@telora/daemon 0.21.26 → 0.21.82

package/dist/shell/config.js

@@ -0,0 +1,486 @@
+/**
+ * Daemon configuration management.
+ *
+ * Loads configuration from:
+ * 1. Config file (.telora/daemon.json or --config path)
+ * 2. Environment variables (override config file)
+ *
+ * Uses shared BaseConfig infrastructure from @telora/daemon-core for fields
+ * common to both daemon and factory, then layers daemon-specific fields on top.
+ *
+ * Uses tracker-based authentication (same as MCP server) instead of service role key.
+ * The tracker id can come from either TELORA_TRACKER_ID or `trackerId` in the
+ * config file (the connect flow persists it to ~/.telora/daemon.json, mode 0600,
+ * matching the security profile of .mcp.json which already stores the same secret).
+ */
+import { resolve } from 'node:path';
+import { existsSync, accessSync, constants, mkdirSync } from 'node:fs';
+import { loadConfigFile as loadConfigFileShared, resolveBaseConfig, validateBaseConfig, loadEnvConfig, ENV_VAR_METADATA, healthEvents, } from '@telora/daemon-core';
+import { DEFAULT_VERIFY_TIMEOUT_MS, DEFAULT_VERIFY_MAX_CONCURRENT } from '../verify/verification-config.js';
+import { createLogger } from './log.js';
+const log = createLogger({ module: 'config' });
+/**
+ * True when an operational env var is actually set (non-empty) in process.env.
+ * Used to decide env-over-file precedence: an explicitly-set env var wins over
+ * file config; otherwise file config (then the typed default) applies.
+ */
+function envIsSet(name) {
+    const v = process.env[name];
+    return v !== undefined && v !== '';
+}
+/** Validated default for an operational var, from the typed env-config index. */
+function envDefault(name) {
+    const meta = ENV_VAR_METADATA.find((m) => m.name === name);
+    return typeof meta?.default === 'number' ? meta.default : 0;
+}
+/**
+ * Resolve a numeric operational knob with precedence env > file > typed default.
+ *
+ * The env value is the ALREADY-VALIDATED number from the typed env-config
+ * (loadEnvConfig parsed + range-checked it; an invalid env value fails loudly
+ * at startup before we get here). File config remains supported (env-over-file
+ * priority preserved); the typed default applies when neither is present.
+ */
+function resolveNum(name, envConfigVal, fileVal) {
+    if (envIsSet(name)) {
+        return envConfigVal;
+    }
+    if (typeof fileVal === 'number') {
+        return fileVal;
+    }
+    return envDefault(name);
+}
+/**
+ * Parse a raw `defaultVerification` block (from daemon.json -- either the
+ * top-level global slot or a per-product `products[].defaultVerification`
+ * override) into a typed DefaultVerificationConfig. Returns undefined when the
+ * raw value is not an object, so the caller falls through to the next
+ * precedence source (per-product => global => env/default). Applies the same
+ * field defaults at both levels so per-product and global blocks behave
+ * identically. Env overrides (TELORA_DEFAULT_VERIFY_*) are applied later, at
+ * read time, by resolveDefaultVerification -- they stay global and win over
+ * whichever file value configForProduct selects.
+ */
+function parseVerifyBlock(raw) {
+    if (typeof raw !== 'object' || raw === null)
+        return undefined;
+    const v = raw;
+    return {
+        command: typeof v.command === 'string' ? v.command : '',
+        timeoutMs: typeof v.timeoutMs === 'number' && v.timeoutMs > 0
+            ? v.timeoutMs
+            : DEFAULT_VERIFY_TIMEOUT_MS,
+        maxConcurrent: typeof v.maxConcurrent === 'number' && v.maxConcurrent > 0
+            ? v.maxConcurrent
+            : DEFAULT_VERIFY_MAX_CONCURRENT,
+        // Explicit review-only decline marker (records a deliberate decision).
+        ...(v.declined === true ? { declined: true } : {}),
+    };
+}
+/**
+ * Resolve default-on verification carriage from the raw config file: the
+ * top-level global `defaultVerification` block and each product's per-product
+ * override (`products[].defaultVerification`), enriched onto the normalized
+ * products array.
+ *
+ * This is the SINGLE source of the file-level verification carriage. Both
+ * daemon-side entry points use it so they cannot drift:
+ *  - `loadConfig` (this module) -- the CLI / subcommand config path.
+ *  - `resolveEngineConfig` (unified-engine-lifecycle) -- the SINGLE runtime
+ *    resolver for every engine's config; it applies this carriage uniformly
+ *    so the file block reaches whichever engine's config wins the global
+ *    singleton.
+ *
+ * Env overrides (TELORA_DEFAULT_VERIFY_*) are NOT applied here -- they stay
+ * global and are layered on at read time by `resolveDefaultVerification`.
+ */
+export function resolveVerificationCarriage(fileConfig, baseProducts) {
+    const global = parseVerifyBlock(fileConfig.defaultVerification);
+    const rawProducts = Array.isArray(fileConfig.products) ? fileConfig.products : [];
+    const products = baseProducts.map((p) => {
+        const rawEntry = rawProducts.find((r) => typeof r === 'object' && r !== null && r.id === p.id);
+        const perProduct = parseVerifyBlock(rawEntry?.defaultVerification);
+        return perProduct ? { ...p, defaultVerification: perProduct } : { ...p };
+    });
+    return global ? { defaultVerification: global, products } : { products };
+}
+/**
+ * Load and validate daemon configuration.
