAAY,EAAE,EAAW,EAAK;IAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC;QACJ,OAAO,EAAE,EAAE,CAAC;IACb,CAAC;YAAS,CAAC;QACV,OAAO,EAAE,CAAC;IACX,CAAC;AAAA,CACD;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAAC,GAAW,EAAW;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,CACvB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SACnF,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAC1D,CAAC;IACF,IAAI,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEpD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CACnC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CACjG,CAAC;IAEF,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACd,CAAC;QACD,UAAU,GAAG,SAAS,CAAC;IACxB,CAAC;AAAA,CACD;AAED,MAAM,OAAO,iBAAiB;IACrB,SAAS,CAAS;IAE1B,YAAY,QAAgB,EAAE;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;IAAA,CAC3D;IAED,GAAG,CAAC,GAAW,EAAwB;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;IAAA,CAC5C;IAED,QAAQ,CAAC,GAAW,EAAiC;QACpD,OAAO,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAAA,CACxC,CAAC,CAAC;IAAA,CACH;IAED,GAAG,CAAC,GAAW,EAAE,QAA8B,EAAQ;QACtD,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAAA,CACxC;IAED,OAAO,CAAC,SAA+B,EAAQ;QAC9C,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACtB,CAAC;YACF,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAA,CACrC,CAAC,CAAC;IAAA,CACH;CACD","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { existsSync, lstatSync, readFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport lockfile from \"proper-lockfile\";\nimport { CONFIG_DIR_NAME } from \"../config.ts\";\nimport { writeDurableAtomicFileSync } from \"../utils/durable-atomic-write.ts\";\nimport { canonicalizePath, resolvePath } from \"../utils/paths.ts\";\nimport { ensurePrivateDirectorySync, hardenPrivateRegularFileSync } from \"../utils/private-files.ts\";\n\nexport type ProjectTrustDecision = boolean | null;\n\nexport interface ProjectTrustStoreEntry {\n\tpath: string;\n\tdecision: boolean;\n}\n\nexport interface ProjectTrustUpdate {\n\tpath: string;\n\tdecision: ProjectTrustDecision;\n}\n\nexport interface ProjectTrustOption {\n\tlabel: string;\n\ttrusted: boolean;\n\tupdates: ProjectTrustUpdate[];\n\tsavedPath?: string;\n}\n\ntype TrustFile = Record<string, boolean | null | undefined>;\nconst MAX_TRUST_FILE_BYTES = 4 * 1024 * 1024;\n\nconst TRUST_REQUIRING_PROJECT_CONFIG_RESOURCES = [\n\t\"settings.json\",\n\t\"mcp.json\",\n\t\"extensions\",\n\t\"skills\",\n\t\"prompts\",\n\t\"themes\",\n\t\"SYSTEM.md\",\n\t\"APPEND_SYSTEM.md\",\n] as const;\n\nfunction normalizeCwd(cwd: string): string {\n\treturn canonicalizePath(resolvePath(cwd));\n}\n\nfunction findNearestTrustEntry(data: TrustFile, cwd: string): ProjectTrustStoreEntry | null {\n\tlet currentDir = normalizeCwd(cwd);\n\twhile (true) {\n\t\tconst value = data[currentDir];\n\t\tif (value === true || value === false) {\n\t\t\treturn { path: currentDir, decision: value };\n\t\t}\n\n\t\tconst parentDir = dirname(currentDir);\n\t\tif (parentDir === currentDir) {\n\t\t\treturn null;\n\t\t}\n\t\tcurrentDir = parentDir;\n\t}\n}\n\nexport function getProjectTrustParentPath(cwd: string): string | undefined {\n\tconst trustPath = normalizeCwd(cwd);\n\tconst parentDir = dirname(trustPath);\n\treturn parentDir === trustPath ? undefined : parentDir;\n}\n\nexport function getProjectTrustOptions(cwd: string, options?: { includeSessionOnly?: boolean }): ProjectTrustOption[] {\n\tconst trustPath = normalizeCwd(cwd);\n\tconst trustOptions: ProjectTrustOption[] = [\n\t\t{ label: \"Trust\", trusted: true, updates: [{ path: trustPath, decision: true }], savedPath: trustPath },\n\t];\n\tconst parentPath = getProjectTrustParentPath(cwd);\n\tif (parentPath !