@amalgm/shell 0.1.162 → 0.1.164-main.34182640231

package/dist/service/recovery.d.ts

@@ -0,0 +1,27 @@
+import { type ChildRestartPolicy } from '@amalgm/core/supervision';
+import type { ServiceIdentity } from './registration.js';
+export interface RecoveryState {
+    readonly attempts: number;
+    readonly maxAttempts: number;
+    readonly generation: string | null;
+    readonly lastFailure: string | null;
+    readonly lastHealthyGeneration: string | null;
+    readonly lastHealthyAt: string | null;
+    readonly parked: boolean;
+}
+/** Only the controller holding the installation lease opens this journal.
+ * Charge Core's allowance before the host effect: even death during spawn
+ * cannot turn controller replacement into a fresh recovery budget. */
+export declare class RuntimeRecovery {
+    readonly policy: ChildRestartPolicy;
+    private readonly database;
+    readonly maxAttempts: number;
+    constructor(identity: ServiceIdentity, policy?: ChildRestartPolicy);
+    get state(): RecoveryState;
+    get delayMs(): number;
+    begin(generation: string): void;
+    healthy(generation: string): void;
+    exited(generation: string, failure: string | null): void;
+    retry(): void;
+    close(): void;
+}

package/dist/service/recovery.js

@@ -0,0 +1,58 @@
+import { CHILD_RESTART_POLICY } from '@amalgm/core/supervision';
+import { join } from 'node:path';
+import { openFileDatabase } from '../sqlite.js';
+/** Only the controller holding the installation lease opens this journal.
+ * Charge Core's allowance before the host effect: even death during spawn
+ * cannot turn controller replacement into a fresh recovery budget. */
+export class RuntimeRecovery {
+    policy;
+    database;
+    maxAttempts;
+    constructor(identity, policy = CHILD_RESTART_POLICY) {
+        this.policy = policy;
+        this.maxAttempts = policy.maxRestarts + 1;
+        this.database = openFileDatabase(join(identity.serviceDir, 'recovery.sqlite'));
+        try {
+            this.database.pragma('synchronous = FULL');
+            this.database.exec(`CREATE TABLE IF NOT EXISTS recovery (
+        id INTEGER PRIMARY KEY CHECK (id = 1),
+        attempts INTEGER NOT NULL CHECK (attempts >= 0),
+        generation TEXT, lastFailure TEXT, lastHealthyGeneration TEXT, lastHealthyAt TEXT
+      );
+      INSERT OR IGNORE INTO recovery (id, attempts) VALUES (1, 0);
+      UPDATE recovery SET generation = NULL,
+        lastFailure = 'Controller exited before its runtime drained'
+        WHERE generation IS NOT NULL;`);
+        }
+        catch (error) {
+            this.database.close();
+            throw error;
+        }
+    }
+    get state() {
+        const row = this.database.prepare('SELECT attempts, generation, lastFailure, lastHealthyGeneration, lastHealthyAt FROM recovery WHERE id = 1').get();
+        return { ...row, maxAttempts: this.maxAttempts, parked: row.generation === null && row.attempts >= this.maxAttempts };
+    }
+    get delayMs() {
+        const { attempts } = this.state;
+        return attempts === 0 ? 0 : Math.min(this.policy.initialDelayMs * 2 ** (attempts - 1), this.policy.maxDelayMs);
+    }
+    begin(generation) {
+        const result = this.database.prepare('UPDATE recovery SET attempts = attempts + 1, generation = ? WHERE id = 1 AND generation IS NULL AND attempts < ?').run(generation, this.maxAttempts);
+        if (result.changes !== 1)
+            throw new Error('The runtime recovery allowance is exhausted or a generation is still owned.');
+    }
+    healthy(generation) {
+        this.database.prepare('UPDATE recovery SET attempts = 0, lastFailure = NULL, lastHealthyGeneration = ?, lastHealthyAt = ? WHERE id = 1 AND generation = ?')
+            .run(generation, new Date().toISOString(), generation);
+    }
+    exited(generation, failure) {
+        this.database.prepare('UPDATE recovery SET generation = NULL, lastFailure = COALESCE(?, lastFailure) WHERE id = 1 AND generation = ?')
+            .run(failure?.slice(0, 1_024) ?? null, generation);
+    }
+    retry() {
+        this.database.prepare('UPDATE recovery SET attempts = 0, lastFailure = NULL WHERE id = 1 AND generation IS NULL AND attempts >= ?').run(this.maxAttempts);
+    }
+    close() { this.database.close(); }
+}
+//# sourceMappingURL=recovery.js.map

