@provos/ironcurtain 0.6.0 → 0.7.0

package/dist/daemon/daemon-command.d.ts

@@ -0,0 +1,13 @@
+/**
+ * CLI entry point for `ironcurtain daemon` and its subcommands.
+ *
+ * When no sub-subcommand is given, starts the unified daemon.
+ * Subcommands: add-job, list-jobs, run-job, remove-job,
+ *              disable-job, enable-job, recompile-job, logs
+ *
+ * Commands that modify daemon state (remove-job, enable-job, disable-job,
+ * recompile-job, run-job) first check if a daemon is running via the
+ * control socket. If running, the command is forwarded to the daemon.
+ * Otherwise, the command operates directly on the filesystem.
+ */
+export declare function runDaemonCommand(argv: string[]): Promise<void>;

package/dist/daemon/daemon-command.js

@@ -0,0 +1,230 @@
+/**
+ * CLI entry point for `ironcurtain daemon` and its subcommands.
+ *
+ * When no sub-subcommand is given, starts the unified daemon.
+ * Subcommands: add-job, list-jobs, run-job, remove-job,
+ *              disable-job, enable-job, recompile-job, logs
+ *
+ * Commands that modify daemon state (remove-job, enable-job, disable-job,
+ * recompile-job, run-job) first check if a daemon is running via the
+ * control socket. If running, the command is forwarded to the daemon.
+ * Otherwise, the command operates directly on the filesystem.
+ */
+import { parseArgs } from 'node:util';
+import { IronCurtainDaemon } from './ironcurtain-daemon.js';
+import { sendControlRequest } from './control-socket.js';
+import { formatDuration } from '../cron/format-utils.js';
+import { checkHelp } from '../cli-help.js';
+const daemonSpec = {
+    name: 'ironcurtain daemon',
+    description: 'Unified Signal + cron daemon',
+    usage: [
+        'ironcurtain daemon [options]              Start the daemon',
+        'ironcurtain daemon <subcommand> [options]  Manage jobs',
+    ],
+    subcommands: [
+        { name: 'add-job', description: 'Add a new scheduled job (interactive)' },
+        { name: 'edit-job <id>', description: 'Edit an existing job (interactive)' },
+        { name: 'list-jobs', description: 'List all jobs with schedule info' },
+        { name: 'run-job <id>', description: 'Manually trigger a job run' },
+        { name: 'status', description: 'Show daemon status' },
+        { name: 'remove-job <id>', description: 'Delete a job and all artifacts' },
+        { name: 'disable-job <id>', description: 'Stop scheduling a job' },
+        { name: 'enable-job <id>', description: 'Resume scheduling a job' },
+        { name: 'recompile-job <id>', description: 'Re-run policy compilation' },
+        { name: 'logs <id>', description: 'Show recent run summaries' },
+    ],
+    options: [
+        { flag: 'agent', short: 'a', description: 'Agent mode (same as start)', placeholder: '<name>' },
+        { flag: 'force', short: 'f', description: 'Skip confirmation prompts' },
+        { flag: 'no-signal', description: 'Skip Signal transport (cron-only mode)' },
+        { flag: 'runs', description: 'Number of recent runs to show (for logs)', placeholder: '<N>' },
+    ],
+};
+/** Extracts a required job-id positional, exiting with usage if missing. */
+function requireJobIdArg(positionals) {
+    const jobId = positionals[1];
+    if (!jobId) {
+        console.error('Usage: ironcurtain daemon <subcommand> <job-id>');
+        process.exit(1);
+    }
+    return jobId;
+}
+/**
+ * Attempts to forward a command to a running daemon.
+ * Returns the response if the daemon handled it, or null if no daemon
+ * is running (caller should fall back to local filesystem operations).
+ */
+async function tryForwardToDaemon(request) {
+    return sendControlRequest(request);
+}
+/**
+ * Handles a forwarded response: prints success/error and exits.
+ * Returns true if the response was handled (caller should return).
