remote-pi-app 0.7.1

package/dist/daemon/cron_registry.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Cron registry: scheduled prompts for daemons, persisted at
+ * `~/.pi/remote/cron.json`. Mirrors `registry.ts` (`daemons.json`) — tolerant
+ * load (missing/corrupt → empty), atomic-ish full-file save.
+ *
+ * Each job targets a daemon by its `daemon_id` (the 8-hex id from
+ * `daemonIdForCwd`) and fires `prompt` on `schedule` (a cron expression, run
+ * by croner in the supervisor). The scheduler engine + `fireJob` live in
+ * `supervisor.ts`; this module only owns persistence + schedule validation.
+ *
+ * Plan/39. Decisions B (croner), C (min-interval 60s), E (audit via cron_log).
+ */
+/** Minimum allowed interval between two consecutive runs of a schedule. */
+export declare const MIN_INTERVAL_MS = 60000;
+/** A scheduled prompt. */
+export interface CronJob {
+    /** `j_<hex>` — random, stable across restarts. */
+    id: string;
+    /** Target daemon id (`daemonIdForCwd`). */
+    daemon_id: string;
+    /** Cron expression (croner syntax; optional 6th seconds field supported). */
+    schedule: string;
+    /** IANA timezone for the schedule (e.g. "America/Sao_Paulo"). */
+    tz?: string;
+    /** Prompt text injected into the daemon when the job fires. */
+    prompt: string;
+    enabled: boolean;
+    /** Skip the fire when the daemon is mid-turn (default true). */
+    skip_if_busy: boolean;
+    /** Start the daemon if it's down, then fire (default false). */
+    wake: boolean;
+    /** On supervisor start, run once if the previous scheduled run was missed
+     *  while it was down (default false; at most 1×). */
+    catchup: boolean;
+    created_at: string;
+    last_run?: string;
+    /** Last fire result — see cron_log `result` values. Shortcut for `cron list`. */
+    last_status?: string;
+}
+export interface CronRegistry {
+    jobs: CronJob[];
+}
+/** Test/diag-only: the on-disk path. */
+export declare function cronRegistryPath(): string;
+/** Reads the registry; returns empty on missing/corrupt file. */
+export declare function loadCronRegistry(): CronRegistry;
+export declare function saveCronRegistry(reg: CronRegistry): void;
+export declare function listJobs(): CronJob[];
+export declare function getJob(id: string): CronJob | undefined;
+/** Fields a caller supplies when creating a job. Flags default sensibly. */
+export interface NewJobInput {
+    daemon_id: string;
+    schedule: string;
+    prompt: string;
+    tz?: string;
+    skip_if_busy?: boolean;
+    wake?: boolean;
+    catchup?: boolean;
+}
+/** Adds a job with a fresh `j_<hex>` id. Pure persistence — call
+ *  `validateSchedule` first at the op/CLI boundary. */
+export declare function addJob(input: NewJobInput): CronJob;
+export declare function removeJob(id: string): boolean;
+export declare function setJobEnabled(id: string, enabled: boolean): boolean;
+/** Records the outcome of a fire on the job (the `cron list` shortcut). */
+export declare function recordRun(id: string, at: string, status: string): void;
+export interface ScheduleValidation {
+    ok: boolean;
+    error?: string;
+    /** Interval (ms) between the next two runs, when computable. */
+    intervalMs?: number;
+}
+/**
+ * Validates a cron expression via croner and enforces the ≥60s min-interval
+ * (decision C — guards against pileup + token burn). Returns `ok:false` with a
+ * user-facing message on a bad expression or a too-frequent schedule.
