fix(kernel-cli): move LOG_LEVELS above file-scope logger to avoid TDZ

The demo branch's file-scope logger construction hit a temporal-
dead-zone reference because `makeFileTransport(logPath,
resolveMinLogLevel())` runs at module top and `resolveMinLogLevel`
uses `LOG_LEVELS`, which was declared as a `const` further down
the file. Function declarations hoist but `const` bindings stay
in TDZ until execution reaches them, so the daemon child crashed
at module init with:

  ReferenceError: Cannot access 'LOG_LEVELS' before initialization

The crash happened before the fatal-handler install ran, and the
child was spawned with stdio: 'ignore', so the failure surfaced
only as a 30-second polling timeout ("Daemon did not start").

Move `LOG_LEVELS`, `LogLevelName`, and `resolveMinLogLevel()`
above the module-scope logger construction. Fixes the demo
branch; PR #966 (main-based) is unaffected because its transport
factory doesn't reference `LOG_LEVELS`.

Author: FUDCo

packages/kernel-cli/src/commands/daemon-entry.ts

@@ -11,6 +11,36 @@ import { join } from 'node:path';
 import { getOcapHome } from '../ocap-home.ts';
 import { isProcessAlive } from '../utils.ts';
 
+// Mirror of @metamask/logger's level ordering (`logLevels` is not part
+// of the package's public surface). Higher numbers are more severe.
+// Declared above the file-scope logger construction so the transport
+// factory doesn't hit a temporal-dead-zone reference when it's called
+// during module init.
+const LOG_LEVELS = {
+  debug: 1,
+  info: 2,
+  log: 3,
+  warn: 4,
+  error: 5,
+} as const;
+
+type LogLevelName = keyof typeof LOG_LEVELS;
+
+/**
+ * Resolve the daemon's minimum log level from `OCAP_DAEMON_LOG_LEVEL`.
+ * Defaults to `info` so noisy `debug` entries (refcount churn etc.)
+ * are dropped; set the env var to `debug` to re-enable everything.
+ *
+ * @returns The minimum log level to record.
+ */
+function resolveMinLogLevel(): LogLevelName {
+  const raw = process.env.OCAP_DAEMON_LOG_LEVEL;
+  if (raw !== undefined && raw in LOG_LEVELS) {
+    return raw as LogLevelName;
+  }
+  return 'info';
+}
+
 const ocapDir = getOcapHome();
 const logPath = join(ocapDir, 'daemon.log');
 const logger = new Logger({
@@ -138,33 +168,6 @@ async function readDaemonPid(pidPath: string): Promise<number | undefined> {
   return Number.isFinite(pid) && pid > 0 ? pid : undefined;
 }
 
-// Mirror of @metamask/logger's level ordering (`logLevels` is not part
-// of the package's public surface). Higher numbers are more severe.
-const LOG_LEVELS = {
-  debug: 1,
-  info: 2,
-  log: 3,
-  warn: 4,
-  error: 5,
-} as const;
-
-type LogLevelName = keyof typeof LOG_LEVELS;
-
-/**
- * Resolve the daemon's minimum log level from `OCAP_DAEMON_LOG_LEVEL`.
- * Defaults to `info` so noisy `debug` entries (refcount churn etc.)
- * are dropped; set the env var to `debug` to re-enable everything.
- *
- * @returns The minimum log level to record.
- */
-function resolveMinLogLevel(): LogLevelName {
-  const raw = process.env.OCAP_DAEMON_LOG_LEVEL;
-  if (raw !== undefined && raw in LOG_LEVELS) {
-    return raw as LogLevelName;
-  }
-  return 'info';
-}
-
 /**
  * Create a file transport that writes logs to a file, filtering out
  * entries below `minLevel`.