+ *
+ * Priority (highest to lowest):
+ * 1. Environment variables
+ * 2. Config file values
+ * 3. Default values
+ *
+ * @param configPath Optional path to config file (default: .telora/daemon.json)
+ */
+export function loadConfig(configPath) {
+    // Load config file using shared loader (returns Record<string, unknown>)
+    const fileConfig = loadConfigFileShared(configPath, 'daemon.json');
+    // Parse + validate ALL operational env knobs once. Invalid values (e.g. a
+    // non-numeric MERGE_LOCK_TIMEOUT_MS or out-of-range TELORA_TELEMETRY_PORT)
+    // throw here -- loudly, at startup, naming the offending var.
+    const envCfg = loadEnvConfig();
+    // Resolve base fields (teloraUrl, trackerId, organizationId, productId, etc.)
+    // using shared resolver that handles env-var-over-file priority
+    const base = resolveBaseConfig(fileConfig, process.env);
+    // Apply daemon-specific defaults for base fields
+    const repoPath = base.repoPath || process.cwd();
+    const claudeCodePath = base.claudeCodePath || 'claude';
+    const logDir = base.logDir || resolve(repoPath, '.telora', 'logs');
+    const sessionTimeoutMs = base.sessionTimeoutMs ?? 3600000; // 1 hour
+    // Resolve products array (always populated at runtime) plus default-on
+    // verification carriage (global block + per-product overrides) via the shared
+    // resolver -- the same one resolveEngineConfig uses for every running
+    // engine, so the two paths cannot drift. base.products is normalized by
+    // daemon-core (which cannot carry the daemon-only per-product field); the
+    // resolver matches raw entries back by id and enriches them.
+    const { defaultVerification, products } = resolveVerificationCarriage(fileConfig, base.products ?? []);
+    // Validate required base fields
+    const teloraUrl = base.teloraUrl;
+    const trackerId = base.trackerId;
+    const organizationId = base.organizationId;
+    const productId = base.productId;
+    if (!teloraUrl) {
+        throw new Error('TELORA_URL is required (set in env or config file)');
+    }
+    if (!trackerId) {
+        throw new Error('TELORA_TRACKER_ID is required (set in env or config file)');
+    }
+    if (!organizationId) {
+        throw new Error('TELORA_ORGANIZATION_ID is required (set in env or config file)');
+    }
+    if (products.length === 0 && !productId) {
+        throw new Error('At least one product is required. Set "products" array in config file, ' +
+            'or use TELORA_PRODUCT_ID + TELORA_REPO_PATH environment variables.');
+    }
+    // Warn when using HTTP for non-local URLs (bearer tokens are sent in Authorization headers)
+    if (teloraUrl.startsWith('http://')) {
+        const urlHost = new URL(teloraUrl).hostname;
+        const isLocal = urlHost === 'localhost' || urlHost === '127.0.0.1' || urlHost === '::1';
+        if (!isLocal) {
+            log.warn('WARNING: TELORA_URL uses HTTP instead of HTTPS. ' +
+                'Bearer tokens will be transmitted in plaintext, exposing them to network interception. ' +
+                'Use HTTPS in production environments.');
+        }
+    }
+    // Validate repo path exists
+    if (!existsSync(repoPath)) {
+        throw new Error(`Repository path does not exist: ${repoPath}`);
+    }
+    // ── Daemon-specific fields ────────────────────────────────────
+    //
+    // Operational env knobs come from the typed env-config (envCfg), which has
+    // already parsed + validated them. We preserve env-over-file precedence: an
+    // explicitly-set env var (envIsSet) wins; otherwise file config applies;
+    // otherwise the typed default (carried in envCfg / envDefault).
+    // Worktree directory for parallel agent branches.
+    // TELORA_WORKTREE_DIR is optional in the typed config (undefined when unset).
+    const worktreeDir = envCfg.TELORA_WORKTREE_DIR
+        || (typeof fileConfig.worktreeDir === 'string' ? fileConfig.worktreeDir : '')
+        || resolve(repoPath, '.telora', 'worktrees');
+    // Integration branch (agents merge here on success, humans promote to main)
+    const integrationBranch = envIsSet('TELORA_INTEGRATION_BRANCH')
+        ? envCfg.TELORA_INTEGRATION_BRANCH
+        : (typeof fileConfig.integrationBranch === 'string' && fileConfig.integrationBranch
+            ? fileConfig.integrationBranch
+            : envCfg.TELORA_INTEGRATION_BRANCH);
+    // Session limits
+    const maxTotalSessions = resolveNum('MAX_TOTAL_SESSIONS', envCfg.MAX_TOTAL_SESSIONS, fileConfig.maxTotalSessions);
+    const tokenLimit = resolveNum('TOKEN_LIMIT', envCfg.TOKEN_LIMIT, fileConfig.tokenLimit);
+    const costLimit = resolveNum('COST_LIMIT', envCfg.COST_LIMIT, fileConfig.costLimit);
+    const mergeLockTimeoutMs = resolveNum('MERGE_LOCK_TIMEOUT_MS', envCfg.MERGE_LOCK_TIMEOUT_MS, fileConfig.mergeLockTimeoutMs);
+    const mergeLockContentionWarningMs = resolveNum('MERGE_LOCK_CONTENTION_WARNING_MS', envCfg.MERGE_LOCK_CONTENTION_WARNING_MS, fileConfig.mergeLockContentionWarningMs);
+    // Guard failure mode: fail-open (default, backward compatible) or fail-closed.
