@provos/ironcurtain 0.6.0 → 0.7.1

package/dist/daemon/control-socket.js

@@ -0,0 +1,261 @@
+/**
+ * Control socket for live daemon communication.
+ *
+ * The daemon listens on a Unix domain socket at ~/.ironcurtain/daemon.sock.
+ * CLI commands detect whether the daemon is running (socket exists and
+ * responds) and forward commands to it. If no daemon is running, CLI
+ * commands fall back to direct filesystem operations.
+ *
+ * Protocol: newline-delimited JSON. Each request is a single JSON line;
+ * the daemon writes a single JSON response line and closes the connection.
+ */
+import { createServer, createConnection } from 'node:net';
+import { unlinkSync } from 'node:fs';
+import { getDaemonSocketPath } from '../config/paths.js';
+import * as logger from '../logger.js';
+// ---------------------------------------------------------------------------
+// Server (daemon-side)
+// ---------------------------------------------------------------------------
+export class ControlSocketServer {
+    server = null;
+    socketPath;
+    handler;
+    constructor(handler, socketPath) {
+        this.handler = handler;
+        this.socketPath = socketPath ?? getDaemonSocketPath();
+    }
+    /** Starts listening on the Unix domain socket. */
+    async start() {
+        await this.removeStaleSocket();
+        return new Promise((resolve, reject) => {
+            const server = createServer((socket) => this.onConnection(socket));
+            this.server = server;
+            server.on('error', (err) => {
+                logger.error(`[ControlSocket] Server error: ${err.message}`);
+                reject(err);
+            });
+            server.listen(this.socketPath, () => {
+                logger.info(`[ControlSocket] Listening on ${this.socketPath}`);
+                resolve();
+            });
+        });
+    }
+    /** Stops the server and removes the socket file. */
+    async stop() {
+        if (!this.server)
+            return;
+        const server = this.server;
+        return new Promise((resolve) => {
+            server.close(() => {
+                this.cleanupSocketFile();
+                this.server = null;
+                resolve();
+            });
+        });
+    }
+    /**
+     * Removes a stale socket file left behind by a crashed daemon.
+     * Attempts to connect first — only unlinks when the socket is
+     * confirmed stale (ECONNREFUSED) or absent (ENOENT). If the
+     * socket is live, throws so the caller knows another daemon is running.
+     */
+    async removeStaleSocket() {
+        const alive = await this.isSocketAlive();
+        if (alive) {
+            throw new Error(`Another daemon is already listening on ${this.socketPath}. ` + `Stop it first or remove the socket manually.`);
+        }
+        // Socket is stale or absent — safe to unlink
+        try {
+            unlinkSync(this.socketPath);
+            logger.info(`[ControlSocket] Removed stale socket file`);
+        }
+        catch {
+            // File doesn't exist — fine
+        }
+    }
+    /**
+     * Probes whether the socket is actively accepting connections.
+     * Returns true if a daemon is listening, false if stale/absent.
+     */
+    isSocketAlive() {
+        return new Promise((resolve) => {
+            const conn = createConnection(this.socketPath);
+            conn.once('connect', () => {
+                conn.destroy();
+                resolve(true);
+            });
+            conn.once('error', () => {
+                resolve(false);
+            });
+        });
+    }
+    cleanupSocketFile() {
+        try {
+            unlinkSync(this.socketPath);
+        }
+        catch {
+            // Best-effort cleanup
+        }
+    }
+    onConnection(socket) {
+        let data = '';
+        let dispatched = false;
+        socket.on('data', (chunk) => {
+            if (dispatched)
+                return;
+            data += chunk.toString();
+            const newlineIndex = data.indexOf('\n');
+            if (newlineIndex === -1)
+                return;
+            dispatched = true;
+            const line = data.slice(0, newlineIndex);
+            void this.handleRequest(line, socket);
+        });
+        socket.on('error', (err) => {
+            logger.warn(`[ControlSocket] Connection error: ${err.message}`);
+        });
+        // Timeout idle connections after 30s
+        socket.setTimeout(30_000, () => {
+            socket.destroy();
+        });
+    }
+    async handleRequest(line, socket) {
+        let request;
+        try {