== undefined) {\n\t\ttrustOptions.push({\n\t\t\tlabel: `Trust parent folder (${parentPath})`,\n\t\t\ttrusted: true,\n\t\t\tupdates: [\n\t\t\t\t{ path: parentPath, decision: true },\n\t\t\t\t{ path: trustPath, decision: null },\n\t\t\t],\n\t\t\tsavedPath: parentPath,\n\t\t});\n\t}\n\tif (options?.includeSessionOnly) {\n\t\ttrustOptions.push({ label: \"Trust (this session only)\", trusted: true, updates: [] });\n\t}\n\ttrustOptions.push({\n\t\tlabel: \"Do not trust\",\n\t\ttrusted: false,\n\t\tupdates: [{ path: trustPath, decision: false }],\n\t\tsavedPath: trustPath,\n\t});\n\tif (options?.includeSessionOnly) {\n\t\ttrustOptions.push({ label: \"Do not trust (this session only)\", trusted: false, updates: [] });\n\t}\n\treturn trustOptions;\n}\n\nfunction readTrustFile(path: string): TrustFile {\n\tif (!existsSync(path)) {\n\t\treturn {};\n\t}\n\thardenPrivateRegularFileSync(path);\n\tif (lstatSync(path).size > MAX_TRUST_FILE_BYTES) {\n\t\tthrow new Error(`Trust store exceeds ${MAX_TRUST_FILE_BYTES} bytes: ${path}`);\n\t}\n\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(readFileSync(path, \"utf-8\"));\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tthrow new Error(`Failed to read trust store ${path}: ${message}`);\n\t}\n\n\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\tthrow new Error(`Invalid trust store ${path}: expected an object`);\n\t}\n\n\tconst data: TrustFile = {};\n\tfor (const [key, value] of Object.entries(parsed)) {\n\t\tif (value !== true && value !== false && value !== null) {\n\t\t\tthrow new Error(`Invalid trust store ${path}: value for ${JSON.stringify(key)} must be true, false, or null`);\n\t\t}\n\t\tdata[key] = value;\n\t}\n\treturn data;\n}\n\nfunction writeTrustFile(path: string, data: TrustFile): void {\n\tconst sorted: TrustFile = {};\n\tfor (const key of Object.keys(data).sort()) {\n\t\tconst value = data[key];\n\t\tif (value === true || value === false || value === null) {\n\t\t\tsorted[key] = value;\n\t\t}\n\t}\n\tconst serialized = `${JSON.stringify(sorted, null, 2)}\\n`;\n\tif (Buffer.byteLength(serialized, \"utf8\") > MAX_TRUST_FILE_BYTES) {\n\t\tthrow new Error(`Refusing to write trust store larger than ${MAX_TRUST_FILE_BYTES} bytes`);\n\t}\n\tensurePrivateDirectorySync(dirname(path));\n\twriteDurableAtomicFileSync(path, serialized);\n}\n\nfunction acquireTrustLockSync(path: string): () => void {\n\tconst trustDir = dirname(path);\n\tensurePrivateDirectorySync(trustDir);\n\tconst maxAttempts = 10;\n\tconst delayMs = 20;\n\tlet lastError: unknown;\n\n\tfor (let attempt = 1; attempt <= maxAttempts; attempt++) {\n\t\ttry {\n\t\t\treturn lockfile.lockSync(trustDir, { realpath: false, lockfilePath: `${path}.lock` });\n\t\t} catch (error) {\n\t\t\tconst code =\n\t\t\t\ttypeof error === \"object\" && error !== null && \"code\" in error\n\t\t\t\t\t? String((error as { code?: unknown }).code)\n\t\t\t\t\t: undefined;\n\t\t\tif (code !== \"ELOCKED\" || attempt === maxAttempts) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tlastError = error;\n\t\t\tconst start = Date.now();\n\t\t\twhile (Date.now() - start < delayMs) {\n\t\t\t\t// Sleep synchronously to avoid changing trust store callers to async.