@provos/ironcurtain 0.5.1 → 0.7.0

package/dist/cron/job-store.js

@@ -0,0 +1,111 @@
+/**
+ * Filesystem-backed store for job definitions and run records.
+ *
+ * Directory layout:
+ *   ~/.ironcurtain/jobs/{jobId}/
+ *     job.json              -- JobDefinition
+ *     generated/            -- per-job compiled policy artifacts
+ *       compiled-policy.json
+ *       dynamic-lists.json  -- (optional)
+ *     workspace/            -- persistent agent workspace
+ *     runs/                 -- run history
+ *       2026-03-04T09:00:00.000Z.json
+ *
+ * Tool annotations (tool-annotations.json) are always loaded from
+ * the global location, never stored per-job.
+ */
+import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { getJobsDir, getJobDir, getJobRunsDir } from '../config/paths.js';
+import { createJobId } from './types.js';
+import { withFileLock, getJobLockDir } from './file-lock.js';
+/** Loads a job definition from disk. Returns undefined if not found. */
+export function loadJob(jobId) {
+    const jobFile = resolve(getJobDir(jobId), 'job.json');
+    if (!existsSync(jobFile))
+        return undefined;
+    try {
+        return JSON.parse(readFileSync(jobFile, 'utf-8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Loads all job definitions from disk. */
+export function loadAllJobs() {
+    const jobsDir = getJobsDir();
+    if (!existsSync(jobsDir))
+        return [];
+    const jobs = [];
+    let entries;
+    try {
+        entries = readdirSync(jobsDir);
+    }
+    catch {
+        return [];
+    }
+    for (const entry of entries) {
+        try {
+            const jobId = createJobId(entry);
+            const job = loadJob(jobId);
+            if (job)
+                jobs.push(job);
+        }
+        catch {
+            // Skip invalid directory names or malformed job files
+        }
+    }
+    return jobs;
+}
+/**
+ * Saves a job definition to disk. Creates directories as needed.
+ * Acquires an advisory file lock to prevent concurrent write corruption.
+ */
+export async function saveJob(job) {
+    const jobDir = getJobDir(job.id);
+    mkdirSync(jobDir, { recursive: true });
+    await withFileLock(getJobLockDir(jobDir), () => {
+        writeFileSync(resolve(jobDir, 'job.json'), JSON.stringify(job, null, 2) + '\n');
+    });
+}
+/** Deletes a job and all its artifacts (generated, workspace, runs). */
+export function deleteJob(jobId) {
+    rmSync(getJobDir(jobId), { recursive: true, force: true });
+}
+/** Records a completed run. Filenames are unique (timestamp-based), so no lock needed. */
+export function saveRunRecord(jobId, record) {
+    const runsDir = getJobRunsDir(jobId);
+    mkdirSync(runsDir, { recursive: true });
+    const filename = record.startedAt.replace(/:/g, '-') + '.json';
+    writeFileSync(resolve(runsDir, filename), JSON.stringify(record, null, 2) + '\n');
+}
+/**
+ * Loads recent run records for a job, most recent first.
+ * @param limit Maximum number of records to return (default 10).
+ */
+export function loadRecentRuns(jobId, limit = 10) {
+    const runsDir = getJobRunsDir(jobId);
+    if (!existsSync(runsDir))
+        return [];
+    let files;
+    try {
+        files = readdirSync(runsDir).filter((f) => f.endsWith('.json'));
+    }
+    catch {
+        return [];
+    }
+    // Sort by filename (ISO timestamp-based) descending
+    files.sort((a, b) => b.localeCompare(a));
+    const records = [];
+    for (const file of files.slice(0, limit)) {
+        try {
+            const record = JSON.parse(readFileSync(resolve(runsDir, file), 'utf-8'));
+            records.push(record);
+        }
+        catch {
+            // Skip malformed run records
+        }
+    }
+    return records;
+}
+//# sourceMappingURL=job-store.js.map

package/dist/cron/job-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-store.js","sourceRoot":"","sources":["../../src/cron/job-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE1E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE7D,wEAAwE;AACxE,MAAM,UAAU,OAAO,CAAC,KAAY;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAkB,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAkB;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE;QAC7C,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,KAAY;IACpC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,MAAiB;IAC3D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC;IAC/D,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAY,EAAE,QAAgB,EAAE;IAC7D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAc,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cron/types.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Cron Mode types -- job definitions, run records, and budget overrides.