+            request = JSON.parse(line);
+        }
+        catch {
+            this.sendResponse(socket, { ok: false, error: 'Invalid JSON' });
+            return;
+        }
+        try {
+            const response = await this.dispatch(request);
+            this.sendResponse(socket, response);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            this.sendResponse(socket, { ok: false, error: message });
+        }
+    }
+    async dispatch(request) {
+        switch (request.command) {
+            case 'ping':
+                return { ok: true, data: { status: 'running' } };
+            case 'status': {
+                const status = this.handler.getStatus();
+                return {
+                    ok: true,
+                    data: {
+                        ...status,
+                        nextFireTime: status.nextFireTime?.toISOString() ?? null,
+                    },
+                };
+            }
+            case 'add-job':
+                await this.handler.addJob(request.job);
+                return { ok: true };
+            case 'remove-job':
+                await this.handler.removeJob(request.jobId);
+                return { ok: true };
+            case 'enable-job':
+                await this.handler.enableJob(request.jobId);
+                return { ok: true };
+            case 'disable-job':
+                await this.handler.disableJob(request.jobId);
+                return { ok: true };
+            case 'recompile-job':
+                await this.handler.recompileJob(request.jobId);
+                return { ok: true };
+            case 'reload-job':
+                await this.handler.reloadJob(request.jobId);
+                return { ok: true };
+            case 'run-job': {
+                const record = await this.handler.runJobNow(request.jobId);
+                return { ok: true, data: record };
+            }
+            case 'list-jobs': {
+                const jobs = this.handler.listJobs();
+                // Serialize dates for JSON transport
+                const serialized = jobs.map((j) => ({
+                    ...j,
+                    nextRun: j.nextRun?.toISOString() ?? null,
+                }));
+                return { ok: true, data: serialized };
+            }
+            default:
+                return { ok: false, error: `Unknown command: ${request.command}` };
+        }
+    }
+    sendResponse(socket, response) {
+        try {
+            socket.end(JSON.stringify(response) + '\n');
+        }
+        catch {
+            // Connection may have been closed
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Client (CLI-side)
+// ---------------------------------------------------------------------------
+/** Timeout for connecting to the daemon socket (ms). */
+const CONNECT_TIMEOUT = 2_000;
+/** Timeout for receiving a response from the daemon (ms). */
+const RESPONSE_TIMEOUT = 300_000; // 5 minutes -- run-job can take a while
+/**
+ * Sends a request to the running daemon via the control socket.
+ * Returns the parsed response, or null if the daemon is not reachable.
+ */
+export async function sendControlRequest(request, socketPath) {
+    const path = socketPath ?? getDaemonSocketPath();
+    return new Promise((resolve) => {
+        const socket = createConnection({ path });
+        let data = '';
+        let settled = false;
+        let connectTimer = null;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (connectTimer)
+                clearTimeout(connectTimer);
+            socket.destroy();
+            resolve(result);
+        };
+        socket.setTimeout(RESPONSE_TIMEOUT, () => {
+            finish(null);
+        });
+        socket.on('connect', () => {
+            socket.write(JSON.stringify(request) + '\n');
+        });
+        socket.on('data', (chunk) => {
+            data += chunk.toString();
+            const newlineIndex = data.indexOf('\n');
+            if (newlineIndex === -1)
+                return;
+            try {
+                const response = JSON.parse(data.slice(0, newlineIndex));
+                finish(response);
+            }
+            catch {
+                finish(null);
+            }
+        });
+        socket.on('error', () => {
+            finish(null);
+        });
+        // Connect timeout -- daemon not responding
+        connectTimer = setTimeout(() => {
+            finish(null);
+        }, CONNECT_TIMEOUT);
+    });
+}
+/**
+ * Checks if a daemon is currently running and responsive.
+ * Returns true if the daemon responds to a ping.
