@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/log.js

@@ -0,0 +1,40 @@
+import { appendFileSync, existsSync, mkdirSync, renameSync, statSync } from "node:fs";
+import { dirname } from "node:path";
+const MAX_LOG_BYTES = 10 * 1024 * 1024;
+/**
+ * Plain-text, greppable daemon log: `<iso8601> <level> <subsystem> <message> <json-details?>`.
+ * Rotates at 10 MiB keeping exactly one rotated file (voltd.log.1).
+ */
+export function createDaemonLogger(options) {
+    mkdirSync(dirname(options.logPath), { recursive: true, mode: 0o700 });
+    const rotateIfNeeded = () => {
+        try {
+            if (existsSync(options.logPath) && statSync(options.logPath).size >= MAX_LOG_BYTES) {
+                renameSync(options.logPath, `${options.logPath}.1`);
+            }
+        }
+        catch {
+            // Rotation is best-effort; keep logging to the current file.
+        }
+    };
+    const log = (level, subsystem, message, details) => {
+        const line = `${new Date().toISOString()} ${level} ${subsystem} ${message}${details === undefined ? "" : ` ${JSON.stringify(details)}`}\n`;
+        try {
+            rotateIfNeeded();
+            appendFileSync(options.logPath, line, { mode: 0o600 });
+        }
+        catch {
+            // Logging must never crash the daemon.
+        }
+        if (options.echoToStderr) {
+            process.stderr.write(line);
+        }
+    };
+    return {
+        log,
+        child(subsystem) {
+            return (level, message, details) => log(level, subsystem, message, details);
+        },
+    };
+}
+//# sourceMappingURL=log.js.map

package/dist/daemon/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/daemon/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAevC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA4B,EAAgB;IAC9E,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEtE,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;gBACpF,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACrD,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,6DAA6D;QAC9D,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,KAAqB,EAAE,SAAiB,EAAE,OAAe,EAAE,OAAiC,EAAE,EAAE,CAAC;QAC7G,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI,SAAS,IAAI,OAAO,GACxE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACzD,IAAI,CAAC;QACL,IAAI,CAAC;YACJ,cAAc,EAAE,CAAC;YACjB,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACR,uCAAuC;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IAAA,CACD,CAAC;IAEF,OAAO;QACN,GAAG;QACH,KAAK,CAAC,SAAiB,EAAE;YACxB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAAA,CAC5E;KACD,CAAC;AAAA,CACF","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, renameSync, statSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\n\nconst MAX_LOG_BYTES = 10 * 1024 * 1024;\n\nexport type DaemonLogLevel = \"debug\" | \"info\" | \"warn\" | \"error\";\n\nexport interface DaemonLogger {\n\tlog(level: DaemonLogLevel, subsystem: string, message: string, details?: Record<string, unknown>): void;\n\tchild(subsystem: string): (level: DaemonLogLevel, message: string, details?: Record<string, unknown>) => void;\n}\n\nexport interface DaemonLoggerOptions {\n\tlogPath: string;\n\t/** Also echo to stderr (foreground runs launched by hand). */\n\techoToStderr?: boolean;\n}\n\n/**\n * Plain-text, greppable daemon log: `<iso8601> <level> <subsystem> <message> <json-details?>`.\n * Rotates at 10 MiB keeping exactly one rotated file (voltd.log.1).\n */\nexport function createDaemonLogger(options: DaemonLoggerOptions): DaemonLogger {\n\tmkdirSync(dirname(options.logPath), { recursive: true, mode: 0o700 });\n\n\tconst rotateIfNeeded = () => {\n\t\ttry {\n\t\t\tif (existsSync(options.logPath) && statSync(options.logPath).size >= MAX_LOG_BYTES) {\n\t\t\t\trenameSync(options.logPath, `${options.logPath}.1`);\n\t\t\t}\n\t\t} catch {\n\t\t\t// Rotation is best-effort; keep logging to the current file.\n\t\t}\n\t};\n\n\tconst log = (level: DaemonLogLevel, subsystem: string, message: string, details?: Record<string, unknown>) => {\n\t\tconst line = `${new Date().toISOString()} ${level} ${subsystem} ${message}${\n\t\t\tdetails === undefined ? \"\" : ` ${JSON.stringify(details)}`\n\t\t}\\n`;\n\t\ttry {\n\t\t\trotateIfNeeded();\n\t\t\tappendFileSync(options.logPath, line, { mode: 0o600 });\n\t\t} catch {\n\t\t\t// Logging must never crash the daemon.\n\t\t}\n\t\tif (options.echoToStderr) {\n\t\t\tprocess.stderr.write(line);\n\t\t}\n\t};\n\n\treturn {\n\t\tlog,\n\t\tchild(subsystem: string) {\n\t\t\treturn (level, message, details) => log(level, subsystem, message, details);\n\t\t},\n\t};\n}\n"]}

package/dist/daemon/main.d.ts

@@ -0,0 +1,70 @@
+import type { Socket } from "node:net";
+import { IrohRemoteAuditLogger } from "../core/remote/iroh/audit.ts";
+import { IrohRemoteHostStateManager } from "../core/remote/iroh/state-manager.ts";
+import type { ControlLeaseStatus, ControlRequest } from "./control-protocol.ts";
+import { type ControlConnection, type ControlServer } from "./control-server.ts";
+import { KeepAwakeController, type KeepAwakeControllerOptions } from "./keep-awake.ts";
+import type { DaemonLogger } from "./log.ts";
+import { type DaemonPaths } from "./paths.ts";
+import { VoltdStateStore } from "./state.ts";
+export interface Clock {
+    now(): number;
+}
+export interface VoltdConfig {
+    agentDir?: string;
+    socketPath?: string;
+    logPath?: string;
+    foreground: boolean;
+    clock?: Clock;
+    /** Keep-awake controller overrides (tests inject a fake spawn here). */