\n\t\t\t}\n\t\t}\n\t}\n\n\tif (lastError instanceof Error) {\n\t\tthrow lastError;\n\t}\n\tthrow new Error(\"Failed to acquire trust store lock\");\n}\n\nfunction withTrustFileLock<T>(path: string, fn: () => T): T {\n\tconst release = acquireTrustLockSync(path);\n\ttry {\n\t\treturn fn();\n\t} finally {\n\t\trelease();\n\t}\n}\n\n/**\n * Returns true when cwd has project-local resources that must be gated by\n * project trust: trust-requiring entries under cwd/.volt, or .agents/skills in\n * cwd or one of its ancestors. Returns false when no such project resources\n * exist. The user/global ~/.agents/skills directory is always treated as a\n * trusted user resource and is ignored here, even when cwd is $HOME.\n */\nexport function hasTrustRequiringProjectResources(cwd: string): boolean {\n\tconst homeDirs = new Set(\n\t\t[process.env.HOME, homedir()]\n\t\t\t.filter((homeDir): homeDir is string => homeDir !== undefined && homeDir.length > 0)\n\t\t\t.map((homeDir) => canonicalizePath(resolvePath(homeDir))),\n\t);\n\tlet currentDir = canonicalizePath(resolvePath(cwd));\n\n\tconst configDir = join(currentDir, CONFIG_DIR_NAME);\n\tif (existsSync(join(currentDir, \".mcp.json\"))) {\n\t\treturn true;\n\t}\n\tif (TRUST_REQUIRING_PROJECT_CONFIG_RESOURCES.some((entry) => existsSync(join(configDir, entry)))) {\n\t\treturn true;\n\t}\n\n\tconst userAgentsSkillsDirs = new Set(\n\t\t[...homeDirs].map((homeDir) => canonicalizePath(resolvePath(join(homeDir, \".agents\", \"skills\")))),\n\t);\n\n\twhile (true) {\n\t\tconst agentsSkillsDir = canonicalizePath(resolvePath(join(currentDir, \".agents\", \"skills\")));\n\t\tif (!userAgentsSkillsDirs.has(agentsSkillsDir) && existsSync(agentsSkillsDir)) {\n\t\t\treturn true;\n\t\t}\n\n\t\tconst parentDir = dirname(currentDir);\n\t\tif (parentDir === currentDir) {\n\t\t\treturn false;\n\t\t}\n\t\tcurrentDir = parentDir;\n\t}\n}\n\nexport class ProjectTrustStore {\n\tprivate trustPath: string;\n\n\tconstructor(agentDir: string) {\n\t\tthis.trustPath = join(resolvePath(agentDir), \"trust.json\");\n\t}\n\n\tget(cwd: string): ProjectTrustDecision {\n\t\treturn this.getEntry(cwd)?.decision ?? null;\n\t}\n\n\tgetEntry(cwd: string): ProjectTrustStoreEntry | null {\n\t\treturn withTrustFileLock(this.trustPath, () => {\n\t\t\tconst data = readTrustFile(this.trustPath);\n\t\t\treturn findNearestTrustEntry(data, cwd);\n\t\t});\n\t}\n\n\tset(cwd: string, decision: ProjectTrustDecision): void {\n\t\tthis.setMany([{ path: cwd, decision }]);\n\t}\n\n\tsetMany(decisions: ProjectTrustUpdate[]): void {\n\t\twithTrustFileLock(this.trustPath, () => {\n\t\t\tconst data = readTrustFile(this.trustPath);\n\t\t\tfor (const { path, decision } of decisions) {\n\t\t\t\tconst key = normalizeCwd(path);\n\t\t\t\tif (decision === null) {\n\t\t\t\t\tdelete data[key];\n\t\t\t\t} else {\n\t\t\t\t\tdata[key] = decision;\n\t\t\t\t}\n\t\t\t}\n\t\t\twriteTrustFile(this.trustPath, data);\n\t\t});\n\t}\n}\n"]}

package/dist/daemon/cli.d.ts

@@ -0,0 +1,8 @@
+export interface DaemonCommandOptions {
+    agentDir?: string;
+    /** Standalone releases omit the native Iroh adapter. */
+    isStandaloneBinary: boolean;
+}
+/** Router for `volt daemon <command>`; returns true when the args were handled. */
+export declare function handleDaemonCommand(args: string[], options: DaemonCommandOptions): Promise<boolean>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/daemon/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/daemon/cli.ts"],"names":[],"mappings":"AAqZA,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,kBAAkB,EAAE,OAAO,CAAC;CAC5B;AAED,mFAAmF;AACnF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAmFzG","sourcesContent":["import { existsSync, readFileSync, statSync } from \"node:fs\";\nimport { open } from \"node:fs/promises\";\nimport { createInterface } from \"node:readline\";\nimport { getAgentDir, VERSION } from \"../config.ts\";\nimport { createDaemonClient } from \"./control-client.ts\";\nimport type { ControlKeepAwakeStatus, ControlResponse } from \"./control-protocol.ts\";\nimport { createIrohDaemonService } from \"./iroh-service.ts\";\nimport { readPidfile, runVoltDaemon } from \"./main.ts\";\nimport { getDaemonPaths } from \"./paths.ts\";\nimport { verifyPidfileProcess } from \"./process-identity.ts\";\nimport { installDaemonService, uninstallDaemonService } from \"./service-install.ts\";\nimport { DAEMON_SHUTDOWN_TIMEOUT_MS, ensureDaemonRunning, probeDaemon, waitForDaemonExit } from \"./spawn.ts\";\nimport { inspectVoltdStateFiles, regenerateInvalidVoltdState } from \"./state.ts\";\n\nconst STOP_TIMEOUT_MS = DAEMON_SHUTDOWN_TIMEOUT_MS; // 60s drain cap + margin\nconst DEFAULT_LOG_TAIL_LINES = 200;\n\ntype StatusResult = ControlResponse & { type: \"status_result\" };\n\nfunction printDaemonUsage(): void {\n\tconsole.error(`Usage: volt daemon <command>\n\nCommands:\n  start                 Start the background daemon (no-op if already running).\n  stop                  Ask the daemon to shut down gracefully.\n  status [--json]       Show daemon status; exit 0 when running, 1 when not.\n  restart               Stop then start; persistent state survives.\n  regenerate-state      Back up invalid state and regenerate it after confirmation.\n  keep-awake [on|off]   Prevent the host from sleeping while voltd runs; no arg prints state.\n  logs [-f] [-n N]      Tail the daemon log (default ${DEFAULT_LOG_TAIL_LINES} lines).\n  install-service       Register a login service (launchd/systemd) that starts the daemon.\n  uninstall-service     Remove the login service.\n  run --foreground      Run the daemon in this process (internal; used by start).\n`);\n}\n\nasync function requestStatus(agentDir: string): Promise<StatusResult | undefined> {\n\tconst probe = await probeDaemon(agentDir);\n\tif (!probe.healthy) {\n\t\treturn undefined;\n\t}\n\tconst client = createDaemonClient({\n\t\tsocketPath: probe.socketPath,\n\t\tclient: \"cli\",\n\t\tversion: VERSION,\n\t\tauthToken: probe.authToken,\n\t\treconnect: false,\n\t});\n\ttry {\n\t\tconst statusProbe = await client.request({ type: \"status\" });\n\t\treturn statusProbe.type === \"status_result\" ? statusProbe : undefined;\n\t} finally {\n\t\tawait client.close();\n\t}\n}\n\nasync function daemonStart(agentDir: string): Promise<void> {\n\tconst result = await ensureDaemonRunning(agentDir);\n\tif (!result.healthy) {\n\t\tif (result.state === \"protocol-mismatch\") {\n\t\t\tconsole.error(\n\t\t\t\t\"Error: a different voltd protocol version is already running; stop it before starting this version.\",\n\t\t\t);\n\t\t} else if (result.state === \"unresponsive\") {\n\t\t\tconsole.error(\"Error: voltd socket is occupied but not responding; not starting a second daemon.\");\n\t\t} else if (result.state === \"auth-failed\") {\n\t\t\tconsole.error(\"Error: voltd rejected the local daemon metadata; not starting a second daemon.\");\n\t\t} else if (result.state === \"shutting-down\") {\n\t\t\tconsole.error(\"Error: existing voltd did not finish shutting down within the timeout.\");\n\t\t} else {\n\t\t\tconsole.error(`Error: ${result.error ?? \"failed to start voltd (daemon did not become healthy within 5s).\"}`);\n\t\t\tif (result.invalidState) {\n\t\t\t\tconsole.error(\"Run `volt daemon regenerate-state` to review and confirm regeneration.