@vibesdotdev/pm 0.0.0-stage → 1.0.0-rc.2

package/dist/daemon/stray-daemons.js

@@ -0,0 +1,101 @@
+/**
+ * Stray PM daemons: a report, never a kill (pm.md D3).
+ *
+ * The stale-daemon reaper that ran on every daemon boot and client
+ * auto-start killed other workspaces' daemons on an argv-token and cwd guess,
+ * which broke the SPEC hard rule "a PM daemon never signals a process it did
+ * not start". Admission (framework-M8) is the replacement: one daemon per
+ * admitted workspace, named `pm-daemon-<toolingId(root)>.pid`. This module
+ * compares the pid files under `<activeHome>/pm` with the admission records
+ * and reports each file no admitted workspace names, plus each file whose
+ * recorded process is gone. It signals nothing and unlinks nothing.
+ *
+ * A live stray is stopped only through its own daemon's RPC `shutdown`, from
+ * inside its workspace: `vibes --workspace-root <root> pm daemon stop`.
+ */
+import * as z from 'zod/v4';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+import { CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { admittedWorkspaceIdentity } from "../admission.js";
+import { hasErrnoCode } from "../utils/errno-failure.js";
+import { isProcessRunning, resolveProcessCwd } from "../utils/process-tree.js";
+const TextSchema = z.string();
+const PID_FILE_PREFIX = 'pm-daemon-';
+const PID_FILE_SUFFIX = '.pid';
+function parsePid(content) {
+    const pid = Number.parseInt(content.trim(), 10);
+    return Number.isInteger(pid) && pid > 0 ? pid : null;
+}
+/**
+ * Report pid files under `<activeHome>/pm` that no admitted workspace names,
+ * and pid files whose process is gone. An absent PM directory is an empty
+ * report; any other read failure propagates.
+ */
+export async function reportStrayDaemons(options) {
+    const path = await getRuntimePath(options.runtime);
+    const files = await resolveFileSystemAdapter(options.runtime, { binding: false });
+    const pmDir = path.join(options.roots.activeHome, 'pm');
+    let entries;
+    try {
+        entries = await files.list(pmDir);
+    }
+    catch (error) {
+        const failure = CaughtFailureSchema.parse(error);
+        if (hasErrnoCode(failure) && failure.code === 'ENOENT')
+            return { scanned: 0, strays: [] };
+        throw failure;
+    }
+    const admittedByToolingId = new Map(options.admitted.map((record) => [admittedWorkspaceIdentity(record.root).toolingId, record]));
+    const report = { scanned: 0, strays: [] };
+    for (const { name } of entries) {
+        if (!name.startsWith(PID_FILE_PREFIX) || !name.endsWith(PID_FILE_SUFFIX))
+            continue;
+        report.scanned += 1;
+        const pidFile = path.join(pmDir, name);
+        const toolingId = name.slice(PID_FILE_PREFIX.length, -PID_FILE_SUFFIX.length);
+        let content;
+        try {
+            content = TextSchema.parse(await files.readFile(pidFile, 'utf-8'));
+        }
+        catch (error) {
+            // Removed between readdir and read: its daemon exited and cleaned up.
+            const failure = CaughtFailureSchema.parse(error);
+            if (hasErrnoCode(failure) && failure.code === 'ENOENT')
+                continue;
+            throw failure;
+        }
+        const pid = parsePid(content);
+        const alive = pid !== null && (await isProcessRunning(options.runtime, pid));
+        const admitted = admittedByToolingId.get(toolingId);
+        if (!alive) {
+            report.strays.push({
+                pidFile,
+                toolingId,
+                pid,
+                cwd: null,
+                reason: 'dead-pid',
+                remedy: admitted
+                    ? `The next 'vibes pm daemon start' in ${admitted.root} replaces this pid file.`
+                    : 'No daemon runs under this pid file and no admitted workspace names it; it is inert.'