+ */
+export declare function validateSchedule(schedule: string, tz?: string): ScheduleValidation;
+/** Returns the next scheduled run for a job, or null. Used by `cron list`. */
+export declare function nextRunFor(job: CronJob): Date | null;

package/dist/daemon/cron_registry.js

@@ -0,0 +1,194 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { randomBytes } from "node:crypto";
+import { dirname, join } from "node:path";
+import { Cron } from "croner";
+/**
+ * Cron registry: scheduled prompts for daemons, persisted at
+ * `~/.pi/remote/cron.json`. Mirrors `registry.ts` (`daemons.json`) — tolerant
+ * load (missing/corrupt → empty), atomic-ish full-file save.
+ *
+ * Each job targets a daemon by its `daemon_id` (the 8-hex id from
+ * `daemonIdForCwd`) and fires `prompt` on `schedule` (a cron expression, run
+ * by croner in the supervisor). The scheduler engine + `fireJob` live in
+ * `supervisor.ts`; this module only owns persistence + schedule validation.
+ *
+ * Plan/39. Decisions B (croner), C (min-interval 60s), E (audit via cron_log).
+ */
+/** Minimum allowed interval between two consecutive runs of a schedule. */
+export const MIN_INTERVAL_MS = 60_000;
+function cronPath() {
+    const root = process.env["REMOTE_PI_HOME"] || homedir();
+    return join(root, ".pi", "remote", "cron.json");
+}
+/** Test/diag-only: the on-disk path. */
+export function cronRegistryPath() {
+    return cronPath();
+}
+/** Reads the registry; returns empty on missing/corrupt file. */
+export function loadCronRegistry() {
+    if (!existsSync(cronPath()))
+        return { jobs: [] };
+    try {
+        const parsed = JSON.parse(readFileSync(cronPath(), "utf8"));
+        if (!parsed || typeof parsed !== "object")
+            return { jobs: [] };
+        const arr = parsed.jobs;
+        if (!Array.isArray(arr))
+            return { jobs: [] };
+        const jobs = [];
+        for (const item of arr) {
+            const job = _coerceJob(item);
+            if (job)
+                jobs.push(job);
+        }
+        return { jobs };
+    }
+    catch {
+        return { jobs: [] };
+    }
+}
+export function saveCronRegistry(reg) {
+    mkdirSync(dirname(cronPath()), { recursive: true });
+    writeFileSync(cronPath(), JSON.stringify(reg, null, 2) + "\n");
+}
+export function listJobs() {
+    return loadCronRegistry().jobs;
+}
+export function getJob(id) {
+    return loadCronRegistry().jobs.find((j) => j.id === id);
+}
+/** Adds a job with a fresh `j_<hex>` id. Pure persistence — call
+ *  `validateSchedule` first at the op/CLI boundary. */
+export function addJob(input) {
+    const reg = loadCronRegistry();
+    const job = {
+        id: _freshId(reg.jobs),
+        daemon_id: input.daemon_id,
+        schedule: input.schedule,
+        prompt: input.prompt,
+        enabled: true,
+        skip_if_busy: input.skip_if_busy ?? true,
+        wake: input.wake ?? false,
+        catchup: input.catchup ?? false,
+        created_at: new Date().toISOString(),
+    };
+    if (input.tz)
+        job.tz = input.tz;
+    reg.jobs.push(job);
+    saveCronRegistry(reg);
+    return job;
+}
+export function removeJob(id) {
+    const reg = loadCronRegistry();
+    const idx = reg.jobs.findIndex((j) => j.id === id);
+    if (idx === -1)
+        return false;
+    reg.jobs.splice(idx, 1);
+    saveCronRegistry(reg);
+    return true;
+}
+export function setJobEnabled(id, enabled) {
+    const reg = loadCronRegistry();
+    const job = reg.jobs.find((j) => j.id === id);
+    if (!job)
+        return false;
+    job.enabled = enabled;
+    saveCronRegistry(reg);
+    return true;
+}
+/** Records the outcome of a fire on the job (the `cron list` shortcut). */
+export function recordRun(id, at, status) {
+    const reg = loadCronRegistry();
+    const job = reg.jobs.find((j) => j.id === id);
+    if (!job)
+        return;
+    job.last_run = at;
+    job.last_status = status;
+    saveCronRegistry(reg);
+}
+/**
+ * Validates a cron expression via croner and enforces the ≥60s min-interval
+ * (decision C — guards against pileup + token burn). Returns `ok:false` with a
+ * user-facing message on a bad expression or a too-frequent schedule.