+ */
+export async function isDaemonRunning(socketPath) {
+    const response = await sendControlRequest({ command: 'ping' }, socketPath);
+    return response !== null && response.ok;
+}
+//# sourceMappingURL=control-socket.js.map

package/dist/daemon/control-socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-socket.js","sourceRoot":"","sources":["../../src/daemon/control-socket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA4B,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAuEvC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,OAAO,mBAAmB;IACtB,MAAM,GAAkB,IAAI,CAAC;IACpB,UAAU,CAAS;IACnB,OAAO,CAAwB;IAEhD,YAAY,OAA8B,EAAE,UAAmB;QAC7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,mBAAmB,EAAE,CAAC;IACxD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YAErB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAChB,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,0CAA0C,IAAI,CAAC,UAAU,IAAI,GAAG,8CAA8C,CAC/G,CAAC;QACJ,CAAC;QACD,6CAA6C;QAC7C,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,aAAa;QACnB,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,UAAU;gBAAE,OAAO;YACvB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,YAAY,KAAK,CAAC,CAAC;gBAAE,OAAO;YAEhC,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACzC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,MAAc;QACtD,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAuB;QAC5C,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,MAAM;gBACT,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;YAEnD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACxC,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE;wBACJ,GAAG,MAAM;wBACT,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;qBACzD;iBACF,CAAC;YACJ,CAAC;YAED,KAAK,SAAS;gBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,aAAa;gBAChB,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,eAAe;gBAClB,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEtB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACpC,CAAC;YAED,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrC,qCAAqC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,GAAG,CAAC;oBACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI;iBAC1C,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACxC,CAAC;YAED;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAqB,OAA0B,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,QAAyB;QAC5D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,wDAAwD;AACxD,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,wCAAwC;AAE1E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,UAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,IAAI,mBAAmB,EAAE,CAAC;IAEjD,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAyC,IAAI,CAAC;QAE9D,MAAM,MAAM,GAAG,CAAC,MAA8B,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,YAAY,KAAK,CAAC,CAAC;gBAAE,OAAO;YAEhC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAoB,CAAC;gBAC5E,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,eAAe,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAmB;IACvD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3E,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,EAAE,CAAC;AAC1C,CAAC"}

package/dist/daemon/daemon-command.d.ts

@@ -0,0 +1,13 @@
+/**
+ * CLI entry point for `ironcurtain daemon` and its subcommands.
+ *
+ * When no sub-subcommand is given, starts the unified daemon.
+ * Subcommands: add-job, list-jobs, run-job, remove-job,
+ *              disable-job, enable-job, recompile-job, logs
+ *
+ * Commands that modify daemon state (remove-job, enable-job, disable-job,
+ * recompile-job, run-job) first check if a daemon is running via the
+ * control socket. If running, the command is forwarded to the daemon.
+ * Otherwise, the command operates directly on the filesystem.
+ */
+export declare function runDaemonCommand(argv: string[]): Promise<void>;

package/dist/daemon/daemon-command.js

@@ -0,0 +1,230 @@
+/**
+ * CLI entry point for `ironcurtain daemon` and its subcommands.
+ *
+ * When no sub-subcommand is given, starts the unified daemon.
+ * Subcommands: add-job, list-jobs, run-job, remove-job,
+ *              disable-job, enable-job, recompile-job, logs
+ *
+ * Commands that modify daemon state (remove-job, enable-job, disable-job,
+ * recompile-job, run-job) first check if a daemon is running via the
+ * control socket. If running, the command is forwarded to the daemon.
+ * Otherwise, the command operates directly on the filesystem.
+ */
+import { parseArgs } from 'node:util';
+import { IronCurtainDaemon } from './ironcurtain-daemon.js';
+import { sendControlRequest } from './control-socket.js';
+import { formatDuration } from '../cron/format-utils.js';
+import { checkHelp } from '../cli-help.js';
+const daemonSpec = {
+    name: 'ironcurtain daemon',
+    description: 'Unified Signal + cron daemon',
+    usage: [
+        'ironcurtain daemon [options]              Start the daemon',
+        'ironcurtain daemon <subcommand> [options]  Manage jobs',
+    ],
+    subcommands: [
+        { name: 'add-job', description: 'Add a new scheduled job (interactive)' },
+        { name: 'edit-job <id>', description: 'Edit an existing job (interactive)' },
+        { name: 'list-jobs', description: 'List all jobs with schedule info' },
+        { name: 'run-job <id>', description: 'Manually trigger a job run' },
+        { name: 'status', description: 'Show daemon status' },
+        { name: 'remove-job <id>', description: 'Delete a job and all artifacts' },
+        { name: 'disable-job <id>', description: 'Stop scheduling a job' },
+        { name: 'enable-job <id>', description: 'Resume scheduling a job' },
+        { name: 'recompile-job <id>', description: 'Re-run policy compilation' },
+        { name: 'logs <id>', description: 'Show recent run summaries' },
+    ],
+    options: [
+        { flag: 'agent', short: 'a', description: 'Agent mode (same as start)', placeholder: '<name>' },
+        { flag: 'force', short: 'f', description: 'Skip confirmation prompts' },
+        { flag: 'no-signal', description: 'Skip Signal transport (cron-only mode)' },
+        { flag: 'runs', description: 'Number of recent runs to show (for logs)', placeholder: '<N>' },
+    ],
+};
+/** Extracts a required job-id positional, exiting with usage if missing. */
+function requireJobIdArg(positionals) {
+    const jobId = positionals[1];
+    if (!jobId) {
+        console.error('Usage: ironcurtain daemon <subcommand> <job-id>');
+        process.exit(1);
+    }
+    return jobId;
+}
+/**
+ * Attempts to forward a command to a running daemon.
