Enum Command 

pub enum Command {
    Ping,
    Metrics,
    Get(GetInput),
    HookEvaluate(HookEvaluateInput),
    ScanPrefix(ScanPrefixInput),
    History(HistoryInput),
    HistorySince(HistorySinceInput),
    SessionCheckConsulted(SessionCheckConsultedInput),
    SessionCheckConsultedRecent(SessionCheckConsultedRecentInput),
    MemQuery(MemQueryInput),
    ScanEnforcementEvents(ScanEnforcementEventsInput),
    ConfigGet(ConfigGetInput),
    MemGet(MemGetInput),
    MemBootstrap(MemBootstrapInput),
    GotchaUpsert(GotchaDraftInput),
    GotchaConfirm(GotchaConfirmInput),
    GotchaTombstone(GotchaTombstoneInput),
    FileEnrich(FileEnrichInput),
    FileReparse(FileReparseInput),
    FileEditHook(FileEditHookInput),
    DocCapture(DocCaptureInput),
    DecisionUpsert(DecisionUpsertInput),
    DevNoteUpsert(DevNoteUpsertInput),
    ConfigSet(ConfigSetInput),
    SandboxAudit(SandboxAuditInput),
    SessionLog(SessionLogInput),
    ConsultationHit(ConsultationHitInput),
    SessionFlush,
    SessionHarvest,
    SessionClearConsults,
    RecordImport(RecordImportInput),
}

All commands available over the daemon IPC protocol.

Internally tagged by "type". Each variant either has no arguments (unit) or wraps a typed input DTO with #[serde(deny_unknown_fields)].

There is no public put or delete command. All mutations are semantic.

Variants

Ping

Health check. No arguments.

Metrics

Snapshot of live daemon metrics — per-command counters and latency percentiles. Pure read, no audit, no side effects.

Get(GetInput)

Single record lookup by key.

HookEvaluate(HookEvaluateInput)

Bulk lookup for hook decision: file record + linked gotchas + consultation status.

ScanPrefix(ScanPrefixInput)

Scan all records whose key starts with a prefix.

History(HistoryInput)

Version history for a single key.

HistorySince(HistorySinceInput)

Version history for a single key since a timestamp.

SessionCheckConsulted(SessionCheckConsultedInput)

Check whether a consultation receipt exists for a key.

SessionCheckConsultedRecent(SessionCheckConsultedRecentInput)

Check whether a recent consultation receipt exists (within TTL).

MemQuery(MemQueryInput)

BM25 text search or graph traversal.

ScanEnforcementEvents(ScanEnforcementEventsInput)

Scan enforcement events stored as raw JSON in the knowledge tree.

ConfigGet(ConfigGetInput)

Read a runtime configuration value (e.g. audit.write_durability). Pure read — no audit, no side effects.

MemGet(MemGetInput)

Single record lookup with consultation receipt side effect.

MemBootstrap(MemBootstrapInput)

Assemble a token-budgeted context packet for session startup.

GotchaUpsert(GotchaDraftInput)

Create or update a gotcha record. Always sets confirmed=false.

GotchaConfirm(GotchaConfirmInput)

Confirm a gotcha for hook enforcement. Sets confirmed=true.

GotchaTombstone(GotchaTombstoneInput)

Tombstone a gotcha and clean up file links + graph edges.

FileEnrich(FileEnrichInput)

Enrich a file record with LLM-derived purpose, entry points, etc. File record must already exist (created by init/reparse).

FileReparse(FileReparseInput)

Re-analyze a file from disk and update structural fields.

FileEditHook(FileEditHookInput)

Post-edit hook compound: consultation hit + file reparse.

DocCapture(DocCaptureInput)

Extract doc comment from file on disk and update file record purpose.

DecisionUpsert(DecisionUpsertInput)

Create or update a decision record.

DevNoteUpsert(DevNoteUpsertInput)

Create or update a dev note.

ConfigSet(ConfigSetInput)

Write a runtime configuration value. Records an EnforcementConfigChanged event when the value actually changes.

SandboxAudit(SandboxAuditInput)

Record an EnforcementConfigChanged audit event for an L3 sandbox-floor change (mati sandbox apply/clear/protect/unprotect). Lets the CLI log the change even when a daemon holds the store (socket mode).

SessionLog(SessionLogInput)

Append a session analytics event (6 homogeneous event types).

ConsultationHit(ConsultationHitInput)

Record a consultation hit: receipt + access metrics + daily agg.

SessionFlush

Flush session data (collect consulted markers into session:current).

SessionHarvest

Archive session, run promotions, collect stale reviews.

SessionClearConsults

Clear all consult receipts (PostCompact: force re-block after compaction).

RecordImport(RecordImportInput)

Bulk-import a batch of pre-built Records into the knowledge tree. Bypasses the semantic upsert handlers — records are written verbatim so an export → import round-trip preserves every field (confirmed, source, confidence, lifecycle, etc.) without the destructive resets the typed upsert commands apply.

Only gotcha:*, decision:*, dev_note:*, file:*, stage:*, and dep:* keys are accepted (the knowledge-tree namespaces). Session-tree keys (session:*, analytics:*, compliance:*, audit:*) are rejected at the boundary — those are daemon-owned telemetry that an export should never round-trip.

Implementations

impl Command

pub fn kind(&self) -> &'static str

Returns the serde rename string for this command variant. Used for audit logging and tracing spans.

pub fn target_key(&self) -> &str

Returns the primary target key for this command, if applicable. Used for audit trail correlation.

pub fn is_mutation(&self) -> bool

Returns true for commands that mutate state (categories B and C).

Category B (reads with audited side effects): MemGet, MemBootstrap Category C (semantic mutations): all 13 mutation commands

Audit entries are written for all of these.

Trait Implementations

impl Debug for Command

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Command

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Command

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.