pi-freeflow 1.9.1 → 1.9.4

package/CHANGELOG.md

@@ -2,6 +2,43 @@
 
 All notable changes to pi-freeflow. Public, user-visible behavior only.
 
+## 1.9.4 - 2026-09-02
+
+### Dependencies
+- **Zero runtime dependencies.** Removed `undici@8.10.0` — `pi` (`0.84.4`) and `omp` (`18.1.3`) already bundle `undici` 6.x/7.x and expose `global fetch` with keep-alive pooling. `relayFetch` and proxy now use `global fetch` directly (`src/relay.ts` `Agent` + `canUseCustomDispatcher` + `dispatcher: agent` removed; `src/proxy.ts` dispatcher removed). Keeps thin `11.3k` + `298 tests` + `0 deps` compatible directly with `reference/pi` + `reference/oh-my-pi`.
+
+### Validation
+- `npx tsc --noEmit` clean, `npm test 298/298` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
+
+## 1.9.3 - 2026-09-02
+
+### Fixes
+- **Windows console flood fixed.** Two Windows-only helpers flashed a visible `conhost`/`cmd` window on every daemon probe: `netstat -ano | findstr :28180` / `taskkill` in the stale-daemon replace path and `spawn(omp|npm, shell:true)` for `/freeflow update`. Both now use `windowsHide: true` (no-op on Linux/macOS) and `spawnWithProgress` was refactored to `Promise.withResolvers` to satisfy `ts-promise-with-resolvers`. Idle `pi` no longer spawns many visible consoles even after closing the terminal (detached daemon at `127.0.0.1:28180` survives by design; `beatOnce` 10s heartbeat now throttled 2s via `lastSpawnAt`).
+- Daemon spawn now throttled per-process (2s) as a storm guard when `28180` is contended or blocked; the `ensuring` guard + `waitForReady 5s` already prevented tight loops.
+
+### Validation
+- `npx tsc --noEmit` clean, `npm test 279/279` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
+- Reporter `LOYINuts` issue #3 (`pi idle creates many sessions → force reboot`) — `grep -r rtk src` ∅ confirms `rtk` is an external global skill (`~/.agents/skills/rtk` → `Command::new("cmd")` without `CREATE_NO_WINDOW`), not `pi-freeflow`. After this fix, closing the terminal no longer leaves flashing zombies; kill via `netstat -ano | findstr :28180` → `taskkill /F /PID` or `/freeflow kill`.
+
+## 1.9.2 - 2026-08-31
+
+### Fixes
+- **Closing one session no longer stops the shared local proxy.** The proxy daemon
+  is now a fully detached background process: it outlives any single OMP/Pi session
+  (previously, closing the session that owned the daemon could shut it down even
+  while other sessions were still using it). It retires by itself only when no
+  session is connected, no request is in flight, and it has been idle for a grace
+  period. The next use starts it again automatically.
+- New command: `/freeflow kill` (aliases `stop`, `shutdown`) stops the background
+  daemon on demand. The next freeflow use restarts it.
+
+### Improvements
+- The proxy tracks connected sessions and last request time; `/freeflow status`
+  and the health endpoint now report active session leases, so you can see when
+  other sessions are keeping the daemon alive.
+- Docs: the command reference now lists `kill`, and the FAQ explains the shared
+  daemon lifecycle (survives session close; self-retires when unused).
+
 ## 1.9.1 - 2026-08-30
 
 ### Fixes

package/README.md

@@ -117,6 +117,7 @@ Manage your relay pool directly from the OMP / Pi terminal:
 /freeflow refresh                 # Reload the model catalog from live upstreams
 /freeflow update                  # Check for and install a package update
 /freeflow debug on | off          # Toggle full HTTP lifecycle debug logging
+/freeflow kill                    # Stop the shared proxy daemon now (restarts on next use)
 ```
 
 ---
@@ -260,7 +261,7 @@ Log rotation at 10MB. Clean, parseable, real-time HTTP lifecycle tracking.
 
 ### Design
 
-This package stays thin. It ships three things: a model catalog, a relay proxy, and a log. There is no build step. The only runtime dependency is `undici`, which powers the upstream fetch agent. Thinking and prompt normalization stay with the host (`pi-ai`).
