@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/daemon/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,GACvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAC/G,OAAO,EACN,yCAAyC,EACzC,0BAA0B,EAC1B,sCAAsC,GACtC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,SAAS,EACT,aAAa,EACb,QAAQ,GACR,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAQzE,OAAO,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACxH,OAAO,EAGN,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,iBAAiB,EACjB,mCAAmC,GAGnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAmC,MAAM,iBAAiB,CAAC;AAEvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EACN,6BAA6B,EAE7B,gBAAgB,EAChB,cAAc,EACd,sBAAsB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAyBhH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAA+B;IAC7E,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAA6B,CAAC;QACzF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO;YACN,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACxE,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5E,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,KAAK,UAAU,KAAK,CAAC,EAAU,EAAiB;IAC/C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAAA,CACxD;AAiCD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAmB,EAAE,UAAU,GAA4B,EAAE,EAAmB;IACnH,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;IAClD,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC;IAC/D,IAAI,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC;IAC3C,MAAM,YAAY,GAAG,GAAgB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO;YACN,GAAG,SAAS;YACZ,UAAU,EAAE,kBAAkB,IAAI,SAAS,CAAC,UAAU;YACtD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO;SAC5C,CAAC;IAAA,CACF,CAAC;IACF,IAAI,KAAK,GAAgB,YAAY,EAAE,CAAC;IACxC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,kBAAkB,CAAC;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK;KACvD,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAU,MAAM,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,IAAI,UAAkC,CAAC;IACvC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC;QAC/B,UAAU,EAAE,OAAO,EAAE,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC;IAAA,CACvB,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC;QACrD,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAAA,CACZ,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,EAAE,KAAsB,EAAE,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE;gBAChE,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;aACpE,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC5E,OAAO,OAAgB,CAAC;YACzB,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjF,OAAO,SAAkB,CAAC;YAC3B,CAAC;QACF,CAAC;QACD,OAAO,0BAA0B,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;IAAA,CAC/F,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE;gBAChE,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;aACpE,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,EAAE,kCAAkC,WAAW,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC;gBAClF,OAAO,0BAA0B,CAAC;YACnC,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,IAAI,WAAW,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBACxF,GAAG,CACF,OAAO,EACP,2CAA2C,WAAW,CAAC,eAAe,IAAI,SAAS,gBAAgB,CACnG,CAAC;gBACF,OAAO,+BAA+B,CAAC;YACxC,CAAC;QACF,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,OAAO,EAAE,8BAA8B,KAAK,gCAAgC,CAAC,CAAC;QAClF,OAAO,sBAAsB,CAAC;IAC/B,CAAC;IACD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,IAAI,sBAAsB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5D,kBAAkB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;QAC7D,KAAK,GAAG,YAAY,EAAE,CAAC;QACvB,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5E,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,IAAI,mBAA2G,CAAC;IAChH,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,uBAAuB,GAAG,UAAU,CAAC,uBAAuB,CAAC;QAC7D,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QACrD,IACC,mBAAmB,KAAK,SAAS;YACjC,mBAAmB,CAAC,OAAO,GAAG,mBAAmB,CAAC,cAAc,GAAG,mBAAmB,CAAC,qBAAqB;gBAC3G,CAAC,EACD,CAAC;YACF,GAAG,CACF,MAAM,EACN,sFAAsF;gBACrF,uFAAuF,EACxF,mBAAmB,CACnB,CAAC;QACH,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9F,MAAM,oBAAoB,GAAG,eAAe,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACvG,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,OAAO,EAAE,mCAAmC,oBAAoB,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;QAC7G,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,cAAc,GAAG,eAAe,CAAC,iBAAiB,EAA6B,CAAC;IACtF,MAAM,oBAAoB,GAAG,cAAc,CAAC,UAAU,CAAC;IACvD,IACC,oBAAoB,KAAK,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,EACtG,CAAC;QACF,GAAG,CAAC,OAAO,EAAE,oEAAoE,CAAC,CAAC;QACnF,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,UAAU,GACf,oBAAoB,KAAK,SAAS;QACjC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC,IAAI,CACV,IAAI,GAAG,CAAE,oBAAiC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CACxG,CAAC;IACL,KAAK,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,EAAE,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3G,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,6CAA6C;IAC7C,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,0BAA0B,CAAC;QACnD,KAAK,EAAE;YACN,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE;YAChC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBAC3B,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC9B,mEAAmE;gBACnE,sEAAsE;gBACtE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YAAA,CACpB;SACD;KACD,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,MAAM,uBAAuB,GAAG,IAAI,6BAA6B,CAAC;QACjE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;QACjD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;KACxC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAAiD,CAAC;IACtD,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7G,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;IAAA,CACD,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,WAAW,GAAG,OAAO,CAAC;IAAA,CACtB,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAoC,EAAE,CAAC;IAC/D,IAAI,aAAwC,CAAC;IAE7C,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC;QACzC,GAAG,MAAM,CAAC,SAAS;QACnB,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC;QACjE,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5C,aAAa,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC5C,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAClC,CAAC;QAAA,CACD;KACD,CAAC,CAAC;IAEH,2EAA2E;IAC3E,gEAAgE;IAChE,IAAI,oBAA6C,CAAC;IAClD,MAAM,uBAAuB,GAAG,GAAgB,EAAE,CAAC;QAClD,oBAAoB,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QACzE,OAAO,oBAAoB,CAAC;IAAA,CAC5B,CAAC;IACF,MAAM,YAAY,GAAyC;QAC1D,GAAG,CAAC,MAAqB,EAAQ;YAChC,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAC;YAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACrB,WAAW,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACP,WAAW,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,CAAC;QAAA,CACD;QACD,IAAI,UAAU,GAAY;YACzB,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAC;YAC9C,iEAAiE;YACjE,WAAW,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACzD,OAAO,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAAA,CAC9D;KACD,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAwB,EAAE,EAAE,CAAC;QACpD,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,MAAM,EAAE,kBAAkB,MAAM,GAAG,CAAC,CAAC;QACzC,wEAAwE;QACxE,yEAAyE;QACzE,gDAAgD;QAChD,aAAa,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,GAAG,CAAC,OAAO,EAAE,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtG,CAAC;QACF,CAAC;QACD,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACpC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACvG,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC7C,kBAAkB,EAAE,CAAC;QACrB,iBAAiB,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAAA,CACjB,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,MAAwB,EAAE,EAAE,CAAC;QACrD,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAA,CACtB,CAAC;IAEF,MAAM,gBAAgB,GAAG,GAA0B,EAAE,CACpD,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,UAAU,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC,YAAY;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;KACrE,CAAC,CAAC,CAAC;IACL,MAAM,uBAAuB,GAAG,GAAiC,EAAE,CAClE,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,UAAU,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,SAAS;QAC7B,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;KACjG,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,uBAAoD,CAAC;IACzD,MAAM,0BAA0B,GAAG,GAAoB,EAAE,CAAC;QACzD,uBAAuB,KAAK,IAAI,eAAe,CAAC;YAC/C,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE;SAC/B,CAAC,CAAC;QACH,OAAO,uBAAuB,CAAC;IAAA,CAC/B,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,UAA6B,EAAE,OAAuB,EAAiB,EAAE,CAAC;QACtG,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC5C,IAAI,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC1D,OAAO;YACR,CAAC;QACF,CAAC;QACD,IAAI,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,4BAA4B,CAAC,UAAU,EAAE,OAAO,EAAE;gBACvD,OAAO,EAAE,0BAA0B,EAAE;gBACrC,YAAY;aACZ,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,QAAQ,EAAE,CAAC;gBACf,MAAM,UAAU,GAA6B,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBACvF,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,GAAG,CAAC,SAAS,CAAC,YAAY,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACA,YAAY,EAAE,SAAS,CAAC,YAAY;iCAClC,KAAK,CAAC,GAAG,CAAC;iCACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iCAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;yBACnC,CAAC;iBACJ,CAAC,CAAC,CAAC;gBACJ,IAAI,MAAM,GAAyB,EAAE,CAAC;gBACtC,IAAI,gBAAgB,GAAG,CAAC,CAAC;gBACzB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;oBAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC;oBAC1C,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;wBACpB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACvC,CAAC;oBACD,gBAAgB,IAAI,MAAM,EAAE,gBAAgB,IAAI,CAAC,CAAC;gBACnD,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,eAAe;oBACrB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,OAAO,EAAE,OAAO;oBAChB,eAAe,EAAE,gBAAgB;oBACjC,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,WAAW;oBACX,YAAY,EAAE,CAAC,8BAA8B,EAAE,6BAA6B,CAAC;oBAC7E,MAAM;oBACN,gBAAgB;oBAChB,UAAU;oBACV,OAAO,EAAE,gBAAgB,EAAE;oBAC3B,cAAc,EAAE,uBAAuB,EAAE;oBACzC,YAAY,EAAE;wBACb,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU;wBAC3C,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB;qBAC/D;oBACD,SAAS,EAAE,SAAS,CAAC,MAAM;iBAC3B,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBACjB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvB,OAAO;YACR,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACzF,OAAO;YACR,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC3B,IAAI,aAAqB,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACvC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBACvE,CAAC;oBACD,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC/D,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,MAAM,YAAY,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAChF,MAAM,WAAW;qBACf,GAAG,CAAC;oBACJ,IAAI,EAAE,sBAAsB;oBAC5B,SAAS,EAAE,OAAO,CAAC,IAAI;oBACvB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE;iBACnD,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACR,CAAC;YACD,KAAK,sBAAsB,EAAE,CAAC;gBAC7B,mDAAmD;gBACnD,IAAI,gBAAwF,CAAC;gBAC7F,IAAI,CAAC;oBACJ,gBAAgB,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,sCAAsC,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpD,MAAM,KAAK,CAAC;oBACb,CAAC;oBACD,MAAM,WAAW;yBACf,GAAG,CAAC;wBACJ,IAAI,EAAE,wBAAwB;wBAC9B,SAAS,EAAE,OAAO,CAAC,IAAI;wBACvB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,yCAAyC;wBAChD,OAAO,EAAE;4BACR,MAAM,EAAE,qBAAqB;4BAC7B,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;4BACvC,WAAW,EAAE,KAAK,CAAC,WAAW;yBAC9B;qBACD,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;oBAClB,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,yCAAyC;wBAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;qBACtB,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,iCAAiC,OAAO,CAAC,IAAI,EAAE;qBACxD,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,MAAM,YAAY,CAAC,gCAAgC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClE,MAAM,WAAW;qBACf,GAAG,CAAC;oBACJ,IAAI,EAAE,wBAAwB;oBAC9B,SAAS,EAAE,OAAO,CAAC,IAAI;oBACvB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;iBAC1C,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACR,CAAC;YACD,KAAK,sBAAsB,EAAE,CAAC;gBAC7B,MAAM,MAAM,GACX,OAAO,CAAC,MAAM,KAAK,SAAS;oBAC3B,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC9C,CAAC,CAAC,8BAA8B,CAC9B,OAAO,CAAC,YAAY,IAAI,EAAE,EAC1B,8BAA8B,CAAC,OAAO,CAAC,eAAe,CAAC,CACvD,CAAC;gBACL,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,kBAAkB,CACpD,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,gBAAgB,EACxB,MAAM,CACN,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBACjB,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,OAAO,CAAC,MAAM;wBACpB,OAAO,EACN,OAAO,CAAC,MAAM,KAAK,mBAAmB;4BACrC,CAAC,CAAC,wCAAwC,OAAO,CAAC,eAAe,IAAI,SAAS,GAAG;4BACjF,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,oBAAoB;gCACxC,CAAC,CAAC,gEAAgE;gCAClE,CAAC,CAAC,kBAAkB;qBACvB,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,WAAW;qBACf,GAAG,CAAC;oBACJ,IAAI,EAAE,uBAAuB;oBAC7B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACR,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;wBAC1C,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;wBAC1C,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY;wBACzC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY;qBACrD;iBACD,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,uBAAuB;oBAC7B,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,MAAM,EAAE;wBACP,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;wBACnC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;wBAC3B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;wBACnC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