+ */
+export function validateSchedule(schedule, tz) {
+    let cron;
+    try {
+        cron = new Cron(schedule, tz ? { timezone: tz } : {});
+    }
+    catch (e) {
+        return { ok: false, error: `invalid cron expression: ${e.message}` };
+    }
+    try {
+        const n1 = cron.nextRun();
+        const n2 = n1 ? cron.nextRun(n1) : null;
+        if (!n1 || !n2)
+            return { ok: false, error: "schedule has no upcoming runs" };
+        const intervalMs = n2.getTime() - n1.getTime();
+        if (intervalMs < MIN_INTERVAL_MS) {
+            return {
+                ok: false,
+                intervalMs,
+                error: `schedule too frequent: ~${Math.round(intervalMs / 1000)}s between runs (minimum is 60s)`,
+            };
+        }
+        return { ok: true, intervalMs };
+    }
+    finally {
+        cron.stop();
+    }
+}
+/** Returns the next scheduled run for a job, or null. Used by `cron list`. */
+export function nextRunFor(job) {
+    try {
+        const cron = new Cron(job.schedule, job.tz ? { timezone: job.tz } : {});
+        const n = cron.nextRun();
+        cron.stop();
+        return n;
+    }
+    catch {
+        return null;
+    }
+}
+// ── internals ───────────────────────────────────────────────────────────────
+function _freshId(existing) {
+    for (let i = 0; i < 1000; i++) {
+        const id = `j_${randomBytes(4).toString("hex")}`;
+        if (!existing.some((j) => j.id === id))
+            return id;
+    }
+    throw new Error("cron id space exhausted");
+}
+function _coerceJob(item) {
+    if (!item || typeof item !== "object")
+        return null;
+    const o = item;
+    if (typeof o["id"] !== "string")
+        return null;
+    if (typeof o["daemon_id"] !== "string")
+        return null;
+    if (typeof o["schedule"] !== "string")
+        return null;
+    if (typeof o["prompt"] !== "string")
+        return null;
+    const job = {
+        id: o["id"],
+        daemon_id: o["daemon_id"],
+        schedule: o["schedule"],
+        prompt: o["prompt"],
+        enabled: o["enabled"] !== false,
+        skip_if_busy: o["skip_if_busy"] !== false,
+        wake: o["wake"] === true,
+        catchup: o["catchup"] === true,
+        created_at: typeof o["created_at"] === "string" ? o["created_at"] : new Date(0).toISOString(),
+    };
+    if (typeof o["tz"] === "string")
+        job.tz = o["tz"];
+    if (typeof o["last_run"] === "string")
+        job.last_run = o["last_run"];
+    if (typeof o["last_status"] === "string")
+        job.last_status = o["last_status"];
+    return job;
+}
+//# sourceMappingURL=cron_registry.js.map

package/dist/daemon/cron_registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron_registry.js","sourceRoot":"","sources":["../../src/daemon/cron_registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B;;;;;;;;;;;GAWG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAgCtC,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,EAAE,CAAC;IACxD,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAY,CAAC;QACvE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAI,MAA6B,CAAC,IAAI,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,gBAAgB,EAAE,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAU;IAC/B,OAAO,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAaD;uDACuD;AACvD,MAAM,UAAU,MAAM,CAAC,KAAkB;IACvC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAY;QACnB,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK;QACzB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK;QAC/B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,IAAI,KAAK,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxB,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,OAAgB;IACxD,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CAAC,EAAU,EAAE,EAAU,EAAE,MAAc;IAC9D,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;IACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,EAAW;IAC5D,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA6B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC7E,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACjC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,UAAU;gBACV,KAAK,EAAE,2BAA2B,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,iCAAiC;aACjG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,QAAQ,CAAC,QAAmB;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,GAAG,GAAY;QACnB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC;QACX,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;QACnB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,KAAK;QAC/B,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,KAAK;QACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI;QACxB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI;QAC9B,UAAU,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;KAC9F,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/daemon/id.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Stable 8-character hex id for a daemon, derived from the cwd it manages.