package/dist/service/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/service/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAA2B,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAahD;;sEAEsE;AACtE,MAAM,OAAO,eAAe;IAIsB;IAH/B,QAAQ,CAAC;IACjB,WAAW,CAAS;IAE7B,YAAY,QAAyB,EAAW,SAA6B,oBAAoB;QAAjD,WAAM,GAAN,MAAM,CAA2C;QAC/F,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;;;;;;;;sCAQa,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACzD,CAAC;IAED,IAAI,KAAK;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,2GAA2G,CAAC,CAAC,GAAG,EAAmD,CAAC;QACtM,OAAO,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;IACxH,CAAC;IAED,IAAI,OAAO;QACT,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAChC,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjH,CAAC;IAED,KAAK,CAAC,UAAkB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kHAAkH,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3L,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC3H,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,oIAAoI,CAAC;aACxJ,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,UAAkB,EAAE,OAAsB;QAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,+GAA+G,CAAC;aACnI,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,4GAA4G,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5J,CAAC;IAED,KAAK,KAAW,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CACzC"}

package/dist/service/registration.d.ts

@@ -0,0 +1,82 @@
+import { type RuntimeBinding } from "@amalgm/core/identity";
+import { type ServiceState } from "@amalgm/core/supervision";
+/** The OS owners. `portable` is "no OS owner: you run the keepalive in the foreground". */
+export type Backend = "launchd" | "systemd" | "windows" | "portable";
+/** What selects one service: one user, one runtime label, one Amalgm root. */
+export interface ServiceSelection {
+    readonly user: string;
+    readonly runtimeLabel?: string | undefined;
+    readonly branch?: string | undefined;
+    readonly localSession?: string | undefined;
+    readonly home?: string | undefined;
+    readonly amalgmRoot?: string | undefined;
+}
+export interface ServiceIdentity extends ServiceSelection {
+    readonly binding: RuntimeBinding;
+    readonly label: string;
+    readonly labelScope: string;
+    readonly home: string;
+    readonly amalgmRoot: string;
+    /** `<amalgmRoot>/.amalgm/service/<label>`: registration, keepalive state, logs. */
+    readonly serviceDir: string;
+}
+/** The Node and Shell entry the service runs; both are absolute and version-stable. */
+export interface Launcher {
+    readonly node: string;
+    readonly bin: string;
+    readonly packageRoot: string;
+    readonly packageVersion: string;
+}
+/** The registration record, shaped as Core's `ServiceState` plus what to run. */
+export interface Registration extends ServiceState {
+    readonly binding: RuntimeBinding;
+    readonly user: string;
+    readonly amalgm_root: string;
+    readonly backend: Backend;
+    readonly label: string;
+    readonly package_root: string;
+    readonly package_version: string;
+    readonly node: string;
+    readonly bin: string;
+    readonly runtime_host: "node";
+    readonly local_only: false;
+    readonly files: Readonly<Record<string, string>>;
+    /** Selects the service dir: passed to `amalgm service keepalive`. */
+    readonly keepalive_args: readonly string[];
+    /** Selects the runtime: passed to `amalgm run` by the keepalive. */
+    readonly run_args: readonly string[];
+    readonly installed_at: string;
+}
+export declare function serviceIdentity(selection: ServiceSelection): ServiceIdentity;
+/**
+ * The launcher that is running right now. A desktop bundle may not own the
+ * service: registering the bundled copy is the auto-update loop (npm
+ * updates one tree while the OS reboots the frozen bundle forever), and an
+ * Electron binary posing as Node is not the Node the unit must name.
+ */
+export declare function currentLauncher(facts?: {
+    readonly execPath?: string;
+    readonly electron?: boolean;
+}): Launcher;
+/**
+ * Which owner keeps the service alive. `auto` asks the platform: launchd on
+ * macOS, Task Scheduler on Windows, the user's systemd where it answers,
+ * and otherwise portable. An explicit mode must fit the platform.
+ */
+export declare function detectBackend(mode: unknown, facts: {
+    readonly platform: string;
+    readonly userSystemd: () => boolean;
+}): Backend;
+export declare function registrationFile(identity: ServiceIdentity): string;
+export declare function readRegistration(identity: ServiceIdentity): Registration | null;
+export declare function writeRegistration(identity: ServiceIdentity, registration: Registration): void;
+/**
+ * An existing registration already says everything this install would say:
+ * same package tree and version, same owner, same arguments, files present.
+ * Re-running install then leaves the running service alone.
+ */
+export declare function registrationSatisfies(existing: Registration | null, wanted: {
+    readonly launcher: Launcher;
+    readonly backend: Backend;
+    readonly run_args: readonly string[];
+}): boolean;