\");\n\t\t\t}\n\t\t}\n\t\tconsole.error(`Check the log: ${getDaemonPaths(agentDir).logPath}`);\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tconsole.error(\n\t\t`voltd ${result.version ?? VERSION} ${result.spawned ? \"started\" : \"already running\"} (pid ${result.pid})`,\n\t);\n\tconsole.error(`socket: ${result.socketPath}`);\n}\n\n/**\n * SIGTERM a pidfile-recorded daemon, but only after verifying the pid still\n * refers to the voltd that wrote the pidfile (a recycled pid must never\n * receive the signal). Returns whether SIGTERM was sent, refused, or the\n * process was already gone.\n */\nasync function signalPidfileDaemon(pidfilePath: string, context: string): Promise<\"sent\" | \"refused\" | \"gone\"> {\n\tconst pidfile = readPidfile(pidfilePath);\n\tif (!pidfile) {\n\t\treturn \"gone\";\n\t}\n\tconst verification = await verifyPidfileProcess(pidfile);\n\tif (verification === \"mismatch\") {\n\t\tconsole.error(\n\t\t\t`Error: pid ${pidfile.pid} from the pidfile is not verifiable as voltd (recycled pid?); not sending SIGTERM.`,\n\t\t);\n\t\tconsole.error(`Remove ${pidfilePath} if it is stale.`);\n\t\tprocess.exitCode = 1;\n\t\treturn \"refused\";\n\t}\n\tif (verification === \"gone\") {\n\t\treturn \"gone\";\n\t}\n\ttry {\n\t\tprocess.kill(pidfile.pid, \"SIGTERM\");\n\t\tconsole.error(`${context}; sent SIGTERM to pid ${pidfile.pid}`);\n\t\treturn \"sent\";\n\t} catch {\n\t\t// Process exited between verification and signal.\n\t\treturn \"gone\";\n\t}\n}\n\nasync function daemonStop(agentDir: string): Promise<void> {\n\tconst paths = getDaemonPaths(agentDir);\n\tconst probe = await probeDaemon(agentDir);\n\tconst pidfile = readPidfile(paths.pidfilePath);\n\tif (!probe.healthy) {\n\t\tif (probe.state === \"shutting-down\") {\n\t\t\tconsole.error(\"voltd is already draining; waiting for exit\");\n\t\t\tif (\n\t\t\t\t(await waitForDaemonExit({\n\t\t\t\t\tagentDir,\n\t\t\t\t\tpidfile,\n\t\t\t\t\tsocketPath: probe.socketPath,\n\t\t\t\t\ttimeoutMs: STOP_TIMEOUT_MS,\n\t\t\t\t})) === \"exited\"\n\t\t\t) {\n\t\t\t\tconsole.error(\"voltd stopped\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tconst signalResult = await signalPidfileDaemon(paths.pidfilePath, \"voltd socket unreachable\");\n\t\tif (signalResult === \"sent\") {\n\t\t\tif ((await waitForDaemonExit({ agentDir, pidfile, timeoutMs: STOP_TIMEOUT_MS })) === \"exited\") {\n\t\t\t\tconsole.error(\"voltd stopped\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconsole.error(\"Error: voltd did not stop after SIGTERM\");\n\t\t\tprocess.exitCode = 1;\n\t\t\treturn;\n\t\t}\n\t\tif (signalResult === \"refused\") {\n\t\t\treturn;\n\t\t}\n\t\tconsole.error(\"voltd is not running\");\n\t\treturn;\n\t}\n\n\tconst client = createDaemonClient({\n\t\tsocketPath: probe.socketPath,\n\t\tclient: \"cli\",\n\t\tversion: VERSION,\n\t\tauthToken: probe.authToken,\n\t\treconnect: false,\n\t});\n\ttry {\n\t\tawait client.request({ type: \"shutdown\" });\n\t} catch {\n\t\t// The daemon may close the socket before the ok lands; fall through to the poll.\n\t} finally {\n\t\tawait client.close();\n\t}\n\n\tif (\n\t\t(await waitForDaemonExit({\n\t\t\tagentDir,\n\t\t\tpid: probe.pid,\n\t\t\tpidfile,\n\t\t\tsocketPath: probe.socketPath,\n\t\t\ttimeoutMs: STOP_TIMEOUT_MS,\n\t\t})) === \"exited\"\n\t) {\n\t\tconsole.error(\"voltd stopped\");\n\t\treturn;\n\t}\n\tconst signalResult = await signalPidfileDaemon(paths.pidfilePath, \"voltd did not stop over the control socket\");\n\tif (signalResult === \"sent\") {\n\t\tif (\n\t\t\t(await waitForDaemonExit({ agentDir, pidfile, socketPath: probe.socketPath, timeoutMs: STOP_TIMEOUT_MS })) ===\n\t\t\t\"exited\"\n\t\t) {\n\t\t\tconsole.error(\"voltd stopped\");\n\t\t\treturn;\n\t\t}\n\t\tconsole.error(\"Error: voltd did not stop after SIGTERM\");\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tif (signalResult === \"refused\") {\n\t\treturn;\n\t}\n\tconsole.error(\"Error: voltd did not stop within the timeout\");\n\tprocess.exitCode = 1;\n}\n\nfunction formatKeepAwake(keepAwake: ControlKeepAwakeStatus | undefined): string {\n\t// Older daemons predate the field; report that instead of guessing \"off\".