itrytoohard 2d00e4675d fix(cli): harden daemon control surface and stop CLI from writing the store ... Addresses review findings on PR #53 (on top of the rebase onto main). - doctor: stop opening/migrating SQLite. The daemon is the sole store writer/migrator (architecture.md §7); the CLI must not run migrations or open a second writer against a DB a live daemon owns. doctor now reports database-file presence and gains --json. - stop: only remove running.json when it still belongs to the PID we stopped, so a concurrent `ao start` that wrote a new run-file is not clobbered into looking stopped. - httpd: gate POST /shutdown to loopback callers with no Origin header, closing the CSRF / DNS-rebinding vector against an unauthenticated, state-changing endpoint. - start: detach the spawned daemon into its own session/process group so a Ctrl-C while `ao start` waits for readiness doesn't also kill it. - cli: exit 2 for usage errors (bad flag / arg count) vs 1 for runtime failures. - daemon: unexport newLogger (only used in-package). - tests: /shutdown guard (cross-origin + rebinding) and stop run-file ownership guard. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-01 01:55:14 +05:30
..
cdc_wiring.go	feat(backend): add cobra cli foundation	2026-06-01 01:44:43 +05:30
daemon.go	fix(cli): harden daemon control surface and stop CLI from writing the store	2026-06-01 01:55:14 +05:30
lifecycle_wiring.go	feat(backend): add cobra cli foundation	2026-06-01 01:44:43 +05:30
wiring_test.go	feat(backend): add cobra cli foundation	2026-06-01 01:44:43 +05:30