+ *
+ * These types are used by the job store, cron scheduler, daemon,
+ * and CLI commands.
+ */
+/**
+ * Stable, user-chosen identifier for a cron job.
+ * Must be a valid slug: lowercase alphanumeric, hyphens, underscores.
+ * Branded to prevent mixing with other string identifiers.
+ */
+export type JobId = string & {
+    readonly __brand: 'JobId';
+};
+/** Regex for valid job IDs: 1-63 chars, lowercase alphanumeric, hyphens, or underscores. */
+export declare const JOB_ID_PATTERN: RegExp;
+/** Validates and creates a JobId from a user-provided string. */
+export declare function createJobId(raw: string): JobId;
+/**
+ * Persisted job definition. Stored as JSON at
+ * ~/.ironcurtain/jobs/{jobId}/job.json.
+ *
+ * Invariant: the `task` field is the "constitution" input for
+ * per-job policy compilation. Changing it invalidates the
+ * compiled policy (detected via content hash comparison).
+ */
+export interface JobDefinition {
+    /** Stable user-chosen slug. Matches the directory name. */
+    readonly id: JobId;
+    /** Human-friendly display name. */
+    readonly name: string;
+    /** Standard cron expression (5 fields: min hour dom mon dow). */
+    readonly schedule: string;
+    /**
+     * English task description sent to the agent as its work prompt.
+     */
+    readonly taskDescription: string;
+    /**
+     * English constitution text used as the policy compilation input.
+     * Describes what the agent is and is not permitted to do.
+     */
+    readonly taskConstitution: string;
+    /**
+     * Working directory for this job. Persists across runs.
+     * Default: ~/.ironcurtain/jobs/{jobId}/workspace/
+     */
+    readonly workspace?: string;
+    /**
+     * Optional git repository URI to clone into the workspace.
+     * On first run, the repo is cloned. On subsequent runs,
+     * tracked files are reset to remote HEAD (untracked files preserved).
+     */
+    readonly gitRepo?: string;
+    /**
+     * When true and Signal is configured, the daemon sends a Signal
+     * message on escalation and waits for approval. When false or
+     * Signal is not configured, escalations are auto-denied.
+     */
+    readonly notifyOnEscalation: boolean;
+    /**
+     * When true and Signal is configured, the daemon sends a Signal
+     * message with the run summary on completion.
+     */
+    readonly notifyOnCompletion: boolean;
+    /**
+     * Per-job resource budget overrides. Null fields inherit from
+     * the cron-specific defaults.
+     */
+    readonly budgetOverrides?: Partial<JobBudgetOverrides>;
+    /** Whether this job is active. Disabled jobs are not scheduled. */
+    readonly enabled: boolean;
+}
+/**
+ * Budget fields that can be overridden per-job.
+ * All fields are nullable: null means "disable this limit".
+ */
+export interface JobBudgetOverrides {
+    readonly maxTotalTokens: number | null;
+    readonly maxSteps: number | null;
+    readonly maxSessionSeconds: number | null;
+    readonly maxEstimatedCostUsd: number | null;
+}
+/**
+ * Outcome status for a completed run.
+ */
+export type RunOutcome = {
+    readonly kind: 'success';
+} | {
+    readonly kind: 'budget_exhausted';
+    readonly dimension: string;
+} | {
+    readonly kind: 'error';
+    readonly message: string;
+};
+/**
+ * Persisted run record. Written to
+ * ~/.ironcurtain/jobs/{jobId}/runs/{timestamp}.json
+ * after each run completes.
+ */
+export interface RunRecord {
+    /** ISO 8601 start time. Also used as the filename. */
+    readonly startedAt: string;
+    /** ISO 8601 end time. */
+    readonly completedAt: string;
+    /** How the run ended. */
+    readonly outcome: RunOutcome;
+    /** Resource consumption snapshot. */
+    readonly budget: {
+        readonly totalTokens: number;
+        readonly stepCount: number;
+        readonly elapsedSeconds: number;
+        readonly estimatedCostUsd: number;
+    };
+    /**
+     * Brief summary extracted from workspace/last-run.md, if it exists.