+    // The env value is validated to the enum by the typed config; file config is
+    // still honored (and validated below) when the env var is unset.
+    let policyFailureMode;
+    if (envIsSet('TELORA_POLICY_FAILURE_MODE')) {
+        // Validated to the enum by the typed env-config (zod) -- cast is sound.
+        policyFailureMode = envCfg.TELORA_POLICY_FAILURE_MODE;
+    }
+    else if (typeof fileConfig.policyFailureMode === 'string' && fileConfig.policyFailureMode) {
+        const fileMode = fileConfig.policyFailureMode;
+        if (fileMode !== 'fail-open' && fileMode !== 'fail-closed') {
+            throw new Error(`Invalid policyFailureMode in config file: "${fileMode}". Must be "fail-open" or "fail-closed".`);
+        }
+        policyFailureMode = fileMode;
+    }
+    else {
+        policyFailureMode = envCfg.TELORA_POLICY_FAILURE_MODE; // typed default: fail-open
+    }
+    // Log retention policy
+    const logMaxAgeDays = resolveNum('LOG_MAX_AGE_DAYS', envCfg.LOG_MAX_AGE_DAYS, fileConfig.logMaxAgeDays);
+    const logMaxTotalBytes = resolveNum('LOG_MAX_TOTAL_BYTES', envCfg.LOG_MAX_TOTAL_BYTES, fileConfig.logMaxTotalBytes);
+    const logMaxFiles = resolveNum('LOG_MAX_FILES', envCfg.LOG_MAX_FILES, fileConfig.logMaxFiles);
+    // Telemetry / OTLP receiver configuration
+    const telemetryFile = (typeof fileConfig.telemetry === 'object' && fileConfig.telemetry !== null)
+        ? fileConfig.telemetry
+        : {};
+    const telemetry = {
+        enabled: envIsSet('TELORA_TELEMETRY_ENABLED')
+            ? envCfg.TELORA_TELEMETRY_ENABLED
+            : (typeof telemetryFile.enabled === 'boolean' ? telemetryFile.enabled : envCfg.TELORA_TELEMETRY_ENABLED),
+        port: resolveNum('TELORA_TELEMETRY_PORT', envCfg.TELORA_TELEMETRY_PORT, telemetryFile.port),
+        flushIntervalMs: resolveNum('TELORA_TELEMETRY_FLUSH_INTERVAL_MS', envCfg.TELORA_TELEMETRY_FLUSH_INTERVAL_MS, telemetryFile.flushIntervalMs),
+        retentionDays: resolveNum('TELORA_TELEMETRY_RETENTION_DAYS', envCfg.TELORA_TELEMETRY_RETENTION_DAYS, telemetryFile.retentionDays),
+    };
+    // Lacuna context-compression sidecar (opt-in; default off). Same env > file >
+    // typed-default precedence as telemetry; the flat TELORA_LACUNA_* knobs are
+    // already parsed + validated by envCfg.
+    const lacunaFile = (typeof fileConfig.lacuna === 'object' && fileConfig.lacuna !== null)
+        ? fileConfig.lacuna
+        : {};
+    const lacuna = {
+        enabled: envIsSet('TELORA_LACUNA_ENABLED')
+            ? envCfg.TELORA_LACUNA_ENABLED
+            : (typeof lacunaFile.enabled === 'boolean' ? lacunaFile.enabled : envCfg.TELORA_LACUNA_ENABLED),
+        host: envIsSet('TELORA_LACUNA_HOST')
+            ? envCfg.TELORA_LACUNA_HOST
+            : (typeof lacunaFile.host === 'string' && lacunaFile.host ? lacunaFile.host : envCfg.TELORA_LACUNA_HOST),
+        port: resolveNum('TELORA_LACUNA_PORT', envCfg.TELORA_LACUNA_PORT, lacunaFile.port),
+        upstreamBaseUrl: envIsSet('TELORA_LACUNA_UPSTREAM_BASE_URL')
+            ? envCfg.TELORA_LACUNA_UPSTREAM_BASE_URL
+            : (typeof lacunaFile.upstreamBaseUrl === 'string' && lacunaFile.upstreamBaseUrl ? lacunaFile.upstreamBaseUrl : envCfg.TELORA_LACUNA_UPSTREAM_BASE_URL),
+        compressEnabled: envIsSet('TELORA_LACUNA_COMPRESS_ENABLED')
+            ? envCfg.TELORA_LACUNA_COMPRESS_ENABLED
+            : (typeof lacunaFile.compressEnabled === 'boolean' ? lacunaFile.compressEnabled : envCfg.TELORA_LACUNA_COMPRESS_ENABLED),
+        source: envIsSet('TELORA_LACUNA_SOURCE')
+            ? envCfg.TELORA_LACUNA_SOURCE
+            : (typeof lacunaFile.source === 'string' && lacunaFile.source ? lacunaFile.source : envCfg.TELORA_LACUNA_SOURCE),
+        readyTimeoutMs: resolveNum('TELORA_LACUNA_READY_TIMEOUT_MS', envCfg.TELORA_LACUNA_READY_TIMEOUT_MS, lacunaFile.readyTimeoutMs),
+    };
+    // Default-on deterministic verification (coding->verify edge) was resolved
+    // above via resolveVerificationCarriage (global block + per-product
+    // overrides). Env overrides (TELORA_DEFAULT_VERIFY_*) are layered on at read
+    // time by resolveDefaultVerification, so precedence env > file > default holds
+    // whether config came through here or through the resolveEngineConfig
+    // boot path (which uses the same resolver).