+ * Returns the response if the daemon handled it, or null if no daemon
+ * is running (caller should fall back to local filesystem operations).
+ */
+async function tryForwardToDaemon(request) {
+    return sendControlRequest(request);
+}
+/**
+ * Handles a forwarded response: prints success/error and exits.
+ * Returns true if the response was handled (caller should return).
+ */
+function handleForwardedResponse(response, successMessage) {
+    if (response === null)
+        return false;
+    if (!response.ok) {
+        console.error(`Error from daemon: ${response.error}`);
+        process.exit(1);
+    }
+    if (successMessage) {
+        console.error(successMessage);
+    }
+    return true;
+}
+export async function runDaemonCommand(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        options: {
+            agent: { type: 'string', short: 'a' },
+            'no-signal': { type: 'boolean' },
+            force: { type: 'boolean', short: 'f' },
+            runs: { type: 'string' },
+            help: { type: 'boolean', short: 'h' },
+        },
+        allowPositionals: true,
+        strict: false,
+    });
+    if (checkHelp(values, daemonSpec)) {
+        return;
+    }
+    const subcommand = positionals[0];
+    // Resolve session mode (same as `start` command)
+    const { resolveSessionMode } = await import('../session/preflight.js');
+    const { loadConfig } = await import('../config/index.js');
+    const preflight = await resolveSessionMode({
+        config: loadConfig(),
+        requestedAgent: values.agent ? values.agent : undefined,
+    });
+    const mode = preflight.mode;
+    console.error(`Mode: ${mode.kind} (${preflight.reason})`);
+    if (!subcommand) {
+        // Start the daemon
+        const daemon = new IronCurtainDaemon({
+            mode,
+            noSignal: values['no-signal'],
+        });
+        // Handle shutdown signals
+        const shutdownHandler = async () => {
+            await daemon.shutdown();
+            process.exit(0);
+        };
+        process.on('SIGINT', () => void shutdownHandler());
+        process.on('SIGTERM', () => void shutdownHandler());
+        await daemon.start();
+        return;
+    }
+    // Sub-subcommands that work without a running daemon
+    switch (subcommand) {
+        case 'add-job': {
+            const { runAddJobWizard } = await import('../cron/job-commands.js');
+            await runAddJobWizard();
+            break;
+        }
+        case 'edit-job': {
+            const jobId = requireJobIdArg(positionals);
+            const { runEditJobWizard } = await import('../cron/job-commands.js');
+            await runEditJobWizard(jobId);
+            break;
+        }
+        case 'status': {
+            const { sendControlRequest: sendReq } = await import('./control-socket.js');
+            const resp = await sendReq({ command: 'status' });
+            if (!resp || !resp.ok) {
+                console.error('Daemon is not running.');
+                break;
+            }
+            const status = resp.data;
+            const uptimeStr = formatDuration(status.uptimeSeconds);
+            console.error('Daemon is running.');
+            console.error(`  Uptime:             ${uptimeStr}`);
+            console.error(`  Jobs:               ${status.jobs.total} total, ${status.jobs.enabled} enabled, ${status.jobs.running} running`);
+            console.error(`  Signal transport:   ${status.signalConnected ? 'connected' : 'not configured'}`);
+            if (status.nextFireTime) {
+                const { formatRelativeTime } = await import('../cron/format-utils.js');
+                console.error(`  Next scheduled run: ${formatRelativeTime(new Date(status.nextFireTime))}`);
+            }
+            else {
+                console.error('  Next scheduled run: none');
+            }
+            break;
+        }
+        case 'list-jobs': {
+            const resp = await tryForwardToDaemon({ command: 'list-jobs' });
+            if (handleForwardedResponse(resp)) {
+                const { formatDaemonJobList } = await import('../cron/job-commands.js');
+                formatDaemonJobList(resp.data);
+                break;
+            }
+            const { runListJobs } = await import('../cron/job-commands.js');
+            runListJobs();
+            break;
+        }
+        case 'run-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'run-job', jobId });
+            if (handleForwardedResponse(resp)) {
+                const record = resp.data;
+                console.error(`Job "${jobId}" completed via daemon.`);
+                console.error(`  Outcome: ${record.outcome.kind}`);
+                console.error(`  Duration: ${record.budget.elapsedSeconds.toFixed(0)}s`);
+                console.error(`  Cost: $${record.budget.estimatedCostUsd.toFixed(2)}`);
+                break;
+            }
+            const { runJobCommand } = await import('../cron/job-commands.js');
+            await runJobCommand(jobId);
+            break;
+        }
+        case 'remove-job': {
+            const jobId = requireJobIdArg(positionals);
+            // When forwarding to daemon via control socket, skip interactive prompt
+            const resp = await tryForwardToDaemon({ command: 'remove-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" removed (daemon notified).`))
+                break;
+            const { runRemoveJob } = await import('../cron/job-commands.js');
+            await runRemoveJob(jobId, values.force);
+            break;
+        }
+        case 'disable-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'disable-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" disabled (daemon notified).`))
+                break;
+            const { runDisableJob } = await import('../cron/job-commands.js');
+            await runDisableJob(jobId);
+            break;
+        }
+        case 'enable-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'enable-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" enabled (daemon notified).`))