+     * Truncated to 2000 chars. Null if the file was not written.
+     */
+    readonly summary: string | null;
+    /** Whether any escalations were surfaced during this run. */
+    readonly escalationsEncountered: number;
+    /** Whether any escalations were approved (vs. denied or timed out). */
+    readonly escalationsApproved: number;
+    /** git diff --stat of tracked-file changes discarded during pre-run sync. */
+    readonly discardedChanges: string | null;
+}
+/** Cron-specific budget defaults (differ from interactive defaults). */
+export declare const CRON_BUDGET_DEFAULTS: Required<JobBudgetOverrides>;

package/dist/cron/types.js

@@ -0,0 +1,25 @@
+/**
+ * Cron Mode types -- job definitions, run records, and budget overrides.
+ *
+ * These types are used by the job store, cron scheduler, daemon,
+ * and CLI commands.
+ */
+/** Regex for valid job IDs: 1-63 chars, lowercase alphanumeric, hyphens, or underscores. */
+export const JOB_ID_PATTERN = /^[a-z0-9][a-z0-9_-]{0,62}$/;
+/** Validates and creates a JobId from a user-provided string. */
+export function createJobId(raw) {
+    if (!JOB_ID_PATTERN.test(raw)) {
+        throw new Error(`Invalid job ID "${raw}": must be 1-63 chars, ` +
+            `lowercase alphanumeric, hyphens, or underscores, ` +
+            `starting with a letter or digit`);
+    }
+    return raw;
+}
+/** Cron-specific budget defaults (differ from interactive defaults). */
+export const CRON_BUDGET_DEFAULTS = {
+    maxTotalTokens: 500_000,
+    maxSteps: 100,
+    maxSessionSeconds: 3_600,
+    maxEstimatedCostUsd: 2.0,
+};
+//# sourceMappingURL=types.js.map

package/dist/cron/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cron/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAE3D,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,yBAAyB;YAC7C,mDAAmD;YACnD,iCAAiC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,GAAY,CAAC;AACtB,CAAC;AA6HD,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,cAAc,EAAE,OAAO;IACvB,QAAQ,EAAE,GAAG;IACb,iBAAiB,EAAE,KAAK;IACxB,mBAAmB,EAAE,GAAG;CACzB,CAAC"}

package/dist/daemon/control-socket.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Control socket for live daemon communication.
+ *
+ * The daemon listens on a Unix domain socket at ~/.ironcurtain/daemon.sock.
+ * CLI commands detect whether the daemon is running (socket exists and
+ * responds) and forward commands to it. If no daemon is running, CLI
+ * commands fall back to direct filesystem operations.
+ *
+ * Protocol: newline-delimited JSON. Each request is a single JSON line;
+ * the daemon writes a single JSON response line and closes the connection.
+ */
+import type { JobDefinition, RunRecord } from '../cron/types.js';
+/** Commands the CLI can send to the daemon. */
+export type ControlRequest = {
+    readonly command: 'ping';
+} | {
+    readonly command: 'status';
+} | {
+    readonly command: 'add-job';
+    readonly job: JobDefinition;
+} | {
+    readonly command: 'remove-job';
+    readonly jobId: string;
+} | {
+    readonly command: 'enable-job';
+    readonly jobId: string;
+} | {
+    readonly command: 'disable-job';
+    readonly jobId: string;
+} | {
+    readonly command: 'recompile-job';
+    readonly jobId: string;
+} | {
+    readonly command: 'reload-job';
+    readonly jobId: string;
+} | {
+    readonly command: 'run-job';
+    readonly jobId: string;
+} | {
+    readonly command: 'list-jobs';
+};
+/** Successful response from the daemon. */
+export interface ControlResponseOk {
+    readonly ok: true;
+    readonly data?: unknown;
+}
+/** Error response from the daemon. */
+export interface ControlResponseError {
+    readonly ok: false;
+    readonly error: string;
+}
+export type ControlResponse = ControlResponseOk | ControlResponseError;
+/** Status snapshot returned by the daemon. */
+export interface DaemonStatus {
+    readonly uptimeSeconds: number;
+    readonly jobs: {
+        total: number;
+        enabled: number;
+        running: number;
+    };
+    readonly signalConnected: boolean;
+    readonly nextFireTime: Date | null;
+}
+/** JSON-serialized form of DaemonStatus (Date → ISO string). */
+export interface DaemonStatusDto {
+    readonly uptimeSeconds: number;
+    readonly jobs: {
+        total: number;
+        enabled: number;
+        running: number;
+    };
+    readonly signalConnected: boolean;