+            });
+            continue;
+        }
+        if (admitted)
+            continue;
+        const cwd = await resolveProcessCwd(options.runtime, pid);
+        report.strays.push({
+            pidFile,
+            toolingId,
+            pid,
+            cwd,
+            reason: 'not-admitted',
+            remedy: cwd
+                ? `Stop it through its own daemon: vibes --workspace-root ${cwd} pm daemon stop`
+                : `Stop it through its own daemon from its workspace ('vibes pm daemon stop'); its cwd is unknown.`
+        });
+    }
+    report.strays.sort((left, right) => left.pidFile.localeCompare(right.pidFile));
+    return report;
+}
+//# sourceMappingURL=stray-daemons.js.map

package/dist/daemon/stray-daemons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stray-daemons.js","sourceRoot":"","sources":["../../src/daemon/stray-daemons.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAkB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE1F,OAAO,EAAE,mBAAmB,EAAmB,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9B,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,eAAe,GAAG,MAAM,CAAC;AAiC/B,SAAS,QAAQ,CAAC,OAAe;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAiC;IACzE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1F,MAAM,OAAO,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAC5F,CAAC;IACF,MAAM,MAAM,GAAsB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE7D,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,SAAS;QACnF,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAE9E,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACJ,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,sEAAsE;YACtE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,MAAM,OAAO,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClB,OAAO;gBACP,SAAS;gBACT,GAAG;gBACH,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,QAAQ;oBACf,CAAC,CAAC,uCAAuC,QAAQ,CAAC,IAAI,0BAA0B;oBAChF,CAAC,CAAC,qFAAqF;aACxF,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,QAAQ;YAAE,SAAS;QAEvB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAClB,OAAO;YACP,SAAS;YACT,GAAG;YACH,GAAG;YACH,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,GAAG;gBACV,CAAC,CAAC,0DAA0D,GAAG,iBAAiB;gBAChF,CAAC,CAAC,iGAAiG;SACpG,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/daemon/supervised-commands.d.ts

@@ -0,0 +1,3 @@
+import type { CommandHandler } from '../schemas/daemon-command.ts';
+export declare function registerSupervisedCommands(registry: Map<string, CommandHandler>): void;
+//# sourceMappingURL=supervised-commands.d.ts.map

package/dist/daemon/supervised-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervised-commands.d.ts","sourceRoot":"","sources":["../../src/daemon/supervised-commands.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AASnE,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAwCtF"}

package/dist/daemon/supervised-commands.js

@@ -0,0 +1,51 @@
+/** Supervised admission has distinct wire names: an older daemon cannot silently ignore the protocol. */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { StartDeclaredReplySchema } from "../client-replies.js";
+import { inlineTaskConfig } from "../tasks/launch.js";
+import { readDaemonGraph } from "./declared-commands.js";
+import { SupervisedAcknowledgementPayloadSchema, SupervisedLookupPayloadSchema, SupervisedTaskPayloadSchema, parseCommandPayload } from "./command-payload.js";
+export function registerSupervisedCommands(registry) {
+    registry.set('admit-task', async (message, deps, runtime, invocation) => {
+        const { identity, task, runId, tags } = parseCommandPayload('admit-task', SupervisedTaskPayloadSchema, message);
+        if ('command' in task) {
+            const config = inlineTaskConfig(identity.processId, task, { runId, tags });
+            const state = await deps.pm.admitSupervisedTask(identity, config, task.retain === false, () => deps.pm.start(config), invocation?.signal);
+            return { state };
+        }
+        if (task.processId !== identity.processId)
+            throw new CapabilityError('The declared target differs from its PM admission.', 'INVALID_INPUT', {
+                reason: 'pm-task-supervision-identity-mismatch', retryable: false