\n\tif (!keepAwake) {\n\t\treturn \"unknown (daemon predates keep-awake)\";\n\t}\n\tif (!keepAwake.enabled) {\n\t\treturn \"off\";\n\t}\n\treturn keepAwake.state === \"active\" ? \"on (active)\" : `on (degraded: ${keepAwake.reason ?? \"unknown\"})`;\n}\n\nfunction formatUptime(startedAtMs: number): string {\n\tconst totalSeconds = Math.max(0, Math.floor((Date.now() - startedAtMs) / 1000));\n\tconst hours = Math.floor(totalSeconds / 3600);\n\tconst minutes = Math.floor((totalSeconds % 3600) / 60);\n\tconst seconds = totalSeconds % 60;\n\treturn hours > 0 ? `${hours}h${minutes}m${seconds}s` : minutes > 0 ? `${minutes}m${seconds}s` : `${seconds}s`;\n}\n\nasync function daemonStatus(agentDir: string, json: boolean): Promise<void> {\n\tconst status = await requestStatus(agentDir);\n\tif (!status) {\n\t\tif (json) {\n\t\t\tconsole.log(JSON.stringify({ running: false }));\n\t\t} else {\n\t\t\tconsole.error(\"voltd is not running\");\n\t\t}\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tif (json) {\n\t\tconsole.log(JSON.stringify({ running: true, ...status, id: undefined, type: undefined }));\n\t\treturn;\n\t}\n\tconsole.error(`voltd ${status.version} (protocol ${status.protocolVersion})`);\n\tconsole.error(`pid: ${status.pid}`);\n\tconsole.error(`uptime: ${formatUptime(status.startedAtMs)}`);\n\tconsole.error(`keep awake: ${formatKeepAwake(status.keepAwake)}`);\n\tconsole.error(`phone connections: ${status.phoneConnections}`);\n\tconsole.error(`workspaces: ${status.workspaces.length}`);\n\tfor (const workspace of status.workspaces) {\n\t\tconsole.error(`  ${workspace.name} -> ${workspace.path}`);\n\t}\n\tconsole.error(`paired clients: ${status.clients.length}`);\n\tfor (const client of status.clients) {\n\t\tconsole.error(`  ${client.clientNodeId}${client.label ? ` (${client.label})` : \"\"}`);\n\t}\n\tconsole.error(`leases: ${status.leases.length}`);\n\tfor (const lease of status.leases) {\n\t\tconsole.error(\n\t\t\t`  ${lease.workspaceName}/${lease.sessionId}: ${lease.state} (streams ${lease.streamCount}, relays ${lease.relayCount})`,\n\t\t);\n\t}\n}\n\nasync function daemonKeepAwake(agentDir: string, args: string[]): Promise<void> {\n\tconst mode = args[0];\n\tif (mode !== undefined && mode !== \"on\" && mode !== \"off\" && mode !== \"status\") {\n\t\tconsole.error(\"Error: volt daemon keep-awake takes on, off, or no argument\");\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tif (mode === undefined || mode === \"status\") {\n\t\tconst status = await requestStatus(agentDir);\n\t\tif (!status) {\n\t\t\tconsole.error(\"voltd is not running\");\n\t\t\tprocess.exitCode = 1;\n\t\t\treturn;\n\t\t}\n\t\tconsole.error(`keep awake: ${formatKeepAwake(status.keepAwake)}`);\n\t\treturn;\n\t}\n\tconst probe = await probeDaemon(agentDir);\n\tif (!probe.healthy) {\n\t\tconsole.error(\"voltd is not running\");\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tconst client = createDaemonClient({\n\t\tsocketPath: probe.socketPath,\n\t\tclient: \"cli\",\n\t\tversion: VERSION,\n\t\tauthToken: probe.authToken,\n\t\treconnect: false,\n\t});\n\ttry {\n\t\tconst response = await client.request({ type: \"keep_awake_set\", enabled: mode === \"on\" });\n\t\tif (response.type === \"error\") {\n\t\t\tconsole.error(`Error: ${response.message}`);\n\t\t\tprocess.exitCode = 1;\n\t\t\treturn;\n\t\t}\n\t\tif (response.type !