+    readonly nextFireTime: string | null;
+}
+export interface ControlRequestHandler {
+    getStatus(): DaemonStatus;
+    addJob(job: JobDefinition): Promise<void>;
+    removeJob(jobId: string): Promise<void>;
+    enableJob(jobId: string): Promise<void>;
+    disableJob(jobId: string): Promise<void>;
+    recompileJob(jobId: string): Promise<void>;
+    reloadJob(jobId: string): Promise<void>;
+    runJobNow(jobId: string): Promise<RunRecord>;
+    listJobs(): Array<{
+        job: JobDefinition;
+        nextRun: Date | undefined;
+        lastRun: RunRecord | undefined;
+        isRunning: boolean;
+    }>;
+}
+export declare class ControlSocketServer {
+    private server;
+    private readonly socketPath;
+    private readonly handler;
+    constructor(handler: ControlRequestHandler, socketPath?: string);
+    /** Starts listening on the Unix domain socket. */
+    start(): Promise<void>;
+    /** Stops the server and removes the socket file. */
+    stop(): Promise<void>;
+    /**
+     * Removes a stale socket file left behind by a crashed daemon.
+     * Attempts to connect first — only unlinks when the socket is
+     * confirmed stale (ECONNREFUSED) or absent (ENOENT). If the
+     * socket is live, throws so the caller knows another daemon is running.
+     */
+    private removeStaleSocket;
+    /**
+     * Probes whether the socket is actively accepting connections.
+     * Returns true if a daemon is listening, false if stale/absent.
+     */
+    private isSocketAlive;
+    private cleanupSocketFile;
+    private onConnection;
+    private handleRequest;
+    private dispatch;
+    private sendResponse;
+}
+/**
+ * Sends a request to the running daemon via the control socket.
+ * Returns the parsed response, or null if the daemon is not reachable.
+ */
+export declare function sendControlRequest(request: ControlRequest, socketPath?: string): Promise<ControlResponse | null>;
+/**
+ * Checks if a daemon is currently running and responsive.
+ * Returns true if the daemon responds to a ping.
+ */
+export declare function isDaemonRunning(socketPath?: string): Promise<boolean>;

package/dist/daemon/control-socket.js

@@ -0,0 +1,261 @@
+/**
+ * Control socket for live daemon communication.
+ *
+ * The daemon listens on a Unix domain socket at ~/.ironcurtain/daemon.sock.
+ * CLI commands detect whether the daemon is running (socket exists and
+ * responds) and forward commands to it. If no daemon is running, CLI
+ * commands fall back to direct filesystem operations.
+ *
+ * Protocol: newline-delimited JSON. Each request is a single JSON line;
+ * the daemon writes a single JSON response line and closes the connection.
+ */
+import { createServer, createConnection } from 'node:net';
+import { unlinkSync } from 'node:fs';
+import { getDaemonSocketPath } from '../config/paths.js';
+import * as logger from '../logger.js';
+// ---------------------------------------------------------------------------
+// Server (daemon-side)
+// ---------------------------------------------------------------------------
+export class ControlSocketServer {
+    server = null;
+    socketPath;
+    handler;
+    constructor(handler, socketPath) {
+        this.handler = handler;
+        this.socketPath = socketPath ?? getDaemonSocketPath();
+    }
+    /** Starts listening on the Unix domain socket. */
+    async start() {
+        await this.removeStaleSocket();
+        return new Promise((resolve, reject) => {
+            const server = createServer((socket) => this.onConnection(socket));
+            this.server = server;
+            server.on('error', (err) => {
+                logger.error(`[ControlSocket] Server error: ${err.message}`);
+                reject(err);
+            });
+            server.listen(this.socketPath, () => {
+                logger.info(`[ControlSocket] Listening on ${this.socketPath}`);
+                resolve();
+            });
+        });
+    }
+    /** Stops the server and removes the socket file. */
+    async stop() {
+        if (!this.server)
+            return;
+        const server = this.server;
+        return new Promise((resolve) => {
+            server.close(() => {
+                this.cleanupSocketFile();
+                this.server = null;
+                resolve();
+            });
+        });
+    }
+    /**
+     * Removes a stale socket file left behind by a crashed daemon.