;wBACvC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;wBACpG,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;qBACjC;iBACD,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,KAAK,eAAe,EAAE,CAAC;gBACtB,mDAAmD;gBACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACrE,MAAM,WAAW;qBACf,GAAG,CAAC;oBACJ,IAAI,EAAE,gBAAgB;oBACtB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;iBACtD,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACnG,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnD,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;oBAChG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC;oBAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACf,GAAG,CAAC,MAAM,EAAE,oEAAoE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;oBACnG,CAAC;oBACD,MAAM,WAAW;yBACf,GAAG,CAAC;wBACJ,IAAI,EAAE,sBAAsB;wBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,OAAO,EAAE,QAAQ;wBACjB,KAAK,EAAE,QAAQ;4BACd,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,6EAA6E;wBAChF,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,EAAE,qBAAqB,EAAE;qBAClG,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACR,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBAClB,mEAAmE;gBACnE,qEAAqE;gBACrE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpC,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,kBAAkB,OAAO,CAAC,KAAK,EAAE;qBAC1C,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,kBAAkB,OAAO,CAAC,KAAK,EAAE;qBAC1D,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,KAAK,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBACnD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACR,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACrD,KAAK,CAAC,cAAc,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC5D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClF,OAAO;YACR,CAAC;YACD,KAAK,uBAAuB,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC5E,MAAM,WAAW;qBACf,GAAG,CAAC;oBACJ,IAAI,EAAE,wBAAwB;oBAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,OAAO,EAAE,MAAM,CAAC,QAAQ;oBACxB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;iBAC/D,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtB,UAAU,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,0BAA0B;qBACnC,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,OAAO;YACR,CAAC;YACD;gBACC,UAAU,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,OAAO;oBACb,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,gCAAgC,OAAO,CAAC,IAAI,EAAE;iBACvD,CAAC,CAAC;gBACH,OAAO;QACT,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC9B,kBAAkB,CAAC;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE;YACT,SAAS,EAAE,aAAa;YACxB,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY;YAClC,cAAc,EAAE;gBACf,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE;oBAC5C,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;wBAC5C,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;4BACxF,OAAO,IAAI,CAAC;wBACb,CAAC;oBACF,CAAC;oBACD,OAAO,KAAK,CAAC;gBAAA,CACb;aACD;YACD,kBAAkB,CAAC,UAAU,EAAE;gBAC9B,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;oBAC5C,SAAS,CAAC,kBAAkB,EAAE,CAAC,UAAU,CAAC,CAAC;gBAC5C,CAAC;YAAA,CACD;YACD,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAAA,CAClE;SACD;KACD,CAAC,CAAC;IAEJ,8EAA8E;IAC9E,oEAAoE;IACpE,IAAI,CAAC;QACJ,aAAa,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,2BAA2B,CAAC;YAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG;gBACpB,OAAO,EAAE,OAAO;gBAChB,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;oBAC1E,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE;oBAC9B,CAAC,CAAC,EAAE,CAAC;aACN,CAAC;YACF,IAAI,WAAW,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC3E,IAAI,kBAAkB,GAAG,KAAK,CAAC;YAC/B,OACC,WAAW,CAAC,IAAI,KAAK,eAAe;gBACpC,WAAW,CAAC,MAAM,KAAK,eAAe;gBACtC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EACpB,CAAC;gBACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBACzB,kBAAkB,GAAG,IAAI,CAAC;oBAC1B,GAAG,CAAC,MAAM,EAAE,6DAA6D,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACtC,WAAW,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,EAAE,kCAAkC,WAAW,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC;gBAClF,OAAO,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,IAAI,WAAW,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBACxF,GAAG,CACF,OAAO,EACP,2CAA2C,WAAW,CAAC,eAAe,IAAI,SAAS,2BAA2B,CAC9G,CAAC;gBACF,OAAO,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,EAAE,0CAA0C,OAAO,CAAC,GAAG,uBAAuB,CAAC,CAAC;gBAC3F,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,wBAAwB,GAC7B,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,sBAAsB,IAAI,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpG,MAAM,mBAAmB,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,KAAK,EAAE,OAAe,EAAoB,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrB,IAAI,wBAAwB,EAAE,CAAC;oBAC9B,kBAAkB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;oBAC7D,KAAK,GAAG,YAAY,EAAE,CAAC;oBACvB,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;qBAAM,IAAI,mBAAmB,EAAE,CAAC;oBAChC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACP,GAAG,CAAC,OAAO,EAAE,oEAAoE,CAAC,CAAC;oBACnF,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC;oBACJ,aAAa,GAAG,MAAM,iBAAiB,EAAE,CAAC;oBAC1C,OAAO,IAAI,CAAC;gBACb,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACrB,GAAG,CACF,OAAO,EACP,sBAAsB,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAC7F,CAAC;oBACF,OAAO,KAAK,CAAC;gBACd,CAAC;YAAA,CACD,CAAC;YACF,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjF,IACC,CAAC,wBAAwB;oBACzB,CAAC,WAAW,CAAC,IAAI,KAAK,eAAe,IAAI,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,EAC/E,CAAC;oBACF,GAAG,CAAC,OAAO,EAAE,+EAA+E,CAAC,CAAC;oBAC9F,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;gBACpD,CAAC;gBACD,IACC,CAAC,CAAC,MAAM,SAAS,CAChB,oGAAoG,CACpG,CAAC,EACD,CAAC;oBACF,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;gBACpD,CAAC;YACF,CAAC;iBAAM,IACN,CAAC,CAAC,MAAM,SAAS,CAChB,wBAAwB;gBACvB,CAAC,CAAC,+FAA+F;gBACjG,CAAC,CAAC,yDAAyD,CAC5D,CAAC,EACD,CAAC;gBACF,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;YACpD,CAAC;QACF,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvF,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;QACpD,CAAC;IACF,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;QAC5D,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IACpD,CAAC;IAED,mFAAmF;IACnF,aAAa,CACZ,KAAK,CAAC,WAAW,EACjB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAA4B,CAAC,IAAI,EACvJ,EAAE,IAAI,EAAE,KAAK,EAAE,CACf,CAAC;IAEF,8EAA8E;IAC9E,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAkE;IAClE,aAAa,CAAC,GAAG,EAAE,CAAC;QACnB,aAAa,EAAE,SAAS,CAAC;YACxB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,mBAAmB,EAAE,IAAI,MAAM;YAC1C,MAAM,EAAE,sBAAsB,EAAE;SAChC,CAAC,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC5C,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9B,CAAC;IAAA,CACD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAyB;QACtC,QAAQ;QACR,KAAK;QACL,MAAM;QACN,KAAK;QACL,YAAY;QACZ,WAAW;QACX,aAAa;QACb,SAAS;QACT,YAAY;QACZ,eAAe;KACf,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACpD,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/B,IACC,mBAAmB,KAAK,SAAS;QACjC,mBAAmB,CAAC,OAAO,GAAG,mBAAmB,CAAC,cAAc,GAAG,mBAAmB,CAAC,qBAAqB,GAAG,CAAC,EAC/G,CAAC;QACF,MAAM,WAAW;aACf,GAAG,CAAC;YACJ,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,GAAG,mBAAmB,EAAE,cAAc,EAAE,IAAI,EAAE;SACzD,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,WAAW;SACf,GAAG,CAAC;QACJ,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE;KAC3E,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IAClB,GAAG,CAAC,MAAM,EAAE,SAAS,OAAO,YAAY,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE9F,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAkC;IACzE,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AAAA,CACjD","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { realpath, stat } from \"node:fs/promises\";\nimport type { Socket } from \"node:net\";\nimport { join } from \"node:path\";\nimport { getAgentDir, VERSION } from \"../config.ts\";\nimport { AuthStorage } from \"../core/auth-storage.ts\";\nimport {\n\tcreateIrohRemoteExplicitAccess,\n\tcreateIrohRemotePresetAccess,\n\tparseIrohRemoteRpcCapabilities,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport { IrohRemotePushRelayHttpClient, revokeIrohRemoteClientPushTargets } from \"../core/remote/iroh/push.ts\";\nimport {\n\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\tIrohRemoteHostStateManager,\n\tisIrohRemoteWorkspaceHasWorktreesError,\n} from \"../core/remote/iroh/state-manager.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\nimport {\n\tgetCurrentThemeName,\n\tgetResolvedThemeColors,\n\tgetThemeByName,\n\tinitTheme,\n\tonThemeChange,\n\tsetTheme,\n} from \"../core/theme/runtime.ts\";\nimport { BRAVE_SEARCH_AUTH_PROVIDER } from \"../core/tools/web-search.ts\";\nimport type {\n\tControlClientStatus,\n\tControlLeaseStatus,\n\tControlRequest,\n\tControlRevokedClientStatus,\n\tControlWorkspaceStatus,\n} from \"./control-protocol.ts\";\nimport { CONTROL_PAIR_CANCEL_CAPABILITY, CONTROL_RPC_GRANTS_CAPABILITY, PROTOCOL_VERSION } from \"./control-protocol.ts\";\nimport {\n\ttype ControlConnection,\n\ttype ControlServer,\n\tprobeControlSocket,\n\tstartControlServer,\n} from \"./control-server.ts\";\nimport {\n\tacquireDaemonLock,\n\tDAEMON_LOCK_START_TIME_TOLERANCE_MS,\n\ttype DaemonLock,\n\ttype DaemonLockOwner,\n} from \"./daemon-lock.ts\";\nimport { KeepAwakeController, type KeepAwakeControllerOptions } from \"./keep-awake.ts\";\nimport type { DaemonLogger } from \"./log.ts\";\nimport { createDaemonLogger } from \"./log.ts\";\nimport {\n\tcreateDaemonControlSocketPath,\n\ttype DaemonPaths,\n\tensureDaemonDirs,\n\tgetDaemonPaths,\n\tisWindowsNamedPipePath,\n} from \"./paths.ts\";\nimport { verifyPidfileProcess, verifyVoltdProcessIdentity } from \"./process-identity.ts\";\nimport { VoltdStateStore } from \"./state.ts\";\nimport { handleWorktreeControlRequest, isWorktreeControlRequest, WorktreeManager } from \"./worktree-manager.ts\";\n\nexport interface Clock {\n\tnow(): number;\n}\n\nexport interface VoltdConfig {\n\tagentDir?: string;\n\tsocketPath?: string;\n\tlogPath?: string;\n\tforeground: boolean;\n\tclock?: Clock;\n\t/** Keep-awake controller overrides (tests inject a fake spawn here). */\n\tkeepAwake?: KeepAwakeControllerOptions;\n}\n\nexport interface PidfileContents {\n\tpid: number;\n\tversion: string;\n\tstartedAtMs: number;\n\tsocketPath: string;\n\t/** Per-daemon instance token; optional for pidfiles written by older versions. */\n\ttoken?: string;\n}\n\nexport function readPidfile(pidfilePath: string): PidfileContents | undefined {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(pidfilePath, \"utf8\")) as Partial<PidfileContents>;\n\t\tif (typeof parsed.pid !== \"number\" || typeof parsed.socketPath !== \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn {\n\t\t\tpid: parsed.pid,\n\t\t\tversion: typeof parsed.version === \"string\" ? parsed.version : \"unknown\",\n\t\t\tstartedAtMs: typeof parsed.startedAtMs === \"number\" ? parsed.startedAtMs : 0,\n\t\t\tsocketPath: parsed.socketPath,\n\t\t\t...(typeof parsed.token === \"string\" ? { token: parsed.token } : {}),\n\t\t};\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport const VOLTD_EXIT_ALREADY_RUNNING = 3;\nexport const VOLTD_EXIT_BIND_FAILED = 4;\nexport const VOLTD_EXIT_INCOMPATIBLE_RUNNING = 5;\n\nconst DAEMON_BIND_WAIT_TIMEOUT_MS = 75_000;\nconst DAEMON_BIND_WAIT_POLL_MS = 200;\n\nasync function sleep(ms: number): Promise<void> {\n\tawait new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Facilities later milestones build on (lease broker, Iroh host, theme service). */\nexport interface VoltdRuntimeServices {\n\tagentDir: string;\n\tpaths: DaemonPaths;\n\tlogger: DaemonLogger;\n\tstate: VoltdStateStore;\n\tstateManager: IrohRemoteHostStateManager;\n\tauditLogger: IrohRemoteAuditLogger;\n\tcontrolServer: ControlServer;\n\tkeepAwake: KeepAwakeController;\n\t/** Stored Brave Search API key for the web_search tool, persisted in auth.json. */\n\twebSearchKey: { set(apiKey: string | null): void; readonly configured: boolean };\n\trequestShutdown(reason: \"cli\" | \"signal\"): void;\n}\n\nexport interface VoltdServiceExtensionInstance {\n\t/** Extra request handling; return true when the request was handled. */\n\thandleRequest?(connection: ControlConnection, request: ControlRequest): Promise<boolean> | boolean;\n\tonConnectionClosed?(connection: ControlConnection): void;\n\t/** The daemon's active theme changed (theme_set or an extension setTheme). */\n\tonThemeChanged?(): void;\n\t/** Keep-awake status changed (control toggle, phone RPC toggle, or degradation). */\n\tonKeepAwakeChanged?(): void;\n\tstatusExtras?(): { leases?: ControlLeaseStatus[]; phoneConnections?: number; relayCount?: number };\n\t/** Redeem a relay hello token; true when the socket was taken over. */\n\tadmitRelay?(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer): boolean;\n\tshutdown?