aiden-runtime 4.1.5 → 4.5.0

package/dist/core/v4/daemon/index.js

@@ -0,0 +1,179 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/daemon/index.ts — v4.5 Phase 1: barrel exports for the
+ * daemon foundation.
+ *
+ * Phase 1 ships the foundation; Phases 2-6 add file watcher,
+ * webhook, email, scheduler-migration, integration, default-on.
+ *
+ * Public surface (re-exported here so callers do
+ * `import { ... } from '@/core/v4/daemon'` instead of subpath
+ * imports for the common operations):
+ *
+ *   - configuration + paths
+ *   - SQLite handle + migrations
+ *   - runtime lock + instance tracker
+ *   - clean-shutdown marker + restart-failure counter
+ *   - trigger bus + idempotency store + run store
+ *   - resource registry
+ *   - supervisor + service template generators
+ *   - drain + signal handlers
+ *   - health + metrics endpoint mounter
+ *   - event loop lag sampler
+ *
+ * Side-effect imports (modules that install global state) are NOT
+ * re-exported here — those must be invoked explicitly during
+ * daemon boot.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reconcileFileWatcher = exports.createFileObservationsStore = exports.DEFAULT_FILE_WATCHER_SPEC = exports.parseFileWatcherSpec = exports.createFileWatcher = exports._resetDaemonBootstrapForTests = exports.getDaemonHandle = exports.bootstrapDaemon = exports._resetDaemonSignalHandlersForTests = exports.installDaemonSignalHandlers = exports._resetDrainStateForTests = exports.isDraining = exports.signalToReason = exports.performDrain = exports.windowsServiceGuidance = exports.generateLaunchdPlist = exports.generateSystemdUnit = exports.startSupervisor = exports._resetResourceRegistryForTests = exports.createResourceRegistry = exports.getResourceRegistry = exports.createRunStore = exports.IDEMPOTENCY_DEFAULT_TTL_MS = exports.createIdempotencyStore = exports.DEFAULT_MAX_ATTEMPTS = exports.DEFAULT_CLAIM_LEASE_MS = exports.createTriggerBus = exports.DEFAULT_STUCK_LOOP_THRESHOLD = exports.createRestartFailureCounter = exports.evaluateBootState = exports.consumeCleanShutdownMarker = exports.isCleanShutdown = exports.touchCleanShutdownMarker = exports.createInstanceTracker = exports.DaemonAlreadyRunningError = exports.acquireRuntimeLock = exports.LATEST_SCHEMA_VERSION = exports.runMigrations = exports._closeAllDaemonDbsForTests = exports.closeDaemonDb = exports.openDaemonDb = exports._resetDaemonConfigForTests = exports.getHostname = exports.daemonCleanShutdownMarkerPath = exports.daemonRuntimeLockPath = exports.daemonDbPath = exports.daemonDir = exports.readDaemonConfig = exports.getDaemonConfig = exports.DAEMON_RESTART_EXIT_CODE = void 0;
+exports.evaluateDegraded = exports.mountHealthEndpoints = exports.isEventLoopResponsive = exports.getLastTickAt = exports.getEventLoopLagMs = exports.stopEventLoopLagSampler = exports.startEventLoopLagSampler = exports.BACKOFF_CONSTANTS = exports.nextBackoffMs = exports.createImapConnection = exports.extractEmailBody = exports.createEmailSeenStore = exports.DEFAULT_MAX_SEEN_UIDS = exports.createSeenUids = exports.compileSenderAllowlist = exports.AUTOMATED_HEADERS = exports.NOREPLY_PATTERNS = exports.isAutomatedSender = exports.DEFAULT_IMAP = exports.DEFAULT_EMAIL_SPEC = exports.parseEmailSpec = exports.createEmailTrigger = exports.createWebhookDeliveriesStore = exports.deriveIdempotencyKey = exports.createRateLimiter = exports.deriveEventName = exports.verifyWebhookSignature = exports.INSECURE_NO_AUTH = exports.DEFAULT_WEBHOOK_SPEC = exports.parseWebhookSpec = exports.assertSafeBind = exports.mountWebhookRoutes = exports.computeFileKey = exports.settleStat = exports.DEFAULT_IGNORE_PATTERNS = exports.compileGlobMatcher = void 0;
+var restartCode_1 = require("./restartCode");
+Object.defineProperty(exports, "DAEMON_RESTART_EXIT_CODE", { enumerable: true, get: function () { return restartCode_1.DAEMON_RESTART_EXIT_CODE; } });
+var daemonConfig_1 = require("./daemonConfig");
+Object.defineProperty(exports, "getDaemonConfig", { enumerable: true, get: function () { return daemonConfig_1.getDaemonConfig; } });
+Object.defineProperty(exports, "readDaemonConfig", { enumerable: true, get: function () { return daemonConfig_1.readDaemonConfig; } });
