@amalgm/shell 0.1.161 → 0.1.163

package/dist/service/keepalive.js

@@ -0,0 +1,180 @@
+import { spawn } from 'node:child_process';
+import { randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import { closeSync, fstatSync, openSync, renameSync, rmSync, writeSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { join } from 'node:path';
+import { recentCrashes, restartDelayMs } from '@amalgm/core/supervision';
+import { runtimeBindingsMatch } from '@amalgm/core/binding';
+import { atomicJson, ensurePrivateDir } from '../filesystem.js';
+import { acquireProcessLease } from '../installation/lease.js';
+import { readRegistration } from './registration.js';
+import { controllerLeaseFile, controllerStateFile } from './control.js';
+export const STOP_GRACE_MS = 25_000;
+export const LOG_LIMIT_BYTES = 8 * 1024 * 1024;
+/** One leased controller supervises one runtime over IPC. OS adapters restart
+ * the controller; Core supplies bounded restart timing for its runtime child. */
+export async function runKeepalive(identity) {
+    const registration = readRegistration(identity);
+    if (!registration)
+        throw new Error('This environment has no runtime service registration.');
+    ensurePrivateDir(identity.serviceDir);
+    const lease = acquireProcessLease(controllerLeaseFile(identity));
+    if (!lease)
+        return 0; // A concurrent start binds to the existing owner.
+    const log = openRotatingLog(join(identity.serviceDir, 'service.log'), LOG_LIMIT_BYTES);
+    let child = null;
+    let stopping = false;
+    let wake = null;
+    let killTimer;
+    let state = {
+        binding: identity.binding, user: identity.user, instanceId: randomUUID(), pid: process.pid,
+        port: 0, token: randomBytes(32).toString('base64url'), childPid: null, restarts: 0,
+    };
+    const publish = (patch) => {
+        state = { ...state, ...patch };
+        atomicJson(controllerStateFile(identity), state);
+    };
+    const stop = () => {
+        if (stopping)
+            return;
+        stopping = true;
+        if (child && child.exitCode === null && child.signalCode === null) {
+            const owned = child;
+            if (owned.connected)
+                owned.send({ type: 'amalgm-shutdown' }, () => { });
+            else
+                owned.kill('SIGTERM');
+            killTimer = setTimeout(() => {
+                if (owned.exitCode === null && owned.signalCode === null)
+                    owned.kill('SIGKILL');
+            }, STOP_GRACE_MS);
+            killTimer.unref();
+        }
+        wake?.();
+    };
+    const server = createServer((request, response) => {
+        const actual = Buffer.from(request.headers.authorization || '');
+        const expected = Buffer.from(`Bearer ${state.token}`);
+        if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) {
+            response.writeHead(401).end();
+            return;
+        }
+        if (request.method === 'GET' && request.url === '/status'
+            || request.method === 'POST' && request.url === '/stop') {
+            // A valid token proves access to this endpoint, not that the caller
+            // selected this owner. Mutation admission must prove both before effects.
+            if (request.method === 'POST') {
+                let expectedIdentity;
+                try {
+                    expectedIdentity = JSON.parse(String(request.headers['x-amalgm-controller-identity'] || ''));
+                }
+                catch {
+                    response.writeHead(409).end();
+                    return;
+                }
+                if (expectedIdentity?.instanceId !== state.instanceId || expectedIdentity?.user !== state.user
+                    || !runtimeBindingsMatch(expectedIdentity?.binding, state.binding)) {
+                    response.writeHead(409).end();
+                    return;
+                }
+            }
+            response.writeHead(200, { 'content-type': 'application/json', 'cache-control': 'no-store' });
+            response.end(JSON.stringify({ ...state, token: '' }));
+            if (request.url === '/stop')
+                stop();
+            return;
+        }
+        response.writeHead(404).end();
+    });
+    process.once('SIGTERM', stop);
+    process.once('SIGINT', stop);
+    let crashes = [];
+    try {
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(0, '127.0.0.1', resolve);
+        });
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('The controller did not receive a local address.');
+        publish({ port: address.port });
+        while (!stopping) {
+            child = spawn(registration.node, [registration.bin, ...registration.run_args], {
+                cwd: identity.home, env: process.env,
+                stdio: ['ignore', 'pipe', 'pipe', 'ipc'], windowsHide: true,
+            });
+            const exiting = childExit(child);
+            child.stdout?.on('data', (chunk) => log.write(chunk));
+            child.stderr?.on('data', (chunk) => log.write(chunk));
+            publish({ childPid: child.pid ?? null });
+            const outcome = await exiting;
+            child = null;
+            if (killTimer)
+                clearTimeout(killTimer);
+            publish({ childPid: null });
+            if (stopping)
+                break;
+            const now = Date.now();
+            crashes = [...recentCrashes(crashes, now), now];
+            const delayMs = restartDelayMs(crashes.length);
+            publish({ restarts: state.restarts + 1 });
+            log.write(`${JSON.stringify({ event: 'runtime-exited', ...outcome, restartInMs: delayMs })}\n`);
+            await new Promise((resolve) => {
+                const timer = setTimeout(resolve, delayMs);
+                wake = () => { clearTimeout(timer); resolve(); };
+            });
+            wake = null;
+        }
+        return 0;
+    }
+    finally {
+        stop();
+        if (child && child.exitCode === null && child.signalCode === null)
+            await childExit(child);
+        if (killTimer)
+            clearTimeout(killTimer);
+        process.off('SIGTERM', stop);
+        process.off('SIGINT', stop);
+        server.closeAllConnections();
+        await new Promise((resolve) => { if (server.listening)
+            server.close(() => resolve());
+        else
+            resolve(); });
+        rmSync(controllerStateFile(identity), { force: true });
+        log.close();
+        lease.close();
+    }
+}
+function childExit(child) {
+    if (child.exitCode !== null || child.signalCode !== null)
+        return Promise.resolve({ code: child.exitCode, signal: child.signalCode });
+    return new Promise((resolve) => {
+        child.once('error', () => resolve({ code: 1, signal: null }));
+        child.once('exit', (code, signal) => resolve({ code, signal }));
+    });
+}
+/** Two bounded log files; even a single oversized write obeys the limit. */
+export function openRotatingLog(file, limitBytes) {
+    let fd = openSync(file, 'a');
+    let size = fstatSync(fd).size;
+    return {
+        write(chunk) {
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            for (let offset = 0; offset < bytes.length;) {
+                if (size >= limitBytes) {
+                    closeSync(fd);
+                    rmSync(`${file}.1`, { force: true });
+                    renameSync(file, `${file}.1`);
+                    fd = openSync(file, 'a');
+                    size = 0;
+                }
+                const count = Math.min(bytes.length - offset, limitBytes - size);
+                writeSync(fd, bytes, offset, count);
+                offset += count;
+                size += count;
+            }
+        },
+        close() { closeSync(fd); },
+    };
+}
+//# sourceMappingURL=keepalive.js.map