+    return {
+        teloraUrl,
+        trackerId,
+        organizationId,
+        productId: productId ?? products[0]?.id ?? '',
+        repoPath,
+        products,
+        claudeCodePath,
+        logDir,
+        sessionTimeoutMs,
+        worktreeDir,
+        integrationBranch,
+        maxTotalSessions,
+        tokenLimit,
+        costLimit,
+        mergeLockTimeoutMs,
+        mergeLockContentionWarningMs,
+        policyFailureMode,
+        logMaxAgeDays,
+        logMaxTotalBytes,
+        logMaxFiles,
+        telemetry,
+        lacuna,
+        ...(defaultVerification ? { defaultVerification } : {}),
+    };
+}
+/**
+ * Create a product-scoped DaemonConfig by overriding productId, repoPath,
+ * worktreeDir, and logDir to target a specific product's repository.
+ *
+ * Downstream functions that use config.productId and config.repoPath
+ * work without modification when given a product-scoped config.
+ *
+ * Per-product local-model fields (codexHome, defaultCodingEngine, codexModel)
+ * are copied from the product entry; absent on the entry => undefined on the
+ * config (cloud parity).
+ *
+ * The per-product `defaultVerification` override is resolved from the matching
+ * entry in `config.products` (the enriched DaemonProductEntry list) so a caller
+ * passing a plain ProductEntry still gets the override. When the product
+ * declares no override, the spread carries the top-level global block through
+ * (global fallback); env overrides are applied above both at read time by
+ * resolveDefaultVerification.
+ */
+export function configForProduct(config, product) {
+    const entry = config.products.find((p) => p.id === product.id);
+    const perProductVerification = entry?.defaultVerification;
+    return {
+        ...config,
+        productId: product.id,
+        repoPath: product.repoPath,
+        // Derive worktreeDir and logDir from the product's repoPath
+        worktreeDir: resolve(product.repoPath, '.telora', 'worktrees'),
+        logDir: resolve(product.repoPath, '.telora', 'logs'),
+        // Per-product local-model binding (undefined => cloud parity)
+        codexHome: product.codexHome,
+        defaultCodingEngine: product.defaultCodingEngine,
+        codexModel: product.codexModel,
+        // Per-product verification override wins; else the spread above already
+        // carried config.defaultVerification (global fallback).
+        ...(perProductVerification ? { defaultVerification: perProductVerification } : {}),
+    };
+}
+/**
+ * Look up a ProductEntry by productId from the config's products array.
+ * Returns undefined if not found (defensive fallback).
+ */
+export function findProduct(config, productId) {
+    return config.products.find(p => p.id === productId);
+}
+/**
+ * Per-product repoPath viability check. Returns a human-readable reason string
+ * when the product's repoPath cannot back a worktree (missing directory, or a
+ * directory that is not a git repository), or null when the product is viable.
+ *
+ * A product with no repoPath at all is left to base-config validation -- this
+ * helper only judges products that declare a path.
+ */
+function productRepoViabilityError(product) {
+    if (!product.repoPath)
+        return null;
+    if (!existsSync(product.repoPath)) {
+        return `repoPath does not exist: "${product.repoPath}"`;
+    }
+    if (!existsSync(resolve(product.repoPath, '.git'))) {
+        return `repoPath is not a git repository (no .git found): "${product.repoPath}"`;
+    }
+    return null;
+}
+/**
+ * Validate daemon configuration values at startup.
+ *
+ * Runs after loadConfig() but before initSupabase(). Collects fatal validation
+ * failures and throws a single error listing every problem, so operators can
+ * fix everything in one pass.
+ *
+ * Per-product repoPath problems are NOT fatal. A single misconfigured or
+ * mid-genesis product (its repoPath missing, or not yet a git repository) must
+ * not take down a multi-product daemon and stall every other product's work.
+ * Such products are SKIPPED -- pruned from `config.products` with a loud warning
+ * and a `product.skipped_invalid_repo` health event -- and the daemon proceeds
+ * managing the remaining viable products. It fails hard only when NO viable
+ * product remains (nothing to do) or a shared base field is invalid.
+ *
+ * Pruning mutates `config` in place: the surviving products replace
+ * `config.products`, and the deprecated `productId`/`repoPath`/`worktreeDir`/
+ * `logDir` legacy fields are re-derived from the new `products[0]` to preserve
+ * the runtime invariant that those mirror the first product.
+ *
+ * Uses validateBaseConfig() from @telora/daemon-core for shared fields,
+ * then appends daemon-specific validation errors.