+            });
+        const { graph, processes } = await readDaemonGraph(runtime, deps);
+        if (graph.resources.some(resource => resource.id === task.processId))
+            throw new CapabilityError('The supervised PM task target is a resource, not a process.', 'INVALID_INPUT', { reason: 'pm-target-not-process' });
+        const config = processes.find(process => process.id === task.processId);
+        if (!config)
+            throw new CapabilityError('The supervised PM process target is not declared.', 'NOT_FOUND', {
+                reason: 'pm-target-not-found', details: { processId: task.processId }
+            });
+        const startDeclared = registry.get('start-declared');
+        if (!startDeclared)
+            throw new CapabilityError('The PM declared-target owner is unavailable.', 'UNAVAILABLE', {
+                reason: 'pm-task-supervision-unavailable', retryable: false
+            });
+        const state = await deps.pm.admitSupervisedTask(identity, config, false, async () => {
+            const reply = StartDeclaredReplySchema.parse(await startDeclared({ id: task.processId, kind: 'process' }, deps, runtime, invocation));
+            const started = reply.started.kind === 'process' ? reply.started.state
+                : reply.started.kind === 'dependencies' ? reply.started.target : undefined;
+            if (!started)
+                throw new CapabilityError('The declared task did not admit a PM process.', 'INVALID_INPUT', { reason: 'pm-target-not-process' });
+            return started;
+        }, invocation?.signal);
+        return { state };
+    });
+    registry.set('task-admission', async (message, deps) => {
+        const { identity } = parseCommandPayload('task-admission', SupervisedLookupPayloadSchema, message);
+        return { admission: await deps.pm.supervisedAdmission(identity) };
+    });
+    registry.set('acknowledge-task', async (message, deps) => {
+        const { receipt } = parseCommandPayload('acknowledge-task', SupervisedAcknowledgementPayloadSchema, message);
+        return { acknowledged: await deps.pm.acknowledgeSupervised(receipt) };
+    });
+}
+//# sourceMappingURL=supervised-commands.js.map

package/dist/daemon/supervised-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervised-commands.js","sourceRoot":"","sources":["../../src/daemon/supervised-commands.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACN,sCAAsC,EAAE,6BAA6B,EAAE,2BAA2B,EAClG,mBAAmB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,UAAU,0BAA0B,CAAC,QAAqC;IAC/E,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE;QACvE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,YAAY,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAC;QAChH,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAC1I,OAAO,EAAE,KAAK,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAAE,MAAM,IAAI,eAAe,CAAC,oDAAoD,EAAE,eAAe,EAAE;gBAC3I,MAAM,EAAE,uCAAuC,EAAE,SAAS,EAAE,KAAK;aACjE,CAAC,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,eAAe,CAC9F,6DAA6D,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CACnH,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,WAAW,EAAE;gBACxG,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;aACrE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,eAAe,CAAC,8CAA8C,EAAE,aAAa,EAAE;gBAC5G,MAAM,EAAE,iCAAiC,EAAE,SAAS,EAAE,KAAK;aAC3D,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YACtI,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK;gBACrE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,eAAe,CAAC,+CAA+C,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC/I,OAAO,OAAO,CAAC;QAChB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACnG,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,sCAAsC,EAAE,OAAO,CAAC,CAAC;QAC7G,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/daemon.d.ts

@@ -0,0 +1,329 @@
+/**
+ * PM Daemon
+ * Long-lived process that manages all child processes via Unix socket IPC.
+ *
+ * Transport: the daemon is served by `runtime-rpc-unix` (three-verb protocol:
+ * invoke / release / stream). The legacy HTTP-over-unix `pm-command` wire is
+ * gone. Each pm-command maps to a method on the RPC root returned by
+ * `createPMRpcRoot()`; the PM client calls them via `connectUnix` + `wireConsumer`.