+     * Attempts to connect first — only unlinks when the socket is
+     * confirmed stale (ECONNREFUSED) or absent (ENOENT). If the
+     * socket is live, throws so the caller knows another daemon is running.
+     */
+    async removeStaleSocket() {
+        const alive = await this.isSocketAlive();
+        if (alive) {
+            throw new Error(`Another daemon is already listening on ${this.socketPath}. ` + `Stop it first or remove the socket manually.`);
+        }
+        // Socket is stale or absent — safe to unlink
+        try {
+            unlinkSync(this.socketPath);
+            logger.info(`[ControlSocket] Removed stale socket file`);
+        }
+        catch {
+            // File doesn't exist — fine
+        }
+    }
+    /**
+     * Probes whether the socket is actively accepting connections.
+     * Returns true if a daemon is listening, false if stale/absent.
+     */
+    isSocketAlive() {
+        return new Promise((resolve) => {
+            const conn = createConnection(this.socketPath);
+            conn.once('connect', () => {
+                conn.destroy();
+                resolve(true);
+            });
+            conn.once('error', () => {
+                resolve(false);
+            });
+        });
+    }
+    cleanupSocketFile() {
+        try {
+            unlinkSync(this.socketPath);
+        }
+        catch {
+            // Best-effort cleanup
+        }
+    }
+    onConnection(socket) {
+        let data = '';
+        let dispatched = false;
+        socket.on('data', (chunk) => {
+            if (dispatched)
+                return;
+            data += chunk.toString();
+            const newlineIndex = data.indexOf('\n');
+            if (newlineIndex === -1)
+                return;
+            dispatched = true;
+            const line = data.slice(0, newlineIndex);
+            void this.handleRequest(line, socket);
+        });
+        socket.on('error', (err) => {
+            logger.warn(`[ControlSocket] Connection error: ${err.message}`);
+        });
+        // Timeout idle connections after 30s
+        socket.setTimeout(30_000, () => {
+            socket.destroy();
+        });
+    }
+    async handleRequest(line, socket) {
+        let request;
+        try {
+            request = JSON.parse(line);
+        }
+        catch {
+            this.sendResponse(socket, { ok: false, error: 'Invalid JSON' });
+            return;
+        }
+        try {
+            const response = await this.dispatch(request);
+            this.sendResponse(socket, response);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            this.sendResponse(socket, { ok: false, error: message });
+        }
+    }
+    async dispatch(request) {
+        switch (request.command) {
+            case 'ping':
+                return { ok: true, data: { status: 'running' } };
+            case 'status': {
+                const status = this.handler.getStatus();
+                return {
+                    ok: true,
+                    data: {
+                        ...status,
+                        nextFireTime: status.nextFireTime?.toISOString() ?? null,
+                    },
+                };
+            }
+            case 'add-job':
+                await this.handler.addJob(request.job);
+                return { ok: true };
+            case 'remove-job':
+                await this.handler.removeJob(request.jobId);
+                return { ok: true };
+            case 'enable-job':
+                await this.handler.enableJob(request.jobId);
+                return { ok: true };
+            case 'disable-job':
+                await this.handler.disableJob(request.jobId);
+                return { ok: true };
+            case 'recompile-job':
+                await this.handler.recompileJob(request.jobId);
+                return { ok: true };
+            case 'reload-job':
+                await this.handler.reloadJob(request.jobId);
+                return { ok: true };
+            case 'run-job': {
+                const record = await this.handler.runJobNow(request.jobId);
+                return { ok: true, data: record };
+            }
+            case 'list-jobs': {
+                const jobs = this.handler.listJobs();
+                // Serialize dates for JSON transport
+                const serialized = jobs.map((j) => ({
+                    ...j,
+                    nextRun: j.nextRun?.toISOString() ?? null,
+                }));
+                return { ok: true, data: serialized };
+            }
+            default:
+                return { ok: false, error: `Unknown command: ${request.command}` };
+        }
+    }
+    sendResponse(socket, response) {
+        try {
+            socket.end(JSON.stringify(response) + '\n');
+        }
+        catch {
+            // Connection may have been closed
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Client (CLI-side)
+// ---------------------------------------------------------------------------
+/** Timeout for connecting to the daemon socket (ms). */
+const CONNECT_TIMEOUT = 2_000;
+/** Timeout for receiving a response from the daemon (ms). */
+const RESPONSE_TIMEOUT = 300_000; // 5 minutes -- run-job can take a while
+/**
+ * Sends a request to the running daemon via the control socket.