+ */
+export function validateConfig(config) {
+    // Validate shared base fields (teloraUrl, trackerId, organizationId, productId, repoPath, UUIDs)
+    const errors = validateBaseConfig(config);
+    // ── Daemon-specific validations ───────────────────────────────
+    // Per-product repoPath viability: skip (do not fail on) products whose
+    // repoPath is missing or not a git repository, so one bad product cannot
+    // wedge the whole daemon.
+    const viable = [];
+    for (const product of config.products) {
+        const reason = productRepoViabilityError(product);
+        if (reason) {
+            log.warn(`Skipping product ${product.id}: ${reason}`);
+            healthEvents.emit({
+                // 'info', not 'warn': skipping a registered-but-not-yet-genesised
+                // product (missing repoPath or no .git) is an EXPECTED multi-product
+                // lifecycle state, not a daemon degradation. The heartbeat derives
+                // health_status from warn/error counts (see heartbeat.ts), so a 'warn'
+                // here would falsely mark the whole daemon 'degraded' while it manages
+                // every viable product fine. 'info' stays visible in the health feed
+                // without driving degradation.
+                severity: 'info',
+                source: 'config',
+                code: 'product.skipped_invalid_repo',
+                message: `Product ${product.id} skipped: ${reason}`,
+                productId: product.id,
+            });
+        }
+        else {
+            viable.push(product);
+        }
+    }
+    if (viable.length === 0 && config.products.length > 0) {
+        // Every configured product is non-viable: there is nothing to manage.
+        errors.push('no viable products: every configured product has a missing or non-git repoPath. ' +
+            'Fix a product repoPath or remove the invalid entries from daemon.json.');
+    }
+    else if (viable.length !== config.products.length) {
+        // Prune to the viable set so ALL downstream product iteration skips the
+        // skipped products, and keep the deprecated legacy fields in sync with
+        // products[0] (the runtime invariant).
+        config.products = viable;
+        config.productId = viable[0].id;
+        config.repoPath = viable[0].repoPath;
+        config.worktreeDir = resolve(viable[0].repoPath, '.telora', 'worktrees');
+        config.logDir = resolve(viable[0].repoPath, '.telora', 'logs');
+    }
+    // worktreeDir parent (the repo-local `.telora/` dir) is daemon-OWNED scratch:
+    // gitignored, ephemeral, created lazily. A freshly onboarded repo legitimately
+    // won't have it yet -- the non-interactive curl installer writes daemon.json,
+    // .mcp.json and .gitignore but never this dir (only the interactive `connect`
+    // path did, as a side effect of writing the starter prompt). Demanding it
+    // pre-exist is the boundary rejecting valid fresh state, so create it instead
+    // of failing, then confirm writability. A mkdir failure (e.g. an unwritable
+    // repoPath) is the real, fatal error and still surfaces.
+    const worktreeParent = resolve(config.worktreeDir, '..');
+    if (!existsSync(worktreeParent)) {
+        try {
+            mkdirSync(worktreeParent, { recursive: true });
+        }
+        catch (err) {
+            errors.push(`worktreeDir parent directory does not exist and could not be created: ` +
+                `"${worktreeParent}" (${err instanceof Error ? err.message : String(err)})`);
+        }
+    }
+    if (existsSync(worktreeParent)) {
+        try {
+            accessSync(worktreeParent, constants.W_OK);
+        }
+        catch {
+            errors.push(`worktreeDir parent directory is not writable: "${worktreeParent}"`);
+        }
+    }
+    if (errors.length > 0) {
+        throw new Error(`Daemon configuration validation failed (${errors.length} error(s)):\n` +
+            errors.map(e => `  - ${e}`).join('\n'));
+    }
+    log.info('Configuration validation passed');
+}
+/**
+ * Print configuration summary (without sensitive values)
+ */
+export function printConfig(config) {
+    log.info('Daemon Configuration:');
+    log.info(`  Telora URL: ${config.teloraUrl}`);
+    log.info(`  Tracker ID: [configured]`);
+    log.info(`  Organization ID: ${config.organizationId}`);
+    log.info(`  Products: ${config.products.length}`);
+    for (const product of config.products) {
+        log.info(`    - ${product.id} -> ${product.repoPath}`);
+    }
+    log.info(`  Worktree Directory: ${config.worktreeDir}`);
+    log.info(`  Integration Branch: ${config.integrationBranch}`);
+    log.info(`  Claude Code Path: ${config.claudeCodePath}`);
+    log.info(`  Log Directory: ${config.logDir}`);
+    log.info(`  Max Total Sessions: ${config.maxTotalSessions}`);
+    log.info(`  Session Timeout: ${config.sessionTimeoutMs}ms`);
+    log.info(`  Token Limit: ${config.tokenLimit}`);
+    log.info(`  Cost Limit: $${config.costLimit}`);
+    log.info(`  Merge Lock Timeout: ${config.mergeLockTimeoutMs}ms`);
+    log.info(`  Merge Lock Contention Warning: ${config.mergeLockContentionWarningMs}ms`);
+    log.info(`  Policy Failure Mode: ${config.policyFailureMode}`);
+    log.info(`  Log Max Age: ${config.logMaxAgeDays} days`);
+    log.info(`  Log Max Total Size: ${(config.logMaxTotalBytes / 1073741824).toFixed(2)} GB`);
+    log.info(`  Log Max Files: ${config.logMaxFiles}`);