+This package stays thin. It ships three things: a model catalog, a relay proxy, and a log. There is no build step. Zero runtime dependencies — uses native Node.js global fetch. Thinking and prompt normalization stay with the host (`pi-ai`).
 
 Current size: about 11.3k lines including tests. The full suite (sandboxed, mocked network) and typecheck pass before every release — see CHANGELOG.md.
 
@@ -286,6 +287,13 @@ with a log note instead). If a daemon cannot be replaced (e.g. port held by an u
 it falls back to reusing it with a warning. To disable replacement entirely, set the no-kill env
 to `1` before starting a session.
 
+**What happens when I close a session?**
+Nothing visible to your other sessions. The proxy daemon is a separate background
+process shared by every OMP/Pi session on the machine. Closing one session just
+unregisters it; the daemon keeps serving the rest and retires itself automatically
+once the last client disconnects and it has been idle for a short grace period.
+To stop it manually, run `/freeflow kill` — the next freeflow use starts it again.
+
 **Where's the normalizer?**
 Deleted in 1.3.0. If zai/qwen/deepseek thinking broke before, it's fixed now because host handles it.
 
@@ -353,7 +361,7 @@ test/
 
 #### Guidelines
 
-- **Stay thin.** One runtime dependency (`undici`), no build step. If it belongs in the host (`pi-ai`), don't add it here.
+- **Stay thin.** Zero runtime dependencies, no build step. If it belongs in the host (`pi-ai`), don't add it here.
 - **Test what you touch.** Every `src/*.ts` has a matching `test/*.test.ts`. Add or update tests for your change.
 - **Keep model IDs clean.** Slash-free, colon-free aliases for CLI compatibility. See existing patterns in `models.ts`.
 - **One concern per PR.** Bug fix? One PR. New relay platform? Separate PR. Easier to review, faster to merge.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-freeflow",
   "type": "module",
-  "version": "1.9.1",
+  "version": "1.9.4",
   "description": "Thin provider for OMP/Pi — model list + dumb relay proxy + log; host pi-ai owns thinking/normalization",
   "main": "extensions/index.ts",
   "types": "src/index.ts",
@@ -57,7 +57,5 @@
     "typescript": "^5.8.2",
     "vitepress": "^1.6.4"
   },
-  "dependencies": {
-    "undici": "^8.10.0"
-  }
+  "dependencies": {}
 }

package/src/client.ts

@@ -0,0 +1,323 @@
+/**
+ * Client-side daemon lifecycle for pi-freeflow.
+ *
+ * Every OMP/Pi session is a client. It attaches to the shared detached daemon
+ * at 127.0.0.1:28180 (or spawns one if none is alive), registers a lease, and
+ * renews it with a heartbeat while the session lives. When the session ends
+ * the heartbeat stops; the daemon drops the lease after its TTL and retires
+ * once no client holds a live lease and no request has been proxied recently.