package/dist/service/keepalive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keepalive.js","sourceRoot":"","sources":["../../src/service/keepalive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAwB,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAwB,MAAM,cAAc,CAAC;AAE9F,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAyB;IAC1D,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC5F,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC,kDAAkD;IACxE,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,CAAC;IACvF,IAAI,KAAK,GAAwB,IAAI,CAAC;IACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,IAAI,SAAoD,CAAC;IACzD,IAAI,KAAK,GAAoB;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;QAC1F,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KACnF,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,KAA+B,EAAE,EAAE;QAClD,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/B,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC;YACpB,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;;gBAClE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClF,CAAC,EAAE,aAAa,CAAC,CAAC;YAClB,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5E,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;eACpD,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC1D,oEAAoE;YACpE,0EAA0E;YAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,gBAAgB,CAAC;gBACrB,IAAI,CAAC;oBAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACrG,MAAM,CAAC;oBAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAChD,IAAI,gBAAgB,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,gBAAgB,EAAE,IAAI,KAAK,KAAK,CAAC,IAAI;uBACzF,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBAAC,OAAO;gBACxC,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7F,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO;gBAAE,IAAI,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAChH,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjB,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE;gBAC7E,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG;gBACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI;aAC5D,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;YAC9B,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5B,IAAI,QAAQ;gBAAE,MAAM;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YAChG,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC3C,IAAI,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,CAAC;QACP,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1F,IAAI,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;;YAAM,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/G,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,GAAG,CAAC,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB;IACpC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACrI,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,UAAkB;IAC9D,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;IAC9B,OAAO;QACL,KAAK,CAAC,KAAsB;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;gBAC5C,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;oBACvB,SAAS,CAAC,EAAE,CAAC,CAAC;oBAAC,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;oBACnF,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBAAC,IAAI,GAAG,CAAC,CAAC;gBACrC,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;gBACjE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC;gBAAC,IAAI,IAAI,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;QACD,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;KAC3B,CAAC;AACJ,CAAC"}