+ */
+function handleForwardedResponse(response, successMessage) {
+    if (response === null)
+        return false;
+    if (!response.ok) {
+        console.error(`Error from daemon: ${response.error}`);
+        process.exit(1);
+    }
+    if (successMessage) {
+        console.error(successMessage);
+    }
+    return true;
+}
+export async function runDaemonCommand(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        options: {
+            agent: { type: 'string', short: 'a' },
+            'no-signal': { type: 'boolean' },
+            force: { type: 'boolean', short: 'f' },
+            runs: { type: 'string' },
+            help: { type: 'boolean', short: 'h' },
+        },
+        allowPositionals: true,
+        strict: false,
+    });
+    if (checkHelp(values, daemonSpec)) {
+        return;
+    }
+    const subcommand = positionals[0];
+    // Resolve session mode (same as `start` command)
+    const { resolveSessionMode } = await import('../session/preflight.js');
+    const { loadConfig } = await import('../config/index.js');
+    const preflight = await resolveSessionMode({
+        config: loadConfig(),
+        requestedAgent: values.agent ? values.agent : undefined,
+    });
+    const mode = preflight.mode;
+    console.error(`Mode: ${mode.kind} (${preflight.reason})`);
+    if (!subcommand) {
+        // Start the daemon
+        const daemon = new IronCurtainDaemon({
+            mode,
+            noSignal: values['no-signal'],
+        });
+        // Handle shutdown signals
+        const shutdownHandler = async () => {
+            await daemon.shutdown();
+            process.exit(0);
+        };
+        process.on('SIGINT', () => void shutdownHandler());
+        process.on('SIGTERM', () => void shutdownHandler());
+        await daemon.start();
+        return;
+    }
+    // Sub-subcommands that work without a running daemon
+    switch (subcommand) {
+        case 'add-job': {
+            const { runAddJobWizard } = await import('../cron/job-commands.js');
+            await runAddJobWizard();
+            break;
+        }
+        case 'edit-job': {
+            const jobId = requireJobIdArg(positionals);
+            const { runEditJobWizard } = await import('../cron/job-commands.js');
+            await runEditJobWizard(jobId);
+            break;
+        }
+        case 'status': {
+            const { sendControlRequest: sendReq } = await import('./control-socket.js');
+            const resp = await sendReq({ command: 'status' });
+            if (!resp || !resp.ok) {
+                console.error('Daemon is not running.');
+                break;
+            }
+            const status = resp.data;
+            const uptimeStr = formatDuration(status.uptimeSeconds);
+            console.error('Daemon is running.');
+            console.error(`  Uptime:             ${uptimeStr}`);
+            console.error(`  Jobs:               ${status.jobs.total} total, ${status.jobs.enabled} enabled, ${status.jobs.running} running`);
+            console.error(`  Signal transport:   ${status.signalConnected ? 'connected' : 'not configured'}`);
+            if (status.nextFireTime) {
+                const { formatRelativeTime } = await import('../cron/format-utils.js');
+                console.error(`  Next scheduled run: ${formatRelativeTime(new Date(status.nextFireTime))}`);
+            }
+            else {
+                console.error('  Next scheduled run: none');
+            }
+            break;
+        }
+        case 'list-jobs': {
+            const resp = await tryForwardToDaemon({ command: 'list-jobs' });
+            if (handleForwardedResponse(resp)) {
+                const { formatDaemonJobList } = await import('../cron/job-commands.js');
+                formatDaemonJobList(resp.data);
+                break;
+            }
+            const { runListJobs } = await import('../cron/job-commands.js');
+            runListJobs();
+            break;
+        }
+        case 'run-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'run-job', jobId });
+            if (handleForwardedResponse(resp)) {
+                const record = resp.data;
+                console.error(`Job "${jobId}" completed via daemon.`);
+                console.error(`  Outcome: ${record.outcome.kind}`);
+                console.error(`  Duration: ${record.budget.elapsedSeconds.toFixed(0)}s`);
+                console.error(`  Cost: $${record.budget.estimatedCostUsd.toFixed(2)}`);
+                break;
+            }
+            const { runJobCommand } = await import('../cron/job-commands.js');
+            await runJobCommand(jobId);
+            break;
+        }
+        case 'remove-job': {
+            const jobId = requireJobIdArg(positionals);
+            // When forwarding to daemon via control socket, skip interactive prompt
+            const resp = await tryForwardToDaemon({ command: 'remove-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" removed (daemon notified).`))
+                break;
+            const { runRemoveJob } = await import('../cron/job-commands.js');
+            await runRemoveJob(jobId, values.force);
+            break;
+        }
+        case 'disable-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'disable-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" disabled (daemon notified).`))
+                break;
+            const { runDisableJob } = await import('../cron/job-commands.js');
+            await runDisableJob(jobId);
+            break;
+        }
+        case 'enable-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'enable-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" enabled (daemon notified).`))
+                break;