+ */
+
+import { randomUUID } from "node:crypto";
+import { spawn } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import type * as http from "node:http";
+import {
+	DAEMON_HEARTBEAT_MS,
+	DAEMON_HEARTBEAT_MS_ENV,
+	DAEMON_READY_TIMEOUT_MS,
+	DAEMON_SPAWN_ENV,
+	HOST,
+	LEGACY_PORT,
+	NO_KILL_ENV,
+	PKG_VERSION,
+	PORT,
+} from "./config.ts";
+import { logInfo, logWarn } from "./logger.ts";
+import {
+	getDaemonHealth,
+	getDaemonVersion,
+	isProxyAlive,
+	killPortHolder,
+	startProxy,
+} from "./proxy.ts";
+import { compareVersions } from "./update-checker.ts";
+
+const CLIENT_ID = randomUUID();
+
+let attachedPort = 0;
+let heartbeatTimer: ReturnType<typeof setInterval> | null = null;
+let heartbeatPort = 0;
+let ensuring = false;
+let fallbackServer: http.Server | null = null;
+
+function isBunRuntime(): boolean {
+	return typeof (process.versions as unknown as Record<string, string>).bun === "string";
+}
+
+function daemonScriptPath(): string {
+	return path.join(path.dirname(fileURLToPath(import.meta.url)), "daemon.ts");
+}
+
+function getHeartbeatMs(): number {
+	const raw = process.env[DAEMON_HEARTBEAT_MS_ENV];
+	if (raw) {
+		const parsed = Number(raw);
+		if (Number.isFinite(parsed) && parsed > 0) return parsed;
+	}
+	return DAEMON_HEARTBEAT_MS;
+}
+
+function isSpawnEnabled(): boolean {
+	return process.env[DAEMON_SPAWN_ENV] !== "0";
+}
+
+type ControlResult = "ok" | "legacy" | "gone";
+
+async function controlCall(
+	port: number,
+	endpoint: string,
+	payload: Record<string, string>,
+): Promise<ControlResult> {
+	try {
+		const res = await fetch(`http://${HOST}:${port}${endpoint}`, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(payload),
+			signal: AbortSignal.timeout(1500),
+		});
+		return res.ok ? "ok" : "legacy";
+	} catch {
+		return "gone";
+	}
+}
+
+function startHeartbeat(port: number): void {
+	stopHeartbeatInternal();
+	heartbeatPort = port;
+	const ms = getHeartbeatMs();
+	heartbeatTimer = setInterval(() => {
+		void beatOnce(port);
+	}, ms);
+	try {
+		heartbeatTimer.unref();
+	} catch {}
+}
+
+function stopHeartbeatInternal(): void {
+	if (heartbeatTimer !== null) {
+		clearInterval(heartbeatTimer);
+		heartbeatTimer = null;
+	}
+}
+
+export function stopHeartbeat(): void {
+	const port = heartbeatPort;
+	stopHeartbeatInternal();
+	heartbeatPort = 0;
+	if (port) {
+		void controlCall(port, "/_client/detach", { id: CLIENT_ID });
+	}
+	if (fallbackServer) {
+		try {
+			fallbackServer.close();
+		} catch {}
+		fallbackServer = null;
+	}
+}
+
+async function beatOnce(port: number): Promise<void> {
+	if (ensuring) return;
+	const result = await controlCall(port, "/_client/heartbeat", { id: CLIENT_ID });
+	if (result === "gone") {
+		void ensureDaemon();
+	}
+}
+
+async function attachTo(port: number): Promise<void> {
+	attachedPort = port;
+	const result = await controlCall(port, "/_client/attach", { id: CLIENT_ID });
+	if (result === "gone") {
+		return;
+	}
+	startHeartbeat(port);
+}
+
+async function shouldReplaceDaemon(port: number, remoteVer: string): Promise<boolean> {
+	if (NO_KILL_ENV && process.env[NO_KILL_ENV] === "1") {
+		logInfo(
+			`Reusing existing pi-freeflow proxy daemon on http://${HOST}:${port} (replacement disabled by env)`,
+		);
+		return false;
+	}
+	if (compareVersions(remoteVer, PKG_VERSION) > 0) {
+		logInfo(
+			`Reusing existing pi-freeflow proxy daemon on http://${HOST}:${port} (newer daemon v${remoteVer} left running)`,
+		);