+Object.defineProperty(exports, "daemonDir", { enumerable: true, get: function () { return daemonConfig_1.daemonDir; } });
+Object.defineProperty(exports, "daemonDbPath", { enumerable: true, get: function () { return daemonConfig_1.daemonDbPath; } });
+Object.defineProperty(exports, "daemonRuntimeLockPath", { enumerable: true, get: function () { return daemonConfig_1.daemonRuntimeLockPath; } });
+Object.defineProperty(exports, "daemonCleanShutdownMarkerPath", { enumerable: true, get: function () { return daemonConfig_1.daemonCleanShutdownMarkerPath; } });
+Object.defineProperty(exports, "getHostname", { enumerable: true, get: function () { return daemonConfig_1.getHostname; } });
+Object.defineProperty(exports, "_resetDaemonConfigForTests", { enumerable: true, get: function () { return daemonConfig_1._resetDaemonConfigForTests; } });
+__exportStar(require("./types"), exports);
+var connection_1 = require("./db/connection");
+Object.defineProperty(exports, "openDaemonDb", { enumerable: true, get: function () { return connection_1.openDaemonDb; } });
+Object.defineProperty(exports, "closeDaemonDb", { enumerable: true, get: function () { return connection_1.closeDaemonDb; } });
+Object.defineProperty(exports, "_closeAllDaemonDbsForTests", { enumerable: true, get: function () { return connection_1._closeAllDaemonDbsForTests; } });
+var migrations_1 = require("./db/migrations");
+Object.defineProperty(exports, "runMigrations", { enumerable: true, get: function () { return migrations_1.runMigrations; } });
+Object.defineProperty(exports, "LATEST_SCHEMA_VERSION", { enumerable: true, get: function () { return migrations_1.LATEST_SCHEMA_VERSION; } });
+var runtimeLock_1 = require("./runtimeLock");
+Object.defineProperty(exports, "acquireRuntimeLock", { enumerable: true, get: function () { return runtimeLock_1.acquireRuntimeLock; } });
+Object.defineProperty(exports, "DaemonAlreadyRunningError", { enumerable: true, get: function () { return runtimeLock_1.DaemonAlreadyRunningError; } });
+var instanceTracker_1 = require("./instanceTracker");
+Object.defineProperty(exports, "createInstanceTracker", { enumerable: true, get: function () { return instanceTracker_1.createInstanceTracker; } });
+var cleanShutdown_1 = require("./cleanShutdown");
+Object.defineProperty(exports, "touchCleanShutdownMarker", { enumerable: true, get: function () { return cleanShutdown_1.touchCleanShutdownMarker; } });
+Object.defineProperty(exports, "isCleanShutdown", { enumerable: true, get: function () { return cleanShutdown_1.isCleanShutdown; } });
+Object.defineProperty(exports, "consumeCleanShutdownMarker", { enumerable: true, get: function () { return cleanShutdown_1.consumeCleanShutdownMarker; } });
+Object.defineProperty(exports, "evaluateBootState", { enumerable: true, get: function () { return cleanShutdown_1.evaluateBootState; } });
+var restartFailureCounter_1 = require("./restartFailureCounter");
+Object.defineProperty(exports, "createRestartFailureCounter", { enumerable: true, get: function () { return restartFailureCounter_1.createRestartFailureCounter; } });
+Object.defineProperty(exports, "DEFAULT_STUCK_LOOP_THRESHOLD", { enumerable: true, get: function () { return restartFailureCounter_1.DEFAULT_STUCK_LOOP_THRESHOLD; } });
+var triggerBus_1 = require("./triggerBus");
+Object.defineProperty(exports, "createTriggerBus", { enumerable: true, get: function () { return triggerBus_1.createTriggerBus; } });
+Object.defineProperty(exports, "DEFAULT_CLAIM_LEASE_MS", { enumerable: true, get: function () { return triggerBus_1.DEFAULT_CLAIM_LEASE_MS; } });
+Object.defineProperty(exports, "DEFAULT_MAX_ATTEMPTS", { enumerable: true, get: function () { return triggerBus_1.DEFAULT_MAX_ATTEMPTS; } });
+var idempotencyStore_1 = require("./idempotencyStore");
+Object.defineProperty(exports, "createIdempotencyStore", { enumerable: true, get: function () { return idempotencyStore_1.createIdempotencyStore; } });
+Object.defineProperty(exports, "IDEMPOTENCY_DEFAULT_TTL_MS", { enumerable: true, get: function () { return idempotencyStore_1.DEFAULT_TTL_MS; } });
+var runStore_1 = require("./runStore");
+Object.defineProperty(exports, "createRunStore", { enumerable: true, get: function () { return runStore_1.createRunStore; } });
+var resourceRegistry_1 = require("./resourceRegistry");