(): Promise<void>;\n}\n\nexport type VoltdServiceExtension = (services: VoltdRuntimeServices) => VoltdServiceExtensionInstance;\n\nexport async function runVoltDaemon(config: VoltdConfig, extensions: VoltdServiceExtension[] = []): Promise<number> {\n\tprocess.title = \"voltd\";\n\tconst agentDir = config.agentDir ?? getAgentDir();\n\tconst usingDefaultSocketPath = config.socketPath === undefined;\n\tlet selectedSocketPath = config.socketPath;\n\tconst resolvePaths = (): DaemonPaths => {\n\t\tconst basePaths = getDaemonPaths(agentDir);\n\t\treturn {\n\t\t\t...basePaths,\n\t\t\tsocketPath: selectedSocketPath ?? basePaths.socketPath,\n\t\t\tlogPath: config.logPath ?? basePaths.logPath,\n\t\t};\n\t};\n\tlet paths: DaemonPaths = resolvePaths();\n\tensureDaemonDirs(paths);\n\tconst logger = createDaemonLogger({\n\t\tlogPath: paths.logPath,\n\t\techoToStderr: config.foreground && process.stderr.isTTY,\n\t});\n\tconst log = logger.child(\"daemon\");\n\tconst clock: Clock = config.clock ?? { now: () => Date.now() };\n\tconst startedAtMs = clock.now();\n\tconst pidfileToken = randomUUID();\n\tlet daemonLock: DaemonLock | undefined;\n\tconst releaseDaemonLock = () => {\n\t\tdaemonLock?.release();\n\t\tdaemonLock = undefined;\n\t};\n\tconst finishBeforeServing = (code: number): number => {\n\t\treleaseDaemonLock();\n\t\treturn code;\n\t};\n\tconst verifyLockOwner = async (owner: DaemonLockOwner) => {\n\t\tconst pidfile = readPidfile(paths.pidfilePath);\n\t\tif (pidfile?.pid === owner.pid) {\n\t\t\tconst socketProbe = await probeControlSocket(pidfile.socketPath, {\n\t\t\t\tversion: VERSION,\n\t\t\t\ttimeoutMs: 500,\n\t\t\t\t...(pidfile.token === undefined ? {} : { authToken: pidfile.token }),\n\t\t\t});\n\t\t\tif (socketProbe.kind === \"healthy\" && socketProbe.status.pid === owner.pid) {\n\t\t\t\treturn \"match\" as const;\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"live-rejected\" || socketProbe.kind === \"unresponsive\") {\n\t\t\t\treturn \"unknown\" as const;\n\t\t\t}\n\t\t}\n\t\treturn verifyVoltdProcessIdentity(owner, { toleranceMs: DAEMON_LOCK_START_TIME_TOLERANCE_MS });\n\t};\n\tconst lockResult = await acquireDaemonLock(paths.lockDirPath, { verifyOwner: verifyLockOwner });\n\tif (!lockResult.ok) {\n\t\tconst pidfile = readPidfile(paths.pidfilePath);\n\t\tif (pidfile) {\n\t\t\tconst socketProbe = await probeControlSocket(pidfile.socketPath, {\n\t\t\t\tversion: VERSION,\n\t\t\t\ttimeoutMs: 500,\n\t\t\t\t...(pidfile.token === undefined ? {} : { authToken: pidfile.token }),\n\t\t\t});\n\t\t\tif (socketProbe.kind === \"healthy\") {\n\t\t\t\tlog(\"info\", `another daemon is healthy (pid ${socketProbe.status.pid}); exiting`);\n\t\t\t\treturn VOLTD_EXIT_ALREADY_RUNNING;\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"live-rejected\" && socketProbe.reason === \"protocol_mismatch\") {\n\t\t\t\tlog(\n\t\t\t\t\t\"error\",\n\t\t\t\t\t`another daemon is running with protocol ${socketProbe.protocolVersion ?? \"unknown\"}; not starting`,\n\t\t\t\t);\n\t\t\t\treturn VOLTD_EXIT_INCOMPATIBLE_RUNNING;\n\t\t\t}\n\t\t}\n\t\tconst owner = lockResult.owner ? ` by pid ${lockResult.owner.pid}` : \"\";\n\t\tlog(\"error\", `daemon startup lock is held${owner}; not starting a second daemon`);\n\t\treturn VOLTD_EXIT_BIND_FAILED;\n\t}\n\tdaemonLock = lockResult.lock;\n\tif (usingDefaultSocketPath && process.platform === \"win32\") {\n\t\tselectedSocketPath = createDaemonControlSocketPath(agentDir);\n\t\tpaths = resolvePaths();\n\t\tensureDaemonDirs(paths);\n\t}\n\n\tconst state = new VoltdStateStore({ agentDir, statePath: paths.statePath });\n\tlet migratedFromLegacyState = false;\n\tlet legacyDroppedAccess: { clients: number; revokedClients: number; pendingPairingTickets: number } | undefined;\n\ttry {\n\t\tconst loadResult = await state.load();\n\t\tmigratedFromLegacyState = loadResult.migratedFromLegacyState;\n\t\tlegacyDroppedAccess = loadResult.legacyDroppedAccess;\n\t\tif (\n\t\t\tlegacyDroppedAccess !== undefined &&\n\t\t\tlegacyDroppedAccess.clients + legacyDroppedAccess.revokedClients + legacyDroppedAccess.pendingPairingTickets >\n\t\t\t\t0\n\t\t) {\n\t\t\tlog(\n\t\t\t\t\"warn\",\n\t\t\t\t\"migrated pre-grant Iroh host state: preserved host identity and workspace metadata, \" +\n\t\t\t\t\t\"dropped legacy clients, revocations, and pending tickets; all clients must pair again\",\n\t\t\t\tlegacyDroppedAccess,\n\t\t\t);\n\t\t}\n\t} catch (error) {\n\t\tlog(\"error\", `failed to load state: ${error instanceof Error ? error.message : String(error)}`);\n\t\treturn finishBeforeServing(1);\n\t}\n\n\t// Global settings are the source of truth for daemon runtime policy. Project\n\t// settings are deliberately excluded: registering a workspace must never\n\t// widen or silently replace a paired client's workstation-level ceiling.\n\tconst settingsManager = SettingsManager.create(agentDir, agentDir, { projectTrusted: false });\n\tconst globalSettingsErrors = settingsManager.drainErrors().filter((error) => error.scope === \"global\");\n\tif (globalSettingsErrors.length > 0) {\n\t\tlog(\"error\", `failed to load global settings: ${globalSettingsErrors[0]?.error.message ?? \"unknown error\"}`);\n\t\treturn finishBeforeServing(1);\n\t}\n\tconst remoteSettings = settingsManager.getRemoteSettings() as Record<string, unknown>;\n\tconst configuredAllowTools = remoteSettings.allowTools;\n\tif (\n\t\tconfiguredAllowTools !== undefined &&\n\t\t(!Array.isArray(configuredAllowTools) || configuredAllowTools.some((tool) => typeof tool !== \"string\"))\n\t) {\n\t\tlog(\"error\", \"invalid remote.allowTools setting: expected an array of tool names\");\n\t\treturn finishBeforeServing(1);\n\t}\n\tconst allowTools =\n\t\tconfiguredAllowTools === undefined\n\t\t\t? null\n\t\t\t: Array.from(\n\t\t\t\t\tnew Set((configuredAllowTools as string[]).map((tool) => tool.trim()).filter((tool) => tool.length > 0)),\n\t\t\t\t);\n\tstate.updateSettings({ allowTools });\n\ttry {\n\t\tawait state.flush();\n\t} catch (error) {\n\t\tlog(\"error\", `failed to persist remote policy: ${error instanceof Error ? error.message : String(error)}`);\n\t\treturn finishBeforeServing(1);\n\t}\n\n\t// The daemon's theme instance: persisted name from voltd state, no hot-reload\n\t// watcher (that is the rendering TUI's job).\n\tinitTheme(state.state.settings.themeName, false);\n\tconst stateManager = new IrohRemoteHostStateManager({\n\t\tstore: {\n\t\t\tread: () => state.getHostState(),\n\t\t\twrite: async (hostState) => {\n\t\t\t\tstate.setHostState(hostState);\n\t\t\t\t// State-manager mutations are security-sensitive: callers must not\n\t\t\t\t// expose tickets or acknowledge pairing/revocation before durability.\n\t\t\t\tawait state.flush();\n\t\t\t},\n\t\t},\n\t});\n\tconst auditLogger = new IrohRemoteAuditLogger({ path: paths.auditPath });\n\tconst fallbackPushRelayClient = new IrohRemotePushRelayHttpClient({\n\t\tauthToken: process.env.VOLT_PUSH_RELAY_AUTH_TOKEN,\n\t\tbaseUrl: process.env.VOLT_PUSH_RELAY_URL,\n\t});\n\n\tlet shuttingDown = false;\n\tlet resolveExit: ((code: number) => void) | undefined;\n\tconst removeOwnedPidfile = () => {\n\t\tconst current = readPidfile(paths.pidfilePath);\n\t\tif (!current) {\n\t\t\treturn;\n\t\t}\n\t\tconst owned = current.token === pidfileToken || (current.token === undefined && current.pid === process.pid);\n\t\tif (owned) {\n\t\t\trmSync(paths.pidfilePath, { force: true });\n\t\t}\n\t};\n\tconst exitPromise = new Promise<number>((resolve) => {\n\t\tresolveExit = resolve;\n\t});\n\n\tconst extensionInstances: VoltdServiceExtensionInstance[] = [];\n\tlet controlServer: ControlServer | undefined;\n\n\tconst keepAwake = new KeepAwakeController({\n\t\t...config.keepAwake,\n\t\tlog: (level, message) => logger.log(level, \"keep-awake\", message),\n\t\tonStatusChanged: (status) => {\n\t\t\tconfig.keepAwake?.onStatusChanged?.(status);\n\t\t\tcontrolServer?.broadcast({ type: \"keep_awake_changed\", keepAwake: status });\n\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\textension.onKeepAwakeChanged?.();\n\t\t\t}\n\t\t},\n\t});\n\n\t// Brave Search key storage for phone RPC: persisted in auth.json (never in\n\t// daemon state.json) so the web_search tool's fallback sees it.\n\tlet webSearchAuthStorage: AuthStorage | undefined;\n\tconst getWebSearchAuthStorage = (): AuthStorage => {\n\t\twebSearchAuthStorage ??= AuthStorage.create(join(agentDir, \"auth.json\"));\n\t\treturn webSearchAuthStorage;\n\t};\n\tconst webSearchKey: VoltdRuntimeServices[\"webSearchKey\"] = {\n\t\tset(apiKey: string | null): void {\n\t\t\tconst authStorage = getWebSearchAuthStorage();\n\t\t\tif (apiKey === null) {\n\t\t\t\tauthStorage.remove(BRAVE_SEARCH_AUTH_PROVIDER);\n\t\t\t} else {\n\t\t\t\tauthStorage.set(BRAVE_SEARCH_AUTH_PROVIDER, { type: \"api_key\", key: apiKey });\n\t\t\t}\n\t\t},\n\t\tget configured(): boolean {\n\t\t\tconst authStorage = getWebSearchAuthStorage();\n\t\t\t// Other processes may write auth.json; re-read before reporting.\n\t\t\tauthStorage.reload();\n\t\t\tconst cred = authStorage.get(BRAVE_SEARCH_AUTH_PROVIDER);\n\t\t\treturn cred?.type === \"api_key\" && cred.key.trim().length > 0;\n\t\t},\n\t};\n\n\tconst shutdown = async (reason: \"cli\" | \"signal\") => {\n\t\tif (shuttingDown) {\n\t\t\treturn;\n\t\t}\n\t\tshuttingDown = true;\n\t\tlog(\"info\", `shutting down (${reason})`);\n\t\t// Tell control clients up front: extension shutdown can drain streaming\n\t\t// runtimes for up to 60s and clients must not wait blind. New hellos are\n\t\t// already rejected via the isShuttingDown gate.\n\t\tcontrolServer?.broadcast({ type: \"daemon_shutdown\" });\n\t\tfor (const extension of extensionInstances) {\n\t\t\ttry {\n\t\t\t\tawait extension.shutdown?.();\n\t\t\t} catch (error) {\n\t\t\t\tlog(\"error\", `extension shutdown failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t\t}\n\t\t}\n\t\tawait keepAwake.shutdown().catch(() => {});\n\t\tawait state.close().catch(() => {});\n\t\tawait auditLogger.log({ type: \"daemon_shutdown\", success: true, details: { reason } }).catch(() => {});\n\t\tawait controlServer?.close().catch(() => {});\n\t\tremoveOwnedPidfile();\n\t\treleaseDaemonLock();\n\t\tlog(\"info\", \"shutdown complete\");\n\t\tresolveExit?.(0);\n\t};\n\n\tconst requestShutdown = (reason: \"cli\" | \"signal\") => {\n\t\tvoid shutdown(reason);\n\t};\n\n\tconst toClientStatuses = (): ControlClientStatus[] =>\n\t\tstate.state.clients.map((client) => ({\n\t\t\tclientNodeId: client.nodeId,\n\t\t\t...(client.label === undefined ? {} : { label: client.label }),\n\t\t\tpairedAtMs: client.pairedAt ?? 0,\n\t\t\tlastSeenAtMs: client.lastSeenAt ?? 0,\n\t\t\tallowedTools: client.allowedTools\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((tool) => tool.trim())\n\t\t\t\t.filter((tool) => tool.length > 0),\n\t\t\trpcGrant: parseIrohRemoteRpcGrant(client.rpcGrant, \"client rpcGrant\"),\n\t\t}));\n\tconst toRevokedClientStatuses = (): ControlRevokedClientStatus[] =>\n\t\tstate.state.revokedClients.map((client) => ({\n\t\t\tclientNodeId: client.nodeId,\n\t\t\t...(client.label === undefined ? {} : { label: client.label }),\n\t\t\tpairedAtMs: client.pairedAt ?? 0,\n\t\t\tlastSeenAtMs: client.lastSeenAt ?? 0,\n\t\t\trevokedAtMs: client.revokedAt,\n\t\t\trpcGrant: parseIrohRemoteRpcGrant(client.rpcGrant, \"revoked client rpcGrant\"),\n\t\t\t...(client.rePairApprovedAt === undefined ? {} : { rePairApprovedAtMs: client.rePairApprovedAt }),\n\t\t}));\n\n\t// Worktree control fallback (no iroh extension running / request not handled\n\t// there): records via the shared state manager, no runtime awareness.\n\tlet fallbackWorktreeManager: WorktreeManager | undefined;\n\tconst getFallbackWorktreeManager = (): WorktreeManager => {\n\t\tfallbackWorktreeManager ??= new WorktreeManager({\n\t\t\tagentDir,\n\t\t\tstateManager,\n\t\t\tauditLogger,\n\t\t\tflushState: () => state.flush(),\n\t\t});\n\t\treturn fallbackWorktreeManager;\n\t};\n\n\tconst handleRequest = async (connection: ControlConnection, request: ControlRequest): Promise<void> => {\n\t\tfor (const extension of extensionInstances) {\n\t\t\tif (await extension.handleRequest?.(connection, request)) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tif (isWorktreeControlRequest(request)) {\n\t\t\tawait handleWorktreeControlRequest(connection, request, {\n\t\t\t\tmanager: getFallbackWorktreeManager(),\n\t\t\t\tstateManager,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tswitch (request.type) {\n\t\t\tcase \"status\": {\n\t\t\t\tconst workspaces: ControlWorkspaceStatus[] = state.state.workspaces.map((workspace) => ({\n\t\t\t\t\tname: workspace.name,\n\t\t\t\t\tpath: workspace.path,\n\t\t\t\t\t...(workspace.allowedTools === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\tallowedTools: workspace.allowedTools\n\t\t\t\t\t\t\t\t\t.split(\",\")\n\t\t\t\t\t\t\t\t\t.map((tool) => tool.trim())\n\t\t\t\t\t\t\t\t\t.filter((tool) => tool.length > 0),\n\t\t\t\t\t\t\t}),\n\t\t\t\t}));\n\t\t\t\tlet leases: ControlLeaseStatus[] = [];\n\t\t\t\tlet phoneConnections = 0;\n\t\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\t\tconst extras = extension.statusExtras?.();\n\t\t\t\t\tif (extras?.leases) {\n\t\t\t\t\t\tleases = leases.concat(extras.leases);\n\t\t\t\t\t}\n\t\t\t\t\tphoneConnections += extras?.phoneConnections ?? 0;\n\t\t\t\t}\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"status_result\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tversion: VERSION,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t\tpid: process.pid,\n\t\t\t\t\tstartedAtMs,\n\t\t\t\t\tcapabilities: [CONTROL_PAIR_CANCEL_CAPABILITY, CONTROL_RPC_GRANTS_CAPABILITY],\n\t\t\t\t\tleases,\n\t\t\t\t\tphoneConnections,\n\t\t\t\t\tworkspaces,\n\t\t\t\t\tclients: toClientStatuses(),\n\t\t\t\t\trevokedClients: toRevokedClientStatuses(),\n\t\t\t\t\tremotePolicy: {\n\t\t\t\t\t\tallowTools: state.state.settings.allowTools,\n\t\t\t\t\t\tdetachedRuntimeTtlMs: state.state.settings.detachedRuntimeTtlMs,\n\t\t\t\t\t},\n\t\t\t\t\tkeepAwake: keepAwake.status,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"shutdown\": {\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\trequestShutdown(\"cli\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"clients_list\": {\n\t\t\t\tconnection.send({ type: \"clients_result\", id: request.id, clients: toClientStatuses() });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"workspace_register\": {\n\t\t\t\tlet workspacePath: string;\n\t\t\t\ttry {\n\t\t\t\t\tconst stats = await stat(request.path);\n\t\t\t\t\tif (!stats.isDirectory()) {\n\t\t\t\t\t\tthrow new Error(`Workspace path is not a directory: ${request.path}`);\n\t\t\t\t\t}\n\t\t\t\t\tworkspacePath = await realpath(request.path);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"invalid_workspace\",\n\t\t\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait stateManager.upsertWorkspace({ name: request.name, path: workspacePath });\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"workspace_registered\",\n\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tdetails: { path: workspacePath, source: \"control\" },\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"workspace_unregister\": {\n\t\t\t\t// State-only fallback (no Iroh extension running).