@ouro.bot/cli 0.1.0-alpha.51 → 0.1.0-alpha.510

package/dist/heart/daemon/human-readiness.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readinessItemFromIssue = readinessItemFromIssue;
+exports.buildHumanReadinessSnapshot = buildHumanReadinessSnapshot;
+const runtime_1 = require("../../nerves/runtime");
+const STATUS_PRIORITY = {
+    locked: 0,
+    "needs credentials": 1,
+    "needs attention": 2,
+    "needs setup": 3,
+    missing: 4,
+    "not attached": 5,
+    ready: 6,
+    attached: 6,
+};
+function statusFromIssue(issue) {
+    switch (issue.kind) {
+        case "vault-locked":
+            return "locked";
+        case "vault-unconfigured":
+            return "needs setup";
+        case "provider-credentials-missing":
+            return "needs credentials";
+        case "provider-live-check-failed":
+            return issue.actions[0]?.kind === "provider-auth" ? "needs credentials" : "needs attention";
+        case "generic":
+            return "needs attention";
+    }
+}
+function copyActions(actions) {
+    return actions.map((action) => ({
+        label: action.label,
+        command: action.command,
+        actor: action.actor,
+        ...(action.executable === undefined ? {} : { executable: action.executable }),
+    }));
+}
+function readinessItemFromIssue(issue, options) {
+    return {
+        key: options.key,
+        title: options.title,
+        status: statusFromIssue(issue),
+        summary: issue.summary,
+        detailLines: issue.detail ? [issue.detail] : [],
+        actions: copyActions(issue.actions),
+    };
+}
+function compareStatus(a, b) {
+    return STATUS_PRIORITY[a.status] - STATUS_PRIORITY[b.status];
+}
+function uniqueActions(items) {
+    const seen = new Set();
+    const actions = [];
+    for (const item of [...items].sort(compareStatus)) {
+        for (const [index, action] of item.actions.entries()) {
+            if (seen.has(action.command))
+                continue;
+            seen.add(action.command);
+            actions.push({
+                ...action,
+                ...(actions.length === 0 && index === 0 ? { recommended: true } : {}),
+            });
+        }
+    }
+    return actions;
+}
+function overallStatus(items) {
+    if (items.length === 0)
+        return "ready";
+    return [...items].sort(compareStatus)[0].status;
+}
+function summaryFor(status) {
+    if (status === "ready" || status === "attached") {
+        return "Everything needed here is ready.";
+    }
+    if (status === "locked") {
+        return "Start by unlocking the vault on this machine, then continue through the remaining steps.";
+    }
+    if (status === "needs credentials") {
+        return "At least one credential is missing, so the next move is to authenticate it.";
+    }
+    if (status === "needs attention") {
+        return "Something is configured but not healthy yet, so verify or refresh it before moving on.";
+    }
+    if (status === "needs setup") {
+        return "This capability needs setup before it can be used.";
+    }
+    return "This area still needs a little attention.";
+}
+function buildHumanReadinessSnapshot(options) {
+    const status = overallStatus(options.items);
+    const nextActions = uniqueActions(options.items);
+    const primaryAction = nextActions[0];
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.human_readiness_snapshot",
+        message: "built human readiness snapshot",
+        meta: {
+            agent: options.agent,
+            title: options.title,
+            items: options.items.length,
+            status,
+        },
+    });
+    return {
+        agent: options.agent,
+        title: options.title,
+        status,
+        summary: summaryFor(status),
+        items: [...options.items].sort(compareStatus),
+        ...(primaryAction ? { primaryAction } : {}),
+        nextActions,
+    };
+}

package/dist/heart/daemon/inner-status.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildInnerStatusOutput = buildInnerStatusOutput;
+const runtime_1 = require("../../nerves/runtime");
+function formatRelativeTime(elapsedMs) {
+    const minutes = Math.floor(elapsedMs / (60 * 1000));
+    if (minutes < 1)
+        return "just now";
+    if (minutes === 1)
+        return "1 minute ago";
+    if (minutes < 60)
+        return `${minutes} minutes ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours === 1)
+        return "1 hour ago";
+    return `${hours} hours ago`;
+}
+function formatCadence(cadenceMs) {
+    const minutes = Math.round(cadenceMs / (60 * 1000));