== \"keep_awake_result\") {\n\t\t\tconsole.error(\"Error: this voltd version does not support keep-awake; restart the daemon after upgrading\");\n\t\t\tprocess.exitCode = 1;\n\t\t\treturn;\n\t\t}\n\t\tconsole.error(`keep awake: ${formatKeepAwake(response.keepAwake)}`);\n\t\tif (response.keepAwake.enabled && response.keepAwake.state === \"degraded\") {\n\t\t\tprocess.exitCode = 1;\n\t\t}\n\t} finally {\n\t\tawait client.close();\n\t}\n}\n\nfunction tailLines(content: string, count: number): string[] {\n\tconst lines = content.split(\"\\n\");\n\tif (lines.at(-1) === \"\") {\n\t\tlines.pop();\n\t}\n\treturn lines.slice(-count);\n}\n\nasync function promptConfirm(message: string): Promise<boolean> {\n\tif (!process.stdin.isTTY || !process.stdout.isTTY) {\n\t\treturn false;\n\t}\n\treturn new Promise((resolve) => {\n\t\tconst readline = createInterface({ input: process.stdin, output: process.stdout });\n\t\treadline.question(`${message} [y/N] `, (answer) => {\n\t\t\treadline.close();\n\t\t\tresolve(answer.trim().toLowerCase() === \"y\" || answer.trim().toLowerCase() === \"yes\");\n\t\t});\n\t});\n}\n\nasync function daemonRegenerateState(agentDir: string): Promise<void> {\n\tconst probe = await probeDaemon(agentDir);\n\tif (probe.healthy || probe.state !== \"not-running\") {\n\t\tconsole.error(`Error: voltd must be fully stopped before regenerating state (currently ${probe.state}).`);\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tconst invalidState = inspectVoltdStateFiles(agentDir);\n\tif (!invalidState) {\n\t\tconsole.error(\"Daemon state is valid; regeneration is not needed.\");\n\t\treturn;\n\t}\n\tconsole.error(invalidState.error);\n\tconsole.error(\"Regeneration preserves validated identity/settings when safe and drops invalid access records.\");\n\tconsole.error(\"If the identity cannot be preserved, all phones will need to pair again.\");\n\tif (!(await promptConfirm(\"Back up the invalid file and regenerate daemon state?\"))) {\n\t\tconsole.error(\"Daemon state was not changed.\");\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tconst { backupPath, preservedIdentity } = await regenerateInvalidVoltdState(agentDir);\n\tconsole.error(`Backed up invalid daemon state to ${backupPath}`);\n\tconsole.error(preservedIdentity ? \"Preserved the Iroh identity.\" : \"A new Iroh identity will be created.\");\n\tconsole.error(\"Run `volt daemon start` to create fresh state.\");\n}\n\nasync function daemonLogs(agentDir: string, args: string[]): Promise<void> {\n\tconst paths = getDaemonPaths(agentDir);\n\tconst follow = args.includes(\"-f\") || args.includes(\"--follow\");\n\tlet lineCount = DEFAULT_LOG_TAIL_LINES;\n\tconst nIndex = args.indexOf(\"-n\");\n\tif (nIndex !== -1) {\n\t\tconst parsed = Number(args[nIndex + 1]);\n\t\tif (!Number.isInteger(parsed) || parsed <= 0) {\n\t\t\tconsole.error(\"Error: -n requires a positive integer\");\n\t\t\tprocess.exitCode = 1;\n\t\t\treturn;\n\t\t}\n\t\tlineCount = parsed;\n\t}\n\tif (!existsSync(paths.logPath)) {\n\t\tconsole.error(`No daemon log at ${paths.logPath}`);\n\t\tprocess.exitCode = 1;\n\t\treturn;\n\t}\n\tfor (const line of tailLines(readFileSync(paths.logPath, \"utf8\"), lineCount)) {\n\t\tconsole.log(line);\n\t}\n\tif (!follow) {\n\t\treturn;\n\t}\n\tlet offset = statSync(paths.logPath).size;\n\twhile (true) {\n\t\tawait new Promise((resolve) => setTimeout(resolve, 500));\n\t\tlet size: number;\n\t\ttry {\n\t\t\tsize = statSync(paths.logPath).size;\n\t\t} catch {\n\t\t\tcontinue;\n\t\t}\n\t\tif (size < offset) {\n\t\t\toffset = 0; // rotated\n\t\t}\n\t\tif (size === offset) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst handle = await open(paths.logPath, \"r\");\n\t\ttry {\n\t\t\tconst { buffer, bytesRead } = await handle.read(Buffer.alloc(size - offset), 0, size - offset, offset);\n\t\t\tprocess.stdout.write(buffer.subarray(0, bytesRead));\n\t\t\toffset += bytesRead;\n\t\t} finally {\n\t\t\tawait handle.close();\n\t\t}\n\t}\n}\n\nexport interface DaemonCommandOptions {\n\tagentDir?: string;\n\t/** Standalone releases omit the native Iroh adapter. */\n\tisStandaloneBinary: boolean;\n}\n\n/** Router for `volt daemon <command>`; returns true when the args were handled. */\nexport async function handleDaemonCommand(args: string[], options: DaemonCommandOptions): Promise<boolean> {\n\tif (args[0] !== \"daemon\") {\n\t\treturn false;\n\t}\n\tconst command = args[1];\n\tif (command === undefined || command === \"--help\" || command === \"-h\") {\n\t\tprintDaemonUsage();\n\t\treturn true;\n\t}\n\tif (options.isStandaloneBinary) {\n\t\tconsole.error(\"Error: volt daemon is not available from the standalone binary release.\");\n\t\tconsole.error(\"Use a Node.js npm install or a source checkout with optional @number0/iroh dependencies.\");\n\t\tprocess.exitCode = 1;\n\t\treturn true;\n\t}\n\tconst agentDir = options.agentDir ?? getAgentDir();\n\tconst rest = args.slice(2);\n\n\tswitch (command) {\n\t\tcase \"start\":\n\t\t\tawait daemonStart(agentDir);\n\t\t\treturn true;\n\t\tcase \"stop\":\n\t\t\tawait daemonStop(agentDir);\n\t\t\treturn true;\n\t\tcase \"status\":\n\t\t\tawait daemonStatus(agentDir, rest.includes(\"--json\"));\n\t\t\treturn true;\n\t\tcase \"restart\":\n\t\t\tawait daemonStop(agentDir);\n\t\t\tif ((process.exitCode ?? 0) === 0) {\n\t\t\t\tawait daemonStart(agentDir);\n\t\t\t}\n\t\t\treturn true;\n\t\tcase \"regenerate-state\":\n\t\t\tawait daemonRegenerateState(agentDir);\n\t\t\treturn true;\n\t\tcase \"keep-awake\":\n\t\t\tawait daemonKeepAwake(agentDir, rest);\n\t\t\treturn true;\n\t\tcase \"logs\":\n\t\t\tawait daemonLogs(agentDir, rest);\n\t\t\treturn true;\n\t\tcase \"install-service\": {\n\t\t\tconst result = await installDaemonService({ agentDir });\n\t\t\tfor (const message of result.messages) {\n\t\t\t\tconsole.error(message);\n\t\t\t}\n\t\t\tif (!result.ok) {\n\t\t\t\tprocess.exitCode = 1;\n\t\t\t}\n\t\t\treturn true;\n\t\t}\n\t\tcase \"uninstall-service\": {\n\t\t\tconst result = await uninstallDaemonService({ agentDir });\n\t\t\tfor (const message of result.messages) {\n\t\t\t\tconsole.error(message);\n\t\t\t}\n\t\t\tif (!result.ok) {\n\t\t\t\tprocess.exitCode = 1;\n\t\t\t}\n\t\t\treturn true;\n\t\t}\n\t\tcase \"run\": {\n\t\t\tif (!rest.includes(\"--foreground\")) {\n\t\t\t\tconsole.error(\"Error: volt daemon run requires --foreground\");\n\t\t\t\tprocess.exitCode = 1;\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tconst code = await runVoltDaemon({ agentDir, foreground: true }, [createIrohDaemonService()]);\n\t\t\t// The run loop resolves only after shutdown() has awaited all cleanup, but\n\t\t\t// the native iroh handle can keep the event loop alive afterwards (notably\n\t\t\t// on Windows), leaving a zombie that clients still probe as \"draining\".\n\t\t\t// Exit deterministically now that teardown is complete.\n\t\t\tprocess.exit(code);\n\t\t\treturn true;\n\t\t}\n\t\tdefault:\n\t\t\tconsole.error(`Error: Unknown daemon command: ${command}`);\n\t\t\tprintDaemonUsage();\n\t\t\tprocess.exitCode = 1;\n\t\t\treturn true;\n\t}\n}\n"]}