+ */
+import { readPMDaemonLogTail } from './utils/logging.ts';
+import type { DaemonReconcileSummary } from './schemas/daemon.ts';
+import { type PathRoots } from '@vibesdotdev/paths';
+import { type CaughtFailure, type RuntimeRef, type VibesRuntime } from '@vibesdotdev/kernel';
+import { type AppendedFileRotationPolicy } from '@vibesdotdev/logging';
+import type { DaemonConfig, RotateProcessLogsOptions, RotateProcessLogsResult } from './schemas/daemon-host.ts';
+export { getDaemonPidPath, readDaemonPid } from './utils/daemon-pid.ts';
+export { isDaemonReachable, isDaemonRunning, probeDaemon } from './utils/daemon-reachability.ts';
+/**
+ * Process log rotation for LIVE writers: every running child's
+ * `<id>.stdout` / `<id>.stderr` and the daemon's own stdio logs, by the
+ * logging owner's `rotateAppendedFile` (copy+truncate, because each writer
+ * holds an O_APPEND fd) under the declared `pm.process-capture` policy.
+ * Start-time rotation uses the same call and policy, so the two can never
+ * drift apart on threshold or generation count (L1).
+ */
+export declare function rotateOversizedProcessLogs(options: RotateProcessLogsOptions): Promise<RotateProcessLogsResult>;
+/**
+ * The daemon's own stdio logs, rotated in steady state (pm.md D17): the
+ * paths `getPMDaemon{Stdout,Stderr}LogPath` name under the daemon's roots,
+ * never its process log dir (which never held them). `pm-daemon.log` is the
+ * `pm-daemon` logging output and is rotated by its owner, not here.
+ */
+export declare function rotateOversizedDaemonLogs(options: {
+    /** The runtime whose selected host file output performs the rotation. */
+    runtime: RuntimeRef;
+    /** The daemon's admitted root or tooling id: its stdio logs are named per workspace. */
+    workspace: string;
+    roots: PathRoots;
+    policy: AppendedFileRotationPolicy;
+}): Promise<RotateProcessLogsResult>;
+/**
+ * The PM daemon runs only on its own serve host: the host the CLI booted for
+ * `pm daemon serve`, which declared `qualifiers.serve = 'pm.daemon.serve'` and
+ * so answers `pm/role = 'daemon'`. That declaration is the recursion guard
+ * (D13): every in-process PM client of the host has `autoStartDaemon: false`,
+ * so nothing the daemon serves can launch another daemon. A host without it
+ * would hand the daemon's own commands clients that auto-start a daemon, so
+ * it is refused before the daemon touches anything.
+ */
+export declare function assertPMDaemonServeHost(runtime: Pick<VibesRuntime, 'context'>): Promise<void>;
+type DaemonStopMode = 'shutdown' | 'handoff';
+export declare class PMDaemon {
+    private pm;
+    private rm;
+    private executor;
+    private store;
+    private readonly liveness;
+    /** This daemon's attached fleet receivers (never a module singleton). */
+    private readonly fleet;
+    private rpcListener?;
+    private socketPath;
+    private readonly runtimePath;
+    /** The serve host runtime; replaced by hot reload's stable dispatch handle once armed. */
+    private runtime;
+    /** `getPathRoots(runtime)` of the serve host, captured at construction. */
+    private readonly roots;
+    private pidFile;
+    private cleanupTimer?;
+    private healthCheckTimer?;
+    private livenessCheckTimer?;
+    private readonly idleSweepIntervalMs;
+    private readonly healthCheckIntervalMs;
+    private readonly livenessCheckIntervalMs;
+    private readonly maxHealthCheckRetries;
+    private readonly initialBackoffDelay;
+    private readonly maxBackoffDelay;
+    private readonly minHealthFailuresBeforeKill;
+    private readonly logger;
+    private readonly workspaceRoot;
+    private readonly processLogDir;
+    private startTime;
+    private configWatcher;
+    private orphanScanner;
+    private healthMonitor;
+    private livenessChecker;
+    private executableFreshnessReconciler;
+    private executableFreshnessTimer?;
+    private resourceHealthMonitor;
+    private commandDispatcher;
+    private hotReload?;
+    /** Releases the generation-publication subscription (see start()). */
+    private unsubscribeGeneration?;
+    private resourceHealthCheckTimer?;
+    private orphanScanTimer?;
+    private readonly resourceHealthCheckIntervalMs;
+    private pidHeartbeatTimer?;
+    private supersessionTimer?;
+    private supersessionStrikes;
+    private readonly pidHeartbeatIntervalMs;
+    private readonly supersessionCheckIntervalMs;
+    private keepAliveResolve?;
+    private stopping?;
+    private stopFailed;
+    /**
+     * A supervisor tick owned by the serve host's lifecycle (RC07): disposed
+     * by `stop()` and by the runtime's disposal. The daemon host is not
+     * `finite`, so a lifecycle interval is admitted.