package/dist/service/launchd.d.ts

@@ -0,0 +1,9 @@
+import { type ServiceOwner } from "./adapter.js";
+export declare function renderLaunchdPlist(input: {
+    readonly label: string;
+    readonly command: readonly string[];
+    readonly environment: Readonly<Record<string, string>>;
+    readonly workingDirectory: string;
+    readonly logPath: string;
+}): string;
+export declare const launchdOwner: ServiceOwner;

package/dist/service/launchd.js

@@ -0,0 +1,105 @@
+import { stopKeepalive } from "./control.js";
+/**
+ * macOS: a LaunchAgent in the user's `gui/<uid>` domain. launchd starts it
+ * at login, restarts it whenever it exits non-zero, and stops it at logout.
+ * Every knob is written out, so the policy is the file, not a default.
+ */
+import { existsSync, rmSync } from "node:fs";
+import { dirname } from "node:path";
+import { launchdPlistPath, plistEscape } from "@amalgm/core/supervision";
+import { atomicWrite, ensureUserDir } from "../filesystem.js";
+import { keepaliveCommand, osCommand, serviceEnvironment } from "./adapter.js";
+/** launchd's own default, stated: a non-zero exit is retried after 10s. */
+const THROTTLE_INTERVAL_S = 10;
+/** SIGTERM, then SIGKILL after this; the keepalive stops its child within 25s. */
+const EXIT_TIMEOUT_S = 30;
+export function renderLaunchdPlist(input) {
+    const args = input.command.map((part) => `    <string>${plistEscape(part)}</string>`).join("\n");
+    const env = Object.entries(input.environment)
+        .map(([key, value]) => `    <key>${plistEscape(key)}</key>\n    <string>${plistEscape(value)}</string>`)
+        .join("\n");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${plistEscape(input.label)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${env}
+  </dict>
+  <key>WorkingDirectory</key>
+  <string>${plistEscape(input.workingDirectory)}</string>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <dict>
+    <key>SuccessfulExit</key>
+    <false/>
+  </dict>
+  <key>ThrottleInterval</key>
+  <integer>${THROTTLE_INTERVAL_S}</integer>
+  <key>ExitTimeOut</key>
+  <integer>${EXIT_TIMEOUT_S}</integer>
+  <key>StandardOutPath</key>
+  <string>${plistEscape(input.logPath)}</string>
+  <key>StandardErrorPath</key>
+  <string>${plistEscape(input.logPath)}</string>
+</dict>
+</plist>
+`;
+}
+function domain() {
+    return `gui/${process.getuid?.() ?? 0}`;
+}
+function plist(identity) {
+    return launchdPlistPath(identity.home, identity.label);
+}
+function launchctl(args, tolerate = false) {
+    return osCommand("launchctl", args, { tolerate });
+}
+export const launchdOwner = {
+    backend: "launchd",
+    files: (identity) => ({ plist: plist(identity) }),
+    async install(identity, launcher, keepaliveArgs) {
+        await stopKeepalive(identity);
+        const file = plist(identity);
+        ensureUserDir(dirname(file));
+        atomicWrite(file, renderLaunchdPlist({
+            label: identity.label,
+            command: keepaliveCommand(launcher, keepaliveArgs),
+            environment: serviceEnvironment(identity),
+            workingDirectory: identity.home,
+            logPath: `${identity.serviceDir}/launchd.log`,
+        }), 0o644);
+        launchctl(["bootout", `${domain()}/${identity.label}`], true);
+        launchctl(["bootstrap", domain(), file]);
+        launchctl(["enable", `${domain()}/${identity.label}`]);
+    },
+    start(identity) {
+        launchctl(["bootstrap", domain(), plist(identity)], true);
+        launchctl(["enable", `${domain()}/${identity.label}`], true);
+        launchctl(["kickstart", `${domain()}/${identity.label}`]);
+    },
+    async stop(identity) {
+        await stopKeepalive(identity);
+        launchctl(["bootout", `${domain()}/${identity.label}`], true);
+    },
+    status(identity) {
+        const registered = existsSync(plist(identity));
+        const print = launchctl(["print", `${domain()}/${identity.label}`], true);
+        const state = /^\s*state = (\S+)/m.exec(print.stdout)?.[1] ?? null;
+        const pid = /^\s*pid = (\d+)/m.exec(print.stdout)?.[1];
+        return { registered, loaded: print.ok, state, pid: pid ? Number(pid) : null };
+    },
+    async uninstall(identity) {
+        await stopKeepalive(identity);
+        launchctl(["bootout", `${domain()}/${identity.label}`], true);
+        rmSync(plist(identity), { force: true });
+    },
+};
+//# sourceMappingURL=launchd.js.map