+    log.info(`  Telemetry Enabled: ${config.telemetry.enabled}`);
+    log.info(`  Telemetry Port: ${config.telemetry.port}`);
+    log.info(`  Telemetry Flush Interval: ${config.telemetry.flushIntervalMs}ms`);
+    log.info(`  Telemetry Retention: ${config.telemetry.retentionDays} days`);
+    log.info(`  Lacuna Sidecar: ${config.lacuna.enabled ? 'enabled' : 'disabled'}`);
+    if (config.lacuna.enabled) {
+        log.info(`    Lacuna Endpoint: http://${config.lacuna.host}:${config.lacuna.port}`);
+        log.info(`    Lacuna Compress: ${config.lacuna.compressEnabled}`);
+        log.info(`    Lacuna Ready Timeout: ${config.lacuna.readyTimeoutMs}ms`);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/shell/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/shell/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EACL,cAAc,IAAI,oBAAoB,EACtC,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAG/C;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3D,OAAO,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,IAAY,EACZ,YAAoB,EACpB,OAAgB;IAEhB,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACvD,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;YAC3D,CAAC,CAAC,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,yBAAyB;QAC7B,aAAa,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC;YACvE,CAAC,CAAC,CAAC,CAAC,aAAa;YACjB,CAAC,CAAC,6BAA6B;QACjC,uEAAuE;QACvE,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAmC,EACnC,YAAqC;IAErC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAChE,MAAM,WAAW,GAAc,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,QAAQ,GAAyB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAgC,EAAE,CAClC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAA6B,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CACpF,CAAC;QACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACnE,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,yEAAyE;IACzE,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEnE,0EAA0E;IAC1E,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAExD,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,QAAQ,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC,SAAS;IAEpE,uEAAuE;IACvE,8EAA8E;IAC9E,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,6DAA6D;IAC7D,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAEvG,gCAAgC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAEjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,yEAAyE;YACzE,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,CAAC;QACxF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,kDAAkD;gBAClD,yFAAyF;gBACzF,uCAAuC,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,iEAAiE;IACjE,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,gEAAgE;IAEhE,kDAAkD;IAClD,8EAA8E;IAC9E,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB;WACzC,CAAC,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;WAC1E,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAE/C,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,QAAQ,CAAC,2BAA2B,CAAC;QAC7D,CAAC,CAAC,MAAM,CAAC,yBAAyB;QAClC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,iBAAiB,KAAK,QAAQ,IAAI,UAAU,CAAC,iBAAiB;YACjF,CAAC,CAAC,UAAU,CAAC,iBAAiB;YAC9B,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAExC,iBAAiB;IACjB,MAAM,gBAAgB,GAAG,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAClH,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACpF,MAAM,kBAAkB,GAAG,UAAU,CAAC,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC5H,MAAM,4BAA4B,GAAG,UAAU,CAAC,kCAAkC,EAAE,MAAM,CAAC,gCAAgC,EAAE,UAAU,CAAC,4BAA4B,CAAC,CAAC;IAEtK,+EAA+E;IAC/E,6EAA6E;IAC7E,iEAAiE;IACjE,IAAI,iBAAoC,CAAC;IACzC,IAAI,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC3C,wEAAwE;QACxE,iBAAiB,GAAG,MAAM,CAAC,0BAA+C,CAAC;IAC7E,CAAC;SAAM,IAAI,OAAO,UAAU,CAAC,iBAAiB,KAAK,QAAQ,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAC5F,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC9C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,0CAA0C,CAAC,CAAC;QACpH,CAAC;QACD,iBAAiB,GAAG,QAAQ,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,iBAAiB,GAAG,MAAM,CAAC,0BAA+C,CAAC,CAAC,2BAA2B;IACzG,CAAC;IAED,uBAAuB;IACvB,MAAM,aAAa,GAAG,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACxG,MAAM,gBAAgB,GAAG,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACpH,MAAM,WAAW,GAAG,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAE9F,0CAA0C;IAC1C,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC;QAC/F,CAAC,CAAC,UAAU,CAAC,SAAoC;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAoB;QACjC,OAAO,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,wBAAwB;YACjC,CAAC,CAAC,CAAC,OAAO,aAAa,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAC1G,IAAI,EAAE,UAAU,CAAC,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,EAAE,aAAa,CAAC,IAAI,CAAC;QAC3F,eAAe,EAAE,UAAU,CAAC,oCAAoC,EAAE,MAAM,CAAC,kCAAkC,EAAE,aAAa,CAAC,eAAe,CAAC;QAC3I,aAAa,EAAE,UAAU,CAAC,iCAAiC,EAAE,MAAM,CAAC,+BAA+B,EAAE,aAAa,CAAC,aAAa,CAAC;KAClI,CAAC;IAEF,8EAA8E;IAC9E,4EAA4E;IAC5E,wCAAwC;IACxC,MAAM,UAAU,GAAG,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC;QACtF,CAAC,CAAC,UAAU,CAAC,MAAiC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,QAAQ,CAAC,uBAAuB,CAAC;YACxC,CAAC,CAAC,MAAM,CAAC,qBAAqB;YAC9B,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACjG,IAAI,EAAE,QAAQ,CAAC,oBAAoB,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,kBAAkB;YAC3B,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC1G,IAAI,EAAE,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,IAAI,CAAC;QAClF,eAAe,EAAE,QAAQ,CAAC,iCAAiC,