+Object.defineProperty(exports, "getResourceRegistry", { enumerable: true, get: function () { return resourceRegistry_1.getResourceRegistry; } });
+Object.defineProperty(exports, "createResourceRegistry", { enumerable: true, get: function () { return resourceRegistry_1.createResourceRegistry; } });
+Object.defineProperty(exports, "_resetResourceRegistryForTests", { enumerable: true, get: function () { return resourceRegistry_1._resetResourceRegistryForTests; } });
+var supervisor_1 = require("./supervisor");
+Object.defineProperty(exports, "startSupervisor", { enumerable: true, get: function () { return supervisor_1.startSupervisor; } });
+Object.defineProperty(exports, "generateSystemdUnit", { enumerable: true, get: function () { return supervisor_1.generateSystemdUnit; } });
+Object.defineProperty(exports, "generateLaunchdPlist", { enumerable: true, get: function () { return supervisor_1.generateLaunchdPlist; } });
+Object.defineProperty(exports, "windowsServiceGuidance", { enumerable: true, get: function () { return supervisor_1.windowsServiceGuidance; } });
+var drain_1 = require("./drain");
+Object.defineProperty(exports, "performDrain", { enumerable: true, get: function () { return drain_1.performDrain; } });
+Object.defineProperty(exports, "signalToReason", { enumerable: true, get: function () { return drain_1.signalToReason; } });
+Object.defineProperty(exports, "isDraining", { enumerable: true, get: function () { return drain_1.isDraining; } });
+Object.defineProperty(exports, "_resetDrainStateForTests", { enumerable: true, get: function () { return drain_1._resetDrainStateForTests; } });
+var signals_1 = require("./signals");
+Object.defineProperty(exports, "installDaemonSignalHandlers", { enumerable: true, get: function () { return signals_1.installDaemonSignalHandlers; } });
+Object.defineProperty(exports, "_resetDaemonSignalHandlersForTests", { enumerable: true, get: function () { return signals_1._resetDaemonSignalHandlersForTests; } });
+var bootstrap_1 = require("./bootstrap");
+Object.defineProperty(exports, "bootstrapDaemon", { enumerable: true, get: function () { return bootstrap_1.bootstrapDaemon; } });
+Object.defineProperty(exports, "getDaemonHandle", { enumerable: true, get: function () { return bootstrap_1.getDaemonHandle; } });
+Object.defineProperty(exports, "_resetDaemonBootstrapForTests", { enumerable: true, get: function () { return bootstrap_1._resetDaemonBootstrapForTests; } });
+// ── v4.5 Phase 2 — file-watcher trigger ──────────────────────────────────
+var fileWatcher_1 = require("./triggers/fileWatcher");
+Object.defineProperty(exports, "createFileWatcher", { enumerable: true, get: function () { return fileWatcher_1.createFileWatcher; } });
+var fileWatcherSpec_1 = require("./triggers/fileWatcherSpec");
+Object.defineProperty(exports, "parseFileWatcherSpec", { enumerable: true, get: function () { return fileWatcherSpec_1.parseFileWatcherSpec; } });
+Object.defineProperty(exports, "DEFAULT_FILE_WATCHER_SPEC", { enumerable: true, get: function () { return fileWatcherSpec_1.DEFAULT_FILE_WATCHER_SPEC; } });
+var fileObservationsStore_1 = require("./triggers/fileObservationsStore");
+Object.defineProperty(exports, "createFileObservationsStore", { enumerable: true, get: function () { return fileObservationsStore_1.createFileObservationsStore; } });
+var reconcile_1 = require("./triggers/reconcile");
+Object.defineProperty(exports, "reconcileFileWatcher", { enumerable: true, get: function () { return reconcile_1.reconcileFileWatcher; } });
+var globMatcher_1 = require("./triggers/globMatcher");
+Object.defineProperty(exports, "compileGlobMatcher", { enumerable: true, get: function () { return globMatcher_1.compileGlobMatcher; } });
+Object.defineProperty(exports, "DEFAULT_IGNORE_PATTERNS", { enumerable: true, get: function () { return globMatcher_1.DEFAULT_IGNORE_PATTERNS; } });
+var settleStat_1 = require("./triggers/settleStat");
+Object.defineProperty(exports, "settleStat", { enumerable: true, get: function () { return settleStat_1.settleStat; } });
+var fsIdentity_1 = require("./triggers/fsIdentity");
+Object.defineProperty(exports, "computeFileKey", { enumerable: true, get: function () { return fsIdentity_1.computeFileKey; } });
+// ── v4.5 Phase 3 — webhook trigger ───────────────────────────────────────
+var webhook_1 = require("./triggers/webhook");
+Object.defineProperty(exports, "mountWebhookRoutes", { enumerable: true, get: function () { return webhook_1.mountWebhookRoutes; } });
+Object.defineProperty(exports, "assertSafeBind", { enumerable: true, get: function () { return webhook_1.assertSafeBind; } });
+var webhookSpec_1 = require("./triggers/webhookSpec");
+Object.defineProperty(exports, "parseWebhookSpec", { enumerable: true, get: function () { return webhookSpec_1.parseWebhookSpec; } });
+Object.defineProperty(exports, "DEFAULT_WEBHOOK_SPEC", { enumerable: true, get: function () { return webhookSpec_1.DEFAULT_WEBHOOK_SPEC; } });
+Object.defineProperty(exports, "INSECURE_NO_AUTH", { enumerable: true, get: function () { return webhookSpec_1.INSECURE_NO_AUTH; } });
+var webhookVerifier_1 = require("./triggers/webhookVerifier");
+Object.defineProperty(exports, "verifyWebhookSignature", { enumerable: true, get: function () { return webhookVerifier_1.verifyWebhookSignature; } });
+Object.defineProperty(exports, "deriveEventName", { enumerable: true, get: function () { return webhookVerifier_1.deriveEventName; } });
+var webhookRateLimit_1 = require("./triggers/webhookRateLimit");
+Object.defineProperty(exports, "createRateLimiter", { enumerable: true, get: function () { return webhookRateLimit_1.createRateLimiter; } });
+var webhookIdempotency_1 = require("./triggers/webhookIdempotency");
+Object.defineProperty(exports, "deriveIdempotencyKey", { enumerable: true, get: function () { return webhookIdempotency_1.deriveIdempotencyKey; } });
+var webhookDeliveriesStore_1 = require("./triggers/webhookDeliveriesStore");
+Object.defineProperty(exports, "createWebhookDeliveriesStore", { enumerable: true, get: function () { return webhookDeliveriesStore_1.createWebhookDeliveriesStore; } });
+// ── v4.5 Phase 4a — email IMAP trigger ───────────────────────────────────
+var email_1 = require("./triggers/email");
+Object.defineProperty(exports, "createEmailTrigger", { enumerable: true, get: function () { return email_1.createEmailTrigger; } });
+var emailSpec_1 = require("./triggers/email/emailSpec");
+Object.defineProperty(exports, "parseEmailSpec", { enumerable: true, get: function () { return emailSpec_1.parseEmailSpec; } });
+Object.defineProperty(exports, "DEFAULT_EMAIL_SPEC", { enumerable: true, get: function () { return emailSpec_1.DEFAULT_EMAIL_SPEC; } });
+Object.defineProperty(exports, "DEFAULT_IMAP", { enumerable: true, get: function () { return emailSpec_1.DEFAULT_IMAP; } });
+var automatedSender_1 = require("./triggers/email/automatedSender");
+Object.defineProperty(exports, "isAutomatedSender", { enumerable: true, get: function () { return automatedSender_1.isAutomatedSender; } });
+Object.defineProperty(exports, "NOREPLY_PATTERNS", { enumerable: true, get: function () { return automatedSender_1.NOREPLY_PATTERNS; } });
+Object.defineProperty(exports, "AUTOMATED_HEADERS", { enumerable: true, get: function () { return automatedSender_1.AUTOMATED_HEADERS; } });
+var allowlist_1 = require("./triggers/email/allowlist");
+Object.defineProperty(exports, "compileSenderAllowlist", { enumerable: true, get: function () { return allowlist_1.compileSenderAllowlist; } });
+var seenUids_1 = require("./triggers/email/seenUids");
+Object.defineProperty(exports, "createSeenUids", { enumerable: true, get: function () { return seenUids_1.createSeenUids; } });
+Object.defineProperty(exports, "DEFAULT_MAX_SEEN_UIDS", { enumerable: true, get: function () { return seenUids_1.DEFAULT_MAX_SEEN_UIDS; } });
+var emailSeenStore_1 = require("./triggers/email/emailSeenStore");
+Object.defineProperty(exports, "createEmailSeenStore", { enumerable: true, get: function () { return emailSeenStore_1.createEmailSeenStore; } });
+var bodyExtractor_1 = require("./triggers/email/bodyExtractor");
+Object.defineProperty(exports, "extractEmailBody", { enumerable: true, get: function () { return bodyExtractor_1.extractEmailBody; } });
+var imapConnection_1 = require("./triggers/email/imapConnection");
+Object.defineProperty(exports, "createImapConnection", { enumerable: true, get: function () { return imapConnection_1.createImapConnection; } });