+                break;
+            const { runEnableJob } = await import('../cron/job-commands.js');
+            await runEnableJob(jobId);
+            break;
+        }
+        case 'recompile-job': {
+            const jobId = requireJobIdArg(positionals);
+            const resp = await tryForwardToDaemon({ command: 'recompile-job', jobId });
+            if (handleForwardedResponse(resp, `Job "${jobId}" policy recompiled (daemon notified).`))
+                break;
+            const { runRecompileJob } = await import('../cron/job-commands.js');
+            await runRecompileJob(jobId);
+            break;
+        }
+        case 'logs': {
+            const jobId = requireJobIdArg(positionals);
+            const limit = values.runs ? parseInt(values.runs, 10) : 5;
+            const { runShowLogs } = await import('../cron/job-commands.js');
+            runShowLogs(jobId, limit);
+            break;
+        }
+        default:
+            console.error(`Unknown daemon subcommand: ${subcommand}\n`);
+            checkHelp({ help: true }, daemonSpec);
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=daemon-command.js.map

package/dist/daemon/daemon-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-command.js","sourceRoot":"","sources":["../../src/daemon/daemon-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAA6C,MAAM,qBAAqB,CAAC;AAEpG,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAoB,MAAM,gBAAgB,CAAC;AAE7D,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,8BAA8B;IAC3C,KAAK,EAAE;QACL,4DAA4D;QAC5D,wDAAwD;KACzD;IACD,WAAW,EAAE;QACX,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACzE,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,oCAAoC,EAAE;QAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,kCAAkC,EAAE;QACtE,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,4BAA4B,EAAE;QACnE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACrD,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,gCAAgC,EAAE;QAC1E,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,uBAAuB,EAAE;QAClE,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACnE,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,2BAA2B,EAAE;QACxE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,2BAA2B,EAAE;KAChE;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,WAAW,EAAE,QAAQ,EAAE;QAC/F,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE;QACvE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,wCAAwC,EAAE;QAC5E,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0CAA0C,EAAE,WAAW,EAAE,KAAK,EAAE;KAC9F;CACF,CAAC;AAEF,4EAA4E;AAC5E,SAAS,eAAe,CAAC,WAAqB;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAuB;IACvD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,QAAgC,EAAE,cAAuB;IACxF,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc;IACnD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACrC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;QACD,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAA4B,EAAE,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAElC,iDAAiD;IACjD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACvE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,MAAM,EAAE,UAAU,EAAE;QACpB,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,MAAM,CAAC,KAAiB,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,mBAAmB;QACnB,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;YACnC,IAAI;YACJ,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAwB;SACrD,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;YACjC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;QAEpD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,qDAAqD;IACrD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACpE,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACrE,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACxC,MAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAqD,CAAC;YAC1E,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,CACX,yBAAyB,MAAM,CAAC,IAAI,CAAC,KAAK,WAAW,MAAM,CAAC,IAAI,CAAC,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CACnH,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAClG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;gBACvE,OAAO,CAAC,KAAK,CAAC,yBAAyB,kBAAkB,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;gBACxE,mBAAmB,CAChB,IAAuC,CAAC,IAA8D,CACxG,CAAC;gBACF,MAAM;YACR,CAAC;YACD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAChE,WAAW,EAAE,CAAC;YACd,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAI,IAAuC,CAAC,IAA4C,CAAC;gBACrG,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,yBAAyB,CAAC,CAAC;gBACtD,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnD,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzE,OAAO,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvE,MAAM;YACR,CAAC;YACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAClE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,wEAAwE;YACxE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,8BAA8B,CAAC;gBAAE,MAAM;YACtF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACjE,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAA4B,CAAC,CAAC;YAC/D,MAAM;QACR,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,+BAA+B,CAAC;gBAAE,MAAM;YACvF,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAClE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,8BAA8B,CAAC;gBAAE,MAAM;YACtF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACjE,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,IAAI,uBAAuB,CAAC,IAAI,EAAE,QAAQ,KAAK,wCAAwC,CAAC;gBAAE,MAAM;YAChG,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACpE,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAChE,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,IAAI,CAAC,CAAC;YAC5D,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/daemon/ironcurtain-daemon.d.ts

@@ -0,0 +1,90 @@
+/**
+ * IronCurtainDaemon -- Unified daemon managing both Signal-initiated
+ * interactive sessions and cron-scheduled headless sessions.