package/dist/service/launchd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../../src/service/launchd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,kBAAkB,EAAuC,MAAM,cAAc,CAAC;AAEpH,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,kFAAkF;AAClF,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,UAAU,kBAAkB,CAAC,KAMlC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,YAAY,WAAW,CAAC,GAAG,CAAC,uBAAuB,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;SACvG,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;;;;;YAKG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;;;EAGlC,IAAI;;;;EAIJ,GAAG;;;YAGO,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC;;;;;;;;;aASlC,mBAAmB;;aAEnB,cAAc;;YAEf,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;;YAE1B,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;;;CAGrC,CAAC;AACF,CAAC;AAED,SAAS,MAAM;IACb,OAAO,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,QAAyB;IACtC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB,EAAE,QAAQ,GAAG,KAAK;IAC1D,OAAO,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjD,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa;QAC7C,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,WAAW,CAAC,IAAI,EAAE,kBAAkB,CAAC;YACnC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC;YAClD,WAAW,EAAE,kBAAkB,CAAC,QAAQ,CAAC;YACzC,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAC/B,OAAO,EAAE,GAAG,QAAQ,CAAC,UAAU,cAAc;SAC9C,CAAC,EAAE,KAAK,CAAC,CAAC;QACX,SAAS,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,SAAS,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,SAAS,CAAC,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,SAAS,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,SAAS,CAAC,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7D,SAAS,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAQ;QACjB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,SAAS,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,QAAQ;QACb,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACnE,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,QAAQ;QACtB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,SAAS,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;CACF,CAAC"}

package/dist/service/owner.d.ts

@@ -0,0 +1,4 @@
+/** Select one OS adapter; the adapters depend only on adapter.ts. */
+import type { Backend } from './registration.js';
+import type { ServiceOwner } from './adapter.js';
+export declare function ownerFor(backend: Backend): ServiceOwner;

package/dist/service/owner.js

@@ -0,0 +1,14 @@
+import { launchdOwner } from './launchd.js';
+import { systemdOwner } from './systemd.js';
+import { windowsOwner } from './windows.js';
+import { portableOwner } from './portable.js';
+const OWNERS = {
+    launchd: launchdOwner,
+    systemd: systemdOwner,
+    windows: windowsOwner,
+    portable: portableOwner,
+};
+export function ownerFor(backend) {
+    return OWNERS[backend];
+}
+//# sourceMappingURL=owner.js.map

package/dist/service/owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner.js","sourceRoot":"","sources":["../../src/service/owner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,MAAM,GAA4C;IACtD,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,aAAa;CACxB,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC"}

package/dist/service/portable.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Portable: no OS owner. Containers and hosts without a user service
+ * manager run the keepalive themselves as the foreground workload — the
+ * Daytona lesson: be the declared process, never a detached one. Install
+ * only records the service; start prints the command to run.
+ */
+import type { ServiceIdentity } from "./registration.js";
+import type { ServiceOwner } from "./adapter.js";
+export declare function portableEntrypoint(identity: ServiceIdentity, keepaliveArgs: readonly string[]): string;
+export declare const portableOwner: ServiceOwner;