+		return false;
+	}
+	const health = await getDaemonHealth(port);
+	if (health === null || health.activeRequests === undefined) {
+		logInfo(
+			`Reusing existing pi-freeflow proxy daemon on http://${HOST}:${port} (cannot verify usage — leaving the running daemon untouched)`,
+		);
+		return false;
+	}
+	if (health.activeRequests > 0) {
+		logInfo(
+			`Reusing existing pi-freeflow proxy daemon on http://${HOST}:${port} (${health.activeRequests} active request${health.activeRequests === 1 ? "" : "s"} — not interrupted)`,
+		);
+		return false;
+	}
+	return true;
+}
+
+async function killStaleDaemon(
+	port: number,
+	remoteVer: string,
+	what: string,
+): Promise<boolean> {
+	if (!(await shouldReplaceDaemon(port, remoteVer))) return false;
+	logWarn(`stale ${what} v${remoteVer} on :${port} (need v${PKG_VERSION}) — replacing`, {
+		remoteVer,
+		expected: PKG_VERSION,
+	});
+	await killPortHolder(port);
+	for (let i = 0; i < 10; i++) {
+		await new Promise<void>((r) => setTimeout(r, 200));
+		if (!(await isProxyAlive(port))) return true;
+	}
+	logInfo(
+		`Reusing existing pi-freeflow proxy daemon on http://${HOST}:${port} (stale kill did not free port)`,
+	);
+	return false;
+}
+
+let lastSpawnAt = 0;
+const SPAWN_THROTTLE_MS = 2_000;
+
+function spawnDaemonProcess(): void {
+	const now = Date.now();
+	if (now - lastSpawnAt < SPAWN_THROTTLE_MS) {
+		logWarn("daemon spawn throttled — recent spawn still pending");
+		return;
+	}
+	lastSpawnAt = now;
+	const script = daemonScriptPath();
+	const args = isBunRuntime() ? [script] : ["--experimental-strip-types", script];
+	try {
+		const child = spawn(process.execPath, args, {
+			detached: true,
+			stdio: "ignore",
+			windowsHide: true,
+		});
+		child.unref();
+		child.on("error", (err) => {
+			logWarn("daemon spawn failed", { error: String(err) });
+		});
+	} catch (e) {
+		logWarn("daemon spawn failed", { error: String(e) });
+	}
+}
+
+async function waitForReady(port: number, timeoutMs: number): Promise<boolean> {
+	const deadline = Date.now() + timeoutMs;
+	while (Date.now() < deadline) {
+		if (await isProxyAlive(port)) return true;
+		await new Promise<void>((r) => setTimeout(r, 200));
+	}
+	return false;
+}
+
+async function probeAndMaybeReplace(
+	port: number,
+	label: string,
+): Promise<number | null> {
+	if (!(await isProxyAlive(port))) return null;
+	const ver = await getDaemonVersion(port);
+	if (ver !== null && ver !== PKG_VERSION) {
+		if (await killStaleDaemon(port, ver, label)) {
+			return null;
+		}
+		if (await isProxyAlive(port)) return port;
+		return null;
+	}
+	return port;
+}
+
+/**
+ * Ensure a proxy daemon is running and attach this client to it.
+ * Returns the port the caller should use for its ProviderConfig.
+ */
+export async function ensureDaemon(): Promise<number> {
+	if (ensuring) return attachedPort || PORT;
+	ensuring = true;
+	try {
+		const primary = await probeAndMaybeReplace(PORT, "proxy daemon");
+		if (primary !== null) {
+			await attachTo(primary);
+			return primary;
+		}
+
+		if (PORT !== LEGACY_PORT) {
+			const legacy = await probeAndMaybeReplace(LEGACY_PORT, "legacy proxy daemon");
+			if (legacy !== null) {
+				await attachTo(legacy);
+				return legacy;
+			}
+		}
+
+		if (isSpawnEnabled()) {
+			spawnDaemonProcess();
+			const ready = await waitForReady(PORT, DAEMON_READY_TIMEOUT_MS);
+			if (ready) {
+				const ver = await getDaemonVersion(PORT);
+				if (ver !== null && ver !== PKG_VERSION) {