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,+BAA+B;YACxC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,eAAe,KAAK,QAAQ,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,+BAA+B,CAAC;QACxJ,eAAe,EAAE,QAAQ,CAAC,gCAAgC,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,8BAA8B;YACvC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC;QAC1H,MAAM,EAAE,QAAQ,CAAC,sBAAsB,CAAC;YACtC,CAAC,CAAC,MAAM,CAAC,oBAAoB;YAC7B,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAClH,cAAc,EAAE,UAAU,CAAC,gCAAgC,EAAE,MAAM,CAAC,8BAA8B,EAAE,UAAU,CAAC,cAAc,CAAC;KAC/H,CAAC;IAEF,2EAA2E;IAC3E,oEAAoE;IACpE,6EAA6E;IAC7E,+EAA+E;IAC/E,sEAAsE;IACtE,4CAA4C;IAE5C,OAAO;QACL,SAAS;QACT,SAAS;QACT,cAAc;QACd,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE;QAC7C,QAAQ;QACR,QAAQ;QACR,cAAc;QACd,MAAM;QACN,gBAAgB;QAChB,WAAW;QACX,iBAAiB;QACjB,gBAAgB;QAChB,UAAU;QACV,SAAS;QACT,kBAAkB;QAClB,4BAA4B;QAC5B,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,WAAW;QACX,SAAS;QACT,MAAM;QACN,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAoB,EAAE,OAAqB;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,sBAAsB,GAAG,KAAK,EAAE,mBAAmB,CAAC;IAC1D,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,4DAA4D;QAC5D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;QAC9D,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;QACpD,8DAA8D;QAC9D,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,wEAAwE;QACxE,wDAAwD;QACxD,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,SAAiB;IACjE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,OAAqB;IACtD,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,6BAA6B,OAAO,CAAC,QAAQ,GAAG,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,sDAAsD,OAAO,CAAC,QAAQ,GAAG,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,iGAAiG;IACjG,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE1C,iEAAiE;IAEjE,uEAAuE;IACvE,yEAAyE;IACzE,0BAA0B;IAC1B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;YACtD,YAAY,CAAC,IAAI,CAAC;gBAChB,kEAAkE;gBAClE,qEAAqE;gBACrE,mEAAmE;gBACnE,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,+BAA+B;gBAC/B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EAAE,WAAW,OAAO,CAAC,EAAE,aAAa,MAAM,EAAE;gBACnD,SAAS,EAAE,OAAO,CAAC,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,sEAAsE;QACtE,MAAM,CAAC,IAAI,CACT,kFAAkF;YAClF,wEAAwE,CACzE,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpD,wEAAwE;QACxE,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,wEAAwE;gBACxE,IAAI,cAAc,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,UAAU,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,kDAAkD,cAAc,GAAG,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,MAAM,eAAe;YACvE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClC,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,EAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,oCAAoC,MAAM,CAAC,4BAA4B,IAAI,CAAC,CAAC;IACtF,GAAG,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/D,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,aAAa,OAAO,CAAC,CAAC;IACxD,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,GAAG,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,SAAS,CAAC,eAAe,IAAI,CAAC,CAAC;IAC9E,GAAG,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,SAAS,CAAC,aAAa,OAAO,CAAC,CAAC;IAC1E,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/shell/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/shell/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,aAA+C,CAAC;AAEhF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,aAA6C,CAAC;AAElF,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,EAAG,eAAwB,CAAC;AAE3D,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,CAAC,SAAS;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAElF;AAED,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAErF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAChG,MAAM,EAAE,CAAC,EAAE,GACV,MAAM,EAAE,CAIV"}

package/dist/shell/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/shell/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AAElF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAwB,CAAC;AAE3D,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAkC,MAAW;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,mBAAmB,CAAkC,MAAW;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAW;IAEX,OAAO,gBAAgB,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC"}

package/dist/shell/control-state.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Control state handler for the daemon.
+ *
+ * Polls for focuses with non-running control states and dispatches
+ * to the appropriate handler:
+ * - human_control: SIGSTOP the team lead process
+ * - resuming: SIGCONT the team lead process, inject note, set running
+ * - stopped: graceful shutdown (message + SIGTERM)
+ *
+ * Called from the poll loop alongside existing checks.
+ */
+import type { DaemonConfig, FocusTeamState } from '../types/index.js';
+import type { ControlStateChange } from '../queries/control-state.js';
+import { getActiveFocuses } from '../queries/deliveries.js';
+/**
+ * Grace period (ms) between the cooperative 'commit and exit' stdin message and
+ * the SIGTERM that follows. Mirrors the cockpit Stop grace so the team has time
+ * to safety-commit its work before being terminated.
+ */
+export declare const COOPERATIVE_STOP_GRACE_MS = 10000;
+/**
+ * Check for control state changes and dispatch to appropriate handlers.
+ *
+ * Called from the poll loop. Queries for focuses with non-running control
+ * states, then dispatches to the correct handler.