+     */
+    private tick;
+    /** One supervisor tick: a failure is reported, never thrown (nothing awaits a tick). */
+    private runTick;
+    /** Remove a stale socket file during reconcile; a failure is reported and reconcile continues. */
+    /**
+     * Remove a dead process's socket through the runtime socket service. True
+     * only when the socket was there and is now removed; a refused removal (a
+     * listener still bound, a non-socket inode, an unreadable owner) is logged
+     * and reported false, never counted as removed.
+     */
+    private removeStaleSocket;
+    /** Dispose every supervisor tick. */
+    private stopTicks;
+    private waitForStop;
+    private daemonModules;
+    private degradedModules;
+    reconcileState(): Promise<DaemonReconcileSummary>;
+    constructor(config: DaemonConfig);
+    /**
+     * Start the daemon
+     */
+    start(): Promise<void>;
+    /**
+     * Resolve every enabled `pm/daemon-module` from the runtime and start it.
+     * Tolerates an unbootstrapped runtime (tests, isolated construction) by
+     * starting zero modules — mirroring mountRegisteredEndpoints() in
+     * pm.daemon.serve.impl.ts. Modules are sorted by `priority` (higher first)
+     * so ordering-sensitive tick sources can declare a start order.
+     *
+     * Required modules that fail to start are added to degradedModules and
+     * restarted on the declared `supervision.daemonModule` policy (RC11 class:
+     * supervision of what the daemon owns; default 15s doubling to 5m, never
+     * giving up). The daemon continues starting; it does NOT throw for
+     * required module failures.
+     */
+    private startDaemonModules;
+    private startResolvedModules;
+    /**
+     * Retry starting a degraded required daemon module.
+     * Called by the retry timer scheduled in startDaemonModules.
+     */
+    private retryDaemonModule;
+    /**
+     * Record a required module's failure and, within the declared
+     * `supervision.daemonModule` budget, schedule its restart on a lifecycle
+     * one-shot (disposed with the daemon's runtime). Past the budget it stays
+     * degraded, visible in the daemon's health, with no timer.
+     */
+    private scheduleModuleRestart;
+    /**
+     * Stop every started daemon module (graceful shutdown + supersession).
+     * Best-effort: one module's stop failure never blocks the rest.
+     */
+    private stopDaemonModules;
+    /**
+     * Stop the daemon
+     * CRITICAL FIX: Kill all managed processes on shutdown to prevent orphans
+     */
+    /**
+     * Stop once, whoever asks (shutdown, handoff, SIGTERM, SIGINT): a second
+     * request joins the first. A failed stop is logged once and recorded, so
+     * the serve host exits non-zero (`exitCode`).
+     */
+    requestStop(reason: string, mode?: DaemonStopMode): Promise<void>;
+    /** `stop()` for a requester with no caller to throw to: the failure is recorded (exit status) and reported once. */
+    private stopReportingFailure;
+    /** The serve host's exit status once `start()` has returned: 1 when the stop failed. */
+    get exitCode(): number;
+    stop(mode?: DaemonStopMode): Promise<void>;
+    private stopServingAndChildren;
+    /**
+     * Write PID file
+     * Simple PID file creation - daemon lock enforcement happens via socket binding
+     */
+    /**
+     * Refresh the pid file's mtime so the client's 5-minute staleness window
+     * measures liveness. Never resurrects or overwrites a pid file this daemon
+     * no longer owns — if it's gone or names another pid, a takeover is in
+     * progress and the supersession check owns the response.