+					if (await killStaleDaemon(PORT, ver, "proxy daemon")) {
+						spawnDaemonProcess();
+						const retryReady = await waitForReady(PORT, DAEMON_READY_TIMEOUT_MS);
+						if (retryReady) {
+							await attachTo(PORT);
+							return PORT;
+						}
+					} else if (await isProxyAlive(PORT)) {
+						await attachTo(PORT);
+						return PORT;
+					}
+				} else {
+					await attachTo(PORT);
+					return PORT;
+				}
+			} else {
+				logWarn("daemon spawn did not become ready — is the port blocked?");
+			}
+			return PORT;
+		}
+
+		try {
+			const r = await startProxy();
+			if (r.server) fallbackServer = r.server;
+			const port = r.port;
+			await attachTo(port);
+			return port;
+		} catch (e) {
+			logWarn("in-process fallback bind failed", { error: String(e) });
+			return PORT;
+		}
+	} finally {
+		ensuring = false;
+	}
+}
+
+export function getClientPort(): number {
+	return attachedPort || PORT;
+}
+
+export function getClientId(): string {
+	return CLIENT_ID;
+}
+
+export function _resetClientForTest(): void {
+	stopHeartbeatInternal();
+	heartbeatPort = 0;
+	attachedPort = 0;
+	ensuring = false;
+	lastSpawnAt = 0;
+	if (fallbackServer) {
+		try {
+			fallbackServer.close();
+		} catch {}
+		fallbackServer = null;
+	}
+}

package/src/commands.ts

@@ -5,8 +5,9 @@
  */
 
 import { spawn } from "node:child_process";
+import { getClientPort } from "./client.ts";
 import { refreshCatalog, setAliveCatalog } from "./catalog.ts";
-import { DEBUG_STATE_FILE, LOG_FILE, RELAY_STATE_FILE } from "./config.ts";
+import { DEBUG_STATE_FILE, HOST, LOG_FILE, PORT, RELAY_STATE_FILE } from "./config.ts";
 import {
 	compareVersions,
 	fetchLatestVersion,
@@ -68,30 +69,31 @@ function spawnWithProgress(
 	args: string[],
 	ctx: ExtensionContext,
 ): Promise<number> {
-	return new Promise((resolve) => {
-		try {
-			const child = spawn(cmd, args, {
-				shell: process.platform === "win32",
-				stdio: "pipe",
-			});
-			child.stdout?.on("data", (d: Buffer) => {
-				const s = String(d).trim();
-				if (s) ctx.ui.notify(s, "info");
-			});
-			child.stderr?.on("data", (d: Buffer) => {
-				const s = String(d).trim();
-				if (s) ctx.ui.notify(s, "info");
-			});
-			child.on("error", (err: Error) => {
-				ctx.ui.notify(`spawn ${cmd} failed: ${err.message}`, "warning");
-				resolve(1);
-			});
-			child.on("close", (code: number | null) => resolve(code ?? 0));
-		} catch (e) {
-			ctx.ui.notify(`spawn ${cmd} failed: ${(e as Error).message}`, "warning");
+	const { promise, resolve } = Promise.withResolvers<number>();
+	try {
+		const child = spawn(cmd, args, {
+			shell: process.platform === "win32",
+			stdio: "pipe",
+			windowsHide: true,
+		});
+		child.stdout?.on("data", (d: Buffer) => {
+			const s = String(d).trim();
+			if (s) ctx.ui.notify(s, "info");
+		});
+		child.stderr?.on("data", (d: Buffer) => {
+			const s = String(d).trim();
+			if (s) ctx.ui.notify(s, "info");
+		});
+		child.on("error", (err: Error) => {
+			ctx.ui.notify(`spawn ${cmd} failed: ${err.message}`, "warning");
 			resolve(1);
-		}
-	});
+		});
+		child.on("close", (code: number | null) => resolve(code ?? 0));
+	} catch (e) {
+		ctx.ui.notify(`spawn ${cmd} failed: ${(e as Error).message}`, "warning");
+		resolve(1);
+	}
+	return promise;
 }
 
 /**
@@ -532,6 +534,21 @@ export function createCommandSpec(
 				}`;
 				const stateFileLine = `State file: ${RELAY_STATE_FILE}`;