+ */
+export declare function checkControlStateChanges(config: DaemonConfig): Promise<void>;
+/**
+ * Handle human_control: suspend the agent by sending SIGSTOP.
+ */
+export declare function handleHumanControl(change: ControlStateChange): void;
+/**
+ * Handle resuming: send SIGCONT, inject operator note, update to running.
+ */
+export declare function handleResuming(change: ControlStateChange): Promise<void>;
+/**
+ * Handle stopped: graceful halt with message + SIGTERM (cockpit Stop path).
+ *
+ * Thin wrapper over the shared initiateCooperativeStop -- the cockpit Stop and
+ * the disarm reaper drive the same cooperative-stop -> SIGTERM mechanism.
+ */
+export declare function handleStopped(change: ControlStateChange): void;
+/** Injectable seam for the cooperative-stop mechanism (tests override). */
+export interface CooperativeStopDeps {
+    getActiveTeams: () => Map<string, FocusTeamState>;
+    terminateTeam: (focusId: string, shutdownReason?: FocusTeamState['shutdownReason']) => boolean;
+}
+export interface CooperativeStopOptions {
+    /** Stamped on the team so handleTeamCompletion classifies the exit as a controlled stop. */
+    shutdownReason: FocusTeamState['shutdownReason'];
+    /** The 'commit your work and exit' message sent to the lead before SIGTERM. */
+    message: string;
+    /** Grace period before SIGTERM (default COOPERATIVE_STOP_GRACE_MS). */
+    graceMs?: number;
+}
+/**
+ * Cooperatively stop a running team: resume it if it was SIGSTOP-suspended,
+ * send the 'commit your work and exit' message, stamp the shutdown reason so
+ * the exit classifier records a controlled stop (NOT a crash / team_failure),
+ * then SIGTERM via the existing terminateTeam flow after the grace period.
+ *
+ * Pure mechanism: NO idempotency guard here (the cockpit Stop is a one-shot
+ * control-state event; the reaper supplies its own per-poll dedup). The grace
+ * timer is unref'd so it never holds the process open on its own.
+ */
+export declare function initiateCooperativeStop(focusId: string, options: CooperativeStopOptions, deps?: CooperativeStopDeps): void;
+/** Injectable seam for the disarm reaper (tests override). */
+export interface ReapDisarmedTeamsDeps {
+    getActiveTeams: () => Map<string, FocusTeamState>;
+    getActiveFocuses: typeof getActiveFocuses;
+    initiateCooperativeStop: (focusId: string, options: CooperativeStopOptions) => void;
+}
+/**
+ * Stop running teams whose focus has been DISARMED via the dashboard Stop
+ * (clearing assigned_agent_role_id). Clearing the role only removes the focus
+ * from the spawn set; the in-flight team would otherwise run to natural
+ * completion. This reaper brings the role-clear toggle to parity with the
+ * cockpit Stop: stop means stop.
+ *
+ * getActiveFocuses returns ALL status='active' focuses REGARDLESS of role
+ * (daemon-focus-handlers handleDaemonGetActiveFocuses), so:
+ *   - a team whose focus is PRESENT with a null role -> disarmed -> reap it;
+ *   - PRESENT with a non-null role -> still armed (idle/in-review/paused) -> leave it;
+ *   - ABSENT -> the focus is no longer status='active' (genuine deactivation),
+ *     owned by checkForDeactivatedFocuses (which runs earlier in the poll and
+ *     does a full teardown incl. worktree removal). The reaper deliberately
+ *     does NOT double-handle that case, and never removes the worktree -- a
+ *     disarmed focus keeps its worktree so a re-arm can resume.
+ *
+ * Re-arm within the grace window: the chosen rule is "complete the stop, then
+ * allow a fresh spawn". The scheduled SIGTERM still fires (the team exits as a
+ * clean operator stop); if the focus has since been re-armed, the next poll's
+ * processReadyFocuses spawns a fresh team once the old one is gone. The stop is
+ * never cancelled mid-flight, which keeps the path deterministic.
+ */
+export declare function reapDisarmedTeams(config: DaemonConfig, deps?: ReapDisarmedTeamsDeps): Promise<void>;
+/**
+ * Get the set of suspended focus IDs (for testing).
+ */
+export declare function getSuspendedFocuses(): ReadonlySet<string>;
+/**
+ * Clear all tracked suspended focuses (for testing).
+ */
+export declare function clearSuspendedFocuses(): void;
+/**
+ * Clear the reaper's in-flight-stop dedup set (for testing).
+ */
+export declare function clearPendingDisarmStops(): void;
+//# sourceMappingURL=control-state.d.ts.map

package/dist/shell/control-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-state.d.ts","sourceRoot":"","sources":["../../src/shell/control-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAU5D;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAE/C;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+ClF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAgCnE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgE9E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAK9D;AAID,2EAA2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,gBAAgB,CAAC,KAAK,OAAO,CAAC;CAChG;AAID,MAAM,WAAW,sBAAsB;IACrC,4FAA4F;IAC5F,cAAc,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACjD,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,sBAAsB,EAC/B,IAAI,GAAE,mBAAgD,GACrD,IAAI,CAmDN;AAYD,8DAA8D;AAC9D,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,uBAAuB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACrF;AAQD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,qBAAuC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAqDf;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,WAAW,CAAC,MAAM,CAAC,CAEzD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}