+Object.defineProperty(exports, "nextBackoffMs", { enumerable: true, get: function () { return imapConnection_1.nextBackoffMs; } });
+Object.defineProperty(exports, "BACKOFF_CONSTANTS", { enumerable: true, get: function () { return imapConnection_1.BACKOFF_CONSTANTS; } });
+var eventLoopLag_1 = require("./eventLoopLag");
+Object.defineProperty(exports, "startEventLoopLagSampler", { enumerable: true, get: function () { return eventLoopLag_1.startEventLoopLagSampler; } });
+Object.defineProperty(exports, "stopEventLoopLagSampler", { enumerable: true, get: function () { return eventLoopLag_1.stopEventLoopLagSampler; } });
+Object.defineProperty(exports, "getEventLoopLagMs", { enumerable: true, get: function () { return eventLoopLag_1.getEventLoopLagMs; } });
+Object.defineProperty(exports, "getLastTickAt", { enumerable: true, get: function () { return eventLoopLag_1.getLastTickAt; } });
+Object.defineProperty(exports, "isEventLoopResponsive", { enumerable: true, get: function () { return eventLoopLag_1.isEventLoopResponsive; } });
+var health_1 = require("./health");
+Object.defineProperty(exports, "mountHealthEndpoints", { enumerable: true, get: function () { return health_1.mountHealthEndpoints; } });
+Object.defineProperty(exports, "evaluateDegraded", { enumerable: true, get: function () { return health_1.evaluateDegraded; } });

package/dist/core/v4/daemon/instanceTracker.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/daemon/instanceTracker.ts — v4.5 Phase 1: daemon_instances writer.
+ *
+ * Writes the current process's identity into the `daemon_instances`
+ * table, updates `last_heartbeat` every 5s, and marks `shutdown_at`
+ * + `shutdown_reason` + `exit_code` on graceful exit.
+ *
+ * Crash detection — a row whose `shutdown_at IS NULL` and whose
+ * `last_heartbeat` is older than 30s on the NEXT daemon's boot is a
+ * crash candidate. `cleanShutdown.ts` evaluates this on boot.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createInstanceTracker = createInstanceTracker;
+const node_crypto_1 = require("node:crypto");
+const daemonConfig_1 = require("./daemonConfig");
+const HEARTBEAT_INTERVAL_MS = 5000;
+function rowToTs(r) {
+    return {
+        instanceId: r.instance_id,
+        pid: r.pid,
+        hostname: r.hostname,
+        startedAt: r.started_at,
+        lastHeartbeat: r.last_heartbeat,
+        shutdownAt: r.shutdown_at,
+        shutdownReason: r.shutdown_reason,
+        exitCode: r.exit_code,
+        version: r.version,
+    };
+}
+function createInstanceTracker(opts) {
+    const instanceId = opts.instanceId ?? (0, node_crypto_1.randomUUID)();
+    const pid = opts.pid ?? process.pid;
+    const hostname = (0, daemonConfig_1.getHostname)();
+    const startedAt = Date.now();
+    const heartbeatIntervalMs = opts.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
+    opts.db
+        .prepare(`INSERT INTO daemon_instances
+        (instance_id, pid, hostname, started_at, last_heartbeat, version)
+       VALUES (?, ?, ?, ?, ?, ?)`)
+        .run(instanceId, pid, hostname, startedAt, startedAt, opts.version);
+    let timer = null;
+    const beat = () => {
+        try {
+            opts.db
+                .prepare('UPDATE daemon_instances SET last_heartbeat = ? WHERE instance_id = ?')
+                .run(Date.now(), instanceId);
+        }
+        catch { /* never crash the daemon on a heartbeat write failure */ }
+    };
+    return {
+        instanceId,
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(beat, heartbeatIntervalMs);
+            if (typeof timer.unref === 'function')
+                timer.unref();
+        },
+        stop() {
+            if (!timer)
+                return;
+            clearInterval(timer);
+            timer = null;
+        },
+        markShuttingDown(reason) {
+            try {
+                opts.db
+                    .prepare('UPDATE daemon_instances SET shutdown_reason = ? WHERE instance_id = ?')
+                    .run(reason, instanceId);
+            }
+            catch { /* best-effort */ }
+        },
+        markShutdown(reason, exitCode) {
+            try {
+                opts.db
+                    .prepare(`UPDATE daemon_instances
+                SET shutdown_at     = ?,
+                    shutdown_reason = ?,
+                    exit_code       = ?