+     */
+    private heartbeatPidFile;
+    /** The supplied host's PID, admitted before PM uses it as ownership evidence. */
+    private hostPid;
+    /** The host filesystem the daemon's runtime resolves: the pid file and its directories are host facts at absolute paths. */
+    private hostFiles;
+    /**
+     * One supersession check: do the pid file and listening endpoint still belong to
+     * this process? Two consecutive failures are required before exiting so a
+     * transient mid-rewrite read can't kill a healthy daemon.
+     *
+     * @returns true when the daemon should exit (superseded/culled).
+     */
+    tickSupersession(): Promise<boolean>;
+    /**
+     * Stop everything EXCEPT managed processes: timers, config watcher,
+     * daemon modules, the RPC listener. Optionally persist store state and
+     * release the pid file/socket. Shared by exitSuperseded() (never
+     * persists or releases — the incumbent daemon owns that world) and
+     * handleFatalError() (a genuine crash with no incumbent, so state and
+     * the pid file/socket must be released or nothing else ever will).
+     */
+    private teardownWithoutStoppingManagedProcesses;
+    /**
+     * Minimal teardown + exit for a superseded daemon. Deliberately NOT
+     * `stop()`: the incumbent daemon now owns the managed processes (adopted
+     * via the persisted store on its reconcileState), the pid file, and the
+     * socket path. Killing children, saving state, or removing the pid file
+     * here would corrupt the incumbent's world — the exact zombie-vs-incumbent
+     * fight this check exists to end.
+     */
+    private exitSuperseded;
+    /**
+     * Handle an uncaughtException/unhandledRejection: log with the stack,
+     * persist state, release the pid file/socket, and tear down WITHOUT
+     * stopping managed processes. UNIT-013/#325 established that policy for
+     * daemon supersession (exitSuperseded above); a fatal error in this
+     * process is not a reason to take Drew's whole dev stack down with it —
+     * that was the 2026-09-02 incident: an uncaught ENOENT from a preBuild
+     * hook reached daemon.ts's uncaughtException handler, which called the
+     * full `stop()` and killed every managed process. Unlike exitSuperseded,
+     * there is no incumbent here, so state and the pid file/socket ARE
+     * released — nothing else will. It does not end the process; the host
+     * (its fatal-failure behaviour) owns that, so this stays testable.
+     */
+    handleFatalError(reason: 'uncaughtException' | 'unhandledRejection', error: CaughtFailure): Promise<void>;
+    private writePidFile;
+    /**
+     * Remove PID file
+     * Note: Web Locks API automatically releases lock when process exits
+     *
+     * UNIT-020-C: Only remove/truncate the pid file if it contains this process's pid.
+     * When concurrent launchers race, the loser must not corrupt the winner's pid file.
+     */
+    /**
+     * Release the daemon's identity files in the only safe order: the socket
+     * first, then the pid file. removeSocketFile()'s ownership check reads the
+     * pid file, so removing the pid file first left the socket behind and the
+     * next daemon failed to bind it ("Failed to listen at …"). Shared by stop()
+     * and the managed-process-safe teardown.
+     */
+    private releaseIdentityFiles;
+    /** Truncate this daemon's pid file (never another's). A write failure propagates to the caller. */
+    private removePidFile;
+    private removeSocketFile;
+    /**
+     * Ensure ~/.vibes paths exist and are user-writable
+     */
+    private ensurePathPermissions;
+    /**
+     * Get daemon health information
+     * Lightweight check for monitoring and status display
+     *
+     * CRITICAL FIX: If the store is throwing (e.g. SQLite disk I/O error),
+     * return healthy:false so callers know the daemon is alive but sick.