+ *
+ * Lifecycle:
+ *   1. start() -- loads jobs, starts Signal (if configured), schedules jobs
+ *   2. Runs indefinitely, processing Signal messages and cron triggers
+ *   3. shutdown() -- unschedules all jobs, ends all sessions, disconnects
+ *
+ * Both Signal and cron sessions are managed through a shared SessionManager
+ * instance. This enables unified escalation routing: `approve #N` from
+ * Signal works for both Signal-initiated and cron-initiated sessions.
+ */
+import type { SessionMode } from '../session/types.js';
+import type { JobDefinition, JobId, RunRecord } from '../cron/types.js';
+import { type DaemonStatus } from './control-socket.js';
+export type { SessionSource, ManagedSession } from '../session/session-manager.js';
+export interface IronCurtainDaemonOptions {
+    /** Session mode for both Signal and cron sessions. */
+    readonly mode: SessionMode;
+    /** When true, skip starting Signal transport. */
+    readonly noSignal?: boolean;
+}
+export declare class IronCurtainDaemon {
+    private readonly mode;
+    private readonly noSignal;
+    private readonly sessionManager;
+    private readonly scheduler;
+    /** Time the daemon was started (for uptime calculation). */
+    private startTime;
+    /** Tracks which jobs are currently running (jobId -> session label). */
+    private readonly activeJobRuns;
+    /** Control socket server for CLI communication. */
+    private controlSocket;
+    /** Signal daemon instance (null if Signal not configured). */
+    private signalDaemon;
+    /** Resolve to exit the daemon. */
+    private exitResolve;
+    constructor(options: IronCurtainDaemonOptions);
+    /**
+     * Starts the daemon. Loads all enabled jobs, schedules them,
+     * optionally starts the Signal transport.
+     */
+    start(): Promise<void>;
+    /** Graceful shutdown. */
+    shutdown(): Promise<void>;
+    /**
+     * Adds a new job. Runs the full policy compilation pipeline
+     * before confirming. Schedules the job if enabled.
+     */
+    addJob(job: JobDefinition): Promise<void>;
+    /** Removes a job. Stops any active run, unschedules, deletes files. */
+    removeJob(jobId: JobId): Promise<void>;
+    /** Enables a previously disabled job. Schedules it. */
+    enableJob(jobId: JobId): Promise<void>;
+    /** Disables a job. Unschedules it but preserves files. */
+    disableJob(jobId: JobId): Promise<void>;
+    /** Reloads a job definition from disk and reschedules it. */
+    reloadJob(jobId: JobId): Promise<void>;
+    /** Re-runs policy compilation for an existing job. */
+    recompileJob(jobId: JobId): Promise<void>;
+    /**
+     * Manually triggers a job run (for testing).
+     * Does not affect the cron schedule.
+     */
+    runJobNow(jobId: JobId): Promise<RunRecord>;
+    /** Lists all jobs with their schedules and last run status. */
+    listJobs(): Array<{
+        job: JobDefinition;
+        nextRun: Date | undefined;
+        lastRun: RunRecord | undefined;
+        isRunning: boolean;
+    }>;
+    /** Returns a status snapshot for the control socket. */
+    getStatus(): DaemonStatus;
+    /**
+     * Called when a scheduled job fires.
+     * Checks for overlap, creates a session, and runs the job.
+     */
+    private onJobTrigger;
+    /**
+     * Executes a job: creates a session with the job's workspace and
+     * per-job policy, runs it to completion, and records the outcome.
+     */
+    private executeJob;
+    private handleCronEscalation;
+    private startSignalDaemon;
+    private startControlSocket;
+    private readLastRunSummary;
+}