+ *
+ * Derivation: `sha256(realpath(cwd))` truncated to 8 hex chars (32 bits ≈
+ * 4 billion). Collision risk is negligible at fleet sizes a single user
+ * will ever have (<1000 daemons), and 8 hex characters are short enough
+ * to type on the CLI (`/remote-pi send a1b2c3d4 "..."`).
+ *
+ * Same scheme as `roomIdForCwd` in `src/rooms.ts` — but we use hex
+ * instead of base64url so the id has no `_`/`-` (cleaner double-click
+ * selection in terminals).
+ *
+ * Symlinks resolve to a single canonical id via `realpath`, so
+ * `/Users/x/Movies` and `/Users/x/link-to-Movies` map to the same daemon.
+ * Falls back to the raw path when realpath fails (cwd doesn't exist —
+ * shouldn't happen in production but covers test sandboxes).
+ *
+ * plan/41 audit (2026-06-08): this stays **per-cwd** (no name axis). The
+ * multiagent-per-folder model (plan/38/41) applies to the App↔Pi room and the
+ * mesh address; a *supervisor daemon* is **one per cwd** by design — the
+ * registry keys exactly one entry per cwd (`registry.ts`), so a daemon id never
+ * needs the name to disambiguate. Decision: leave `daemonIdForCwd` cwd-only.
+ */
+export declare function daemonIdForCwd(cwd: string): string;

package/dist/daemon/id.js

@@ -0,0 +1,36 @@
+import { createHash } from "node:crypto";
+import { realpathSync } from "node:fs";
+/**
+ * Stable 8-character hex id for a daemon, derived from the cwd it manages.
+ *
+ * Derivation: `sha256(realpath(cwd))` truncated to 8 hex chars (32 bits ≈
+ * 4 billion). Collision risk is negligible at fleet sizes a single user
+ * will ever have (<1000 daemons), and 8 hex characters are short enough
+ * to type on the CLI (`/remote-pi send a1b2c3d4 "..."`).
+ *
+ * Same scheme as `roomIdForCwd` in `src/rooms.ts` — but we use hex
+ * instead of base64url so the id has no `_`/`-` (cleaner double-click
+ * selection in terminals).
+ *
+ * Symlinks resolve to a single canonical id via `realpath`, so
+ * `/Users/x/Movies` and `/Users/x/link-to-Movies` map to the same daemon.
+ * Falls back to the raw path when realpath fails (cwd doesn't exist —
+ * shouldn't happen in production but covers test sandboxes).
+ *
+ * plan/41 audit (2026-06-08): this stays **per-cwd** (no name axis). The
+ * multiagent-per-folder model (plan/38/41) applies to the App↔Pi room and the
+ * mesh address; a *supervisor daemon* is **one per cwd** by design — the
+ * registry keys exactly one entry per cwd (`registry.ts`), so a daemon id never
+ * needs the name to disambiguate. Decision: leave `daemonIdForCwd` cwd-only.
+ */
+export function daemonIdForCwd(cwd) {
+    let target;
+    try {
+        target = realpathSync(cwd);
+    }
+    catch {
+        target = cwd;
+    }
+    return createHash("sha256").update(target).digest("hex").slice(0, 8);
+}
+//# sourceMappingURL=id.js.map

package/dist/daemon/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/daemon/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/daemon/install.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Generates and activates a system service for `pi-supervisord` so the
+ * daemon fleet survives reboots (plan/26 W3).
