Function startControlServer

server/src/api/control.js:68–155

()

 * @throws {Error} When the default runtime directory cannot be created or protected
 */
export function startControlServer() {
  const socketPath = resolveControlSocketPath(config);

  // For the default path, place the socket in a private per-user runtime
  // directory and fail closed if it cannot be protected, so a local attacker
  // cannot pre-create the predictable socket path or read the socket. A custom
  // `controlSocket` is trusted to the operator's chosen location.
  if (!config.controlSocket) {
    prepareRuntimeDir(path.dirname(socketPath));
  }

  try {
    if (fs.existsSync(socketPath)) {
      fs.unlinkSync(socketPath);
    }
  } catch (error) {
    log.warn(`Failed to remove stale control socket ${socketPath}: ${error.message}.`);
  }

  const server = net.createServer((socket) => {
    let buffer = '';

    socket.on('data', (chunk) => {
      buffer += chunk.toString('utf8');

      let newlineIndex;

      while ((newlineIndex = buffer.indexOf('\n')) !== -1) {
        const line = buffer.slice(0, newlineIndex).trim();
        buffer = buffer.slice(newlineIndex + 1);

        if (!line) {
          continue;
        }

        let response;

        try {
          response = handleCommand(JSON.parse(line));
        } catch {
          response = { ok: false, error: 'Malformed control request.' };
        }

        socket.write(`${JSON.stringify(response)}\n`);
      }
    });

    // The CLI hangs up as soon as it has the response; ignore the reset.
    socket.on('error', () => {});
  });

  server.on('error', (error) => {
    log.error(`Pool control socket error: ${error.message}.`);
  });

  server.listen(socketPath, () => {
    try {
      fs.chmodSync(socketPath, 0o600);