 				ctx.ui.notify(`${modeLine} | ${poolLine}\n${stateFileLine}`, "info");
+			} else if (sub === "kill" || sub === "stop" || sub === "shutdown") {
+				const port = getClientPort() || PORT;
+				try {
+					const res = await fetch(`http://${HOST}:${port}/_shutdown`, {
+						method: "POST",
+						signal: AbortSignal.timeout(1500),
+					});
+					if (res.ok) {
+						ctx.ui.notify("Proxy daemon stopped — next freeflow use restarts it", "info");
+					} else {
+						ctx.ui.notify(`Daemon kill got HTTP ${res.status}`, "warning");
+					}
+				} catch {
+					ctx.ui.notify("Daemon not running or not reachable", "warning");
+				}
 			} else if (sub === "update") {
 				if (isLinkedInstall()) {
 					ctx.ui.notify(

package/src/config.ts

@@ -205,7 +205,34 @@ export const UPDATE_CHECK_TTL_MS = 86_400_000;
 export const ALLOW_UNSAFE_RELAY_ENV = "PI_FREEFLOW_ALLOW_UNSAFE_RELAY";
 /** Opt-out for the stale-daemon replace: when "1", a version-mismatched daemon is never killed. */
 export const NO_KILL_ENV = ALLOW_UNSAFE_RELAY_ENV.replace("_ALLOW_UNSAFE_RELAY", "_NO_KILL");
-/** Max request body the proxy buffers before responding 413. */
+/** When "0", the extension never spawns a detached proxy daemon (tests/CI). */
+export const DAEMON_SPAWN_ENV = DATA_DIR_ENV.replace("_DATA_DIR", "_DAEMON_SPAWN");
+/** Lease TTL for attached clients (ms); expired leases are dropped by the daemon GC. */
+export const DAEMON_TTL_MS_ENV = DATA_DIR_ENV.replace("_DATA_DIR", "_DAEMON_TTL_MS");
+/** Client heartbeat interval (ms) — must stay well under the lease TTL. */
+export const DAEMON_HEARTBEAT_MS_ENV = DATA_DIR_ENV.replace("_DATA_DIR", "_DAEMON_HEARTBEAT_MS");
+/** Daemon GC sweep interval (ms). */
+export const DAEMON_GC_MS_ENV = DATA_DIR_ENV.replace("_DATA_DIR", "_DAEMON_GC_MS");
+/** Idle grace after the last request before a lease-less daemon exits (ms). */
+export const DAEMON_GRACE_MS_ENV = DATA_DIR_ENV.replace("_DATA_DIR", "_DAEMON_GRACE_MS");
+/** Max time a client waits for a freshly spawned daemon to answer /_health (ms). */
+export const DAEMON_READY_TIMEOUT_MS_ENV = DATA_DIR_ENV.replace("_DATA_DIR", "_DAEMON_READY_TIMEOUT_MS");
+
+function envMs(name: string, fallback: number): number {
+	const raw = process.env[name];
+	if (raw) {
+		const parsed = Number(raw);
+		if (Number.isFinite(parsed) && parsed > 0) return parsed;
+	}
+	return fallback;
+}
+
+export const DAEMON_SPAWN_ENABLED = process.env[DAEMON_SPAWN_ENV] !== "0";
+export const DAEMON_TTL_MS = envMs(DAEMON_TTL_MS_ENV, 30_000);
+export const DAEMON_HEARTBEAT_MS = envMs(DAEMON_HEARTBEAT_MS_ENV, 10_000);
+export const DAEMON_GC_MS = envMs(DAEMON_GC_MS_ENV, 5_000);
+export const DAEMON_GRACE_MS = envMs(DAEMON_GRACE_MS_ENV, 10_000);
+export const DAEMON_READY_TIMEOUT_MS = envMs(DAEMON_READY_TIMEOUT_MS_ENV, 5_000);
 export const MAX_BODY_BYTES = 32 * 1024 * 1024;
 /** Default timeout for upstream headers while proxying a request. */
 export const UPSTREAM_HEADER_TIMEOUT_MS = 300_000;

package/src/daemon.ts

@@ -0,0 +1,140 @@
+/**
+ * Detached proxy daemon entry for pi-freeflow.
+ *
+ * Spawned as a separate OS process by src/client.ts so the local proxy survives
+ * the OMP/Pi session that started it. Owns port 28180, serves the proxy plus
+ * the client lease/control endpoints, and retires itself once no client holds
+ * a live lease and no request has been proxied recently.
+ *
+ * Run directly: `node --experimental-strip-types src/daemon.ts` (or `bun src/daemon.ts`).