+    if (minutes >= 60) {
+        const hours = Math.round(minutes / 60);
+        return `${hours}h`;
+    }
+    return `${minutes}m`;
+}
+function buildInnerStatusOutput(input) {
+    const { agentName, runtimeState, journalFiles, heartbeat, attentionCount, now } = input;
+    const lines = [];
+    lines.push(`inner dialog status: ${agentName}`);
+    // Last turn
+    if (runtimeState?.lastCompletedAt) {
+        const lastMs = new Date(runtimeState.lastCompletedAt).getTime();
+        const elapsed = now - lastMs;
+        const relativeTime = formatRelativeTime(elapsed);
+        const reasonSuffix = runtimeState.reason ? ` (${runtimeState.reason})` : "";
+        lines.push(`  last turn: ${relativeTime}${reasonSuffix}`);
+    }
+    else {
+        lines.push("  last turn: unknown");
+    }
+    // Status
+    if (runtimeState) {
+        const reasonSuffix = runtimeState.status === "running" && runtimeState.reason ? ` (${runtimeState.reason})` : "";
+        lines.push(`  status: ${runtimeState.status}${reasonSuffix}`);
+    }
+    else {
+        lines.push("  status: unknown");
+    }
+    // Heartbeat health
+    if (heartbeat && heartbeat.lastCompletedAt !== null) {
+        const elapsed = now - heartbeat.lastCompletedAt;
+        const threshold = heartbeat.cadenceMs * 1.5;
+        const health = elapsed < threshold ? "healthy" : "overdue";
+        const cadenceStr = formatCadence(heartbeat.cadenceMs);
+        const sinceStr = formatRelativeTime(elapsed);
+        lines.push(`  heartbeat: ${health} (cadence ${cadenceStr}, ${sinceStr})`);
+    }
+    else {
+        lines.push("  heartbeat: unknown");
+    }
+    // Journal
+    if (journalFiles.length === 0) {
+        lines.push("  journal: (empty)");
+    }
+    else {
+        lines.push("  journal:");
+        const sorted = [...journalFiles].sort((a, b) => b.mtimeMs - a.mtimeMs);
+        for (const file of sorted) {
+            const elapsed = now - file.mtimeMs;
+            const relativeTime = formatRelativeTime(elapsed);
+            lines.push(`    - ${file.name} (${relativeTime})`);
+        }
+    }
+    // Attention
+    const thoughtWord = attentionCount === 1 ? "thought" : "thoughts";
+    lines.push(`  attention: ${attentionCount} held ${thoughtWord}`);
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.inner_status_read",
+        message: "inner dialog status read",
+        meta: {
+            agentName,
+            status: runtimeState?.status ?? "unknown",
+            journalCount: journalFiles.length,
+            attentionCount,
+        },
+    });
+    return lines.join("\n");
+}

package/dist/heart/daemon/interactive-repair.js

@@ -0,0 +1,394 @@
+"use strict";
+/**
+ * Interactive repair flow for degraded agents detected during `ouro up`.
+ *
+ * Examines each degraded agent's errorReason and fixHint to detect common
+ * issue patterns and prompt the user for repair actions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasRunnableInteractiveRepair = hasRunnableInteractiveRepair;
+exports.isAffirmativeAnswer = isAffirmativeAnswer;
+exports.runInteractiveRepair = runInteractiveRepair;
+const runtime_1 = require("../../nerves/runtime");
+const identity_1 = require("../identity");
+const terminal_ui_1 = require("./terminal-ui");
+function isCredentialIssue(degraded) {
+    const reason = degraded.errorReason.toLowerCase();
+    const hint = degraded.fixHint.toLowerCase();
+    return reason.includes("credentials") || hint.includes("ouro auth");
+}
+function isVaultUnlockIssue(degraded) {
+    const text = `${degraded.errorReason}\n${degraded.fixHint}`.toLowerCase();
+    return /ouro vault unlock|credential vault is locked|vault(?: is)? locked/.test(text);
+}
+function isConfigError(degraded) {
+    return degraded.fixHint.length > 0 && !isVaultUnlockIssue(degraded) && !isCredentialIssue(degraded);
+}
+function hasRunnableInteractiveRepair(degraded) {
+    if (degraded.issue?.actions.some((action) => typedActionToRunnable(degraded, action) !== undefined)) {
+        return true;
+    }
+    return isVaultUnlockIssue(degraded) || isCredentialIssue(degraded);
+}
+function isAgentProvider(value) {
+    return Object.prototype.hasOwnProperty.call(identity_1.PROVIDER_CREDENTIALS, value);
+}
+function extractProviderFromFixHint(fixHint) {
+    const provider = fixHint.match(/--provider\s+([a-z0-9-]+)/)?.[1]
+        ?? fixHint.match(/providers\.([a-z0-9-]+)/)?.[1];
+    if (!provider || !isAgentProvider(provider))
+        return undefined;
+    return provider;