+     * A 200 response with healthy:false lets canConnectToPMSocket() decide
+     * whether to treat the daemon as reachable.
+     */
+    private getHealth;
+    /**
+     * A PID file naming a live process stays; a stale or unparseable one is
+     * removed. Liveness is the host process service's answer; a PID file that
+     * cannot be read or removed, or a process table that cannot be read, fails
+     * the start instead of being overwritten blind.
+     */
+    private cleanupStalePidIfNeeded;
+    /**
+     * Do NOT delete a socket that is actively bound by a running daemon: a
+     * second launcher that races to the same socket must fail fast, not stomp
+     * on the incumbent. The probe answers "no" only for confirmed absence or a
+     * daemon that did not answer (and the socket service refuses to remove an
+     * endpoint that is still listening); a non-socket file at the path, a
+     * permission refusal, or a removal failure fails the start typed.
+     */
+    private cleanupStaleSocketIfNeeded;
+    /**
+     * Run scheduled cleanup of idle and ephemeral processes
+     */
+    private runScheduledCleanup;
+    /**
+     * Rotate `<id>.stdout` / `<id>.stderr` of every running or starting
+     * process that crossed the size threshold, and the daemon's own stdio
+     * logs, through the logging owner under the declared policy (L1).
+     */
+    /** The declared `pm.process-capture` rotation policy, read from the logging config on each sweep. */
+    private captureRotationPolicy;
+    private rotateLiveProcessLogs;
+    /**
+     * Hand the orphan scanner the current registry. `OrphanScannerDeps.configs`
+     * is a plain Map behind a `setConfigs` setter (no live accessor), and the
+     * daemon constructed the scanner without it and never called the setter —
+     * so `enableAdoption: true` matched against an empty Map forever.
+     */
+    private syncOrphanScannerConfigs;
+    /** One orphan-scan tick: refresh configs from the registry, then scan. */
+    private runOrphanScan;
+}
+/**
+ * Check if daemon socket is connectable via HTTP health check.
+ *
+ * Validates the response body to ensure the daemon is not merely alive but
+ * actually healthy (store is operational).  A daemon with a corrupted SQLite
+ * file will respond 200 but with { healthy: false }, so surface-level
+ * `response.ok` is not enough.
+ */
+/**
+ * Get daemon log file contents
+ * Reads from the handed Runtime's output and preserves read failures.
+ */
+export declare function getDaemonLogs(runtime: Parameters<typeof readPMDaemonLogTail>[0], options?: {
+    lines?: number;
+}): Promise<string>;
+/**
+ * Entry point for daemon. `workspaceRoot` is the admitted workspace the serve
+ * body resolved (`pm/admitted-workspace`); the daemon supervises exactly it.