\n\t\t\t\tlet removedWorkspace: Awaited<ReturnType<IrohRemoteHostStateManager[\"unregisterWorkspace\"]>>;\n\t\t\t\ttry {\n\t\t\t\t\tremovedWorkspace = await stateManager.unregisterWorkspace(request.name);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!isIrohRemoteWorkspaceHasWorktreesError(error)) {\n\t\t\t\t\t\tthrow error;\n\t\t\t\t\t}\n\t\t\t\t\tawait auditLogger\n\t\t\t\t\t\t.log({\n\t\t\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\terror: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\t\tsource: \"state_only_fallback\",\n\t\t\t\t\t\t\t\tworktreeCount: error.worktreeIds.length,\n\t\t\t\t\t\t\t\tworktreeIds: error.worktreeIds,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\tmessage: error.message,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (!removedWorkspace) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"not_found\",\n\t\t\t\t\t\tmessage: `No registered workspace named ${request.name}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait stateManager.removeLiveActivitiesForWorkspace(request.name);\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tdetails: { source: \"state_only_fallback\" },\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"client_access_update\": {\n\t\t\t\tconst access =\n\t\t\t\t\trequest.access !== undefined\n\t\t\t\t\t\t? createIrohRemotePresetAccess(request.access)\n\t\t\t\t\t\t: createIrohRemoteExplicitAccess(\n\t\t\t\t\t\t\t\trequest.allowedTools ?? [],\n\t\t\t\t\t\t\t\tparseIrohRemoteRpcCapabilities(request.rpcCapabilities),\n\t\t\t\t\t\t\t);\n\t\t\t\tconst updated = await stateManager.updateClientAccess(\n\t\t\t\t\trequest.clientNodeId,\n\t\t\t\t\trequest.expectedRevision,\n\t\t\t\t\taccess,\n\t\t\t\t);\n\t\t\t\tif (!updated.ok) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: updated.reason,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\tupdated.reason === \"revision_conflict\"\n\t\t\t\t\t\t\t\t? `RPC grant revision conflict (current ${updated.currentRevision ?? \"unknown\"})`\n\t\t\t\t\t\t\t\t: updated.reason === \"revision_exhausted\"\n\t\t\t\t\t\t\t\t\t? \"RPC grant revision is exhausted; revoke and re-pair the client\"\n\t\t\t\t\t\t\t\t\t: \"client not found\",\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait state.flush();\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"client_access_updated\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\texpectedRevision: request.expectedRevision,\n\t\t\t\t\t\t\trevision: updated.client.rpcGrant.revision,\n\t\t\t\t\t\t\tallowedTools: updated.client.allowedTools,\n\t\t\t\t\t\t\trpcCapabilities: updated.client.rpcGrant.capabilities,\n\t\t\t\t\t\t},\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"client_access_updated\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tclient: {\n\t\t\t\t\t\tclientNodeId: updated.client.nodeId,\n\t\t\t\t\t\tlabel: updated.client.label,\n\t\t\t\t\t\tpairedAtMs: updated.client.pairedAt,\n\t\t\t\t\t\tlastSeenAtMs: updated.client.lastSeenAt,\n\t\t\t\t\t\tallowedTools: updated.client.allowedTools.length === 0 ? [] : updated.client.allowedTools.split(\",\"),\n\t\t\t\t\t\trpcGrant: updated.client.rpcGrant,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"client_revoke\": {\n\t\t\t\t// State-only fallback (no Iroh extension running).\n\t\t\t\tconst result = await stateManager.revokeClient(request.clientNodeId);\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"client_revoked\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: result.revoked,\n\t\t\t\t\t\terror: result.revoked ? undefined : \"client not found\",\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tif (!result.revoked) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"not_found\", message: \"client not found\" });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif ((result.client?.pushTargets?.length ?? 0) > 0) {\n\t\t\t\t\tconst summary = await revokeIrohRemoteClientPushTargets(result.client, fallbackPushRelayClient);\n\t\t\t\t\tconst complete = summary.failed === 0 && summary.skipped === 0;\n\t\t\t\t\tif (!complete) {\n\t\t\t\t\t\tlog(\"warn\", \"remote push-target cleanup incomplete after fallback client revoke\", { ...summary });\n\t\t\t\t\t}\n\t\t\t\t\tawait auditLogger\n\t\t\t\t\t\t.log({\n\t\t\t\t\t\t\ttype: \"push_targets_revoked\",\n\t\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\t\tsuccess: complete,\n\t\t\t\t\t\t\terror: complete\n\t\t\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t\t\t: \"remote push-target cleanup incomplete; relay TTL remains the lifetime bound\",\n\t\t\t\t\t\t\tdetails: { ...summary, remainingLifetimeBound: \"relay_target_ttl\", source: \"state_only_fallback\" },\n\t\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => {});\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"theme_set\": {\n\t\t\t\t// Validate before applying: runtime setTheme falls back to dark on\n\t\t\t\t// failure, which must not clobber the active theme on a bad request.\n\t\t\t\tif (!getThemeByName(request.theme)) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"invalid_theme\",\n\t\t\t\t\t\tmessage: `unknown theme: ${request.theme}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst result = setTheme(request.theme, false);\n\t\t\t\tif (!result.success) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"invalid_theme\",\n\t\t\t\t\t\tmessage: result.error ?? `unknown theme: ${request.theme}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tstate.updateSettings({ themeName: request.theme });\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"keep_awake_set\": {\n\t\t\t\tconst status = keepAwake.setEnabled(request.enabled);\n\t\t\t\tstate.updateSettings({ keepAwakeEnabled: request.enabled });\n\t\t\t\tconnection.send({ type: \"keep_awake_result\", id: request.id, keepAwake: status });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcase \"client_approve_repair\": {\n\t\t\t\tconst result = await stateManager.approveClientRePair(request.clientNodeId);\n\t\t\t\tawait auditLogger\n\t\t\t\t\t.log({\n\t\t\t\t\t\ttype: \"client_repair_approved\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: result.approved,\n\t\t\t\t\t\terror: result.approved ? undefined : \"revoked client not found\",\n\t\t\t\t\t})\n\t\t\t\t\t.catch(() => {});\n\t\t\t\tif (!result.approved) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"not_found\",\n\t\t\t\t\t\tmessage: \"revoked client not found\",\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait state.flush();\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tcode: \"unsupported\",\n\t\t\t\t\tmessage: `unsupported control request: ${request.type}`,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t}\n\t};\n\n\tconst bindControlServer = () =>\n\t\tstartControlServer({\n\t\t\tsocketPath: paths.socketPath,\n\t\t\tversion: VERSION,\n\t\t\tauthToken: pidfileToken,\n\t\t\thandlers: {\n\t\t\t\tonRequest: handleRequest,\n\t\t\t\tisShuttingDown: () => shuttingDown,\n\t\t\t\trelayAdmission: {\n\t\t\t\t\tadmitRelay(hello, socket, bufferedRemainder) {\n\t\t\t\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\t\t\t\tif (extension.admitRelay?.(hello.relayId, hello.relayToken, socket, bufferedRemainder)) {\n\t\t\t\t\t\t\t\treturn true;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\treturn false;\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tonConnectionClosed(connection) {\n\t\t\t\t\tfor (const extension of extensionInstances) {\n\t\t\t\t\t\textension.onConnectionClosed?.(connection);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tlog(level, message) {\n\t\t\t\t\tlogger.log(level === \"info\" ? \"info\" : level, \"control\", message);\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\n\t// All daemon instances sharing an agent directory are serialized before bind;\n\t// the socket bind remains a final guard against external listeners.\n\ttry {\n\t\tcontrolServer = await bindControlServer();\n\t} catch (error) {\n\t\tif (isErrnoException(error) && error.code === \"EADDRINUSE\") {\n\t\t\tconst deadline = Date.now() + DAEMON_BIND_WAIT_TIMEOUT_MS;\n\t\t\tconst pidfile = readPidfile(paths.pidfilePath);\n\t\t\tconst probeOptions = {\n\t\t\t\tversion: VERSION,\n\t\t\t\t...(pidfile?.socketPath === paths.socketPath && pidfile.token !== undefined\n\t\t\t\t\t? { authToken: pidfile.token }\n\t\t\t\t\t: {}),\n\t\t\t};\n\t\t\tlet socketProbe = await probeControlSocket(paths.socketPath, probeOptions);\n\t\t\tlet loggedShutdownWait = false;\n\t\t\twhile (\n\t\t\t\tsocketProbe.kind === \"live-rejected\" &&\n\t\t\t\tsocketProbe.reason === \"shutting_down\" &&\n\t\t\t\tDate.now() < deadline\n\t\t\t) {\n\t\t\t\tif (!loggedShutdownWait) {\n\t\t\t\t\tloggedShutdownWait = true;\n\t\t\t\t\tlog(\"info\", \"another daemon is shutting down; waiting for socket release\");\n\t\t\t\t}\n\t\t\t\tawait sleep(DAEMON_BIND_WAIT_POLL_MS);\n\t\t\t\tsocketProbe = await probeControlSocket(paths.socketPath, { ...probeOptions, timeoutMs: 500 });\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"healthy\") {\n\t\t\t\tlog(\"info\", `another daemon is healthy (pid ${socketProbe.status.pid}); exiting`);\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_ALREADY_RUNNING);\n\t\t\t}\n\t\t\tif (socketProbe.kind === \"live-rejected\" && socketProbe.reason === \"protocol_mismatch\") {\n\t\t\t\tlog(\n\t\t\t\t\t\"error\",\n\t\t\t\t\t`another daemon is running with protocol ${socketProbe.protocolVersion ?? \"unknown\"}; not removing its socket`,\n\t\t\t\t);\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_INCOMPATIBLE_RUNNING);\n\t\t\t}\n\t\t\tif (pidfile && (await verifyPidfileProcess(pidfile)) === \"match\") {\n\t\t\t\tlog(\"error\", `pidfile still verifies live daemon pid ${pidfile.pid}; not removing socket`);\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t}\n\t\t\tconst canRegenerateWindowsPipe =\n\t\t\t\tprocess.platform === \"win32\" && usingDefaultSocketPath && isWindowsNamedPipePath(paths.socketPath);\n\t\t\tconst canUnlinkSocketPath = !isWindowsNamedPipePath(paths.socketPath);\n\t\t\tconst retryBind = async (message: string): Promise<boolean> => {\n\t\t\t\tlog(\"warn\", message);\n\t\t\t\tif (canRegenerateWindowsPipe) {\n\t\t\t\t\tselectedSocketPath = createDaemonControlSocketPath(agentDir);\n\t\t\t\t\tpaths = resolvePaths();\n\t\t\t\t\tensureDaemonDirs(paths);\n\t\t\t\t} else if (canUnlinkSocketPath) {\n\t\t\t\t\trmSync(paths.socketPath, { force: true });\n\t\t\t\t} else {\n\t\t\t\t\tlog(\"error\", \"control pipe is occupied and cannot be unlinked; not retrying bind\");\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tcontrolServer = await bindControlServer();\n\t\t\t\t\treturn true;\n\t\t\t\t} catch (retryError) {\n\t\t\t\t\tlog(\n\t\t\t\t\t\t\"error\",\n\t\t\t\t\t\t`bind retry failed: ${retryError instanceof Error ? retryError.message : String(retryError)}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t};\n\t\t\tif (socketProbe.kind === \"live-rejected\" || socketProbe.kind === \"unresponsive\") {\n\t\t\t\tif (\n\t\t\t\t\t!canRegenerateWindowsPipe ||\n\t\t\t\t\t(socketProbe.kind === \"live-rejected\" && socketProbe.reason === \"shutting_down\")\n\t\t\t\t) {\n\t\t\t\t\tlog(\"error\", \"control socket is owned by a live daemon that is not healthy; not removing it\");\n\t\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\t!(await retryBind(\n\t\t\t\t\t\t\"control pipe is occupied by a non-Volt listener; choosing a fresh pipe name and retrying bind once\",\n\t\t\t\t\t))\n\t\t\t\t) {\n\t\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t\t}\n\t\t\t} else if (\n\t\t\t\t!(await retryBind(\n\t\t\t\t\tcanRegenerateWindowsPipe\n\t\t\t\t\t\t? \"stale or pre-created control pipe detected; choosing a fresh pipe name and retrying bind once\"\n\t\t\t\t\t\t: \"stale socket detected; unlinking and retrying bind once\",\n\t\t\t\t))\n\t\t\t) {\n\t\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t\t}\n\t\t} else {\n\t\t\tlog(\"error\", `bind failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t\t}\n\t}\n\tif (!controlServer) {\n\t\tlog(\"error\", \"bind failed: control server was not created\");\n\t\treturn finishBeforeServing(VOLTD_EXIT_BIND_FAILED);\n\t}\n\n\t// Pidfile is discovery metadata; liveness truth is the authenticated socket probe.\n\twriteFileSync(\n\t\tpaths.pidfilePath,\n\t\t`${JSON.stringify({ pid: process.pid, version: VERSION, startedAtMs, socketPath: paths.socketPath, token: pidfileToken } satisfies PidfileContents)}\\n`,\n\t\t{ mode: 0o600 },\n\t);\n\n\t// Broadcast every successful theme change (control theme_set, or an extension\n\t// calling ctx.ui.setTheme inside a daemon-owned runtime) to all control\n\t// clients as a resolved-token snapshot, and let service extensions push it\n\t// onward (e.g. host_theme_tokens frames to capable phones, §9.5).\n\tonThemeChange(() => {\n\t\tcontrolServer?.broadcast({\n\t\t\ttype: \"theme_snapshot\",\n\t\t\tthemeName: getCurrentThemeName() ?? \"dark\",\n\t\t\ttokens: getResolvedThemeColors(),\n\t\t});\n\t\tfor (const extension of extensionInstances) {\n\t\t\textension.onThemeChanged?.();\n\t\t}\n\t});\n\n\tconst services: VoltdRuntimeServices = {\n\t\tagentDir,\n\t\tpaths,\n\t\tlogger,\n\t\tstate,\n\t\tstateManager,\n\t\tauditLogger,\n\t\tcontrolServer,\n\t\tkeepAwake,\n\t\twebSearchKey,\n\t\trequestShutdown,\n\t};\n\tfor (const extension of extensions) {\n\t\textensionInstances.push(extension(services));\n\t}\n\n\t// Re-apply the persisted keep-awake assertion now that extensions exist, so\n\t// their onKeepAwakeChanged hooks observe the startup transition.\n\tif (state.state.settings.keepAwakeEnabled === true) {\n\t\tkeepAwake.setEnabled(true);\n\t}\n\n\tconst onSignal = () => requestShutdown(\"signal\");\n\tprocess.on(\"SIGTERM\", onSignal);\n\tprocess.on(\"SIGINT\", onSignal);\n\n\tif (\n\t\tlegacyDroppedAccess !== undefined &&\n\t\tlegacyDroppedAccess.clients + legacyDroppedAccess.revokedClients + legacyDroppedAccess.pendingPairingTickets > 0\n\t) {\n\t\tawait auditLogger\n\t\t\t.log({\n\t\t\t\ttype: \"legacy_remote_access_dropped\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { ...legacyDroppedAccess, requiresRePair: true },\n\t\t\t})\n\t\t\t.catch(() => {});\n\t}\n\tawait auditLogger\n\t\t.log({\n\t\t\ttype: \"daemon_started\",\n\t\t\tsuccess: true,\n\t\t\tdetails: { version: VERSION, migratedFromLegacyState, legacyDroppedAccess },\n\t\t})\n\t\t.catch(() => {});\n\tlog(\"info\", `voltd ${VERSION} listening`, { socketPath: paths.socketPath, pid: process.pid });\n\n\tconst code = await exitPromise;\n\tprocess.off(\"SIGTERM\", onSignal);\n\tprocess.off(\"SIGINT\", onSignal);\n\treturn code;\n}\n\nfunction isErrnoException(error: unknown): error is NodeJS.ErrnoException {\n\treturn error instanceof Error && \"code\" in error;\n}\n"]}