package/dist/service/portable.js

@@ -0,0 +1,32 @@
+/**
+ * Portable: no OS owner. Containers and hosts without a user service
+ * manager run the keepalive themselves as the foreground workload — the
+ * Daytona lesson: be the declared process, never a detached one. Install
+ * only records the service; start prints the command to run.
+ */
+import { keepaliveStatus, stopKeepalive } from "./control.js";
+import { shellQuote } from "@amalgm/core/supervision";
+export function portableEntrypoint(identity, keepaliveArgs) {
+    return ["amalgm", ...keepaliveArgs].map(shellQuote).join(" ");
+}
+export const portableOwner = {
+    backend: "portable",
+    files: () => ({}),
+    install() {
+        // Nothing to write: the registration record is the whole install.
+    },
+    start(identity, registration) {
+        throw new Error(`Portable mode has no OS owner. Run this in the foreground as your entrypoint:\n  ${portableEntrypoint(identity, registration.keepalive_args)}`);
+    },
+    async stop(identity) {
+        await stopKeepalive(identity);
+    },
+    async status(identity) {
+        const keepalive = await keepaliveStatus(identity);
+        return { registered: true, loaded: null, state: keepalive?.alive ? "running" : "stopped", pid: keepalive?.alive ? keepalive.pid : null };
+    },
+    async uninstall(identity) {
+        await stopKeepalive(identity);
+    },
+};
+//# sourceMappingURL=portable.js.map

package/dist/service/portable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable.js","sourceRoot":"","sources":["../../src/service/portable.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAItD,MAAM,UAAU,kBAAkB,CAAC,QAAyB,EAAE,aAAgC;IAC5F,OAAO,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,OAAO,EAAE,UAAU;IACnB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACjB,OAAO;QACL,kEAAkE;IACpE,CAAC;IACD,KAAK,CAAC,QAAQ,EAAE,YAAY;QAC1B,MAAM,IAAI,KAAK,CACb,oFAAoF,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,cAAc,CAAC,EAAE,CAChJ,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAQ;QACjB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAQ;QACnB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3I,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,QAAQ;QACtB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;CACF,CAAC"}

package/dist/service/registration.d.ts

@@ -0,0 +1,82 @@
+import { type RuntimeBinding } from "@amalgm/core/identity";
+import { type ServiceState } from "@amalgm/core/supervision";
+/** The OS owners. `portable` is "no OS owner: you run the keepalive in the foreground". */
+export type Backend = "launchd" | "systemd" | "windows" | "portable";
+/** What selects one service: one user, one runtime label, one Amalgm root. */
+export interface ServiceSelection {
+    readonly user: string;
+    readonly runtimeLabel?: string | undefined;
+    readonly branch?: string | undefined;
+    readonly localSession?: string | undefined;
+    readonly home?: string | undefined;
+    readonly amalgmRoot?: string | undefined;
+}
+export interface ServiceIdentity extends ServiceSelection {
+    readonly binding: RuntimeBinding;
+    readonly label: string;
+    readonly labelScope: string;
+    readonly home: string;
+    readonly amalgmRoot: string;
+    /** `<amalgmRoot>/.amalgm/service/<label>`: registration, keepalive state, logs. */
+    readonly serviceDir: string;
+}
+/** The Node and Shell entry the service runs; both are absolute and version-stable. */
+export interface Launcher {
+    readonly node: string;
+    readonly bin: string;
+    readonly packageRoot: string;
+    readonly packageVersion: string;
+}
+/** The registration record, shaped as Core's `ServiceState` plus what to run. */
+export interface Registration extends ServiceState {
+    readonly binding: RuntimeBinding;
+    readonly user: string;
+    readonly amalgm_root: string;
+    readonly backend: Backend;
+    readonly label: string;
+    readonly package_root: string;
+    readonly package_version: string;
+    readonly node: string;
+    readonly bin: string;
+    readonly runtime_host: "node";
+    readonly local_only: false;
+    readonly files: Readonly<Record<string, string>>;
+    /** Selects the service dir: passed to `amalgm service keepalive`. */
+    readonly keepalive_args: readonly string[];
+    /** Selects the runtime: passed to `amalgm run` by the keepalive. */
+    readonly run_args: readonly string[];
+    readonly installed_at: string;
+}
+export declare function serviceIdentity(selection: ServiceSelection): ServiceIdentity;
+/**
+ * The launcher that is running right now. A desktop bundle may not own the
+ * service: registering the bundled copy is the auto-update loop (npm
+ * updates one tree while the OS reboots the frozen bundle forever), and an
+ * Electron binary posing as Node is not the Node the unit must name.
+ */
+export declare function currentLauncher(facts?: {
+    readonly execPath?: string;
+    readonly electron?: boolean;
+}): Launcher;
+/**
+ * Which owner keeps the service alive. `auto` asks the platform: launchd on
+ * macOS, Task Scheduler on Windows, the user's systemd where it answers,
+ * and otherwise portable. An explicit mode must fit the platform.
+ */
+export declare function detectBackend(mode: unknown, facts: {
+    readonly platform: string;
+    readonly userSystemd: () => boolean;
+}): Backend;
+export declare function registrationFile(identity: ServiceIdentity): string;
+export declare function readRegistration(identity: ServiceIdentity): Registration | null;
+export declare function writeRegistration(identity: ServiceIdentity, registration: Registration): void;
+/**
+ * An existing registration already says everything this install would say:
+ * same package tree and version, same owner, same arguments, files present.
+ * Re-running install then leaves the running service alone.
+ */
+export declare function registrationSatisfies(existing: Registration | null, wanted: {
+    readonly launcher: Launcher;
+    readonly backend: Backend;
+    readonly run_args: readonly string[];
+}): boolean;