+              WHERE instance_id = ?`)
+                    .run(Date.now(), reason, exitCode, instanceId);
+            }
+            catch { /* best-effort */ }
+        },
+        current() {
+            const r = opts.db
+                .prepare('SELECT * FROM daemon_instances WHERE instance_id = ?')
+                .get(instanceId);
+            return r ? rowToTs(r) : null;
+        },
+    };
+}

package/dist/core/v4/daemon/resourceRegistry.js

@@ -0,0 +1,150 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/daemon/resourceRegistry.ts — v4.5 Phase 1: unified resource ledger.
+ *
+ * Single registry for every long-lived resource the daemon owns:
+ *   - Playwright browser contexts (v4.3)
+ *   - Docker session containers (v4.4)
+ *   - HTTP keepalive agents
+ *   - chokidar file watchers (Phase 2)
+ *   - Subprocesses spawned by tools
+ *   - IMAP connections (Phase 4)
+ *   - SQLite handles
+ *   - Webhook subrouters (Phase 3)
+ *
+ * Each resource carries:
+ *   - kind (typed enum)
+ *   - owner (sessionId | instanceId | 'global')
+ *   - lifecycle timestamps
+ *   - optional ttlMs for soft-reaping idle resources
+ *   - optional budgetUnits for budget-based eviction
+ *   - close(): an idempotent disposer
+ *
+ * The shutdown drain (`drain.ts` step 4) calls `reapAll()` to close
+ * everything with a per-item timeout. A periodic 60s sweep calls
+ * `sweep()` to close TTL-exceeded resources during normal operation.
+ *
+ * Diagnostic surface: `GET /api/daemon/resources` returns `list()` +
+ * `budgetByKind()` as JSON.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createResourceRegistry = createResourceRegistry;
+exports.getResourceRegistry = getResourceRegistry;
+exports._resetResourceRegistryForTests = _resetResourceRegistryForTests;
+const node_crypto_1 = require("node:crypto");
+const _resources = new Map();
+function withTimeout(p, ms) {
+    return new Promise((resolve, reject) => {
+        const t = setTimeout(() => reject(new Error(`resource close timed out after ${ms}ms`)), ms);
+        p.then((v) => { clearTimeout(t); resolve(v); }, (e) => { clearTimeout(t); reject(e); });
+    });
+}
+async function safeClose(r, perItemTimeoutMs) {
+    try {
+        const result = r.close();
+        if (result && typeof result.then === 'function') {
+            await withTimeout(result, perItemTimeoutMs);
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function createResourceRegistry() {
+    return {
+        register(r) {
+            const id = r.id ?? (0, node_crypto_1.randomUUID)();
+            const now = Date.now();
+            _resources.set(id, {
+                id,
+                kind: r.kind,
+                owner: r.owner,
+                createdAt: now,
+                lastUsedAt: now,
+                ttlMs: r.ttlMs,
+                budgetUnits: r.budgetUnits,
+                metadata: r.metadata,
+                close: r.close,
+            });
+            return id;
+        },
+        touch(id) {
+            const r = _resources.get(id);
+            if (r)
+                r.lastUsedAt = Date.now();
+        },
+        async release(id) {
+            const r = _resources.get(id);
+            if (!r)
+                return;
+            _resources.delete(id);
+            await safeClose(r, 5000);
+        },
+        list(filter) {
+            const out = [];
+            for (const r of _resources.values()) {
+                if (filter?.kind && r.kind !== filter.kind)
+                    continue;
+                if (filter?.owner && r.owner !== filter.owner)
+                    continue;
+                out.push(r);
+            }
+            return out;
+        },
+        async sweep(now) {
+            const cutoff = now ?? Date.now();
+            const candidates = [];
+            for (const r of _resources.values()) {
+                if (r.ttlMs && cutoff - r.lastUsedAt > r.ttlMs)
+                    candidates.push(r);
+            }
+            // Pull them out of the registry first so concurrent touches
+            // don't extend their lifetime mid-close.