package/dist/daemon/paths.d.ts

@@ -0,0 +1,32 @@
+/** True for Windows named-pipe socket paths (\\.\pipe\... or \\?\pipe\...). */
+export declare function isWindowsNamedPipePath(socketPath: string): boolean;
+export interface DaemonPaths {
+    daemonDir: string;
+    socketPath: string;
+    pidfilePath: string;
+    lockDirPath: string;
+    logPath: string;
+    statePath: string;
+    auditPath: string;
+}
+export declare function getDaemonDir(agentDir?: string): string;
+export declare function getDaemonControlSecretPath(agentDir?: string): string;
+export declare function rotateWindowsDaemonSocketSecret(agentDir?: string): string;
+/**
+ * Actual daemon listen endpoint for a new instance. Windows named pipes cannot
+ * be unlinked, so default daemons use a fresh pipe name and publish it through
+ * the pidfile. POSIX keeps the stable socket path because stale files can be
+ * removed from a private directory.
+ */
+export declare function createDaemonControlSocketPath(agentDir?: string): string;
+/**
+ * Default socket path lives in the daemon dir; when the agent dir is nested
+ * deep enough to overflow the platform socket-path limit, fall back to a
+ * runtime dir. The actual path is recorded in the pidfile, which clients read
+ * when the default probe fails.
+ */
+export declare function getDaemonSocketPath(agentDir?: string): string;
+export declare function getDaemonPaths(agentDir?: string): DaemonPaths;
+/** Create the daemon dir (0700) and, for fallback sockets, the socket's parent dir. */
+export declare function ensureDaemonDirs(paths: DaemonPaths): void;
+//# sourceMappingURL=paths.d.ts.map

package/dist/daemon/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/daemon/paths.ts"],"names":[],"mappings":"AAuHA,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,YAAY,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAErE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAEnF;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAOxF;AAWD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAMtF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAS5E;AAED,wBAAgB,cAAc,CAAC,QAAQ,GAAE,MAAsB,GAAG,WAAW,CAW5E;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAWzD","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport { chmodSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { getAgentDir } from \"../config.ts\";\n\n/** Unix domain socket paths are capped around 104 (macOS) / 108 (Linux) bytes. */\nconst MAX_SOCKET_PATH_BYTES = 100;\nconst WINDOWS_CONTROL_SECRET_FILE = \"control-secret.json\";\nconst WINDOWS_CONTROL_SECRET_BYTES = 32;\nconst WINDOWS_PIPE_DIGEST_HEX_CHARS = 32;\nconst WINDOWS_PIPE_RANDOM_BYTES = 16;\n\ninterface WindowsControlSecret {\n\tpipeSecret: string;\n}\n\n/**\n * Node's net module has no filesystem unix sockets on Windows: a string path\n * passed to server.listen()/createConnection() is a named pipe, which must live\n * in the flat, machine-wide \\\\.\\pipe\\ namespace. A filesystem path such as\n * ...\\daemon\\voltd.sock makes CreateNamedPipe fail with EACCES. Derive the pipe\n * name from a per-agent secret so another local user cannot pre-create the\n * daemon's predictable endpoint before startup.\n */\nfunction getWindowsNamedPipePath(agentDir: string): string {\n\tconst secret = getOrCreateWindowsControlSecret(agentDir);\n\tconst digest = createHash(\"sha256\")\n\t\t.update(agentDir.toLowerCase())\n\t\t.update(\"\\0\")\n\t\t.update(secret.pipeSecret)\n\t\t.digest(\"hex\")\n\t\t.slice(0, WINDOWS_PIPE_DIGEST_HEX_CHARS);\n\treturn `\\\\\\\\.\\\\pipe\\\\voltd-${digest}`;\n}\n\nfunction createWindowsControlSecret(): WindowsControlSecret {\n\treturn { pipeSecret: randomBytes(WINDOWS_CONTROL_SECRET_BYTES).toString(\"hex\") };\n}\n\nfunction serializeWindowsControlSecret(secret: WindowsControlSecret): string {\n\treturn `${JSON.stringify({ version: 1, pipeSecret: secret.pipeSecret })}\\n`;\n}\n\nfunction isSecretHex(value: unknown): value is string {\n\treturn typeof value === \"string\" && /^[0-9a-f]{64}$/i.test(value);\n}\n\nfunction readWindowsControlSecret(secretPath: string): WindowsControlSecret | undefined {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(secretPath, \"utf8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst pipeSecret = (parsed as { pipeSecret?: unknown }).pipeSecret;\n\t\treturn isSecretHex(pipeSecret) ? { pipeSecret: pipeSecret.toLowerCase() } : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction chmodControlSecret(secretPath: string): void {\n\ttry {\n\t\tchmodSync(secretPath, 0o600);\n\t} catch {\n\t\t// Best effort: Windows ignores POSIX-style mode bits, but Unix-like test\n\t\t// environments and future runtimes still benefit from owner-only mode.\n\t}\n}\n\nfunction createWindowsControlSecretFile(secretPath: string): WindowsControlSecret {\n\tconst secret = createWindowsControlSecret();\n\ttry {\n\t\twriteFileSync(secretPath, serializeWindowsControlSecret(secret), { mode: 0o600, flag: \"wx\" });\n\t\tchmodControlSecret(secretPath);\n\t\treturn secret;\n\t} catch (error) {\n\t\tif (isErrnoException(error) && error.code === \"EEXIST\") {\n\t\t\tconst racedSecret = readWindowsControlSecret(secretPath);\n\t\t\tif (racedSecret) {\n\t\t\t\treturn racedSecret;\n\t\t\t}\n\t\t\treturn replaceWindowsControlSecretFile(secretPath);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nfunction replaceWindowsControlSecretFile(secretPath: string): WindowsControlSecret {\n\tconst secret = createWindowsControlSecret();\n\tconst tempPath = join(\n\t\tdirname(secretPath),\n\t\t`.${WINDOWS_CONTROL_SECRET_FILE}.${process.pid}.${Date.now()}.${randomBytes(4).toString(\"hex\")}.tmp`,\n\t);\n\ttry {\n\t\twriteFileSync(tempPath, serializeWindowsControlSecret(secret), { mode: 0o600, flag: \"wx\" });\n\t\tchmodControlSecret(tempPath);\n\t\trenameSync(tempPath, secretPath);\n\t\tchmodControlSecret(secretPath);\n\t\treturn secret;\n\t} catch (error) {\n\t\trmSync(tempPath, { force: true });\n\t\tthrow error;\n\t}\n}\n\nfunction getOrCreateWindowsControlSecret(agentDir: string): WindowsControlSecret {\n\tconst secretPath = getDaemonControlSecretPath(agentDir);\n\tconst existingSecret = readWindowsControlSecret(secretPath);\n\tif (existingSecret) {\n\t\treturn existingSecret;\n\t}\n\tmkdirSync(getDaemonDir(agentDir), { recursive: true, mode: 0o700 });\n\treturn createWindowsControlSecretFile(secretPath);\n}\n\nfunction isErrnoException(error: unknown): error is NodeJS.ErrnoException {\n\treturn error instanceof Error && \"code\" in error;\n}\n\n/** True for Windows named-pipe socket paths (\\\\.\\pipe\\... or \\\\?\\pipe\\...). */\nexport function isWindowsNamedPipePath(socketPath: string): boolean {\n\treturn /^\\\\\\\\[.?]\\\\pipe\\\\/.test(socketPath);\n}\n\nexport interface DaemonPaths {\n\tdaemonDir: string;\n\tsocketPath: string;\n\tpidfilePath: string;\n\tlockDirPath: string;\n\tlogPath: string;\n\tstatePath: string;\n\tauditPath: string;\n}\n\nexport function getDaemonDir(agentDir: string = getAgentDir()): string {\n\treturn join(agentDir, \"daemon\");\n}\n\nexport function getDaemonControlSecretPath(agentDir: string = getAgentDir()): string {\n\treturn join(getDaemonDir(agentDir), WINDOWS_CONTROL_SECRET_FILE);\n}\n\nexport function rotateWindowsDaemonSocketSecret(agentDir: string = getAgentDir()): string {\n\tif (process.platform !== \"win32\") {\n\t\treturn getDaemonSocketPath(agentDir);\n\t}\n\tmkdirSync(getDaemonDir(agentDir), { recursive: true, mode: 0o700 });\n\treplaceWindowsControlSecretFile(getDaemonControlSecretPath(agentDir));\n\treturn getWindowsNamedPipePath(agentDir);\n}\n\nfunction getFallbackSocketPath(): string {\n\tconst uid = typeof process.getuid === \"function\" ? process.getuid() : 0;\n\tconst runtimeDir = process.env.XDG_RUNTIME_DIR;\n\tif (runtimeDir) {\n\t\treturn join(runtimeDir, `voltd-${uid}.sock`);\n\t}\n\treturn join(`/tmp/voltd-${uid}`, \"voltd.sock\");\n}\n\n/**\n * Actual daemon listen endpoint for a new instance. Windows named pipes cannot\n * be unlinked, so default daemons use a fresh pipe name and publish it through\n * the pidfile. POSIX keeps the stable socket path because stale files can be\n * removed from a private directory.\n */\nexport function createDaemonControlSocketPath(agentDir: string = getAgentDir()): string {\n\tif (process.platform !== \"win32\") {\n\t\treturn getDaemonSocketPath(agentDir);\n\t}\n\tconst scope = createHash(\"sha256\").update(agentDir.toLowerCase()).digest(\"hex\").slice(0, 16);\n\treturn `\\\\\\\\.\\\\pipe\\\\voltd-${scope}-${randomBytes(WINDOWS_PIPE_RANDOM_BYTES).toString(\"hex\")}`;\n}\n\n/**\n * Default socket path lives in the daemon dir; when the agent dir is nested\n * deep enough to overflow the platform socket-path limit, fall back to a\n * runtime dir. The actual path is recorded in the pidfile, which clients read\n * when the default probe fails.\n */\nexport function getDaemonSocketPath(agentDir: string = getAgentDir()): string {\n\tif (process.platform === \"win32\") {\n\t\treturn getWindowsNamedPipePath(agentDir);\n\t}\n\tconst defaultPath = join(getDaemonDir(agentDir), \"voltd.sock\");\n\tif (Buffer.byteLength(defaultPath, \"utf8\") <= MAX_SOCKET_PATH_BYTES) {\n\t\treturn defaultPath;\n\t}\n\treturn getFallbackSocketPath();\n}\n\nexport function getDaemonPaths(agentDir: string = getAgentDir()): DaemonPaths {\n\tconst daemonDir = getDaemonDir(agentDir);\n\treturn {\n\t\tdaemonDir,\n\t\tsocketPath: getDaemonSocketPath(agentDir),\n\t\tpidfilePath: join(daemonDir, \"voltd.pid\"),\n\t\tlockDirPath: join(daemonDir, \"voltd.lock\"),\n\t\tlogPath: join(daemonDir, \"voltd.log\"),\n\t\tstatePath: join(daemonDir, \"state.json\"),\n\t\tauditPath: join(daemonDir, \"audit.jsonl\"),\n\t};\n}\n\n/** Create the daemon dir (0700) and, for fallback sockets, the socket's parent dir. */\nexport function ensureDaemonDirs(paths: DaemonPaths): void {\n\tmkdirSync(paths.daemonDir, { recursive: true, mode: 0o700 });\n\t// Named pipes have no parent directory on disk to create or harden.\n\tif (isWindowsNamedPipePath(paths.socketPath)) {\n\t\treturn;\n\t}\n\tif (!paths.socketPath.startsWith(paths.daemonDir)) {\n\t\tconst socketDir = dirname(paths.socketPath);\n\t\tmkdirSync(socketDir, { recursive: true, mode: 0o700 });\n\t\tassertPrivateSocketDir(socketDir);\n\t}\n}\n\n/**\n * The fallback socket dir lives under a shared parent (/tmp or\n * XDG_RUNTIME_DIR) at a predictable path, and mkdir with recursive silently\n * accepts a pre-existing directory without touching its mode. Verify the\n * directory is ours before placing the socket in it, and tighten loose\n * permissions on one we own.\n */\nfunction assertPrivateSocketDir(dir: string): void {\n\tif (process.platform === \"win32\") {\n\t\treturn;\n\t}\n\tconst stats = lstatSync(dir);\n\tif (!stats.isDirectory()) {\n\t\tthrow new Error(`voltd socket directory ${dir} is not a directory`);\n\t}\n\tconst uid = typeof process.getuid === \"function\" ? process.getuid() : stats.uid;\n\tif (stats.uid !== uid) {\n\t\tthrow new Error(`refusing to use voltd socket directory ${dir}: owned by uid ${stats.uid}, not ${uid}`);\n\t}\n\tif ((stats.mode & 0o077) !== 0) {\n\t\tchmodSync(dir, 0o700);\n\t}\n}\n"]}

package/dist/daemon/paths.js

@@ -0,0 +1,208 @@
+import { createHash, randomBytes } from "node:crypto";
+import { chmodSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { getAgentDir } from "../config.js";
+/** Unix domain socket paths are capped around 104 (macOS) / 108 (Linux) bytes. */
+const MAX_SOCKET_PATH_BYTES = 100;
+const WINDOWS_CONTROL_SECRET_FILE = "control-secret.json";
+const WINDOWS_CONTROL_SECRET_BYTES = 32;
+const WINDOWS_PIPE_DIGEST_HEX_CHARS = 32;
+const WINDOWS_PIPE_RANDOM_BYTES = 16;
+/**
+ * Node's net module has no filesystem unix sockets on Windows: a string path
+ * passed to server.listen()/createConnection() is a named pipe, which must live
+ * in the flat, machine-wide \\.\pipe\ namespace. A filesystem path such as
+ * ...\daemon\voltd.sock makes CreateNamedPipe fail with EACCES. Derive the pipe
+ * name from a per-agent secret so another local user cannot pre-create the
+ * daemon's predictable endpoint before startup.