+ */
+
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import {
+	DAEMON_GC_MS,
+	DAEMON_GRACE_MS,
+	DAEMON_TTL_MS,
+	HOST,
+	PKG_VERSION,
+	PORT,
+} from "./config.ts";
+import { setShutdownShouldExit } from "./proxy.ts";
+import {
+	getAliveCatalog,
+	readCatalogCache,
+	refreshCatalog,
+	setAliveCatalog,
+} from "./catalog.ts";
+import { log, logInfo, logWarn } from "./logger.ts";
+import {
+	startLeaseGC,
+	stopLeaseGC,
+	touchActivity,
+} from "./lease.ts";
+import { getActiveRequests, startProxy } from "./proxy.ts";
+import { loadRelayState, setActiveRelayState } from "./relay-state.ts";
+
+/** True when this module was run as the entry script (not imported by tests). */
+export function isDaemonMain(): boolean {
+	try {
+		const entry = process.argv[1];
+		if (!entry) return false;
+		return path.resolve(entry) === fileURLToPath(import.meta.url);
+	} catch {
+		return false;
+	}
+}
+
+/**
+ * Load the on-disk relay state into this process's in-memory cache so routing
+ * uses the latest client edits without a daemon restart. Non-fatal on failure.
+ */
+export function syncRelayStateFromDisk(): void {
+	try {
+		setActiveRelayState(loadRelayState(), false);
+	} catch (e) {
+		log("warn", "daemon failed to load relay state from disk", { error: String(e) });
+	}
+}
+
+/**
+ * Serve the static+disk catalog and refresh it in the background, mirroring
+ * what the host session did in-process. Keeps /v1/models correct after the
+ * 24h cache TTL without requiring a daemon restart.
+ */
+export async function seedCatalog(): Promise<void> {
+	const cached = readCatalogCache();
+	if (cached && Array.isArray(cached.models) && cached.models.length > 0) {
+		setAliveCatalog(cached.models);
+	}
+	try {
+		const fresh = await refreshCatalog(false);
+		if (fresh.length > 0) {
+			setAliveCatalog(fresh);
+		}
+	} catch (e) {
+		logWarn("daemon catalog refresh failed; retaining cached catalog", {
+			error: String(e),
+		});
+	}
+	logInfo(`daemon catalog ready: ${getAliveCatalog().length} models`);
+}
+
+/**
+ * Boot the detached proxy daemon. Binds the port, seeds catalog + relay state,
+ * starts the lease GC, and installs signal handlers so the daemon exits
+ * cleanly on SIGTERM/SIGINT (e.g. /freeflow kill, taskkill, Ctrl+C).
+ */
+export async function runDaemon(): Promise<void> {
+	let server: { close(): void } | null = null;
+	const retire = (why: string): void => {
+		logInfo(`daemon retiring: ${why}`);
+		stopLeaseGC();
+		try {
+			server?.close();
+		} catch {}
+		process.exit(0);
+	};
+	process.on("SIGTERM", () => retire("SIGTERM"));
+	process.on("SIGINT", () => retire("SIGINT"));
+	setShutdownShouldExit(true);
+	try {
+		const r = await startProxy();
+		if (!r.server) {
+			// Port was taken by another (possibly newer) daemon — the parent
+			// attaches to the winner; this spawn exits quietly.
+			logInfo(`daemon found an existing proxy on http://${HOST}:${r.port} — exiting`);
+			process.exit(0);
+		}
+		server = r.server;
+	} catch (e) {
+		log("error", "daemon failed to bind proxy port", { error: String(e) });
+		process.exit(1);
+	}
+
+	// lastActivityAt is initialized AT BIND TIME: a freshly started daemon with
+	// zero leases must never be GC'd during the parent's readiness-poll window.
+	touchActivity();
+	syncRelayStateFromDisk();
+	void seedCatalog();
+
+	startLeaseGC({
+		ttlMs: DAEMON_TTL_MS,
+		gcMs: DAEMON_GC_MS,
+		graceMs: DAEMON_GRACE_MS,
+		getActiveRequests,
+		onIdle: () => retire("no clients and idle"),
+	});
+
+	logInfo(`pi-freeflow daemon v${PKG_VERSION} listening on http://${HOST}:${PORT}`);
+}
+
+// Entry guard: run only when executed as the entry script. When imported by
+// tests, isDaemonMain() is false and no port is bound.
+if (isDaemonMain()) {
+	runDaemon().catch((e) => {
+		log("error", "daemon crashed", { error: String(e) });
+		process.exit(1);
+	});
+}