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function cleanExtractedCommand(command) {
+    const cleaned = command?.trim().replace(/[`'",;:.)]+$/g, "").trim();
+    return cleaned && cleaned.length > 0 ? cleaned : undefined;
+}
+function extractRepairCommand(fixHint, commandPrefix) {
+    const escapedPrefix = escapeRegExp(commandPrefix);
+    const commandBody = `${escapedPrefix}(?=\\s|$)[^\`'"]*`;
+    const quoted = fixHint.match(new RegExp(`[\`'"](${commandBody})[\`'"]`, "i"))?.[1];
+    const unquoted = fixHint.match(new RegExp(`(${escapedPrefix}(?=\\s|$)[^\\n,;.]+)`, "i"))?.[1];
+    return cleanExtractedCommand(quoted) ?? cleanExtractedCommand(unquoted);
+}
+function authCommandFor(degraded) {
+    const command = extractRepairCommand(degraded.fixHint, "ouro auth");
+    return command && command.length > 0 ? command : `ouro auth --agent ${degraded.agent}`;
+}
+function vaultUnlockCommandFor(degraded) {
+    const command = extractRepairCommand(degraded.fixHint, "ouro vault unlock");
+    return command && command.length > 0 ? command : `ouro vault unlock --agent ${degraded.agent}`;
+}
+function isAffirmativeAnswer(answer) {
+    return /^(y|yes)$/i.test(answer.trim());
+}
+function uniqueCommands(commands) {
+    const seen = new Set();
+    const unique = [];
+    commands.forEach((command) => {
+        if (!command)
+            return;
+        if (seen.has(command))
+            return;
+        seen.add(command);
+        unique.push(command);
+    });
+    return unique;
+}
+function fallbackCommandsFor(degraded, primaryCommand) {
+    const issueCommands = degraded.issue?.actions.map((action) => action.command) ?? [];
+    return uniqueCommands([
+        primaryCommand,
+        ...issueCommands,
+        extractRepairCommand(degraded.fixHint, "ouro vault replace"),
+        extractRepairCommand(degraded.fixHint, "ouro vault recover"),
+        extractRepairCommand(degraded.fixHint, "ouro use"),
+    ]);
+}
+function renderRepairChoices(prefix, commands) {
+    return commands.map((command, index) => `  ${index === 0 ? prefix : "or"}: ${command}`);
+}
+function repairStatusFor(action) {
+    return action.kind === "vault-unlock" ? "locked" : "needs credentials";
+}
+function renderRepairQueueSummaryLines(degraded) {
+    const repairable = degraded
+        .map((entry) => ({ entry, action: runnableRepairActionFor(entry) }))
+        .filter((item) => item.action !== undefined);
+    if (repairable.length < 2)
+        return [];
+    const lines = [
+        "Repair queue",
+        `${repairable.length} agents need attention before startup can finish.`,
+        "",
+    ];
+    repairable.forEach(({ entry, action }, index) => {
+        lines.push(`${entry.agent} - ${action.label}`);
+        lines.push(`  ${action.command}`);
+        if (index < repairable.length - 1)
+            lines.push("");
+    });
+    return lines;
+}
+function renderRepairQueueSummary(degraded, deps) {
+    const repairable = degraded
+        .map((entry) => ({ entry, action: runnableRepairActionFor(entry) }))
+        .filter((item) => item.action !== undefined);
+    if (!deps.isTTY) {
+        return renderRepairQueueSummaryLines(degraded).join("\n");
+    }
+    return (0, terminal_ui_1.renderTerminalWizard)({
+        isTTY: true,
+        columns: deps.stdoutColumns,
+        masthead: {
+            subtitle: "Repair paths ready.",
+        },
+        title: "Needs attention before startup can finish",
+        summary: "Ouro found repair steps it can open right now. It will walk through them one at a time.",
+        sections: [{
+                title: "Repair queue",
+                items: repairable.map(({ entry, action }) => ({
+                    label: entry.agent,
+                    status: repairStatusFor(action),
+                    summary: action.label,
+                    detailLines: [entry.errorReason],
+                    command: action.command,
+                })),
+            }],
+        suppressEvent: true,
+    }).trimEnd();
+}
+function renderActionPromptLines(agent, action) {
+    const lines = [
+        `${agent}`,
+        `  needs: ${action.label}`,
+        `  run:   ${action.command}`,
+    ];
+    if (action.kind === "vault-unlock") {
+        lines.push("  note:  use the saved vault unlock secret");
+    }
+    return lines;
+}
+function renderActionPrompt(entry, action, deps) {
+    if (!deps.isTTY)
+        return renderActionPromptLines(entry.agent, action).join("\n");
+    const footer = action.kind === "vault-unlock"
+        ? "Only say yes if you have the saved vault unlock secret."