+ */
+function getWindowsNamedPipePath(agentDir) {
+    const secret = getOrCreateWindowsControlSecret(agentDir);
+    const digest = createHash("sha256")
+        .update(agentDir.toLowerCase())
+        .update("\0")
+        .update(secret.pipeSecret)
+        .digest("hex")
+        .slice(0, WINDOWS_PIPE_DIGEST_HEX_CHARS);
+    return `\\\\.\\pipe\\voltd-${digest}`;
+}
+function createWindowsControlSecret() {
+    return { pipeSecret: randomBytes(WINDOWS_CONTROL_SECRET_BYTES).toString("hex") };
+}
+function serializeWindowsControlSecret(secret) {
+    return `${JSON.stringify({ version: 1, pipeSecret: secret.pipeSecret })}\n`;
+}
+function isSecretHex(value) {
+    return typeof value === "string" && /^[0-9a-f]{64}$/i.test(value);
+}
+function readWindowsControlSecret(secretPath) {
+    try {
+        const parsed = JSON.parse(readFileSync(secretPath, "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return undefined;
+        }
+        const pipeSecret = parsed.pipeSecret;
+        return isSecretHex(pipeSecret) ? { pipeSecret: pipeSecret.toLowerCase() } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function chmodControlSecret(secretPath) {
+    try {
+        chmodSync(secretPath, 0o600);
+    }
+    catch {
+        // Best effort: Windows ignores POSIX-style mode bits, but Unix-like test
+        // environments and future runtimes still benefit from owner-only mode.
+    }
+}
+function createWindowsControlSecretFile(secretPath) {
+    const secret = createWindowsControlSecret();
+    try {
+        writeFileSync(secretPath, serializeWindowsControlSecret(secret), { mode: 0o600, flag: "wx" });
+        chmodControlSecret(secretPath);
+        return secret;
+    }
+    catch (error) {
+        if (isErrnoException(error) && error.code === "EEXIST") {
+            const racedSecret = readWindowsControlSecret(secretPath);
+            if (racedSecret) {
+                return racedSecret;
+            }
+            return replaceWindowsControlSecretFile(secretPath);
+        }
+        throw error;
+    }
+}
+function replaceWindowsControlSecretFile(secretPath) {
+    const secret = createWindowsControlSecret();
+    const tempPath = join(dirname(secretPath), `.${WINDOWS_CONTROL_SECRET_FILE}.${process.pid}.${Date.now()}.${randomBytes(4).toString("hex")}.tmp`);
+    try {
+        writeFileSync(tempPath, serializeWindowsControlSecret(secret), { mode: 0o600, flag: "wx" });
+        chmodControlSecret(tempPath);
+        renameSync(tempPath, secretPath);
+        chmodControlSecret(secretPath);
+        return secret;
+    }
+    catch (error) {
+        rmSync(tempPath, { force: true });
+        throw error;
+    }
+}
+function getOrCreateWindowsControlSecret(agentDir) {
+    const secretPath = getDaemonControlSecretPath(agentDir);
+    const existingSecret = readWindowsControlSecret(secretPath);
+    if (existingSecret) {
+        return existingSecret;
+    }
+    mkdirSync(getDaemonDir(agentDir), { recursive: true, mode: 0o700 });
+    return createWindowsControlSecretFile(secretPath);
+}
+function isErrnoException(error) {
+    return error instanceof Error && "code" in error;
+}
+/** True for Windows named-pipe socket paths (\\.\pipe\... or \\?\pipe\...). */
+export function isWindowsNamedPipePath(socketPath) {
+    return /^\\\\[.?]\\pipe\\/.test(socketPath);
+}
+export function getDaemonDir(agentDir = getAgentDir()) {
+    return join(agentDir, "daemon");
+}
+export function getDaemonControlSecretPath(agentDir = getAgentDir()) {
+    return join(getDaemonDir(agentDir), WINDOWS_CONTROL_SECRET_FILE);
+}
+export function rotateWindowsDaemonSocketSecret(agentDir = getAgentDir()) {
+    if (process.platform !== "win32") {
+        return getDaemonSocketPath(agentDir);
+    }
+    mkdirSync(getDaemonDir(agentDir), { recursive: true, mode: 0o700 });
+    replaceWindowsControlSecretFile(getDaemonControlSecretPath(agentDir));
+    return getWindowsNamedPipePath(agentDir);
+}
+function getFallbackSocketPath() {
+    const uid = typeof process.getuid === "function" ? process.getuid() : 0;
+    const runtimeDir = process.env.XDG_RUNTIME_DIR;
+    if (runtimeDir) {
+        return join(runtimeDir, `voltd-${uid}.sock`);
+    }
+    return join(`/tmp/voltd-${uid}`, "voltd.sock");
+}
+/**
+ * Actual daemon listen endpoint for a new instance. Windows named pipes cannot
+ * be unlinked, so default daemons use a fresh pipe name and publish it through
+ * the pidfile. POSIX keeps the stable socket path because stale files can be
+ * removed from a private directory.
+ */
+export function createDaemonControlSocketPath(agentDir = getAgentDir()) {
+    if (process.platform !== "win32") {
+        return getDaemonSocketPath(agentDir);
+    }
+    const scope = createHash("sha256").update(agentDir.toLowerCase()).digest("hex").slice(0, 16);
+    return `\\\\.\\pipe\\voltd-${scope}-${randomBytes(WINDOWS_PIPE_RANDOM_BYTES).toString("hex")}`;
+}
+/**
+ * Default socket path lives in the daemon dir; when the agent dir is nested
+ * deep enough to overflow the platform socket-path limit, fall back to a
+ * runtime dir. The actual path is recorded in the pidfile, which clients read
+ * when the default probe fails.
+ */
+export function getDaemonSocketPath(agentDir = getAgentDir()) {
+    if (process.platform === "win32") {
+        return getWindowsNamedPipePath(agentDir);
+    }
+    const defaultPath = join(getDaemonDir(agentDir), "voltd.sock");
+    if (Buffer.byteLength(defaultPath, "utf8") <= MAX_SOCKET_PATH_BYTES) {
+        return defaultPath;
+    }
+    return getFallbackSocketPath();
+}
+export function getDaemonPaths(agentDir = getAgentDir()) {
+    const daemonDir = getDaemonDir(agentDir);
+    return {
+        daemonDir,
+        socketPath: getDaemonSocketPath(agentDir),
+        pidfilePath: join(daemonDir, "voltd.pid"),
+        lockDirPath: join(daemonDir, "voltd.lock"),
+        logPath: join(daemonDir, "voltd.log"),
+        statePath: join(daemonDir, "state.json"),
+        auditPath: join(daemonDir, "audit.jsonl"),
+    };
+}
+/** Create the daemon dir (0700) and, for fallback sockets, the socket's parent dir. */
+export function ensureDaemonDirs(paths) {
+    mkdirSync(paths.daemonDir, { recursive: true, mode: 0o700 });
+    // Named pipes have no parent directory on disk to create or harden.
+    if (isWindowsNamedPipePath(paths.socketPath)) {
+        return;
+    }
+    if (!paths.socketPath.startsWith(paths.daemonDir)) {
+        const socketDir = dirname(paths.socketPath);
+        mkdirSync(socketDir, { recursive: true, mode: 0o700 });
+        assertPrivateSocketDir(socketDir);
+    }
+}
+/**
+ * The fallback socket dir lives under a shared parent (/tmp or
+ * XDG_RUNTIME_DIR) at a predictable path, and mkdir with recursive silently
+ * accepts a pre-existing directory without touching its mode. Verify the
+ * directory is ours before placing the socket in it, and tighten loose
+ * permissions on one we own.