+ * Returns the parsed response, or null if the daemon is not reachable.
+ */
+export async function sendControlRequest(request, socketPath) {
+    const path = socketPath ?? getDaemonSocketPath();
+    return new Promise((resolve) => {
+        const socket = createConnection({ path });
+        let data = '';
+        let settled = false;
+        let connectTimer = null;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (connectTimer)
+                clearTimeout(connectTimer);
+            socket.destroy();
+            resolve(result);
+        };
+        socket.setTimeout(RESPONSE_TIMEOUT, () => {
+            finish(null);
+        });
+        socket.on('connect', () => {
+            socket.write(JSON.stringify(request) + '\n');
+        });
+        socket.on('data', (chunk) => {
+            data += chunk.toString();
+            const newlineIndex = data.indexOf('\n');
+            if (newlineIndex === -1)
+                return;
+            try {
+                const response = JSON.parse(data.slice(0, newlineIndex));
+                finish(response);
+            }
+            catch {
+                finish(null);
+            }
+        });
+        socket.on('error', () => {
+            finish(null);
+        });
+        // Connect timeout -- daemon not responding
+        connectTimer = setTimeout(() => {
+            finish(null);
+        }, CONNECT_TIMEOUT);
+    });
+}
+/**
+ * Checks if a daemon is currently running and responsive.
+ * Returns true if the daemon responds to a ping.
+ */
+export async function isDaemonRunning(socketPath) {
+    const response = await sendControlRequest({ command: 'ping' }, socketPath);
+    return response !== null && response.ok;
+}
+//# sourceMappingURL=control-socket.js.map

package/dist/daemon/control-socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-socket.js","sourceRoot":"","sources":["../../src/daemon/control-socket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA4B,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAuEvC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,OAAO,mBAAmB;IACtB,MAAM,GAAkB,IAAI,CAAC;IACpB,UAAU,CAAS;IACnB,OAAO,CAAwB;IAEhD,YAAY,OAA8B,EAAE,UAAmB;QAC7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,mBAAmB,EAAE,CAAC;IACxD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YAErB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAChB,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,0CAA0C,IAAI,CAAC,UAAU,IAAI,GAAG,8CAA8C,CAC/G,CAAC;QACJ,CAAC;QACD,6CAA6C;QAC7C,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,aAAa;QACnB,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,UAAU;gBAAE,OAAO;YACvB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,YAAY,KAAK,CAAC,CAAC;gBAAE,OAAO;YAEhC,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACzC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,MAAc;QACtD,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAuB;QAC5C,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,MAAM;gBACT,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;YAEnD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACxC,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE;wBACJ,GAAG,MAAM;wBACT,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;qBACzD;iBACF,CAAC;YACJ,CAAC;YAED,KAAK,SAAS;gBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,aAAa;gBAChB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,eAAe;gBAClB,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACpC,CAAC;YAED,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrC,qCAAqC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,GAAG,CAAC;oBACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI;iBAC1C,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACxC,CAAC;YAED;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAqB,OAA0B,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,QAAyB;QAC5D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,wDAAwD;AACxD,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,wCAAwC;AAE1E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,UAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,IAAI,mBAAmB,EAAE,CAAC;IAEjD,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAyC,IAAI,CAAC;QAE9D,MAAM,MAAM,GAAG,CAAC,MAA8B,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,YAAY,KAAK,CAAC,CAAC;gBAAE,OAAO;YAEhC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAoB,CAAC;gBAC5E,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,eAAe,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAmB;IACvD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3E,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,EAAE,CAAC;AAC1C,CAAC"}