+        : "Say yes if you want Ouro to open the auth flow now.";
+    return (0, terminal_ui_1.renderTerminalWizard)({
+        isTTY: true,
+        columns: deps.stdoutColumns,
+        masthead: {
+            subtitle: "One repair step at a time.",
+        },
+        title: `Repair ${entry.agent}`,
+        summary: "Ouro found one clear next move for this agent.",
+        nextStep: {
+            label: action.kind === "vault-unlock"
+                ? "Unlock the credential vault on this machine."
+                : "Refresh provider authentication.",
+            detail: action.kind === "vault-unlock"
+                ? "Use the saved unlock secret if you have it. If not, leave this for later and choose a replacement or recovery path."
+                : "This opens the provider login or refresh flow for the selected provider.",
+            command: action.command,
+        },
+        sections: [{
+                title: "Why startup paused",
+                items: [{
+                        label: entry.agent,
+                        status: repairStatusFor(action),
+                        summary: entry.errorReason,
+                    }],
+            }],
+        footerLines: [footer],
+        suppressEvent: true,
+    }).trimEnd();
+}
+function renderDeferredRepair(agent, commands, deps) {
+    if (!deps.isTTY) {
+        return [
+            `Leaving ${agent} for later.`,
+            ...renderRepairChoices("next", commands),
+        ].join("\n");
+    }
+    return (0, terminal_ui_1.renderTerminalWizard)({
+        isTTY: true,
+        columns: deps.stdoutColumns,
+        masthead: {
+            subtitle: "Nothing changed yet.",
+        },
+        title: `Leaving ${agent} for later`,
+        summary: "Ouro did not open this repair flow right now.",
+        sections: [{
+                title: "Next time",
+                items: commands.map((command, index) => ({
+                    key: String(index + 1),
+                    label: index === 0 ? "Start here" : "Or try this",
+                    command,
+                })),
+            }],
+        suppressEvent: true,
+    }).trimEnd();
+}
+function renderManualRepairHint(agent, fixHint) {
+    return [
+        `${agent}`,
+        "  needs manual attention",
+        `  next: ${fixHint}`,
+    ].join("\n");
+}
+function renderUnknownRepair(agent, errorReason) {
+    return [
+        `${agent}`,
+        `  ${errorReason}`,
+    ].join("\n");
+}
+function writeDeclinedRepair(degraded, command, deps) {
+    deps.writeStdout(renderDeferredRepair(degraded.agent, fallbackCommandsFor(degraded, command), deps));
+}
+function runnableRepairActionFor(degraded) {
+    const typedAction = degraded.issue?.actions
+        .map((action) => typedActionToRunnable(degraded, action))
+        .find((action) => action !== undefined);
+    if (typedAction)
+        return typedAction;
+    if (isVaultUnlockIssue(degraded)) {
+        return { kind: "vault-unlock", label: "vault unlock", command: vaultUnlockCommandFor(degraded) };
+    }
+    if (isCredentialIssue(degraded)) {
+        return {
+            kind: "provider-auth",
+            label: "provider auth",
+            command: authCommandFor(degraded),
+            provider: extractProviderFromFixHint(degraded.fixHint),
+        };
+    }
+    return undefined;
+}
+function typedActionToRunnable(degraded, action) {
+    if (action.executable === false || action.command.includes("<"))
+        return undefined;
+    if (action.kind === "vault-unlock") {
+        return { kind: "vault-unlock", label: "vault unlock", command: action.command };
+    }
+    if (action.kind === "provider-auth") {
+        return {
+            kind: "provider-auth",
+            label: "provider auth",
+            command: action.command || `ouro auth --agent ${degraded.agent}`,
+            provider: action.provider,
+        };
+    }
+    return undefined;
+}
+function writeRepairQueueSummary(degraded, deps) {
+    const lines = renderRepairQueueSummaryLines(degraded);
+    if (lines.length > 0)