+ */
+function assertPrivateSocketDir(dir) {
+    if (process.platform === "win32") {
+        return;
+    }
+    const stats = lstatSync(dir);
+    if (!stats.isDirectory()) {
+        throw new Error(`voltd socket directory ${dir} is not a directory`);
+    }
+    const uid = typeof process.getuid === "function" ? process.getuid() : stats.uid;
+    if (stats.uid !== uid) {
+        throw new Error(`refusing to use voltd socket directory ${dir}: owned by uid ${stats.uid}, not ${uid}`);
+    }
+    if ((stats.mode & 0o077) !== 0) {
+        chmodSync(dir, 0o700);
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/daemon/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/daemon/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,kFAAkF;AAClF,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAC1D,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAMrC;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,QAAgB,EAAU;IAC1D,MAAM,MAAM,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;SAC9B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;SACzB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC;IAC1C,OAAO,sBAAsB,MAAM,EAAE,CAAC;AAAA,CACtC;AAED,SAAS,0BAA0B,GAAyB;IAC3D,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAAA,CACjF;AAED,SAAS,6BAA6B,CAAC,MAA4B,EAAU;IAC5E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC;AAAA,CAC5E;AAED,SAAS,WAAW,CAAC,KAAc,EAAmB;IACrD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,wBAAwB,CAAC,UAAkB,EAAoC;IACvF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAY,CAAC;QACvE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,UAAU,GAAI,MAAmC,CAAC,UAAU,CAAC;QACnE,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAQ;IACrD,IAAI,CAAC;QACJ,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,yEAAyE;QACzE,uEAAuE;IACxE,CAAC;AAAA,CACD;AAED,SAAS,8BAA8B,CAAC,UAAkB,EAAwB;IACjF,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;IAC5C,IAAI,CAAC;QACJ,aAAa,CAAC,UAAU,EAAE,6BAA6B,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,WAAW,EAAE,CAAC;gBACjB,OAAO,WAAW,CAAC;YACpB,CAAC;YACD,OAAO,+BAA+B,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD;AAED,SAAS,+BAA+B,CAAC,UAAkB,EAAwB;IAClF,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CACpB,OAAO,CAAC,UAAU,CAAC,EACnB,IAAI,2BAA2B,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACpG,CAAC;IACF,IAAI,CAAC;QACJ,aAAa,CAAC,QAAQ,EAAE,6BAA6B,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7B,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD;AAED,SAAS,+BAA+B,CAAC,QAAgB,EAAwB;IAChF,MAAM,UAAU,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,cAAc,EAAE,CAAC;QACpB,OAAO,cAAc,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,OAAO,8BAA8B,CAAC,UAAU,CAAC,CAAC;AAAA,CAClD;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAkC;IACzE,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AAAA,CACjD;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAW;IACnE,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAAA,CAC5C;AAYD,MAAM,UAAU,YAAY,CAAC,QAAQ,GAAW,WAAW,EAAE,EAAU;IACtE,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAAA,CAChC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAQ,GAAW,WAAW,EAAE,EAAU;IACpF,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAC;AAAA,CACjE;AAED,MAAM,UAAU,+BAA+B,CAAC,QAAQ,GAAW,WAAW,EAAE,EAAU;IACzF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,+BAA+B,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAAA,CACzC;AAED,SAAS,qBAAqB,GAAW;IACxC,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC/C,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC,cAAc,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AAAA,CAC/C;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAQ,GAAW,WAAW,EAAE,EAAU;IACvF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,OAAO,sBAAsB,KAAK,IAAI,WAAW,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAAA,CAC/F;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAQ,GAAW,WAAW,EAAE,EAAU;IAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACrE,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,qBAAqB,EAAE,CAAC;AAAA,CAC/B;AAED,MAAM,UAAU,cAAc,CAAC,QAAQ,GAAW,WAAW,EAAE,EAAe;IAC7E,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO;QACN,SAAS;QACT,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC;QACzC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QACzC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QAC1C,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACxC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;KACzC,CAAC;AAAA,CACF;AAED,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAQ;IAC1D,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,oEAAoE;IACpE,IAAI,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,OAAO;IACR,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;AAAA,CACD;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,GAAW,EAAQ;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO;IACR,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,qBAAqB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAChF,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,kBAAkB,KAAK,CAAC,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;AAAA,CACD","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport { chmodSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { getAgentDir } from \"../config.ts\";\n\n/** Unix domain socket paths are capped around 104 (macOS) / 108 (Linux) bytes. */\nconst MAX_SOCKET_PATH_BYTES = 100;\nconst WINDOWS_CONTROL_SECRET_FILE = \"control-secret.json\";\nconst WINDOWS_CONTROL_SECRET_BYTES = 32;\nconst WINDOWS_PIPE_DIGEST_HEX_CHARS = 32;\nconst WINDOWS_PIPE_RANDOM_BYTES = 16;\n\ninterface WindowsControlSecret {\n\tpipeSecret: string;\n}\n\n/**\n * Node's net module has no filesystem unix sockets on Windows: a string path\n * passed to server.listen()/createConnection() is a named pipe, which must live\n * in the flat, machine-wide \\\\.\\pipe\\ namespace. A filesystem path such as\n * ...\\daemon\\voltd.sock makes CreateNamedPipe fail with EACCES. Derive the pipe\n * name from a per-agent secret so another local user cannot pre-create the\n * daemon's predictable endpoint before startup.\n */\nfunction getWindowsNamedPipePath(agentDir: string): string {\n\tconst secret = getOrCreateWindowsControlSecret(agentDir);\n\tconst digest = createHash(\"sha256\")\n\t\t.update(agentDir.toLowerCase())\n\t\t.update(\"\\0\")\n\t\t.update(secret.pipeSecret)\n\t\t.digest(\"hex\")\n\t\t.slice(0, WINDOWS_PIPE_DIGEST_HEX_CHARS);\n\treturn `\\\\\\\\.\\\\pipe\\\\voltd-${digest}`;\n}\n\nfunction createWindowsControlSecret(): WindowsControlSecret {\n\treturn { pipeSecret: randomBytes(WINDOWS_CONTROL_SECRET_BYTES).toString(\"hex\") };\n}\n\nfunction serializeWindowsControlSecret(secret: WindowsControlSecret): string {\n\treturn `${JSON.stringify({ version: 1, pipeSecret: secret.pipeSecret })}\\n`;\n}\n\nfunction isSecretHex(value: unknown): value is string {\n\treturn typeof value === \"string\" && /^[0-9a-f]{64}$/i.test(value);\n}\n\nfunction readWindowsControlSecret(secretPath: string): WindowsControlSecret | undefined {\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(secretPath, \"utf8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst pipeSecret = (parsed as { pipeSecret?: unknown }).pipeSecret;\n\t\treturn isSecretHex(pipeSecret) ? { pipeSecret: pipeSecret.toLowerCase() } : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction chmodControlSecret(secretPath: string): void {\n\ttry {\n\t\tchmodSync(secretPath, 0o600);\n\t} catch {\n\t\t// Best effort: Windows ignores POSIX-style mode bits, but Unix-like test\n\t\t// environments and future runtimes still benefit from owner-only mode.\n\t}\n}\n\nfunction createWindowsControlSecretFile(secretPath: string): WindowsControlSecret {\n\tconst secret = createWindowsControlSecret();\n\ttry {\n\t\twriteFileSync(secretPath, serializeWindowsControlSecret(secret), { mode: 0o600, flag: \"wx\" });\n\t\tchmodControlSecret(secretPath);\n\t\treturn secret;\n\t} catch (error) {\n\t\tif (isErrnoException(error) && error.code === \"EEXIST\") {\n\t\t\tconst racedSecret = readWindowsControlSecret(secretPath);\n\t\t\tif (racedSecret) {\n\t\t\t\treturn racedSecret;\n\t\t\t}\n\t\t\treturn replaceWindowsControlSecretFile(secretPath);\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nfunction replaceWindowsControlSecretFile(secretPath: string): WindowsControlSecret {\n\tconst secret = createWindowsControlSecret();\n\tconst tempPath = join(\n\t\tdirname(secretPath),\n\t\t`.${WINDOWS_CONTROL_SECRET_FILE}.${process.pid}.${Date.now()}.${randomBytes(4).toString(\"hex\")}.tmp`,\n\t);\n\ttry {\n\t\twriteFileSync(tempPath, serializeWindowsControlSecret(secret), { mode: 0o600, flag: \"wx\" });\n\t\tchmodControlSecret(tempPath);\n\t\trenameSync(tempPath, secretPath);\n\t\tchmodControlSecret(secretPath);\n\t\treturn secret;\n\t} catch (error) {\n\t\trmSync(tempPath, { force: true });\n\t\tthrow error;\n\t}\n}\n\nfunction getOrCreateWindowsControlSecret(agentDir: string): WindowsControlSecret {\n\tconst secretPath = getDaemonControlSecretPath(agentDir);\n\tconst existingSecret = readWindowsControlSecret(secretPath);\n\tif (existingSecret) {\n\t\treturn existingSecret;\n\t}\n\tmkdirSync(getDaemonDir(agentDir), { recursive: true, mode: 0o700 });\n\treturn createWindowsControlSecretFile(secretPath);\n}\n\nfunction isErrnoException(error: unknown): error is NodeJS.ErrnoException {\n\treturn error instanceof Error && \"code\" in error;\n}\n\n/** True for Windows named-pipe socket paths (\\\\.\\pipe\\... or \\\\?\\pipe\\...). */\nexport function isWindowsNamedPipePath(socketPath: string): boolean {\n\treturn /^\\\\\\\\[.?]\\\\pipe\\\\/.test(socketPath);\n}\n\nexport interface DaemonPaths {\n\tdaemonDir: string;\n\tsocketPath: string;\n\tpidfilePath: string;\n\tlockDirPath: string;\n\tlogPath: string;\n\tstatePath: string;\n\tauditPath: string;\n}\n\nexport function getDaemonDir(agentDir: string = getAgentDir()): string {\n\treturn join(agentDir, \"daemon\");\n}\n\nexport function getDaemonControlSecretPath(agentDir: string = getAgentDir()): string {\n\treturn join(getDaemonDir(agentDir), WINDOWS_CONTROL_SECRET_FILE);\n}\n\nexport function rotateWindowsDaemonSocketSecret(agentDir: string = getAgentDir()): string {\n\tif (process.platform !== \"win32\") {\n\t\treturn getDaemonSocketPath(agentDir);\n\t}\n\tmkdirSync(getDaemonDir(agentDir), { recursive: true, mode: 0o700 });\n\treplaceWindowsControlSecretFile(getDaemonControlSecretPath(agentDir));\n\treturn getWindowsNamedPipePath(agentDir);\n}\n\nfunction getFallbackSocketPath(): string {\n\tconst uid = typeof process.getuid === \"function\" ? process.getuid() : 0;\n\tconst runtimeDir = process.env.XDG_RUNTIME_DIR;\n\tif (runtimeDir) {\n\t\treturn join(runtimeDir, `voltd-${uid}.sock`);\n\t}\n\treturn join(`/tmp/voltd-${uid}`, \"voltd.sock\");\n}\n\n/**\n * Actual daemon listen endpoint for a new instance. Windows named pipes cannot\n * be unlinked, so default daemons use a fresh pipe name and publish it through\n * the pidfile. POSIX keeps the stable socket path because stale files can be\n * removed from a private directory.\n */\nexport function createDaemonControlSocketPath(agentDir: string = getAgentDir()): string {\n\tif (process.platform !== \"win32\") {\n\t\treturn getDaemonSocketPath(agentDir);\n\t}\n\tconst scope = createHash(\"sha256\").update(agentDir.toLowerCase()).digest(\"hex\").slice(0, 16);\n\treturn `\\\\\\\\.\\\\pipe\\\\voltd-${scope}-${randomBytes(WINDOWS_PIPE_RANDOM_BYTES).toString(\"hex\")}`;\n}\n\n/**\n * Default socket path lives in the daemon dir; when the agent dir is nested\n * deep enough to overflow the platform socket-path limit, fall back to a\n * runtime dir. The actual path is recorded in the pidfile, which clients read\n * when the default probe fails.\n */\nexport function getDaemonSocketPath(agentDir: string = getAgentDir()): string {\n\tif (process.platform === \"win32\") {\n\t\treturn getWindowsNamedPipePath(agentDir);\n\t}\n\tconst defaultPath = join(getDaemonDir(agentDir), \"voltd.sock\");\n\tif (Buffer.byteLength(defaultPath, \"utf8\") <= MAX_SOCKET_PATH_BYTES) {\n\t\treturn defaultPath;\n\t}\n\treturn getFallbackSocketPath();\n}\n\nexport function getDaemonPaths(agentDir: string = getAgentDir()): DaemonPaths {\n\tconst daemonDir = getDaemonDir(agentDir);\n\treturn {\n\t\tdaemonDir,\n\t\tsocketPath: getDaemonSocketPath(agentDir),\n\t\tpidfilePath: join(daemonDir, \"voltd.pid\"),\n\t\tlockDirPath: join(daemonDir, \"voltd.lock\"),\n\t\tlogPath: join(daemonDir, \"voltd.log\"),\n\t\tstatePath: join(daemonDir, \"state.json\"),\n\t\tauditPath: join(daemonDir, \"audit.jsonl\"),\n\t};\n}\n\n/** Create the daemon dir (0700) and, for fallback sockets, the socket's parent dir. */\nexport function ensureDaemonDirs(paths: DaemonPaths): void {\n\tmkdirSync(paths.daemonDir, { recursive: true, mode: 0o700 });\n\t// Named pipes have no parent directory on disk to create or harden.\n\tif (isWindowsNamedPipePath(paths.socketPath)) {\n\t\treturn;\n\t}\n\tif (!paths.socketPath.startsWith(paths.daemonDir)) {\n\t\tconst socketDir = dirname(paths.socketPath);\n\t\tmkdirSync(socketDir, { recursive: true, mode: 0o700 });\n\t\tassertPrivateSocketDir(socketDir);\n\t}\n}\n\n/**\n * The fallback socket dir lives under a shared parent (/tmp or\n * XDG_RUNTIME_DIR) at a predictable path, and mkdir with recursive silently\n * accepts a pre-existing directory without touching its mode. Verify the\n * directory is ours before placing the socket in it, and tighten loose\n * permissions on one we own.\n */\nfunction assertPrivateSocketDir(dir: string): void {\n\tif (process.platform === \"win32\") {\n\t\treturn;\n\t}\n\tconst stats = lstatSync(dir);\n\tif (!stats.isDirectory()) {\n\t\tthrow new Error(`voltd socket directory ${dir} is not a directory`);\n\t}\n\tconst uid = typeof process.getuid === \"function\" ? process.getuid() : stats.uid;\n\tif (stats.uid !== uid) {\n\t\tthrow new Error(`refusing to use voltd socket directory ${dir}: owned by uid ${stats.uid}, not ${uid}`);\n\t}\n\tif ((stats.mode & 0o077) !== 0) {\n\t\tchmodSync(dir, 0o700);\n\t}\n}\n"]}

package/dist/daemon/process-identity.d.ts

@@ -0,0 +1,58 @@
+import type { PidfileContents } from "./main.ts";
+/**
+ * Process-identity verification for the pidfile SIGTERM fallbacks: a pidfile
+ * outlives its daemon, and the recorded pid can be recycled by an unrelated
+ * process. Before killing, verify the live process (a) started when the
+ * pidfile says the daemon started and (b) has a voltd-looking command line.
+ *
+ * Platform-aware by design (Windows daemon support is planned): POSIX queries
+ * `ps -o etime=,args=`; Windows queries Win32_Process via PowerShell CIM.
+ */
+export type ProcessQueryRunner = (command: string, args: string[]) => Promise<{
+    code: number;
+    output: string;
+}>;
+export interface ProcessIdentity {
+    /** Absolute process start time; undefined when the platform query lacks it. */
+    startTimeMs?: number;
+    commandLine: string;
+}
+export type PidfileVerification = "match" | "mismatch" | "gone";
+export type ProcessCreationVerification = "match" | "mismatch" | "gone" | "unknown";
+export interface VerifyPidfileOptions {
+    runner?: ProcessQueryRunner;
+    platform?: NodeJS.Platform;
+    now?: number;
+    /** Allowed |actual start - pidfile.startedAtMs| skew (spawn-to-record delay, etime rounding). */
+    toleranceMs?: number;
+    /** Injectable liveness probe (kill(pid, 0)). */
+    isProcessAlive?: (pid: number) => "alive" | "gone";
+}
+export declare const DEFAULT_START_TIME_TOLERANCE_MS = 15000;
+/** Parse ps etime ("[[dd-]hh:]mm:ss") into elapsed milliseconds. */
+export declare function parseElapsedTime(value: string): number | undefined;
+/**
+ * Verify only process creation identity. Unlike pidfile verification, this
+ * distinguishes a verifiable recycled PID from an unavailable OS query so
+ * startup-lock recovery can reap the former while failing closed on the latter.
