fullcourtdefense-cli 1.15.10 → 1.15.11

package/dist/commands/daemon.js

@@ -53,6 +53,7 @@ const COLOR = {
     red: '\x1b[31m', yellow: '\x1b[33m', green: '\x1b[32m', cyan: '\x1b[36m', gray: '\x1b[90m',
 };
 const TASK_NAME = 'FullCourtDefense Daemon';
+const WATCHDOG_TASK_NAME = 'FullCourtDefense Daemon Watchdog';
 const CRON_MARKER = '# FCD_DAEMON';
 const LAUNCHD_LABEL = 'ai.fullcourtdefense.daemon';
 const SYSTEMD_UNIT = 'fullcourtdefense-daemon.service';
@@ -262,6 +263,16 @@ async function runDaemon(args, config) {
         console.log(`${COLOR.yellow}Another FullCourtDefense daemon is already running (pid file: ${pidFile()}).${COLOR.reset}`);
         return;
     }
+    // The resident loop must never die silently from one bad tick (fs watcher
+    // callback, fetch, timer). Log and keep running — the loop is timer-driven,
+    // so surviving a failed tick is safe, and on Windows there is no supervisor
+    // that would restart a crashed process instantly.
+    process.on('uncaughtException', error => {
+        log(`Uncaught exception (daemon continues): ${error?.stack || String(error)}`);
+    });
+    process.on('unhandledRejection', reason => {
+        log(`Unhandled rejection (daemon continues): ${reason?.stack || String(reason)}`);
+    });
     const creds = (0, config_1.resolveCliCredentials)(config, {
         shieldId: args.shieldId,
         shieldKey: args.shieldKey,
@@ -696,12 +707,23 @@ function installWindows() {
         ], { stdio: 'ignore', windowsHide: true });
         ok = reg.status === 0;
     }
+    // Watchdog: logon triggers only START the daemon — nothing restarts it if it
+    // is killed or crashes mid-session. A time-based per-user task (no elevation
+    // needed, unlike ONLOGON) re-launches the daemon every 5 minutes;
+    // acquirePidLock() makes each tick a cheap no-op while the daemon is alive,
+    // and revives it within one tick when it is not. Best-effort: a missing
+    // watchdog never fails the install.
+    (0, child_process_1.spawnSync)('schtasks', [
+        '/Create', '/TN', WATCHDOG_TASK_NAME, '/TR', `wscript.exe "${vbs}"`,
+        '/SC', 'MINUTE', '/MO', '5', '/F',
+    ], { stdio: 'ignore', windowsHide: true });
     if (ok)
         startDaemonNowWindows(vbs, taskOk);
     return ok;
 }
 function uninstallWindows() {
     const task = (0, child_process_1.spawnSync)('schtasks', ['/Delete', '/TN', TASK_NAME, '/F'], { stdio: 'ignore', windowsHide: true });
+    (0, child_process_1.spawnSync)('schtasks', ['/Delete', '/TN', WATCHDOG_TASK_NAME, '/F'], { stdio: 'ignore', windowsHide: true });
     const reg = (0, child_process_1.spawnSync)('reg', ['delete', WINDOWS_RUN_KEY, '/v', WINDOWS_RUN_VALUE, '/f'], { stdio: 'ignore', windowsHide: true });
     const vbs = path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'FullCourtDefense', 'daemon.vbs');
     try {
@@ -790,11 +812,16 @@ WantedBy=default.target
             return true;
     }
     catch { /* fall back to cron */ }
-    // Fallback: cron @reboot for boxes without a systemd user session.
+    // Fallback: cron for boxes without a systemd user session. @reboot starts
+    // the daemon at boot; the 5-min line is the watchdog (pid lock makes each
+    // tick a no-op while the daemon is alive, and revives it after a kill/crash).
     const command = `"${process.execPath}" "${cliEntry()}" daemon >/dev/null 2>&1`;
     const list = (0, child_process_1.spawnSync)('crontab', ['-l'], { encoding: 'utf8' });
     const existing = (list.status === 0 ? (list.stdout || '') : '').split('\n').filter(l => l && !l.includes(CRON_MARKER));
-    const write = (0, child_process_1.spawnSync)('crontab', ['-'], { input: [...existing, `@reboot ${command} ${CRON_MARKER}`].join('\n') + '\n', encoding: 'utf8' });
+    const write = (0, child_process_1.spawnSync)('crontab', ['-'], {
+        input: [...existing, `@reboot ${command} ${CRON_MARKER}`, `*/5 * * * * ${command} ${CRON_MARKER}`].join('\n') + '\n',
+        encoding: 'utf8',
+    });
     return write.status === 0;
 }
 function uninstallLinux() {
@@ -854,6 +881,10 @@ function statusCommand() {
         else {
             console.log('  not installed — run: fullcourtdefense daemon --install true');
         }
+        const watchdog = (0, child_process_1.spawnSync)('schtasks', ['/Query', '/TN', WATCHDOG_TASK_NAME], { stdio: 'ignore', windowsHide: true, timeout: 5_000 });
+        console.log(watchdog.status === 0
+            ? `  Watchdog task "${WATCHDOG_TASK_NAME}" installed — revives a killed daemon within 5 min`
+            : `  ${COLOR.yellow}watchdog not installed${COLOR.reset} — a killed daemon stays down until next logon; re-run: fullcourtdefense daemon --install true`);
     }
     else if (process.platform === 'darwin') {
         console.log(fs.existsSync(launchdPlistPath()) ? `  launchd agent installed (${launchdPlistPath()})` : '  not installed');
@@ -897,7 +928,7 @@ async function daemonCommand(args, config) {
                 : installLinux();
         if (ok) {
             console.log(`${COLOR.green}${COLOR.bold}Daemon autostart installed.${COLOR.reset}`);
-            console.log(`${COLOR.gray}Trigger:${COLOR.reset} ${process.platform === 'win32' ? `at logon (Scheduled Task "${TASK_NAME}")` : process.platform === 'darwin' ? 'launchd (RunAtLoad + KeepAlive)' : 'systemd user unit (or @reboot cron)'}`);
+            console.log(`${COLOR.gray}Trigger:${COLOR.reset} ${process.platform === 'win32' ? `at logon (Scheduled Task "${TASK_NAME}") + 5-min watchdog ("${WATCHDOG_TASK_NAME}") that revives a killed daemon` : process.platform === 'darwin' ? 'launchd (RunAtLoad + KeepAlive)' : 'systemd user unit (or @reboot + 5-min watchdog cron)'}`);
             console.log(`${COLOR.gray}Start now:${COLOR.reset} fullcourtdefense daemon`);
             console.log(`${COLOR.gray}Status:${COLOR.reset} fullcourtdefense daemon --status true`);
             console.log(`${COLOR.gray}Remove:${COLOR.reset} fullcourtdefense daemon --uninstall true`);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.15.10"
+  "version": "1.15.11"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.15.10",
+  "version": "1.15.11",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {