feat(desktop): add observed daemon and read-only always-on states

apps/desktop/README.md

@@ -215,9 +215,67 @@ observations, not locks against concurrent same-user changes.
 
 ## What v0 does not do yet
 
-The Activity tab, CPU and memory, always-on, broader daemon controls and
-upgrades come in later units. The design and the CLI/daemon requests they need
-are in `DESIGN.md` (PR #800).
+The Activity tab, CPU and memory, and upgrades come in later units. The design
+and the CLI/daemon requests they need are in `DESIGN.md` (PR #800).
+
+## Daemon and always-on preview (DESIGN §5–6)
+
+The daemon card observes `hack daemon status --json`, retaining a valid raw report
+on exit 1. Missing or malformed status is **unknown**; an omitted
+`service.installed` is not evidence that the login service is absent. Version
+mismatch comes from the read-only socket `/v1/status`, compared with the CLI;
+the socket is the absolute `socket_path` in the CLI's own status answer, never a
+guessed path. Daemon reads use the same pinned CLI and allowlisted environment
+as project reads.
+Explicit R8 `service.unit_stale: true` shows an outdated login service; missing
+R8 metadata never triggers that diagnosis.
+
+Start, Restart and Install login service run today's `hack daemon
+start|restart|install --no-interactive` as the current user, through setup's
+checked CLI and execution context (never the app's own environment). Install
+re-checks its guards and a fresh `daemon status` immediately before running.
+Without a checked setup report no daemon action runs. They require no
+terminal adapter and never request a password. Only one daemon action runs at a
+time, including its fresh read after command exit. Exit 0 alone does not mean
+running or installed. Failure keeps observed state and an error; timeout shows
+unknown until another read. Missing CLI disables actions. Reads have deadlines;
+actions have a two-minute deadline. The app never edits units, signals a daemon,
+or starts one during observation. Only the CLI owns those effects.
+
+Setup Run, the daemon card and recovery share the same machine-action gate and
+fixed CLI adapter. Project actions and terminal launches check that gate; daemon
+actions also check setup's launch gate. Each result refreshes ordered project
+status and setup (queuing a fresh setup check if an older check is in flight).
+The existing setup terminal adapter remains owned by setup.
+
+Always-on consumes proposed project `autostart` and global `autostart_global`
+fields when present, including manual-stop pause, failure count/limit/services,
+global pause and login progress. Missing fields remain unknown. All always-on
+switches are read-only: live R12a command capability is not established, and
+current payloads lack R12b metadata. No proposed autostart command, local policy,
+persistence or retry loop is implemented. No login service additionally explains
+`hack daemon install`; missing `service_ready` never enables a switch.
+
+Additional fixtures: `daemon-not-installed`, `daemon-stopped`, `daemon-starting`,
+`daemon-incompatible`, `daemon-stale`, `daemon-stale-unit`, `daemon-unknown`,
+`always-off`, `always-on`, `always-paused`, `always-attention`,
+`always-global-paused`, `always-login`, `always-no-login`,
+`always-command-failed` (failure presentation only; no command runs).
+Fixture buttons never mutate a live system. To capture one fixture in both themes:
+
+```sh
+cargo run -p hack-desktop --features screenshots -- \
+  --fixtures daemon-stale-unit --screenshots /tmp/daemon-shots
+```
+
+The daemon card is independent of project reads, so a project error does not
+hide its observed status. Automatic daemon reads run at most every ten seconds;
+post-action reads are immediate. Existing project polling remains unchanged.
+R8 and R12 remain CLI/daemon work outside this desktop-only slice. This Linux
+preview does not qualify native macOS service behavior or a shipped artifact.
+
+Fixture views: [daemon repair (light)](screenshots/daemon-stale-unit-light.png)
+and [always-on needs attention (dark)](screenshots/always-attention-dark.png).
 
 ## Setup
 
@@ -258,7 +316,7 @@ Needs attention. Missing service-manager availability never permits Install.
 Start and Install, and the project pane's Start/Restart hackd recovery, pass the
 selected CLI as the CLI's self-invocation selector (`HACK_MCP_COMMAND`), so the daemon they start or install runs that CLI, not
 whatever `hack` is first on PATH. Only the fixed `daemon start` and supported `daemon install` actions offer **Run**, with
-bounded, memory-only output followed by fresh checks. Install requires explicit
+bounded, memory-only exit/error feedback followed by fresh checks. Install requires explicit
 `service.available: true`, an ordinary home, and no launchd/systemd-disable guard;
 otherwise the card explains why and links to documentation. Availability is checked
 again immediately before install; an unavailable or unconfirmed manager is refused

apps/desktop/app/src/screenshots.rs

@@ -15,7 +15,7 @@ use hack_desktop_core::logs::fixtures::LogsFixture;
 
 use crate::view::HackApp;
 
-pub fn run(dir: &Path, fixture: Option<Fixture>) {
+pub fn run(dir: &Path, selected: Option<Fixture>) {
     std::fs::create_dir_all(dir).expect("create screenshot dir");
     let mut cx = HeadlessAppContext::with_platform(
         gpui_kit::platform::current_platform(true).text_system(),
@@ -35,7 +35,11 @@ pub fn run(dir: &Path, fixture: Option<Fixture>) {
         shots.push((l.name(), base, Some(l)));
     }
     for mode in [ThemeMode::Light, ThemeMode::Dark] {
-        for name in hack_desktop_core::setup_fixtures::NAMES {
+        for name in hack_desktop_core::setup_fixtures::NAMES
+            .iter()
+            .copied()
+            .filter(|_| selected.is_none())
+        {
             cx.update(|cx| Theme::change(mode, None, cx));
             let mut opts = crate::window_options();
             opts.focus = false;
@@ -83,7 +87,7 @@ pub fn run(dir: &Path, fixture: Option<Fixture>) {
         }
         for &(name, f, logs) in shots
             .iter()
-            .filter(|(_, f, logs)| fixture.is_none_or(|selected| selected == *f && logs.is_none()))
+            .filter(|(_, f, logs)| selected.is_none_or(|s| s == *f && logs.is_none()))
         {
             cx.update(|cx| Theme::change(mode, None, cx));
             let opts = WindowOptions {

apps/desktop/app/src/setup_controller.rs

@@ -16,7 +16,7 @@ impl HackApp {
             self.setup.refresh_again = true;
             return;
         }
-        if self.setup.action_busy || self.recovery_busy {
+        if self.setup.action_busy || self.daemon.busy.is_some() {
             return;
         }
         let generation = self.setup.begin();
@@ -64,7 +64,7 @@ impl HackApp {
         if self.setup.report.cli_ready()
             && !self.setup.loading
             && !self.setup.action_busy
-            && !self.recovery_busy
+            && !self.daemon.busy.is_some()
         {
             self.pane = Pane::Project;
             cx.notify();
@@ -93,25 +93,13 @@ impl HackApp {
             cx.notify();
             return;
         }
-        self.setup.result = None;
-        self.setup.action_busy = true;
-        let source = self.source.clone();
-        let checked = self.setup.report.clone();
-        cx.spawn(async move |this, cx| {
-            let result = cx
-                .background_executor()
-                .spawn(async move { source.setup_action(action, &checked) })
-                .await;
-            let _ = this.update(cx, |this, cx| {
-                this.setup.action_busy = false;
-                this.setup.result = Some(result);
-                this.setup.pending_fix = true;
-                this.refresh_now_async(cx);
-                this.load_setup(cx);
-            });
-        })
-        .detach();
-        cx.notify();
+        self.run_daemon_action(
+            match action {
+                hack_desktop_core::setup::SafeAction::StartDaemon => DaemonAction::Start,
+                hack_desktop_core::setup::SafeAction::InstallDaemon => DaemonAction::Install,
+            },
+            cx,
+        );
     }
     pub fn open_setup_terminal(&mut self, args: Vec<String>, cx: &mut Context<Self>) {
         use hack_desktop_core::terminal::{Platform, Script, SystemLauncher, linux_adapter};