+ *
+ * Platform support:
+ *   - **macOS**: writes `~/Library/LaunchAgents/dev.remotepi.supervisord.plist`
+ *     and runs `launchctl bootstrap gui/<uid> <plist>` (modern API) with a
+ *     fallback to `launchctl load` for older macOS.
+ *   - **Linux**: writes `~/.config/systemd/user/remote-pi-supervisord.service`
+ *     and runs `systemctl --user daemon-reload && systemctl --user enable
+ *     --now remote-pi-supervisord.service`.
+ *
+ * Uninstall reverses both. Idempotent — re-running install over an existing
+ * unit refreshes it (paths could have changed if user moved node_modules).
+ *
+ * **What does NOT happen here**: the actual `npm install -g remote-pi` step.
+ * The user has to make the supervisor bin reachable on disk before install
+ * can wire up the service. The `findSupervisorScript` resolver detects
+ * common cases (npm global, pnpm global, local dev clone) and yields a
+ * clear error otherwise.
+ */
+export type SupervisorPlatform = "macos" | "linux" | "windows" | "unsupported";
+export declare function detectPlatform(): SupervisorPlatform;
+/**
+ * Absolute path to the supervisor's compiled entry. We resolve from
+ * `import.meta.url` (this file's location) since wherever the daemon
+ * module lives, `bin/supervisord.js` is a sibling of `daemon/` under
+ * `dist/`.
+ *
+ * After build: `dist/daemon/install.js` → `dist/bin/supervisord.js`.
+ * In dev (`tsx`): same path resolution still lands inside `src/`, which
+ * isn't directly runnable by `node` — dev install isn't expected.
+ */
+export declare function findSupervisorScript(): string;
+/**
+ * Absolute path to the extension's CLI entry (`dist/index.js`). This is
+ * the file we symlink to `~/.local/bin/remote-pi` so the user can run
+ * `remote-pi <subcommand>` from any shell after installing the extension
+ * through Pi (`pi install npm:remote-pi`).
+ *
+ * Same resolution strategy as `findSupervisorScript`: from
+ * `dist/daemon/install.js` → `dist/index.js`.
+ */
+export declare function findRemotePiScript(): string;
+export declare function findNodeBinary(): string;
+export declare function findTemplate(name: "systemd" | "launchd" | "taskscheduler" | "vbs-launcher"): string;
+export declare function systemdUnitPath(): string;
+export declare function launchdPlistPath(): string;
+export declare const LAUNCHD_LABEL = "dev.remotepi.supervisord";
+/** systemd --user unit name (with `.service`) for the supervisor. */
+export declare const SYSTEMD_UNIT = "remote-pi-supervisord.service";
+/** Windows Task Scheduler task name (plan/40). */
+export declare const WINDOWS_TASK_NAME = "RemotePiSupervisor";
+/** Path of the rendered Task Scheduler XML (input to `schtasks /Create /XML`). */
+export declare function taskXmlPath(): string;
+/**
+ * Path of the rendered VBScript launcher the Task Scheduler action invokes
+ * via `wscript.exe` (plan/40, Windows). Launching node through this hidden
+ * wrapper is what keeps the supervisor from flashing a console window.
+ */
+export declare function vbsLauncherPath(): string;
+/**
+ * Combined stdout/stderr log for the Windows supervisor. The Task Scheduler
+ * launches it hidden via wscript, so without this redirect its output (and the
+ * forwarded daemon-child stderr) would vanish — mirrors launchd/systemd, which
+ * already log to `~/.pi/remote/supervisord.log`.
+ */
+export declare function supervisordLogPath(): string;
+export interface RenderVars {
+    node: string;
+    supervisor: string;
+    home: string;
+    user: string;
+    /** PATH inherited so `pi --mode rpc` resolves the same way it does
+     *  interactively. We snapshot `process.env.PATH` at install time. */
+    path: string;
+    /** Windows only: absolute path of the VBScript launcher the Task Scheduler
+     *  action runs via `wscript.exe`. Empty on POSIX (templates ignore `{VBS}`). */
+    vbs: string;
+    /** Windows only: combined stdout/stderr log the hidden supervisor appends to.