+        deps.writeStdout(renderRepairQueueSummary(degraded, deps));
+}
+async function attemptVaultUnlock(entry, action, deps) {
+    deps.writeStdout(renderActionPrompt(entry, action, deps));
+    const answer = await deps.promptInput(`Unlock ${entry.agent}'s vault now? [y/N] `);
+    if (!isAffirmativeAnswer(answer)) {
+        writeDeclinedRepair(entry, action.command, deps);
+        return { succeeded: false, attempted: false };
+    }
+    try {
+        if (!deps.runVaultUnlock) {
+            deps.writeStdout(renderManualRepairHint(entry.agent, entry.fixHint));
+            return { succeeded: false, attempted: false };
+        }
+        await deps.runVaultUnlock(entry.agent);
+        return { succeeded: true, attempted: true };
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        deps.writeStdout(`Vault unlock did not finish for ${entry.agent}.\n  ${msg}`);
+        (0, runtime_1.emitNervesEvent)({
+            level: "error",
+            component: "daemon",
+            event: "daemon.interactive_repair_vault_unlock_error",
+            message: `vault unlock failed for ${entry.agent}`,
+            meta: { agent: entry.agent, error: msg },
+        });
+        return { succeeded: false, attempted: true };
+    }
+}
+async function attemptProviderAuth(entry, action, deps) {
+    deps.writeStdout(renderActionPrompt(entry, action, deps));
+    const answer = await deps.promptInput(`Open the auth flow for ${entry.agent} now? [y/N] `);
+    if (!isAffirmativeAnswer(answer)) {
+        writeDeclinedRepair(entry, action.command, deps);
+        return { succeeded: false, attempted: false };
+    }
+    try {
+        if (action.provider) {
+            await deps.runAuthFlow(entry.agent, action.provider);
+        }
+        else {
+            await deps.runAuthFlow(entry.agent);
+        }
+        return { succeeded: true, attempted: true };
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        deps.writeStdout(`Auth did not finish for ${entry.agent}.\n  ${msg}`);
+        (0, runtime_1.emitNervesEvent)({
+            level: "error",
+            component: "daemon",
+            event: "daemon.interactive_repair_auth_error",
+            message: `auth flow failed for ${entry.agent}`,
+            meta: { agent: entry.agent, error: msg },
+        });
+        return { succeeded: false, attempted: true };
+    }
+}
+async function processEntry(entry, deps) {
+    let current = entry;
+    while (current) {
+        const action = runnableRepairActionFor(current);
+        let outcome;
+        if (action?.kind === "vault-unlock") {
+            outcome = await attemptVaultUnlock(current, action, deps);
+        }
+        else if (action?.kind === "provider-auth") {
+            outcome = await attemptProviderAuth(current, action, deps);
+        }
+        else if (isConfigError(current)) {
+            deps.writeStdout(renderManualRepairHint(current.agent, current.fixHint));
+            return { attempted: false };
+        }
+        else {
+            deps.writeStdout(renderUnknownRepair(current.agent, current.errorReason));
+            return { attempted: false };
+        }
+        if (!outcome.succeeded || !deps.recheckAgent) {
+            return { attempted: outcome.attempted };
+        }
+        // Re-evaluate the agent after successful repair
+        const recheckResult = await deps.recheckAgent(current.agent);
+        if (recheckResult === null) {
+            deps.writeStdout(`${current.agent} recovered.`);
+            return { attempted: true };
+        }
+        // Agent still degraded with a new error -- loop to present the new action
+        current = recheckResult;
+    }
+    /* v8 ignore next -- unreachable: loop always returns from within @preserve */
+    return { attempted: false };
+}
+async function runInteractiveRepair(degraded, deps) {
+    (0, runtime_1.emitNervesEvent)({
+        level: "info",
+        component: "daemon",
+        event: "daemon.interactive_repair_start",
+        message: "interactive repair flow started",
+        meta: { degradedCount: degraded.length },
+    });
+    if (degraded.length === 0) {