+            for (const c of candidates)
+                _resources.delete(c.id);
+            const settled = await Promise.allSettled(candidates.map((c) => safeClose(c, 3000)));
+            return { reaped: settled.filter((s) => s.status === 'fulfilled' && s.value === true).length };
+        },
+        async reapAll(perItemTimeoutMs = 3000) {
+            const all = [..._resources.values()];
+            _resources.clear();
+            const settled = await Promise.allSettled(all.map((r) => safeClose(r, perItemTimeoutMs)));
+            let reaped = 0;
+            let failed = 0;
+            for (const s of settled) {
+                if (s.status === 'fulfilled' && s.value === true)
+                    reaped++;
+                else
+                    failed++;
+            }
+            return { reaped, failed };
+        },
+        budgetByKind() {
+            const out = {};
+            for (const r of _resources.values()) {
+                const slot = out[r.kind] ?? (out[r.kind] = { count: 0, budgetUnits: 0 });
+                slot.count += 1;
+                slot.budgetUnits += r.budgetUnits ?? 0;
+            }
+            return out;
+        },
+    };
+}
+// ── Process-scope singleton ────────────────────────────────────────────────
+let _singleton = null;
+function getResourceRegistry() {
+    if (!_singleton)
+        _singleton = createResourceRegistry();
+    return _singleton;
+}
+function _resetResourceRegistryForTests() {
+    _singleton = null;
+    _resources.clear();
+}

package/dist/core/v4/daemon/restartCode.js

@@ -0,0 +1,32 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/daemon/restartCode.ts — v4.5 Phase 1: graceful-restart exit code.
+ *
+ * Single source of truth. THREE consumers must use the same value:
+ *   1. The in-process drain handler (`drain.ts`) — passes this to
+ *      `process.exit()` when the daemon is reloading via SIGUSR1.
+ *   2. The systemd unit (`templates/systemd.service.template`) —
+ *      `RestartForceExitStatus=75` triggers an immediate respawn
+ *      regardless of `Restart=` mode.
+ *   3. The launchd plist (`templates/launchd.plist.template`) —
+ *      uses `KeepAlive.SuccessfulExit=false` which is launchd's
+ *      analog (any non-zero exit triggers respawn; exit 0 does not).
+ *
+ * Value 75 == sysexits.h `EX_TEMPFAIL` — semantically "service
+ * unavailable, retry later", matching what a service supervisor
+ * should do.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DAEMON_RESTART_EXIT_CODE = void 0;
+/**
+ * Exit code used by `aiden daemon restart` and the SIGUSR1 handler
+ * to signal "respawn me, graceful restart" to systemd / launchd /
+ * the internal supervisor.
+ */
+exports.DAEMON_RESTART_EXIT_CODE = 75;

package/dist/core/v4/daemon/restartFailureCounter.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/daemon/restartFailureCounter.ts — v4.5 Phase 1.
+ *
+ * Per-session stuck-loop guard. Each time a daemon crashes mid-turn
+ * for a given session, `incrementForSession(sessionId)` bumps the
+ * counter. When the counter reaches the configured threshold (default
+ * 3, configurable via AIDEN_DAEMON_RESTART_FAILURE_THRESHOLD), the
+ * session is auto-suspended: future restarts will refuse to resume it
+ * until the user explicitly sends a new message (which calls
+ * `resetForSession`).
+ *
+ * Counter resets to 0 when a turn completes successfully or when the
+ * user sends a new message.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_STUCK_LOOP_THRESHOLD = void 0;
+exports.createRestartFailureCounter = createRestartFailureCounter;
+exports.DEFAULT_STUCK_LOOP_THRESHOLD = 3;
+function createRestartFailureCounter(opts) {
+    const threshold = opts.threshold ?? exports.DEFAULT_STUCK_LOOP_THRESHOLD;
+    const db = opts.db;
+    return {
+        incrementForSession(sessionId) {
+            const now = Date.now();
+            const tx = db.transaction(() => {
+                const row = db
+                    .prepare('SELECT count, auto_suspended FROM restart_failure_counts WHERE session_id = ?')
+                    .get(sessionId);
+                const newCount = (row?.count ?? 0) + 1;
+                const autoSuspended = newCount >= threshold;
+                if (row) {
+                    db.prepare(`UPDATE restart_failure_counts
+                SET count          = ?,
+                    last_failure   = ?,
+                    auto_suspended = ?
+              WHERE session_id = ?`).run(newCount, now, autoSuspended ? 1 : 0, sessionId);
+                }
+                else {
+                    db.prepare(`INSERT INTO restart_failure_counts
+               (session_id, count, last_failure, auto_suspended)
+             VALUES (?, ?, ?, ?)`).run(sessionId, newCount, now, autoSuspended ? 1 : 0);
+                }
+                return { newCount, autoSuspended };
+            });
+            return tx();
+        },
+        resetForSession(sessionId) {
+            db.prepare('DELETE FROM restart_failure_counts WHERE session_id = ?').run(sessionId);
+        },
+        isAutoSuspended(sessionId) {
+            const row = db
+                .prepare('SELECT auto_suspended FROM restart_failure_counts WHERE session_id = ?')