package/dist/service/registration.js

@@ -0,0 +1,114 @@
+import { createHash } from 'node:crypto';
+/**
+ * The service drawer: who this service is (its label), where its files live,
+ * which launcher installed it, and which OS owner keeps it alive.
+ *
+ * Core states the law — the label (`serviceLabel`, `serviceLabelScope`), the
+ * launcher-artifact paths, the registration shape (`ServiceState`), and the
+ * decisions over it (`stateMatchesRequest`, `normalizeMode`,
+ * `pathLooksLikeDesktopBundle`). This file only reads the machine and writes
+ * one JSON record; it never loads the runtime.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { USER_CONTROL_DIR_NAME, resolveRuntimeBinding, runtimeBindingsMatch, runtimeRootSegments } from "@amalgm/core/identity";
+import { normalizeMode, pathLooksLikeDesktopBundle, serviceLabel, stateMatchesRequest, } from "@amalgm/core/supervision";
+import { atomicJson, readJson } from "../filesystem.js";
+export function serviceIdentity(selection) {
+    const user = selection.user.trim().toLowerCase();
+    const binding = resolveRuntimeBinding(selection);
+    if (!user)
+        throw new Error("A service is registered for one user: pass --user EMAIL");
+    const home = selection.home ? resolve(selection.home) : homedir();
+    const amalgmRoot = selection.amalgmRoot ? resolve(selection.amalgmRoot) : join(home, ...runtimeRootSegments(binding));
+    const labelScope = `${binding.runtimeLabel}.${createHash("sha256").update(JSON.stringify([user, binding])).digest("hex").slice(0, 32)}`;
+    const label = serviceLabel(labelScope);
+    return {
+        ...selection,
+        ...binding,
+        binding,
+        user,
+        home,
+        amalgmRoot,
+        labelScope,
+        label,
+        serviceDir: join(amalgmRoot, USER_CONTROL_DIR_NAME, "service", label),
+    };
+}
+const PACKAGE_ROOT = fileURLToPath(new URL("../../", import.meta.url)).replace(/[\\/]+$/, "");
+const MAIN_ENTRY = fileURLToPath(new URL("../main.js", import.meta.url));
+/**
+ * The launcher that is running right now. A desktop bundle may not own the
+ * service: registering the bundled copy is the auto-update loop (npm
+ * updates one tree while the OS reboots the frozen bundle forever), and an
+ * Electron binary posing as Node is not the Node the unit must name.
+ */
+export function currentLauncher(facts = {}) {
+    const node = facts.execPath ?? process.execPath;
+    const electron = facts.electron ?? Boolean(process.versions.electron);
+    if (electron || pathLooksLikeDesktopBundle(node) || pathLooksLikeDesktopBundle(MAIN_ENTRY)) {
+        throw new Error("The always-on service must be installed from the npm package (npm install -g @amalgm/shell); "
+            + "a desktop bundle cannot own it");
+    }
+    const packageJson = JSON.parse(readFileSync(join(PACKAGE_ROOT, "package.json"), "utf8"));
+    return { node, bin: MAIN_ENTRY, packageRoot: PACKAGE_ROOT, packageVersion: String(packageJson.version) };
+}
+/**
+ * Which owner keeps the service alive. `auto` asks the platform: launchd on
+ * macOS, Task Scheduler on Windows, the user's systemd where it answers,
+ * and otherwise portable. An explicit mode must fit the platform.
+ */
+export function detectBackend(mode, facts) {
+    const requested = normalizeMode(mode);
+    const native = facts.platform === "darwin" ? "launchd"
+        : facts.platform === "win32" ? "windows"
+            : facts.userSystemd() ? "systemd"
+                : "portable";
+    if (requested === "auto")
+        return native;
+    if (requested === "portable")
+        return "portable";
+    if ((requested === "launchd") !== (facts.platform === "darwin")
+        || (requested === "windows") !== (facts.platform === "win32")
+        || (requested === "systemd" && native !== "systemd")) {
+        throw new Error(`Service mode "${requested}" is not available on this machine (auto would choose ${native})`);
+    }
+    return requested;
+}
+export function registrationFile(identity) {
+    return join(identity.serviceDir, "registration.json");
+}
+export function readRegistration(identity) {
+    const record = readJson(registrationFile(identity));
+    if (!record)
+        return null;
+    if (record.label !== identity.label || typeof record.bin !== "string"
+        || record.user !== identity.user || record.amalgm_root !== identity.amalgmRoot
+        || !runtimeBindingsMatch(record.binding, identity.binding)) {
+        throw new Error('The service registration belongs to a different installation.');
+    }
+    return record;
+}
+export function writeRegistration(identity, registration) {
+    atomicJson(registrationFile(identity), registration);
+}
+/**
+ * An existing registration already says everything this install would say:
+ * same package tree and version, same owner, same arguments, files present.
+ * Re-running install then leaves the running service alone.
+ */
+export function registrationSatisfies(existing, wanted) {
+    return existing !== null
+        && stateMatchesRequest(existing, { mode: wanted.backend }, {
+            packageRoot: wanted.launcher.packageRoot,
+            packageVersion: wanted.launcher.packageVersion,
+            autoBackend: wanted.backend,
+        })
+        && existing.node === wanted.launcher.node
+        && existing.bin === wanted.launcher.bin
+        && JSON.stringify(existing.run_args) === JSON.stringify(wanted.run_args)
+        && Object.values(existing.files).every((file) => existsSync(file));
+}
+//# sourceMappingURL=registration.js.map