+    keepAwake?: KeepAwakeControllerOptions;
+}
+export interface PidfileContents {
+    pid: number;
+    version: string;
+    startedAtMs: number;
+    socketPath: string;
+    /** Per-daemon instance token; optional for pidfiles written by older versions. */
+    token?: string;
+}
+export declare function readPidfile(pidfilePath: string): PidfileContents | undefined;
+export declare const VOLTD_EXIT_ALREADY_RUNNING = 3;
+export declare const VOLTD_EXIT_BIND_FAILED = 4;
+export declare const VOLTD_EXIT_INCOMPATIBLE_RUNNING = 5;
+/** Facilities later milestones build on (lease broker, Iroh host, theme service). */
+export interface VoltdRuntimeServices {
+    agentDir: string;
+    paths: DaemonPaths;
+    logger: DaemonLogger;
+    state: VoltdStateStore;
+    stateManager: IrohRemoteHostStateManager;
+    auditLogger: IrohRemoteAuditLogger;
+    controlServer: ControlServer;
+    keepAwake: KeepAwakeController;
+    /** Stored Brave Search API key for the web_search tool, persisted in auth.json. */
+    webSearchKey: {
+        set(apiKey: string | null): void;
+        readonly configured: boolean;
+    };
+    requestShutdown(reason: "cli" | "signal"): void;
+}
+export interface VoltdServiceExtensionInstance {
+    /** Extra request handling; return true when the request was handled. */
+    handleRequest?(connection: ControlConnection, request: ControlRequest): Promise<boolean> | boolean;
+    onConnectionClosed?(connection: ControlConnection): void;
+    /** The daemon's active theme changed (theme_set or an extension setTheme). */
+    onThemeChanged?(): void;
+    /** Keep-awake status changed (control toggle, phone RPC toggle, or degradation). */
+    onKeepAwakeChanged?(): void;
+    statusExtras?(): {
+        leases?: ControlLeaseStatus[];
+        phoneConnections?: number;
+        relayCount?: number;
+    };
+    /** Redeem a relay hello token; true when the socket was taken over. */
+    admitRelay?(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer): boolean;
+    shutdown?(): Promise<void>;
+}
+export type VoltdServiceExtension = (services: VoltdRuntimeServices) => VoltdServiceExtensionInstance;
+export declare function runVoltDaemon(config: VoltdConfig, extensions?: VoltdServiceExtension[]): Promise<number>;
+//# sourceMappingURL=main.d.ts.map

package/dist/daemon/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/daemon/main.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAUvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAEN,0BAA0B,EAE1B,MAAM,sCAAsC,CAAC;AAW9C,OAAO,KAAK,EAEX,kBAAkB,EAClB,cAAc,EAGd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAGlB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,mBAAmB,EAAE,KAAK,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C,OAAO,EAEN,KAAK,WAAW,EAIhB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,WAAW,KAAK;IACrB,GAAG,IAAI,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,wEAAwE;IACxE,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAgB5E;AAED,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,+BAA+B,IAAI,CAAC;AASjD,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,0BAA0B,CAAC;IACzC,WAAW,EAAE,qBAAqB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,mFAAmF;IACnF,YAAY,EAAE;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC;IACjF,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,6BAA6B;IAC7C,wEAAwE;IACxE,aAAa,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACnG,kBAAkB,CAAC,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzD,8EAA8E;IAC9E,cAAc,CAAC,IAAI,IAAI,CAAC;IACxB,oFAAoF;IACpF,kBAAkB,CAAC,IAAI,IAAI,CAAC;IAC5B,YAAY,CAAC,IAAI;QAAE,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,uEAAuE;IACvE,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;IACrG,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,KAAK,6BAA6B,CAAC;AAEtG,wBAAsB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,GAAE,qBAAqB,EAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAoxBlH","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { realpath, stat } from \"node:fs/promises\";\nimport type { Socket } from \"node:net\";\nimport { join } from \"node:path\";\nimport { getAgentDir, VERSION } from \"../config.ts\";\nimport { AuthStorage } from \"../core/auth-storage.ts\";\nimport {\n\tcreateIrohRemoteExplicitAccess,\n\tcreateIrohRemotePresetAccess,\n\tparseIrohRemoteRpcCapabilities,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport { IrohRemotePushRelayHttpClient, revokeIrohRemoteClientPushTargets } from \"../core/remote/iroh/push.ts\";\nimport {\n\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\tIrohRemoteHostStateManager,\n\tisIrohRemoteWorkspaceHasWorktreesError,\n} from \"../core/remote/iroh/state-manager.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\nimport {\n\tgetCurrentThemeName,\n\tgetResolvedThemeColors,\n\tgetThemeByName,\n\tinitTheme,\n\tonThemeChange,\n\tsetTheme,\n} from \"../core/theme/runtime.ts\";\nimport { BRAVE_SEARCH_AUTH_PROVIDER } from \"../core/tools/web-search.ts\";\nimport type {\n\tControlClientStatus,\n\tControlLeaseStatus,\n\tControlRequest,\n\tControlRevokedClientStatus,\n\tControlWorkspaceStatus,\n} from \"./control-protocol.ts\";\nimport { CONTROL_PAIR_CANCEL_CAPABILITY, CONTROL_RPC_GRANTS_CAPABILITY, PROTOCOL_VERSION } from \"./control-protocol.ts\";\nimport {\n\ttype ControlConnection,\n\ttype ControlServer,\n\tprobeControlSocket,\n\tstartControlServer,\n} from \"./control-server.ts\";\nimport {\n\tacquireDaemonLock,\n\tDAEMON_LOCK_START_TIME_TOLERANCE_MS,\n\ttype DaemonLock,\n\ttype DaemonLockOwner,\n} from \"./daemon-lock.ts\";\nimport { KeepAwakeController, type KeepAwakeControllerOptions } from \"./keep-awake.ts\";\nimport type { DaemonLogger } from \"./log.ts\";\nimport { createDaemonLogger } from \"./log.ts\";\nimport {\n\tcreateDaemonControlSocketPath,\n\ttype DaemonPaths,\n\tensureDaemonDirs,\n\tgetDaemonPaths,\n\tisWindowsNamedPipePath,\n} from \"./paths.ts\";\nimport { verifyPidfileProcess, verifyVoltdProcessIdentity } from \"./process-identity.ts\";\nimport { VoltdStateStore } from \"./state.ts\";\nimport { handleWorktreeControlRequest, isWorktreeControlRequest, WorktreeManager } from \"./worktree-manager.ts\";\n\nexport interface Clock {\n\tnow(): number;\n}\n\nexport interface VoltdConfig {\n\tagentDir?: string;\n\tsocketPath?: string;\n\tlogPath?: string;\n\tforeground: boolean;\n\tclock?: Clock;\n\t/** Keep-awake controller overrides (tests inject a fake spawn here). */\n\tkeepAwake?: KeepAwakeControllerOptions;\n}\n\nexport interface PidfileContents {\n\tpid: number;\n\tversion: string;\n\tstartedAtMs: number;\n\tsocketPath: string;\n\t/** Per-daemon instance token; optional for pidfiles written by older versions. */\n\ttoken?: string;\n}\n\nexport function readPidfile(pidfilePath: string): PidfileContents | undefined {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(pidfilePath, \"utf8\")) as Partial<PidfileContents>;\n\t\tif (typeof parsed.pid !== \"number\" || typeof parsed.socketPath !== \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn {\n\t\t\tpid: parsed.pid,\n\t\t\tversion: typeof parsed.version === \"string\" ? parsed.version : \"unknown\",\n\t\t\tstartedAtMs: typeof parsed.startedAtMs === \"number\" ? parsed.startedAtMs : 0,\n\t\t\tsocketPath: parsed.socketPath,\n\t\t\t...(typeof parsed.token === \"string\" ? { token: parsed.token } : {}),\n\t\t};\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport const VOLTD_EXIT_ALREADY_RUNNING = 3;\nexport const VOLTD_EXIT_BIND_FAILED = 4;\nexport const VOLTD_EXIT_INCOMPATIBLE_RUNNING = 5;\n\nconst DAEMON_BIND_WAIT_TIMEOUT_MS = 75_000;\nconst DAEMON_BIND_WAIT_POLL_MS = 200;\n\nasync function sleep(ms: number): Promise<void> {\n\tawait new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Facilities later milestones build on (lease broker, Iroh host, theme service). */\nexport interface VoltdRuntimeServices {\n\tagentDir: string;\n\tpaths: DaemonPaths;\n\tlogger: DaemonLogger;\n\tstate: VoltdStateStore;\n\tstateManager: IrohRemoteHostStateManager;\n\tauditLogger: IrohRemoteAuditLogger;\n\tcontrolServer: ControlServer;\n\tkeepAwake: KeepAwakeController;\n\t/** Stored Brave Search API key for the web_search tool, persisted in auth.json. */\n\twebSearchKey: { set(apiKey: string | null): void; readonly configured: boolean };\n\trequestShutdown(reason: \"cli\" | \"signal\"): void;\n}\n\nexport interface VoltdServiceExtensionInstance {\n\t/** Extra request handling; return true when the request was handled. */\n\thandleRequest?(connection: ControlConnection, request: ControlRequest): Promise<boolean> | boolean;\n\tonConnectionClosed?(connection: ControlConnection): void;\n\t/** The daemon's active theme changed (theme_set or an extension setTheme). */\n\tonThemeChanged?(): void;\n\t/** Keep-awake status changed (control toggle, phone RPC toggle, or degradation). */\n\tonKeepAwakeChanged?(): void;\n\tstatusExtras?(): { leases?: ControlLeaseStatus[]; phoneConnections?: number; relayCount?: number };\n\t/** Redeem a relay hello token; true when the socket was taken over. */\n\tadmitRelay?(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer): boolean;\n\tshutdown?(): Promise<void>;\n}\n\nexport type VoltdServiceExtension = (services: VoltdRuntimeServices) => VoltdServiceExtensionInstance;\n\nexport async function runVoltDaemon(config: VoltdConfig, extensions: VoltdServiceExtension[] = []): Promise<number> {\n\tprocess.title = \"voltd\";\n\tconst agentDir = config.agentDir ?? getAgentDir();\n\tconst usingDefaultSocketPath = config.socketPath === undefined;\n\tlet selectedSocketPath = config.socketPath;\n\tconst resolvePaths = (): DaemonPaths => {\n\t\tconst basePaths = getDaemonPaths(agentDir);\n\t\treturn {\n\t\t\t...basePaths,\n\t\t\tsocketPath: selectedSocketPath ?? basePaths.socketPath,\n\t\t\tlogPath: config.logPath ?? basePaths.logPath,\n\t\t};\n\t};\n\tlet paths: DaemonPaths = resolvePaths();\n\tensureDaemonDirs(paths);\n\tconst logger = createDaemonLogger({\n\t\tlogPath: paths.logPath,\n\t\techoToStderr: config.foreground && process.stderr.isTTY,\n\t});\n\tconst log = logger.child(\"daemon\");\n\tconst clock: Clock = config.clock ?? { now: () => Date.now() };\n\tconst startedAtMs = clock.now();\n\tconst pidfileToken = randomUUID();\n\tlet daemonLock: DaemonLock | undefined;\n\tconst releaseDaemonLock = () => {\n\t\tdaemonLock?.release();\n\t\tdaemonLock = undefined;\n\t};\n\tconst finishBeforeServing = (code: number): number => {\n\t\treleaseDaemonLock();\n\t\treturn code;\n\t};\n\tconst verifyLockOwner = async (owner: DaemonLockOwner) => {\n\t\tconst pidfile = readPidfile(paths.pidfilePath);\n\t\tif (pidfile?.pid === owner.pid) {\n\t\t\tconst socketProbe = await probeControlSocket(pidfile.socketPath, {\n\t\t\t\tversion: VERSION,\n\t\t\t\ttimeoutMs: 500,\n\t\t\t\t...