+            const { runEnableJob } = await import('../cron/job-commands.js');
+            await runEnableJob(jobId);
+            break;
+        }
+        case 'recompile-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'recompile-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" policy recompiled (daemon notified).`))
+                break;
+            const { runRecompileJob } = await import('../cron/job-commands.js');
+            await runRecompileJob(jobId);
+            break;
+        }
+        case 'logs': {
+            const jobId = requireJobIdArg(positionals);
+            const limit = values.runs ? parseInt(values.runs, 10) : 5;
+            const { runShowLogs } = await import('../cron/job-commands.js');
+            runShowLogs(jobId, limit);
+            break;
+        }
+        default:
+            console.error(`Unknown daemon subcommand: ${subcommand}\n`);
+            checkHelp({ help: true }, daemonSpec);
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=daemon-command.js.map

package/dist/daemon/daemon-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-command.js","sourceRoot":"","sources":["../../src/daemon/daemon-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAA6C,MAAM,qBAAqB,CAAC;AAEpG,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAoB,MAAM,gBAAgB,CAAC;AAE7D,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,8BAA8B;IAC3C,KAAK,EAAE;QACL,4DAA4D;QAC5D,wDAAwD;KACzD;IACD,WAAW,EAAE;QACX,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACzE,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,oCAAoC,EAAE;QAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kCAAkC,EAAE;QACtE,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,4BAA4B,EAAE;QACnE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACrD,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,gCAAgC,EAAE;QAC1E,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,EAAE;QAClE,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACnE,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,2BAA2B,EAAE;QACxE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,2BAA2B,EAAE;KAChE;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,WAAW,EAAE,QAAQ,EAAE;QAC/F,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE;QACvE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,wCAAwC,EAAE;QAC5E,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0CAA0C,EAAE,WAAW,EAAE,KAAK,EAAE;KAC9F;CACF,CAAC;AAEF,4EAA4E;AAC5E,SAAS,eAAe,CAAC,WAAqB;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAuB;IACvD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,QAAgC,EAAE,cAAuB;IACxF,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc;IACnD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACrC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;QACD,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAA4B,EAAE,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAElC,iDAAiD;IACjD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACvE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,MAAM,EAAE,UAAU,EAAE;QACpB,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,MAAM,CAAC,KAAiB,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,mBAAmB;QACnB,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;YACnC,IAAI;YACJ,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAwB;SACrD,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;YACjC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;QAEpD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,qDAAqD;IACrD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACpE,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACrE,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACxC,MAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAqD,CAAC;YAC1E,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,CACX,yBAAyB,MAAM,CAAC,IAAI,CAAC,KAAK,WAAW,MAAM,CAAC,IAAI,CAAC,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CACnH,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAClG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;gBACvE,OAAO,CAAC,KAAK,CAAC,yBAAyB,kBAAkB,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;gBACxE,mBAAmB,CAChB,IAAuC,CAAC,IAA8D,CACxG,CAAC;gBACF,MAAM;YACR,CAAC;YACD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAChE,WAAW,EAAE,CAAC;YACd,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAI,IAAuC,CAAC,IAA4C,CAAC;gBACrG,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,yBAAyB,CAAC,CAAC;gBACtD,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnD,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzE,OAAO,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvE,MAAM;YACR,CAAC;YACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAClE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,wEAAwE;YACxE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,8BAA8B,CAAC;gBAAE,MAAM;YACtF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACjE,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAA4B,CAAC,CAAC;YAC/D,MAAM;QACR,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,+BAA+B,CAAC;gBAAE,MAAM;YACvF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAClE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,8BAA8B,CAAC;gBAAE,MAAM;YACtF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACjE,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,wCAAwC,CAAC;gBAAE,MAAM;YAChG,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACpE,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAChE,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,IAAI,CAAC,CAAC;YAC5D,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/daemon/ironcurtain-daemon.d.ts

@@ -0,0 +1,90 @@
+/**
+ * IronCurtainDaemon -- Unified daemon managing both Signal-initiated
+ * interactive sessions and cron-scheduled headless sessions.