+        return { repairsAttempted: false };
+    }
+    let repairsAttempted = false;
+    if (!deps.skipQueueSummary) {
+        writeRepairQueueSummary(degraded, deps);
+    }
+    for (const entry of degraded) {
+        const result = await processEntry(entry, deps);
+        if (result.attempted)
+            repairsAttempted = true;
+    }
+    if (repairsAttempted) {
+        deps.writeStdout("Repair flow complete.");
+    }
+    (0, runtime_1.emitNervesEvent)({
+        level: "info",
+        component: "daemon",
+        event: "daemon.interactive_repair_end",
+        message: "interactive repair flow completed",
+        meta: { repairsAttempted },
+    });
+    return { repairsAttempted };
+}

package/dist/heart/daemon/launchd.js

@@ -45,6 +45,9 @@ exports.DAEMON_PLIST_LABEL = "bot.ouro.daemon";
 function plistFilePath(homeDir) {
     return path.join(homeDir, "Library", "LaunchAgents", `${exports.DAEMON_PLIST_LABEL}.plist`);
 }
+function userLaunchDomain(userUid) {
+    return `gui/${userUid}`;
+}
 function generateDaemonPlist(options) {
     (0, runtime_1.emitNervesEvent)({
         component: "daemon",
@@ -71,8 +74,17 @@ function generateDaemonPlist(options) {
         `  <key>KeepAlive</key>`,
         `  <true/>`,
     ];
+    if (options.envPath) {
+        lines.push(`  <key>EnvironmentVariables</key>`, `  <dict>`, `    <key>PATH</key>`, `    <string>${options.envPath}</string>`, `  </dict>`);
+    }
     if (options.logDir) {
-        lines.push(`  <key>StandardOutPath</key>`, `  <string>${path.join(options.logDir, "ouro-daemon-stdout.log")}</string>`, `  <key>StandardErrorPath</key>`, `  <string>${path.join(options.logDir, "ouro-daemon-stderr.log")}</string>`);
+        // PR 1 decision: we no longer emit `StandardErrorPath` for the daemon.
+        // The daemon's structured nerves ndjson pipeline (rotated + gzipped via
+        // createNdjsonFileSink) is the source of truth for diagnostics. Writing
+        // raw process stderr to an unrotated file grew to 366 MB in the wild;
+        // dropping the key lets launchd forward stray stderr to the system log
+        // where it gets rotated by the OS.
+        lines.push(`  <key>StandardOutPath</key>`, `  <string>${path.join(options.logDir, "ouro-daemon-stdout.log")}</string>`);
     }
     lines.push(`</dict>`, `</plist>`, ``);
     return lines.join("\n");
@@ -102,19 +114,26 @@ function installLaunchAgent(deps, options) {
         meta: { entryPath: options.entryPath, socketPath: options.socketPath },
     });
     const fullPath = plistFilePath(deps.homeDir);
+    const domain = userLaunchDomain(deps.userUid);
     // Unload existing (best effort) for idempotent re-install
     if (deps.existsFile(fullPath)) {
         try {
-            deps.exec(`launchctl unload "${fullPath}"`);
+            deps.exec(`launchctl bootout ${domain} "${fullPath}"`);
         }
         catch { /* best effort */ }
     }
     writeLaunchAgentPlist(deps, options);
-    deps.exec(`launchctl load "${fullPath}"`);
+    // Bootstrap the plist so launchd manages crash recovery via KeepAlive.
+    // This is safe because ouro up calls this AFTER the daemon is already running,
+    // so launchd sees the existing process and just registers for KeepAlive.
+    try {
+        deps.exec(`launchctl bootstrap ${domain} "${fullPath}"`);
+    }
+    catch { /* already loaded */ }
     (0, runtime_1.emitNervesEvent)({
         component: "daemon",
         event: "daemon.launchd_installed",
-        message: "launch agent installed",
+        message: "launch agent installed with KeepAlive",
         meta: { plistPath: fullPath },
     });
 }
@@ -126,9 +145,10 @@ function uninstallLaunchAgent(deps) {
         meta: {},
     });
     const fullPath = plistFilePath(deps.homeDir);
+    const domain = userLaunchDomain(deps.userUid);
     if (deps.existsFile(fullPath)) {
         try {
-            deps.exec(`launchctl unload "${fullPath}"`);
+            deps.exec(`launchctl bootout ${domain} "${fullPath}"`);
         }
         catch { /* best effort */ }
         deps.removeFile(fullPath);