(pidfile.token === undefined ? {} : { authToken: pidfile.token }),\n\t\t\t});\n\t\t\tif (socketProbe.kind === \"healthy\" && socketProbe.status.pid === owner.pid) {\n\t\t\t\treturn \"match\" as const;\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"live-rejected\" || socketProbe.kind === \"unresponsive\") {\n\t\t\t\treturn \"unknown\" as const;\n\t\t\t}\n\t\t}\n\t\treturn verifyVoltdProcessIdentity(owner, { toleranceMs: DAEMON_LOCK_START_TIME_TOLERANCE_MS });\n\t};\n\tconst lockResult = await acquireDaemonLock(paths.lockDirPath, { verifyOwner: verifyLockOwner });\n\tif (!lockResult.ok) {\n\t\tconst pidfile = readPidfile(paths.pidfilePath);\n\t\tif (pidfile) {\n\t\t\tconst socketProbe = await probeControlSocket(pidfile.socketPath, {\n\t\t\t\tversion: VERSION,\n\t\t\t\ttimeoutMs: 500,\n\t\t\t\t...(pidfile.token === undefined ? {} : { authToken: pidfile.token }),\n\t\t\t});\n\t\t\tif (socketProbe.kind === \"healthy\") {\n\t\t\t\tlog(\"info\", `another daemon is healthy (pid ${socketProbe.status.pid}); exiting`);\n\t\t\t\treturn VOLTD_EXIT_ALREADY_RUNNING;\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"live-rejected\" && socketProbe.reason === \"protocol_mismatch\") {\n\t\t\t\tlog(\n\t\t\t\t\t\"error\",\n\t\t\t\t\t`another daemon is running with protocol ${socketProbe.protocolVersion ?? \"unknown\"}; not starting`,\n\t\t\t\t);\n\t\t\t\treturn VOLTD_EXIT_INCOMPATIBLE_RUNNING;\n\t\t\t}\n\t\t}\n\t\tconst owner = lockResult.owner ? ` by pid ${lockResult.owner.pid}` : \"\";\n\t\tlog(\"error\", `daemon startup lock is held${owner}; not starting a second daemon`);\n\t\treturn VOLTD_EXIT_BIND_FAILED;\n\t}\n\tdaemonLock = lockResult.lock;\n\tif (usingDefaultSocketPath && process.platform === \"win32\") {\n\t\tselectedSocketPath = createDaemonControlSocketPath(agentDir);\n\t\tpaths = resolvePaths();\n\t\tensureDaemonDirs(paths);\n\t}\n\n\tconst state = new VoltdStateStore({ agentDir, statePath: paths.statePath });\n\tlet migratedFromLegacyState = false;\n\tlet legacyDroppedAccess: { clients: number; revokedClients: number; pendingPairingTickets: number } | undefined;\n\ttry {\n\t\tconst loadResult = await state.load();\n\t\tmigratedFromLegacyState = loadResult.migratedFromLegacyState;\n\t\tlegacyDroppedAccess = loadResult.legacyDroppedAccess;\n\t\tif (\n\t\t\tlegacyDroppedAccess !== undefined &&\n\t\t\tlegacyDroppedAccess.clients + legacyDroppedAccess.revokedClients + legacyDroppedAccess.pendingPairingTickets >\n\t\t\t\t0\n\t\t) {\n\t\t\tlog(\n\t\t\t\t\"warn\",\n\t\t\t\t\"migrated pre-grant Iroh host state: preserved host identity and workspace metadata, \" +\n\t\t\t\t\t\"dropped legacy clients, revocations, and pending tickets; all clients must pair again\",\n\t\t\t\tlegacyDroppedAccess,\n\t\t\t);\n\t\t}\n\t} catch (error) {\n\t\tlog(\"error\", `failed to load state: ${error instanceof Error ? error.message : String(error)}`);\n\t\treturn finishBeforeServing(1);\n\t}\n\n\t// Global settings are the source of truth for daemon runtime policy. Project\n\t// settings are deliberately excluded: registering a workspace must never\n\t// widen or silently replace a paired client's workstation-level ceiling.\n\tconst settingsManager = SettingsManager.create(agentDir, agentDir, { projectTrusted: false });\n\tconst globalSettingsErrors = settingsManager.drainErrors().filter((error) => error.scope === \"global\");\n\tif (globalSettingsErrors.length > 0) {\n\t\tlog(\"error\", `failed to load global settings: ${globalSettingsErrors[0]?.error.message ?? \"unknown error\"}`);\n\t\treturn finishBeforeServing(1);\n\t}\n\tconst remoteSettings = settingsManager.getRemoteSettings() as Record<string, unknown>;\n\tconst configuredAllowTools = remoteSettings.allowTools;\n\tif (\n\t\tconfiguredAllowTools !== undefined &&\n\t\t(!Array.isArray(configuredAllowTools) || configuredAllowTools.some((tool) => typeof tool !== \"string\"))\n\t) {\n\t\tlog(\"error\", \"invalid remote.allowTools setting: expected an array of tool names\");\n\t\treturn finishBeforeServing(1);\n\t}\n\tconst allowTools =\n\t\tconfiguredAllowTools === undefined\n\t\t\t? null\n\t\t\t: Array.from(\n\t\t\t\t\tnew Set((configuredAllowTools as string[]).map((tool) => tool.trim()).filter((tool) => tool.length > 0)),\n\t\t\t\t);\n\tstate.updateSettings({ allowTools });\n\ttry {\n\t\tawait state.flush();\n\t} catch (error) {\n\t\tlog(\"error\", `failed to persist remote policy: ${error instanceof Error ? error.message : String(error)}`);\n\t\treturn finishBeforeServing(1);\n\t}\n\n\t// The daemon's theme instance: persisted name from voltd state, no hot-reload\n\t// watcher (that is the rendering TUI's job).\n\tinitTheme(state.state.settings.themeName, false);\n\tconst stateManager = new IrohRemoteHostStateManager({\n\t\tstore: {\n\t\t\tread: () => state.getHostState(),\n\t\t\twrite: async (hostState) => {\n\t\t\t\tstate.setHostState(hostState);\n\t\t\t\t// State-manager mutations are security-sensitive: callers must not\n\t\t\t\t// expose tickets or acknowledge pairing/revocation before durability.\n\t\t\t\tawait state.flush();\n\t\t\t},\n\t\t},\n\t});\n\tconst auditLogger = new IrohRemoteAuditLogger({ path: paths.auditPath });\n\tconst fallbackPushRelayClient = new IrohRemotePushRelayHttpClient({\n\t\tauthToken: process.env.VOLT_PUSH_RELAY_AUTH_TOKEN,\n\t\tbaseUrl: process.env.VOLT_PUSH_RELAY_URL,\n\t});\n\n\tlet shuttingDown = false;\n\tlet resolveExit: ((code: number) => void) | undefined;\n\tconst removeOwnedPidfile = () => {\n\t\tconst current = readPidfile(paths.pidfilePath);\n\t\tif (!current) {\n\t\t\treturn;\n\t\t}\n\t\tconst owned = current.token === pidfileToken || (current.token === undefined && current.pid === process.pid);\n\t\tif (owned) {\n\t\t\trmSync(paths.pidfilePath, { force: true });\n\t\t}\n\t};\n\tconst exitPromise = new Promise<number>((resolve) => {\n\t\tresolveExit = resolve;\n\t});\n\n\tconst extensionInstances: VoltdServiceExtensionInstance[] = [];\n\tlet controlServer: ControlServer | undefined;\n\n\tconst keepAwake = new KeepAwakeController({\n\t\t...config.keepAwake,\n\t\tlog: (level, message) => logger.log(level, \"keep-awake\", message),\n\t\tonStatusChanged: (status) => {\n\t\t\tconfig.keepAwake?.onStatusChanged?.