package/dist/service/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../../src/service/registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,mBAAmB,EAAuB,MAAM,uBAAuB,CAAC;AACrJ,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,mBAAmB,GAEpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAsDxD,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtH,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACxI,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO;QACL,GAAG,SAAS;QACZ,GAAG,OAAO;QACV,OAAO;QACP,IAAI;QACJ,IAAI;QACJ,UAAU;QACV,UAAU;QACV,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC9F,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAG5B,EAAE;IACJ,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CACb,+FAA+F;cAC7F,gCAAgC,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;IAChH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,KAAyE;IAEzE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAY,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC7D,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS;YACxC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;gBACjC,CAAC,CAAC,UAAU,CAAC;IACf,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,SAAS,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;WAC1D,CAAC,SAAS,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;WAC1D,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,yDAAyD,MAAM,GAAG,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAyB;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAyB;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAe,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;WAChE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU;WAC3E,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAyB,EAAE,YAA0B;IACrF,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAGD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA6B,EAC7B,MAAwG;IAExG,OAAO,QAAQ,KAAK,IAAI;WACnB,mBAAmB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE;YACzD,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9C,WAAW,EAAE,MAAM,CAAC,OAAO;SAC5B,CAAC;WACC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI;WACtC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,QAAQ,CAAC,GAAG;WACpC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;WACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/service/systemd.d.ts

@@ -0,0 +1,9 @@
+import { type ServiceOwner } from "./adapter.js";
+export declare function renderSystemdUnit(input: {
+    readonly command: readonly string[];
+    readonly environment: Readonly<Record<string, string>>;
+    readonly workingDirectory: string;
+}): string;
+/** Does this login have a user manager to talk to? Containers and bare SSH often do not. */
+export declare function userSystemdAvailable(): boolean;
+export declare const systemdOwner: ServiceOwner;