Function refuseHelloIfDaemonRunning

index.js:794–831

(toolLabel)

// §21.8 -- the ATP runners hit the same vector via consumerAgent /
// merchantAgent / atpExecute paths).
function refuseHelloIfDaemonRunning(toolLabel) {
  try {
    const lockFile = getLockFilePath();
    if (!fs.existsSync(lockFile)) return; // no daemon
    const payload = _readLockPayload(lockFile);
    if (!payload || !Number.isFinite(payload.pid) || payload.pid <= 0) return;
    if (payload.pid === process.pid) return; // shouldn't happen for CLI
    // Round-9: a lease-aware lock whose mtime has gone stale means the
    // daemon is dead (or its PID was reused). Do NOT refuse on it -- that
    // was the "CLI hard-exits because it trusts a recyclable PID" hole.
    if (_lockIsStaleByLease(lockFile, payload)) return;
    try {
      process.kill(payload.pid, 0);
    } catch (e) {
      if (e && e.code === 'ESRCH') return; // stale lock, daemon is gone
      // EPERM = alive under a different user; still a real daemon. Fall
      // through to refuse.
    }
    console.error(
      '[' + toolLabel + '] Refusing to send hello: an evolver daemon ' +
      '(PID ' + payload.pid + ') is running and owns ~/.evomap/instance.lock.'
    );
    console.error(
      '       Two concurrent hello calls would rotate node_secret against ' +
      'each other and silence the daemon for hours.'
    );
    console.error(
      '       Either wait for the daemon to register (the secret will ' +
      'appear at ~/.evomap/node_secret), or stop the daemon and retry.'
    );
    process.exit(1);
  } catch (_) {
    // Never let the lock-check helper itself escape; if the helper
    // throws (FS permission, etc.) we fall through to the original code
    // path. The race we're protecting against is rare; failing closed
    // here would block legitimate CLI use.
  }
}

async function main() {
  const args = process.argv.slice(2);