(status);\n\t\t\tcontrolServer?.broadcast({ type: \"keep_awake_changed\", keepAwake: status });\n\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\textension.onKeepAwakeChanged?.();\n\t\t\t}\n\t\t},\n\t});\n\n\t// Brave Search key storage for phone RPC: persisted in auth.json (never in\n\t// daemon state.json) so the web_search tool's fallback sees it.\n\tlet webSearchAuthStorage: AuthStorage | undefined;\n\tconst getWebSearchAuthStorage = (): AuthStorage => {\n\t\twebSearchAuthStorage ??= AuthStorage.create(join(agentDir, \"auth.json\"));\n\t\treturn webSearchAuthStorage;\n\t};\n\tconst webSearchKey: VoltdRuntimeServices[\"webSearchKey\"] = {\n\t\tset(apiKey: string | null): void {\n\t\t\tconst authStorage = getWebSearchAuthStorage();\n\t\t\tif (apiKey === null) {\n\t\t\t\tauthStorage.remove(BRAVE_SEARCH_AUTH_PROVIDER);\n\t\t\t} else {\n\t\t\t\tauthStorage.set(BRAVE_SEARCH_AUTH_PROVIDER, { type: \"api_key\", key: apiKey });\n\t\t\t}\n\t\t},\n\t\tget configured(): boolean {\n\t\t\tconst authStorage = getWebSearchAuthStorage();\n\t\t\t// Other processes may write auth.json; re-read before reporting.\n\t\t\tauthStorage.reload();\n\t\t\tconst cred = authStorage.get(BRAVE_SEARCH_AUTH_PROVIDER);\n\t\t\treturn cred?.type === \"api_key\" && cred.key.trim().length > 0;\n\t\t},\n\t};\n\n\tconst shutdown = async (reason: \"cli\" | \"signal\") => {\n\t\tif (shuttingDown) {\n\t\t\treturn;\n\t\t}\n\t\tshuttingDown = true;\n\t\tlog(\"info\", `shutting down (${reason})`);\n\t\t// Tell control clients up front: extension shutdown can drain streaming\n\t\t// runtimes for up to 60s and clients must not wait blind. New hellos are\n\t\t// already rejected via the isShuttingDown gate.\n\t\tcontrolServer?.broadcast({ type: \"daemon_shutdown\" });\n\t\tfor (const extension of extensionInstances) {\n\t\t\ttry {\n\t\t\t\tawait extension.shutdown?.();\n\t\t\t} catch (error) {\n\t\t\t\tlog(\"error\", `extension shutdown failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t\t}\n\t\t}\n\t\tawait keepAwake.shutdown().catch(() => {});\n\t\tawait state.close().catch(() => {});\n\t\tawait auditLogger.log({ type: \"daemon_shutdown\", success: true, details: { reason } }).catch(() => {});\n\t\tawait controlServer?.close().catch(() => {});\n\t\tremoveOwnedPidfile();\n\t\treleaseDaemonLock();\n\t\tlog(\"info\", \"shutdown complete\");\n\t\tresolveExit?.(0);\n\t};\n\n\tconst requestShutdown = (reason: \"cli\" | \"signal\") => {\n\t\tvoid shutdown(reason);\n\t};\n\n\tconst toClientStatuses = (): ControlClientStatus[] =>\n\t\tstate.state.clients.map((client) => ({\n\t\t\tclientNodeId: client.nodeId,\n\t\t\t...(client.label === undefined ? {} : { label: client.label }),\n\t\t\tpairedAtMs: client.pairedAt ?? 0,\n\t\t\tlastSeenAtMs: client.lastSeenAt ?? 0,\n\t\t\tallowedTools: client.allowedTools\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((tool) => tool.trim())\n\t\t\t\t.filter((tool) => tool.length > 0),\n\t\t\trpcGrant: parseIrohRemoteRpcGrant(client.rpcGrant, \"client rpcGrant\"),\n\t\t}));\n\tconst toRevokedClientStatuses = (): ControlRevokedClientStatus[] =>\n\t\tstate.state.revokedClients.map((client) => ({\n\t\t\tclientNodeId: client.nodeId,\n\t\t\t...(client.label === undefined ? {} : { label: client.label }),\n\t\t\tpairedAtMs: client.pairedAt ?? 0,\n\t\t\tlastSeenAtMs: client.lastSeenAt ?? 0,\n\t\t\trevokedAtMs: client.revokedAt,\n\t\t\trpcGrant: parseIrohRemoteRpcGrant(client.rpcGrant, \"revoked client rpcGrant\"),\n\t\t\t...(client.rePairApprovedAt === undefined ? {} : { rePairApprovedAtMs: client.rePairApprovedAt }),\n\t\t}));\n\n\t// Worktree control fallback (no iroh extension running / request not handled\n\t// there): records via the shared state manager, no runtime awareness.\n\tlet fallbackWorktreeManager: WorktreeManager | undefined;\n\tconst getFallbackWorktreeManager = (): WorktreeManager => {\n\t\tfallbackWorktreeManager ??= new WorktreeManager({\n\t\t\tagentDir,\n\t\t\tstateManager,\n\t\t\tauditLogger,\n\t\t\tflushState: () => state.flush(),\n\t\t});\n\t\treturn fallbackWorktreeManager;\n\t};\n\n\tconst handleRequest = async (connection: ControlConnection, request: ControlRequest): Promise<void> => {\n\t\tfor (const extension of extensionInstances) {\n\t\t\tif (await extension.handleRequest?.(connection, request)) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tif (isWorktreeControlRequest(request)) {\n\t\t\tawait handleWorktreeControlRequest(connection, request, {\n\t\t\t\tmanager: getFallbackWorktreeManager(),\n\t\t\t\tstateManager,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tswitch (request.type) {\n\t\t\tcase \"status\": {\n\t\t\t\tconst workspaces: ControlWorkspaceStatus[] = state.state.workspaces.map((workspace) => ({\n\t\t\t\t\tname: workspace.name,\n\t\t\t\t\tpath: workspace.path,\n\t\t\t\t\t...(workspace.allowedTools === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\tallowedTools: workspace.allowedTools\n\t\t\t\t\t\t\t\t\t.split(\",\")\n\t\t\t\t\t\t\t\t\t.map((tool) => tool.trim())\n\t\t\t\t\t\t\t\t\t.filter((tool) => tool.length > 0),\n\t\t\t\t\t\t\t}),\n\t\t\t\t}));\n\t\t\t\tlet leases: ControlLeaseStatus[] = [];\n\t\t\t\tlet phoneConnections = 0;\n\t\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\t\tconst extras = extension.statusExtras?.