+                .get(sessionId);
+            return row?.auto_suspended === 1;
+        },
+        listSuspended() {
+            const rows = db
+                .prepare(`SELECT session_id, count, last_failure
+             FROM restart_failure_counts
+            WHERE auto_suspended = 1
+            ORDER BY last_failure DESC`)
+                .all();
+            return rows.map((r) => ({
+                sessionId: r.session_id,
+                count: r.count,
+                lastFailure: r.last_failure,
+            }));
+        },
+    };
+}

package/dist/core/v4/daemon/runStore.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/daemon/runStore.ts — v4.5 Phase 1: runs + run_events writers.
+ *
+ * Daemon-fired runs are persisted in `runs` (one row per turn) with
+ * a stream of `run_events` rows for per-event detail (tool calls,
+ * verifications, classifications, recovery actions, log lines).
+ *
+ * CLI-fired turns continue using in-memory trace structures — zero
+ * overhead for interactive use. The daemon path opts in by creating
+ * a run row + emitting events.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRunStore = createRunStore;
+function rowToTs(r) {
+    return {
+        id: r.id,
+        triggerEventId: r.trigger_event_id,
+        sessionId: r.session_id,
+        instanceId: r.instance_id,
+        status: r.status,
+        finishReason: r.finish_reason,
+        startedAt: r.started_at,
+        completedAt: r.completed_at,
+        resumePending: r.resume_pending === 1,
+        resumeReason: r.resume_reason,
+    };
+}
+function createRunStore(opts) {
+    const db = opts.db;
+    return {
+        create({ sessionId, instanceId, triggerEventId, status, startedAt }) {
+            const now = startedAt ?? Date.now();
+            const r = db.prepare(`INSERT INTO runs
+           (trigger_event_id, session_id, instance_id, status, started_at,
+            resume_pending)
+         VALUES (?, ?, ?, ?, ?, 0)`).run(triggerEventId ?? null, sessionId, instanceId, status ?? 'queued', now);
+            return Number(r.lastInsertRowid);
+        },
+        setStatus(runId, status, opts2 = {}) {
+            const completedAt = opts2.completedAt
+                ?? (status === 'completed' || status === 'failed' || status === 'cancelled' || status === 'interrupted'
+                    ? Date.now()
+                    : null);
+            db.prepare(`UPDATE runs
+            SET status        = ?,
+                finish_reason = COALESCE(?, finish_reason),
+                completed_at  = COALESCE(?, completed_at)
+          WHERE id = ?`).run(status, opts2.finishReason ?? null, completedAt, runId);
+        },
+        markResumePending(runId, reason) {
+            db.prepare(`UPDATE runs SET resume_pending = 1, resume_reason = ? WHERE id = ?`).run(reason, runId);
+        },
+        emitEvent(runId, kind, payload) {
+            const json = JSON.stringify(payload).slice(0, 4096);
+            db.prepare(`INSERT INTO run_events (run_id, ts, kind, payload) VALUES (?, ?, ?, ?)`).run(runId, Date.now(), kind, json);
+        },
+        listActive() {
+            const rows = db
+                .prepare(`SELECT * FROM runs WHERE status IN ('queued','running')`)
+                .all();
+            return rows.map(rowToTs);
+        },
+        get(runId) {
+            const r = db
+                .prepare('SELECT * FROM runs WHERE id = ?')
+                .get(runId);
+            return r ? rowToTs(r) : null;
+        },
+        countEvents(runId) {
+            const r = db
+                .prepare('SELECT COUNT(*) AS c FROM run_events WHERE run_id = ?')
+                .get(runId);
+            return r.c;
+        },
+        listRecent(opts2 = {}) {
+            const limit = Math.max(1, Math.min(opts2.limit ?? 50, 1000));
+            const whereParts = [];
+            const params = [];
+            if (opts2.status) {
+                whereParts.push('r.status = ?');
+                params.push(opts2.status);
+            }
+            if (opts2.source) {
+                whereParts.push('te.source = ?');
+                params.push(opts2.source);
+            }
+            if (opts2.sessionIdPrefix) {
+                whereParts.push('r.session_id LIKE ?');
+                params.push(`${opts2.sessionIdPrefix}%`);
+            }
+            const where = whereParts.length > 0 ? `WHERE ${whereParts.join(' AND ')}` : '';
+            const sql = `
+        SELECT r.* FROM runs r
+        LEFT JOIN trigger_events te ON r.trigger_event_id = te.id
+        ${where}
+        ORDER BY r.started_at DESC
+        LIMIT ?`;
+            params.push(limit);
+            const rows = db.prepare(sql).all(...params);
+            return rows.map(rowToTs);
+        },
+        listEvents(runId, limit = 200) {
+            const rows = db.prepare(`SELECT ts, kind, payload FROM run_events WHERE run_id = ? ORDER BY ts ASC LIMIT ?`).all(runId, Math.max(1, Math.min(limit, 5000)));
+            return rows;
+        },
+    };
+}