+ */
+export declare function verifyProcessCreationTime(record: {
+    pid: number;
+    startedAtMs: number;
+}, options?: VerifyPidfileOptions): Promise<ProcessCreationVerification>;
+/** Verify both process creation identity and the voltd command marker. */
+export declare function verifyVoltdProcessIdentity(record: {
+    pid: number;
+    startedAtMs: number;
+}, options?: VerifyPidfileOptions): Promise<ProcessCreationVerification>;
+/**
+ * Verify that pidfile.pid still refers to the daemon that wrote the pidfile.
+ *
+ * - "gone": no such process (or it exited mid-check) — safe to treat as stopped.
+ * - "match": alive, start time within tolerance of startedAtMs, and a
+ *   voltd-looking command line — safe to signal.
+ * - "mismatch": alive but unverifiable or verifiably different (recycled pid,
+ *   another user's process, ps/powershell unavailable) — do NOT signal.
+ */
+export declare function verifyPidfileProcess(pidfile: Pick<PidfileContents, "pid" | "startedAtMs">, options?: VerifyPidfileOptions): Promise<PidfileVerification>;
+//# sourceMappingURL=process-identity.d.ts.map

package/dist/daemon/process-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.d.ts","sourceRoot":"","sources":["../../src/daemon/process-identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD;;;;;;;;GAQG;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhH,MAAM,WAAW,eAAe;IAC/B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAChE,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEpF,MAAM,WAAW,oBAAoB;IACpC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC;CACnD;AAED,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAsCtD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOlE;AAwFD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAC5C,OAAO,GAAE,oBAAyB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAatC;AAED,0EAA0E;AAC1E,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAC5C,OAAO,GAAE,oBAAyB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAmBtC;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,GAAG,aAAa,CAAC,EACrD,OAAO,GAAE,oBAAyB,GAChC,OAAO,CAAC,mBAAmB,CAAC,CAoB9B","sourcesContent":["import { spawn } from \"node:child_process\";\nimport type { PidfileContents } from \"./main.ts\";\n\n/**\n * Process-identity verification for the pidfile SIGTERM fallbacks: a pidfile\n * outlives its daemon, and the recorded pid can be recycled by an unrelated\n * process. Before killing, verify the live process (a) started when the\n * pidfile says the daemon started and (b) has a voltd-looking command line.\n *\n * Platform-aware by design (Windows daemon support is planned): POSIX queries\n * `ps -o etime=,args=`; Windows queries Win32_Process via PowerShell CIM.\n */\n\nexport type ProcessQueryRunner = (command: string, args: string[]) => Promise<{ code: number; output: string }>;\n\nexport interface ProcessIdentity {\n\t/** Absolute process start time; undefined when the platform query lacks it. */\n\tstartTimeMs?: number;\n\tcommandLine: string;\n}\n\nexport type PidfileVerification = \"match\" | \"mismatch\" | \"gone\";\nexport type ProcessCreationVerification = \"match\" | \"mismatch\" | \"gone\" | \"unknown\";\n\nexport interface VerifyPidfileOptions {\n\trunner?: ProcessQueryRunner;\n\tplatform?: NodeJS.Platform;\n\tnow?: number;\n\t/** Allowed |actual start - pidfile.startedAtMs| skew (spawn-to-record delay, etime rounding). */\n\ttoleranceMs?: number;\n\t/** Injectable liveness probe (kill(pid, 0)). */\n\tisProcessAlive?: (pid: number) => \"alive\" | \"gone\";\n}\n\nexport const DEFAULT_START_TIME_TOLERANCE_MS = 15_000;\n\n/**\n * Command-line markers that identify a voltd process. Linux rewrites argv to the\n * process title (\"voltd\"); macOS and Windows report the original invocation\n * (`... daemon run --foreground`).\n *\n * The bare \"voltd\" marker is matched as a whole path/argv token, not a bare\n * substring: an unrelated but same-user process whose command line merely\n * contains the string (e.g. `tail -f /var/log/voltd.log`, `vim voltd.ts`,\n * `node .../voltd-cli/x.js`) must not satisfy the identity check and be signalled.\n */\nconst VOLTD_COMMAND_MARKERS = [/(?:^|[\\s/\\\\])voltd(?=$|[\\s/\\\\])/, \"daemon run --foreground\"] as const;\n\nconst defaultRunner: ProcessQueryRunner = (command, args) =>\n\tnew Promise((resolve) => {\n\t\tconst child = spawn(command, args, { stdio: [\"ignore\", \"pipe\", \"pipe\"] });\n\t\tlet output = \"\";\n\t\tchild.stdout?.on(\"data\", (chunk: Buffer) => {\n\t\t\toutput += chunk.toString(\"utf8\");\n\t\t});\n\t\tchild.on(\"error\", (error) => resolve({ code: 127, output: error.message }));\n\t\tchild.on(\"close\", (code) => resolve({ code: code ?? 1, output }));\n\t});\n\nfunction defaultIsProcessAlive(pid: number): \"alive\" | \"gone\" {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn \"alive\";\n\t} catch (error) {\n\t\t// EPERM: the pid exists but belongs to another user — alive (and almost\n\t\t// certainly not our daemon; the identity check will refuse it).\n\t\treturn error instanceof Error && \"code\" in error && (error as NodeJS.ErrnoException).code === \"EPERM\"\n\t\t\t? \"alive\"\n\t\t\t: \"gone\";\n\t}\n}\n\n/** Parse ps etime (\"[[dd-]hh:]mm:ss\") into elapsed milliseconds. */\nexport function parseElapsedTime(value: string): number | undefined {\n\tconst match = /^(?:(\\d+)-)?(?:(\\d+):)?(\\d{1,2}):(\\d{2})$/.exec(value.trim());\n\tif (!match) {\n\t\treturn undefined;\n\t}\n\tconst [, days, hours, minutes, seconds] = match;\n\treturn (Number(days ?? 0) * 86_400 + Number(hours ?? 0) * 3_600 + Number(minutes) * 60 + Number(seconds)) * 1_000;\n}\n\nasync function queryPosixProcess(\n\tpid: number,\n\trunner: ProcessQueryRunner,\n\tnow: () => number,\n): Promise<ProcessIdentity | undefined> {\n\t// etime (not the Linux-only etimes) is in the POSIX ps keyword set and has a\n\t// fixed, locale-independent format.\n\tconst result = await runner(\"ps\", [\"-p\", String(pid), \"-o\", \"etime=,args=\"]);\n\tif (result.code !== 0) {\n\t\treturn undefined;\n\t}\n\tconst line = result.output.split(\"\\n\").find((candidate) => candidate.trim().length > 0);\n\tif (!line) {\n\t\treturn undefined;\n\t}\n\tconst trimmed = line.trim();\n\tconst separatorIndex = trimmed.search(/\\s/);\n\tconst etime = separatorIndex === -1 ? trimmed : trimmed.slice(0, separatorIndex);\n\tconst commandLine = separatorIndex === -1 ? \"\" : trimmed.slice(separatorIndex + 1).trim();\n\tconst elapsedMs = parseElapsedTime(etime);\n\treturn {\n\t\t...(elapsedMs === undefined ? {} : { startTimeMs: now() - elapsedMs }),\n\t\tcommandLine,\n\t};\n}\n\nasync function queryWindowsProcess(pid: number, runner: ProcessQueryRunner): Promise<ProcessIdentity | undefined> {\n\t// CIM gives both an absolute creation time and the original command line.\n\tconst script =\n\t\t`$p = Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}'; ` +\n\t\t`if ($p) { ConvertTo-Json -Compress @{ startMs = [DateTimeOffset]::new($p.CreationDate).ToUnixTimeMilliseconds(); commandLine = [string]$p.CommandLine } }`;\n\tconst result = await runner(\"powershell.exe\", [\"-NoProfile\", \"-NonInteractive\", \"-Command\", script]);\n\tif (result.code !== 0) {\n\t\treturn undefined;\n\t}\n\tconst jsonLine = result.output.split(\"\\n\").find((candidate) => candidate.trim().startsWith(\"{\"));\n\tif (!jsonLine) {\n\t\treturn undefined;\n\t}\n\ttry {\n\t\tconst parsed = JSON.parse(jsonLine.trim()) as { startMs?: unknown; commandLine?: unknown };\n\t\treturn {\n\t\t\t...(typeof parsed.startMs === \"number\" && Number.isFinite(parsed.startMs)\n\t\t\t\t? { startTimeMs: parsed.startMs }\n\t\t\t\t: {}),\n\t\t\tcommandLine: typeof parsed.commandLine === \"string\" ? parsed.commandLine : \"\",\n\t\t};\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction commandLineLooksLikeVoltd(commandLine: string): boolean {\n\treturn VOLTD_COMMAND_MARKERS.some((marker) =>\n\t\ttypeof marker === \"string\" ? commandLine.includes(marker) : marker.test(commandLine),\n\t);\n}\n\ntype ProcessIdentityLookup = { kind: \"found\"; identity: ProcessIdentity } | { kind: \"gone\" } | { kind: \"unknown\" };\n\nasync function lookupProcessIdentity(pid: number, options: VerifyPidfileOptions): Promise<ProcessIdentityLookup> {\n\tconst runner = options.runner ?? defaultRunner;\n\tconst platform = options.platform ?? process.platform;\n\tconst now = () => options.now ?? Date.now();\n\tconst isProcessAlive = options.isProcessAlive ?? defaultIsProcessAlive;\n\tif (isProcessAlive(pid) === \"gone\") {\n\t\treturn { kind: \"gone\" };\n\t}\n\tconst identity =\n\t\tplatform === \"win32\" ? await queryWindowsProcess(pid, runner) : await queryPosixProcess(pid, runner, now);\n\tif (identity) {\n\t\treturn { kind: \"found\", identity };\n\t}\n\t// The process may have exited between the liveness probe and the query.\n\t// Otherwise its identity is unavailable and callers must fail closed.\n\treturn isProcessAlive(pid) === \"gone\" ? { kind: \"gone\" } : { kind: \"unknown\" };\n}\n\nfunction processStartTimeMatches(startedAtMs: number, identity: ProcessIdentity, toleranceMs: number): boolean {\n\treturn (\n\t\tidentity.startTimeMs !== undefined &&\n\t\tstartedAtMs > 0 &&\n\t\tMath.abs(identity.startTimeMs - startedAtMs) <= toleranceMs\n\t);\n}\n\n/**\n * Verify only process creation identity. Unlike pidfile verification, this\n * distinguishes a verifiable recycled PID from an unavailable OS query so\n * startup-lock recovery can reap the former while failing closed on the latter.\n */\nexport async function verifyProcessCreationTime(\n\trecord: { pid: number; startedAtMs: number },\n\toptions: VerifyPidfileOptions = {},\n): Promise<ProcessCreationVerification> {\n\tif (!Number.isInteger(record.pid) || record.pid <= 0) {\n\t\treturn \"mismatch\";\n\t}\n\tconst lookup = await lookupProcessIdentity(record.pid, options);\n\tif (lookup.kind !== \"found\") {\n\t\treturn lookup.kind;\n\t}\n\tif (record.startedAtMs <= 0 || lookup.identity.startTimeMs === undefined) {\n\t\treturn \"unknown\";\n\t}\n\tconst toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;\n\treturn processStartTimeMatches(record.startedAtMs, lookup.identity, toleranceMs) ? \"match\" : \"mismatch\";\n}\n\n/** Verify both process creation identity and the voltd command marker. */\nexport async function verifyVoltdProcessIdentity(\n\trecord: { pid: number; startedAtMs: number },\n\toptions: VerifyPidfileOptions = {},\n): Promise<ProcessCreationVerification> {\n\tif (!Number.isInteger(record.pid) || record.pid <= 0) {\n\t\treturn \"mismatch\";\n\t}\n\tconst lookup = await lookupProcessIdentity(record.pid, options);\n\tif (lookup.kind !== \"found\") {\n\t\treturn lookup.kind;\n\t}\n\tif (record.startedAtMs <= 0 || lookup.identity.startTimeMs === undefined) {\n\t\treturn \"unknown\";\n\t}\n\tconst toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;\n\tif (!processStartTimeMatches(record.startedAtMs, lookup.identity, toleranceMs)) {\n\t\treturn \"mismatch\";\n\t}\n\t// Matching creation evidence is conclusive enough to fail closed, but some\n\t// supported hosts (notably direct runVoltDaemon() calls on Windows) do not\n\t// expose a voltd marker in the immutable process command line.\n\treturn commandLineLooksLikeVoltd(lookup.identity.commandLine) ? \"match\" : \"unknown\";\n}\n\n/**\n * Verify that pidfile.pid still refers to the daemon that wrote the pidfile.\n *\n * - \"gone\": no such process (or it exited mid-check) — safe to treat as stopped.\n * - \"match\": alive, start time within tolerance of startedAtMs, and a\n *   voltd-looking command line — safe to signal.\n * - \"mismatch\": alive but unverifiable or verifiably different (recycled pid,\n *   another user's process, ps/powershell unavailable) — do NOT signal.\n */\nexport async function verifyPidfileProcess(\n\tpidfile: Pick<PidfileContents, \"pid\" | \"startedAtMs\">,\n\toptions: VerifyPidfileOptions = {},\n): Promise<PidfileVerification> {\n\tif (!Number.isInteger(pidfile.pid) || pidfile.pid <= 0) {\n\t\treturn \"mismatch\";\n\t}\n\tconst lookup = await lookupProcessIdentity(pidfile.pid, options);\n\tif (lookup.kind === \"gone\") {\n\t\treturn \"gone\";\n\t}\n\tif (lookup.kind === \"unknown\") {\n\t\treturn \"mismatch\";\n\t}\n\t// A match REQUIRES verifying the process start time against the pidfile, not\n\t// just a voltd-looking command line. Without that check (a legacy pidfile\n\t// missing startedAtMs, or the OS not reporting a start time) a recycled pid\n\t// whose command line merely contains a voltd marker must not be signalled.\n\tconst toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;\n\tif (!processStartTimeMatches(pidfile.startedAtMs, lookup.identity, toleranceMs)) {\n\t\treturn \"mismatch\";\n\t}\n\treturn commandLineLooksLikeVoltd(lookup.identity.commandLine) ? \"match\" : \"mismatch\";\n}\n"]}