+     *  Empty on POSIX (templates ignore `{LOG}`). */
+    logPath: string;
+}
+export declare function defaultRenderVars(): RenderVars;
+/** Replace `{NODE}` / `{SUPERVISOR}` / `{USER}` / `{HOME}` / `{PATH}` / `{VBS}` / `{LOG}`. */
+export declare function renderTemplate(template: string, vars: RenderVars): string;
+export interface InstallResult {
+    platform: SupervisorPlatform;
+    unitPath: string;
+    /** Lines describing each step taken — surfaced to the user via notify. */
+    log: string[];
+}
+/**
+ * Writes the unit/plist, runs the platform's activation command. Throws
+ * on unsupported OS or when the supervisor script isn't found.
+ *
+ * Idempotent: re-running re-writes the unit (paths could have changed)
+ * and re-activates via the platform tool's idempotent flag.
+ */
+export declare function installService(vars?: RenderVars): InstallResult;
+export interface UninstallResult {
+    platform: SupervisorPlatform;
+    unitPath: string;
+    removed: boolean;
+    log: string[];
+}
+export declare function uninstallService(): UninstallResult;
+/**
+ * Build the batch script run elevated. Each command line redirects its output
+ * to `logFile` so the (separate, elevated) process's output can be read back by
+ * the parent. Control-flow lines (`if`/`exit`/`rem`/`@`) run bare — redirecting
+ * them would swallow the exit code. Pure + exported for tests.
+ */
+export declare function buildElevatedCmd(lines: string[], logFile: string): string;
+export interface LinkBinariesResult {
+    /** `~/.local/bin/`. The two symlinks land here. */
+    binDir: string;
+    /** Paths of the two symlinks we created/refreshed. */
+    links: Array<{
+        name: string;
+        path: string;
+        target: string;
+    }>;
+    /** True when `binDir` is already on `$PATH`. False → caller surfaces the
+     *  "add this line to your shell rc" hint to the user. */
+    onPath: boolean;
+    log: string[];
+}
+export declare function userLocalBinDir(home?: string): string;
+/**
+ * Check whether `dir` is on `process.env.PATH`. Tolerates trailing
+ * slashes and relative entries (which we treat as not matching — `~/.local/bin`
+ * is always absolute on our end).
+ */
+export declare function isOnPath(dir: string, envPath?: string): boolean;
+/**
+ * Create (or refresh) the `remote-pi` + `pi-supervisord` symlinks in
+ * `~/.local/bin/`. Idempotent — replaces stale links pointing at old
+ * extension paths (Pi can reinstall the extension to a different hash dir
+ * on upgrades, so this MUST overwrite).
+ *
+ * Returns `onPath: false` when `~/.local/bin` isn't in the user's `$PATH`.
+ * The caller is responsible for surfacing the shell-rc instruction —
+ * we don't edit the user's shell config files automatically.
+ */
+export declare function linkCliBinaries(home?: string, paths?: {
+    remotePi?: string;
+    supervisord?: string;
+}, opts?: {
+    node?: string;
+    mutatePath?: boolean;
+}): LinkBinariesResult;
+/** A Windows `.cmd` shim that forwards all args to `node "<target>"`. Pure. */
+export declare function buildCmdShim(node: string, target: string): string;
+/**
+ * Remove the symlinks `linkCliBinaries` created. Idempotent — missing
+ * links are a no-op. Returns whether each link was actually present so
+ * the caller can render a useful summary. Targets (the extension files)
+ * are NOT touched here — they live outside this dir and belong to Pi.
+ */
+export interface UnlinkBinariesResult {
+    binDir: string;
+    removed: Array<{
+        name: string;
+        path: string;
+        existed: boolean;
+    }>;
+    log: string[];
+}
+export declare function unlinkCliBinaries(home?: string): UnlinkBinariesResult;