();\n\t\t\t\t\tif (extras?.leases) {\n\t\t\t\t\t\tleases = leases.concat(extras.leases);\n\t\t\t\t\t}\n\t\t\t\t\tphoneConnections += extras?.phoneConnections ?? 0;\n\t\t\t\t}\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"status_result\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tversion: VERSION,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t\tpid: process.pid,\n\t\t\t\t\tstartedAtMs,\n\t\t\t\t\tcapabilities: [CONTROL_PAIR_CANCEL_CAPABILITY, CONTROL_RPC_GRANTS_CAPABILITY],\n\t\t\t\t\tleases,\n\t\t\t\t\tphoneConnections,\n\t\t\t\t\tworkspaces,\n\t\t\t\t\tclients: toClientStatuses(),\n\t\t\t\t\trevokedClients: toRevokedClientStatuses(),\n\t\t\t\t\tremotePolicy: {\n\t\t\t\t\t\tallowTools: state.state.settings.allowTools,\n\t\t\t\t\t\tdetachedRuntimeTtlMs: state.state.settings.detachedRuntimeTtlMs,\n\t\t\t\t\t},\n\t\t\t\t\tkeepAwake: keepAwake.status,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"shutdown\": {\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\trequestShutdown(\"cli\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"clients_list\": {\n\t\t\t\tconnection.send({ type: \"clients_result\", id: request.id, clients: toClientStatuses() });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"workspace_register\": {\n\t\t\t\tlet workspacePath: string;\n\t\t\t\ttry {\n\t\t\t\t\tconst stats = await stat(request.path);\n\t\t\t\t\tif (!stats.isDirectory()) {\n\t\t\t\t\t\tthrow new Error(`Workspace path is not a directory: ${request.path}`);\n\t\t\t\t\t}\n\t\t\t\t\tworkspacePath = await realpath(request.path);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"invalid_workspace\",\n\t\t\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait stateManager.upsertWorkspace({ name: request.name, path: workspacePath });\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"workspace_registered\",\n\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tdetails: { path: workspacePath, source: \"control\" },\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"workspace_unregister\": {\n\t\t\t\t// State-only fallback (no Iroh extension running).\n\t\t\t\tlet removedWorkspace: Awaited<ReturnType<IrohRemoteHostStateManager[\"unregisterWorkspace\"]>>;\n\t\t\t\ttry {\n\t\t\t\t\tremovedWorkspace = await stateManager.unregisterWorkspace(request.name);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!isIrohRemoteWorkspaceHasWorktreesError(error)) {\n\t\t\t\t\t\tthrow error;\n\t\t\t\t\t}\n\t\t\t\t\tawait auditLogger\n\t\t\t\t\t\t.log({\n\t\t\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\t\tsource: \"state_only_fallback\",\n\t\t\t\t\t\t\t\tworktreeCount: error.worktreeIds.length,\n\t\t\t\t\t\t\t\tworktreeIds: error.worktreeIds,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\tmessage: error.message,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (!removedWorkspace) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"not_found\",\n\t\t\t\t\t\tmessage: `No registered workspace named ${request.name}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait stateManager.removeLiveActivitiesForWorkspace(request.name);\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tdetails: { source: \"state_only_fallback\" },\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"client_access_update\": {\n\t\t\t\tconst access =\n\t\t\t\t\trequest.access !== undefined\n\t\t\t\t\t\t? createIrohRemotePresetAccess(request.access)\n\t\t\t\t\t\t: createIrohRemoteExplicitAccess(\n\t\t\t\t\t\t\t\trequest.allowedTools ?? [],\n\t\t\t\t\t\t\t\tparseIrohRemoteRpcCapabilities(request.rpcCapabilities),\n\t\t\t\t\t\t\t);\n\t\t\t\tconst updated = await stateManager.updateClientAccess(\n\t\t\t\t\trequest.clientNodeId,\n\t\t\t\t\trequest.expectedRevision,\n\t\t\t\t\taccess,\n\t\t\t\t);\n\t\t\t\tif (!updated.ok) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: updated.reason,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\tupdated.reason === \"revision_conflict\"\n\t\t\t\t\t\t\t\t? `RPC grant revision conflict (current ${updated.currentRevision ?? \"unknown\"})`\n\t\t\t\t\t\t\t\t: updated.reason === \"revision_exhausted\"\n\t\t\t\t\t\t\t\t\t? \"RPC grant revision is exhausted; revoke and re-pair the client\"\n\t\t\t\t\t\t\t\t\t: \"client not found\",\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait state.flush();\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"client_access_updated\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\texpectedRevision: request.expectedRevision,\n\t\t\t\t\t\t\trevision: updated.client.rpcGrant.revision,\n\t\t\t\t\t\t\tallowedTools: updated.client.allowedTools,\n\t\t\t\t\t\t\trpcCapabilities: updated.client.rpcGrant.capabilities,\n\t\t\t\t\t\t},\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"client_access_updated\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tclient: {\n\t\t\t\t\t\tclientNodeId: updated.client.nodeId,\n\t\t\t\t\t\tlabel: updated.client.label,\n\t\t\t\t\t\tpairedAtMs: updated.client.pairedAt,\n\t\t\t\t\t\tlastSeenAtMs: updated.client.lastSeenAt,\n\t\t\t\t\t\tallowedTools: updated.client.allowedTools.length === 0 ? [] : updated.client.allowedTools.split(\",\"),\n\t\t\t\t\t\trpcGrant: updated.client.rpcGrant,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"client_revoke\": {\n\t\t\t\t// State-only fallback (no Iroh extension running).