+ */
+declare function main(options: {
+    runtime: VibesRuntime;
+    workspaceRoot: string;
+}): Promise<number>;
+export { main as startDaemon };
+//# sourceMappingURL=daemon.d.ts.map

package/dist/daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,EAKN,mBAAmB,EACnB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,KAAK,EAAgB,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAMhF,OAAO,EAAgC,KAAK,SAAS,EAAoB,MAAM,oBAAoB,CAAC;AAcpG,OAAO,EAQN,KAAK,aAAa,EAElB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,MAAM,qBAAqB,CAAC;AAuB7B,OAAO,EAIN,KAAK,0BAA0B,EAC/B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAEhH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AA6BjG;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CASpH;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACxD,yEAAyE;IACzE,OAAO,EAAE,UAAU,CAAC;IACpB,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,0BAA0B,CAAC;CACnC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAUnC;AA8FD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAWnG;AAKD,KAAK,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7C,qBAAa,QAAQ;IACpB,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,EAAE,CAAkB;IAC5B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,WAAW,CAAC,CAAe;IACnC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,0FAA0F;IAC1F,OAAO,CAAC,OAAO,CAAe;IAC9B,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,gBAAgB,CAAC,CAAW;IACpC,OAAO,CAAC,kBAAkB,CAAC,CAAW;IACtC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAK;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAKvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAGvC,OAAO,CAAC,SAAS,CAAS;IAG1B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,6BAA6B,CAAgC;IACrE,OAAO,CAAC,wBAAwB,CAAC,CAAW;IAC5C,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,SAAS,CAAC,CAAsB;IACxC,sEAAsE;IACtE,OAAO,CAAC,qBAAqB,CAAC,CAAa;IAG3C,OAAO,CAAC,wBAAwB,CAAC,CAAW;IAC5C,OAAO,CAAC,eAAe,CAAC,CAAW;IACnC,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAS;IAIvD,OAAO,CAAC,iBAAiB,CAAC,CAAW;IACrC,OAAO,CAAC,iBAAiB,CAAC,CAAW;IACrC,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IAItD,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,UAAU,CAAS;IAE3B;;;;OAIG;IACH,OAAO,CAAC,IAAI;IAMZ,wFAAwF;YAC1E,OAAO;IAKrB,kGAAkG;IAClG;;;;;OAKG;YACW,iBAAiB;IAe/B,qCAAqC;IACrC,OAAO,CAAC,SAAS;IA2BjB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,aAAa,CAAqD;IAG1E,OAAO,CAAC,eAAe,CAYT;IAGD,cAAc,IAAI,OAAO,CAAC,sBAAsB,CAAC;gBA+FlD,MAAM,EAAE,YAAY;IAoKhC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoO5B;;;;;;;;;;;;OAYG;YACW,kBAAkB;YASlB,oBAAoB;IAsDlC;;;OAGG;YACW,iBAAiB;IAmD/B;;;;;OAKG;YACW,qBAAqB;IA4CnC;;;OAGG;YACW,iBAAiB;IAS/B;;;OAGG;IACH;;;;OAIG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,cAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7E,oHAAoH;YACtG,oBAAoB;IAQlC,wFAAwF;IACxF,IAAI,QAAQ,IAAI,MAAM,CAErB;IAEK,IAAI,CAAC,IAAI,GAAE,cAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;YAmB9C,sBAAsB;IAqGpC;;;OAGG;IACH;;;;;OAKG;YACW,gBAAgB;IAQ9B,iFAAiF;YACnE,OAAO;IAUrB,4HAA4H;IAC5H,OAAO,CAAC,SAAS;IAIjB;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC;IAwB1C;;;;;;;OAOG;YACW,uCAAuC;IAuCrD;;;;;;;OAOG;YACW,cAAc;IAc5B;;;;;;;;;;;;OAYG;IACG,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,oBAAoB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;YAQjG,YAAY;IA0C1B;;;;;;OAMG;IACH;;;;;;OAMG;YACW,oBAAoB;IAiBlC,mGAAmG;YACrF,aAAa;YAab,gBAAgB;IAS9B;;OAEG;YACW,qBAAqB;IAkBnC;;;;;;;;OAQG;YACW,SAAS;IAkDvB;;;;;OAKG;YACW,uBAAuB;IAWrC;;;;;;;OAOG;YACW,0BAA0B;IAcxC;;OAEG;YACW,mBAAmB;IA+DjC;;;;OAIG;IACH,qGAAqG;IACrG,OAAO,CAAC,qBAAqB;YAIf,qBAAqB;IA+BnC;;;;;OAKG;YACW,wBAAwB;IAKtC,0EAA0E;YAC5D,aAAa;CAI3B;AAED;;;;;;;GAOG;AAGH;;;GAGG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAClD,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9B,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED;;;GAGG;AACH,iBAAe,IAAI,CAAC,OAAO,EAAE;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyE9F;AAED,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC"}