+ *
+ * Lifecycle:
+ *   1. start() -- loads jobs, starts Signal (if configured), schedules jobs
+ *   2. Runs indefinitely, processing Signal messages and cron triggers
+ *   3. shutdown() -- unschedules all jobs, ends all sessions, disconnects
+ *
+ * Both Signal and cron sessions are managed through a shared SessionManager
+ * instance. This enables unified escalation routing: `approve #N` from
+ * Signal works for both Signal-initiated and cron-initiated sessions.
+ */
+import type { SessionMode } from '../session/types.js';
+import type { JobDefinition, JobId, RunRecord } from '../cron/types.js';
+import { type DaemonStatus } from './control-socket.js';
+export type { SessionSource, ManagedSession } from '../session/session-manager.js';
+export interface IronCurtainDaemonOptions {
+    /** Session mode for both Signal and cron sessions. */
+    readonly mode: SessionMode;
+    /** When true, skip starting Signal transport. */
+    readonly noSignal?: boolean;
+}
+export declare class IronCurtainDaemon {
+    private readonly mode;
+    private readonly noSignal;
+    private readonly sessionManager;
+    private readonly scheduler;
+    /** Time the daemon was started (for uptime calculation). */
+    private startTime;
+    /** Tracks which jobs are currently running (jobId -> session label). */
+    private readonly activeJobRuns;
+    /** Control socket server for CLI communication. */
+    private controlSocket;
+    /** Signal daemon instance (null if Signal not configured). */
+    private signalDaemon;
+    /** Resolve to exit the daemon. */
+    private exitResolve;
+    constructor(options: IronCurtainDaemonOptions);
+    /**
+     * Starts the daemon. Loads all enabled jobs, schedules them,
+     * optionally starts the Signal transport.
+     */
+    start(): Promise<void>;
+    /** Graceful shutdown. */
+    shutdown(): Promise<void>;
+    /**
+     * Adds a new job. Runs the full policy compilation pipeline
+     * before confirming. Schedules the job if enabled.
+     */
+    addJob(job: JobDefinition): Promise<void>;
+    /** Removes a job. Stops any active run, unschedules, deletes files. */
+    removeJob(jobId: JobId): Promise<void>;
+    /** Enables a previously disabled job. Schedules it. */
+    enableJob(jobId: JobId): Promise<void>;
+    /** Disables a job. Unschedules it but preserves files. */
+    disableJob(jobId: JobId): Promise<void>;
+    /** Reloads a job definition from disk and reschedules it. */
+    reloadJob(jobId: JobId): Promise<void>;
+    /** Re-runs policy compilation for an existing job. */
+    recompileJob(jobId: JobId): Promise<void>;
+    /**
+     * Manually triggers a job run (for testing).
+     * Does not affect the cron schedule.
+     */
+    runJobNow(jobId: JobId): Promise<RunRecord>;
+    /** Lists all jobs with their schedules and last run status. */
+    listJobs(): Array<{
+        job: JobDefinition;
+        nextRun: Date | undefined;
+        lastRun: RunRecord | undefined;
+        isRunning: boolean;
+    }>;
+    /** Returns a status snapshot for the control socket. */
+    getStatus(): DaemonStatus;
+    /**
+     * Called when a scheduled job fires.
+     * Checks for overlap, creates a session, and runs the job.
+     */
+    private onJobTrigger;
+    /**
+     * Executes a job: creates a session with the job's workspace and
+     * per-job policy, runs it to completion, and records the outcome.
+     */
+    private executeJob;
+    private handleCronEscalation;
+    private startSignalDaemon;
+    private startControlSocket;
+    private readLastRunSummary;
+}