\n\t\t\t\tconst result = await stateManager.revokeClient(request.clientNodeId);\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"client_revoked\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: result.revoked,\n\t\t\t\t\t\terror: result.revoked ? undefined : \"client not found\",\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tif (!result.revoked) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"not_found\", message: \"client not found\" });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif ((result.client?.pushTargets?.length ?? 0) > 0) {\n\t\t\t\t\tconst summary = await revokeIrohRemoteClientPushTargets(result.client, fallbackPushRelayClient);\n\t\t\t\t\tconst complete = summary.failed === 0 && summary.skipped === 0;\n\t\t\t\t\tif (!complete) {\n\t\t\t\t\t\tlog(\"warn\", \"remote push-target cleanup incomplete after fallback client revoke\", { ...summary });\n\t\t\t\t\t}\n\t\t\t\t\tawait auditLogger\n\t\t\t\t\t\t.log({\n\t\t\t\t\t\t\ttype: \"push_targets_revoked\",\n\t\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\t\tsuccess: complete,\n\t\t\t\t\t\t\terror: complete\n\t\t\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t\t\t: \"remote push-target cleanup incomplete; relay TTL remains the lifetime bound\",\n\t\t\t\t\t\t\tdetails: { ...summary, remainingLifetimeBound: \"relay_target_ttl\", source: \"state_only_fallback\" },\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"theme_set\": {\n\t\t\t\t// Validate before applying: runtime setTheme falls back to dark on\n\t\t\t\t// failure, which must not clobber the active theme on a bad request.\n\t\t\t\tif (!getThemeByName(request.theme)) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"invalid_theme\",\n\t\t\t\t\t\tmessage: `unknown theme: ${request.theme}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst result = setTheme(request.theme, false);\n\t\t\t\tif (!result.success) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"invalid_theme\",\n\t\t\t\t\t\tmessage: result.error ?? `unknown theme: ${request.theme}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tstate.updateSettings({ themeName: request.theme });\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"keep_awake_set\": {\n\t\t\t\tconst status = keepAwake.setEnabled(request.enabled);\n\t\t\t\tstate.updateSettings({ keepAwakeEnabled: request.enabled });\n\t\t\t\tconnection.send({ type: \"keep_awake_result\", id: request.id, keepAwake: status });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"client_approve_repair\": {\n\t\t\t\tconst result = await stateManager.approveClientRePair(request.clientNodeId);\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"client_repair_approved\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: result.approved,\n\t\t\t\t\t\terror: result.approved ? undefined : \"revoked client not found\",\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tif (!result.approved) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"not_found\",\n\t\t\t\t\t\tmessage: \"revoked client not found\",\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait state.flush();\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tcode: \"unsupported\",\n\t\t\t\t\tmessage: `unsupported control request: ${request.type}`,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t}\n\t};\n\n\tconst bindControlServer = () =>\n\t\tstartControlServer({\n\t\t\tsocketPath: paths.socketPath,\n\t\t\tversion: VERSION,\n\t\t\tauthToken: pidfileToken,\n\t\t\thandlers: {\n\t\t\t\tonRequest: handleRequest,\n\t\t\t\tisShuttingDown: () => shuttingDown,\n\t\t\t\trelayAdmission: {\n\t\t\t\t\tadmitRelay(hello, socket, bufferedRemainder) {\n\t\t\t\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\t\t\t\tif (extension.admitRelay?.(hello.relayId, hello.relayToken, socket, bufferedRemainder)) {\n\t\t\t\t\t\t\t\treturn true;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tonConnectionClosed(connection) {\n\t\t\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\t\t\textension.onConnectionClosed?.(connection);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tlog(level, message) {\n\t\t\t\t\tlogger.log(level === \"info\" ? \"info\" : level, \"control\", message);\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\n\t// All daemon instances sharing an agent directory are serialized before bind;\n\t// the socket bind remains a final guard against external listeners.\n\ttry {\n\t\tcontrolServer = await bindControlServer();\n\t} catch (error) {\n\t\tif (isErrnoException(error) && error.code === \"EADDRINUSE\") {\n\t\t\tconst deadline = Date.now() + DAEMON_BIND_WAIT_TIMEOUT_MS;\n\t\t\tconst pidfile = readPidfile(paths.pidfilePath);\n\t\t\tconst probeOptions = {\n\t\t\t\tversion: VERSION,\n\t\t\t\t...(pidfile?.socketPath === paths.socketPath && pidfile.token !== undefined\n\t\t\t\t\t? { authToken: pidfile.token }\n\t\t\t\t\t: {}),\n\t\t\t};\n\t\t\tlet socketProbe = await probeControlSocket(paths.socketPath, probeOptions);\n\t\t\tlet loggedShutdownWait = false;\n\t\t\twhile (\n\t\t\t\tsocketProbe.kind === \"live-rejected\" &&\n\t\t\t\tsocketProbe.reason === \"shutting_down\" &&\n\t\t\t\tDate.now() < deadline\n\t\t\t) {\n\t\t\t\tif (!loggedShutdownWait) {\n\t\t\t\t\tloggedShutdownWait = true;\n\t\t\t\t\tlog(\"info\", \"another daemon is shutting down; waiting for socket release\");\n\t\t\t\t}\n\t\t\t\tawait sleep(DAEMON_BIND_WAIT_POLL_MS);\n\t\t\t\tsocketProbe = await probeControlSocket(paths.socketPath, { ...probeOptions, timeoutMs: 500 });\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"healthy\") {\n\t\t\t\tlog(\"info\", `another daemon is healthy (pid ${socketProbe.status.pid}); exiting`);\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_ALREADY_RUNNING);\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"live-rejected\" && socketProbe.reason === \"protocol_mismatch\") {\n\t\t\t\tlog(\n\t\t\t\t\t\"error\",\n\t\t\t\t\t`another daemon is running with protocol ${socketProbe.protocolVersion ?? \"unknown\"}; not removing its socket`,\n\t\t\t\t);\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_INCOMPATIBLE_RUNNING);\n\t\t\t}\n\t\t\tif (pidfile && (await verifyPidfileProcess(pidfile)) === \"match\") {\n\t\t\t\tlog(\"error\", `pidfile still verifies live daemon pid ${pidfile.pid}; not removing socket`);\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t}\n\t\t\tconst canRegenerateWindowsPipe =\n\t\t\t\tprocess.platform === \"win32\" && usingDefaultSocketPath && isWindowsNamedPipePath(paths.socketPath);\n\t\t\tconst canUnlinkSocketPath = !isWindowsNamedPipePath(paths.socketPath);\n\t\t\tconst retryBind = async (message: string): Promise<boolean> => {\n\t\t\t\tlog(\"warn\", message);\n\t\t\t\tif (canRegenerateWindowsPipe) {\n\t\t\t\t\tselectedSocketPath = createDaemonControlSocketPath(agentDir);\n\t\t\t\t\tpaths = resolvePaths();\n\t\t\t\t\tensureDaemonDirs(paths);\n\t\t\t\t} else if (canUnlinkSocketPath) {\n\t\t\t\t\trmSync(paths.socketPath, { force: true });\n\t\t\t\t} else {\n\t\t\t\t\tlog(\"error\", \"control pipe is occupied and cannot be unlinked; not retrying bind\");\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tcontrolServer = await bindControlServer();\n\t\t\t\t\treturn true;\n\t\t\t\t} catch (retryError) {\n\t\t\t\t\tlog(\n\t\t\t\t\t\t\"error\",\n\t\t\t\t\t\t`bind retry failed: ${retryError instanceof Error ? retryError.message : String(retryError)}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t};\n\t\t\tif (socketProbe.kind === \"live-rejected\" || socketProbe.kind === \"unresponsive\") {\n\t\t\t\tif (\n\t\t\t\t\t!canRegenerateWindowsPipe ||\n\t\t\t\t\t(socketProbe.kind === \"live-rejected\" && socketProbe.reason === \"shutting_down\")\n\t\t\t\t) {\n\t\t\t\t\tlog(\"error\", \"control socket is owned by a live daemon that is not healthy; not removing it\");\n\t\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\t!(await retryBind(\n\t\t\t\t\t\t\"control pipe is occupied by a non-Volt listener; choosing a fresh pipe name and retrying bind once\",\n\t\t\t\t\t))\n\t\t\t\t) {\n\t\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t\t}\n\t\t\t} else if (\n\t\t\t\t!(await retryBind(\n\t\t\t\t\tcanRegenerateWindowsPipe\n\t\t\t\t\t\t? \"stale or pre-created control pipe detected; choosing a fresh pipe name and retrying bind once\"\n\t\t\t\t\t\t: \"stale socket detected; unlinking and retrying bind once\",\n\t\t\t\t))\n\t\t\t) {\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t}\n\t\t} else {\n\t\t\tlog(\"error\", `bind failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t}\n\t}\n\tif (!controlServer) {\n\t\tlog(\"error\", \"bind failed: control server was not created\");\n\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t}\n\n\t// Pidfile is discovery metadata; liveness truth is the authenticated socket probe.\n\twriteFileSync(\n\t\tpaths.pidfilePath,\n\t\t`${JSON.stringify({ pid: process.pid, version: VERSION, startedAtMs, socketPath: paths.socketPath, token: pidfileToken } satisfies PidfileContents)}\\n`,\n\t\t{ mode: 0o600 },\n\t);\n\n\t// Broadcast every successful theme change (control theme_set, or an extension\n\t// calling ctx.ui.setTheme inside a daemon-owned runtime) to all control\n\t// clients as a resolved-token snapshot, and let service extensions push it\n\t// onward (e.g. host_theme_tokens frames to capable phones, §9.5).\n\tonThemeChange(() => {\n\t\tcontrolServer?.broadcast({\n\t\t\ttype: \"theme_snapshot\",\n\t\t\tthemeName: getCurrentThemeName() ?? \"dark\",\n\t\t\ttokens: getResolvedThemeColors(),\n\t\t});\n\t\tfor (const extension of extensionInstances) {\n\t\t\textension.onThemeChanged?.();\n\t\t}\n\t});\n\n\tconst services: VoltdRuntimeServices = {\n\t\tagentDir,\n\t\tpaths,\n\t\tlogger,\n\t\tstate,\n\t\tstateManager,\n\t\tauditLogger,\n\t\tcontrolServer,\n\t\tkeepAwake,\n\t\twebSearchKey,\n\t\trequestShutdown,\n\t};\n\tfor (const extension of extensions) {\n\t\textensionInstances.push(extension(services));\n\t}\n\n\t// Re-apply the persisted keep-awake assertion now that extensions exist, so\n\t// their onKeepAwakeChanged hooks observe the startup transition.\n\tif (state.state.settings.keepAwakeEnabled === true) {\n\t\tkeepAwake.setEnabled(true);\n\t}\n\n\tconst onSignal = () => requestShutdown(\"signal\");\n\tprocess.on(\"SIGTERM\", onSignal);\n\tprocess.on(\"SIGINT\", onSignal);\n\n\tif (\n\t\tlegacyDroppedAccess !== undefined &&\n\t\tlegacyDroppedAccess.clients + legacyDroppedAccess.revokedClients + legacyDroppedAccess.pendingPairingTickets > 0\n\t) {\n\t\tawait auditLogger\n\t\t\t.log({\n\t\t\t\ttype: \"legacy_remote_access_dropped\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { ...legacyDroppedAccess, requiresRePair: true },\n\t\t\t})\n\t\t\t.catch(() => {});\n\t}\n\tawait auditLogger\n\t\t.log({\n\t\t\ttype: \"daemon_started\",\n\t\t\tsuccess: true,\n\t\t\tdetails: { version: VERSION, migratedFromLegacyState, legacyDroppedAccess },\n\t\t})\n\t\t.catch(() => {});\n\tlog(\"info\", `voltd ${VERSION} listening`, { socketPath: paths.socketPath, pid: process.pid });\n\n\tconst code = await exitPromise;\n\tprocess.off(\"SIGTERM\", onSignal);\n\tprocess.off(\"SIGINT\", onSignal);\n\treturn code;\n}\n\nfunction isErrnoException(error: unknown): error is NodeJS.ErrnoException {\n\treturn error instanceof Error && \"code\" in error;\n}\n"]}