package/dist/service/registration.js

@@ -0,0 +1,114 @@
+import { createHash } from 'node:crypto';
+/**
+ * The service drawer: who this service is (its label), where its files live,
+ * which launcher installed it, and which OS owner keeps it alive.
+ *
+ * Core states the law — the label (`serviceLabel`, `serviceLabelScope`), the
+ * launcher-artifact paths, the registration shape (`ServiceState`), and the
+ * decisions over it (`stateMatchesRequest`, `normalizeMode`,
+ * `pathLooksLikeDesktopBundle`). This file only reads the machine and writes
+ * one JSON record; it never loads the runtime.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { USER_CONTROL_DIR_NAME, resolveRuntimeBinding, runtimeBindingsMatch, runtimeRootSegments } from "@amalgm/core/identity";
+import { normalizeMode, pathLooksLikeDesktopBundle, serviceLabel, stateMatchesRequest, } from "@amalgm/core/supervision";
+import { atomicJson, readJson } from "../filesystem.js";
+export function serviceIdentity(selection) {
+    const user = selection.user.trim().toLowerCase();
+    const binding = resolveRuntimeBinding(selection);
+    if (!user)
+        throw new Error("A service is registered for one user: pass --user EMAIL");
+    const home = selection.home ? resolve(selection.home) : homedir();
+    const amalgmRoot = selection.amalgmRoot ? resolve(selection.amalgmRoot) : join(home, ...runtimeRootSegments(binding));
+    const labelScope = `${binding.runtimeLabel}.${createHash("sha256").update(JSON.stringify([user, binding])).digest("hex").slice(0, 32)}`;
+    const label = serviceLabel(labelScope);
+    return {
+        ...selection,
+        ...binding,
+        binding,
+        user,
+        home,
+        amalgmRoot,
+        labelScope,
+        label,
+        serviceDir: join(amalgmRoot, USER_CONTROL_DIR_NAME, "service", label),
+    };
+}
+const PACKAGE_ROOT = fileURLToPath(new URL("../../", import.meta.url)).replace(/[\\/]+$/, "");
+const MAIN_ENTRY = fileURLToPath(new URL("../main.js", import.meta.url));
+/**
+ * The launcher that is running right now. A desktop bundle may not own the
+ * service: registering the bundled copy is the auto-update loop (npm
+ * updates one tree while the OS reboots the frozen bundle forever), and an
+ * Electron binary posing as Node is not the Node the unit must name.
+ */
+export function currentLauncher(facts = {}) {
+    const node = facts.execPath ?? process.execPath;
+    const electron = facts.electron ?? Boolean(process.versions.electron);
+    if (electron || pathLooksLikeDesktopBundle(node) || pathLooksLikeDesktopBundle(MAIN_ENTRY)) {
+        throw new Error("The always-on service must be installed from the npm package (npm install -g @amalgm/shell); "
+            + "a desktop bundle cannot own it");
+    }
+    const packageJson = JSON.parse(readFileSync(join(PACKAGE_ROOT, "package.json"), "utf8"));
+    return { node, bin: MAIN_ENTRY, packageRoot: PACKAGE_ROOT, packageVersion: String(packageJson.version) };
+}
+/**
+ * Which owner keeps the service alive. `auto` asks the platform: launchd on
+ * macOS, Task Scheduler on Windows, the user's systemd where it answers,
+ * and otherwise portable. An explicit mode must fit the platform.
+ */
+export function detectBackend(mode, facts) {
+    const requested = normalizeMode(mode);
+    const native = facts.platform === "darwin" ? "launchd"
+        : facts.platform === "win32" ? "windows"
+            : facts.userSystemd() ? "systemd"
+                : "portable";
+    if (requested === "auto")
+        return native;
+    if (requested === "portable")
+        return "portable";
+    if ((requested === "launchd") !== (facts.platform === "darwin")
+        || (requested === "windows") !== (facts.platform === "win32")
+        || (requested === "systemd" && native !== "systemd")) {
+        throw new Error(`Service mode "${requested}" is not available on this machine (auto would choose ${native})`);
+    }
+    return requested;
+}
+export function registrationFile(identity) {
+    return join(identity.serviceDir, "registration.json");
+}
+export function readRegistration(identity) {
+    const record = readJson(registrationFile(identity));
+    if (!record)
+        return null;
+    if (record.label !== identity.label || typeof record.bin !== "string"
+        || record.user !== identity.user || record.amalgm_root !== identity.amalgmRoot
+        || !runtimeBindingsMatch(record.binding, identity.binding)) {
+        throw new Error('The service registration belongs to a different installation.');
+    }
+    return record;
+}
+export function writeRegistration(identity, registration) {
+    atomicJson(registrationFile(identity), registration);
+}
+/**
+ * An existing registration already says everything this install would say:
+ * same package tree and version, same owner, same arguments, files present.
+ * Re-running install then leaves the running service alone.
+ */
+export function registrationSatisfies(existing, wanted) {
+    return existing !== null
+        && stateMatchesRequest(existing, { mode: wanted.backend }, {
+            packageRoot: wanted.launcher.packageRoot,
+            packageVersion: wanted.launcher.packageVersion,
+            autoBackend: wanted.backend,
+        })
+        && existing.node === wanted.launcher.node
+        && existing.bin === wanted.launcher.bin
+        && JSON.stringify(existing.run_args) === JSON.stringify(wanted.run_args)
+        && Object.values(existing.files).every((file) => existsSync(file));
+}
+//# sourceMappingURL=registration.js.map

package/dist/service/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../../src/service/registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,mBAAmB,EAAuB,MAAM,uBAAuB,CAAC;AACrJ,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,mBAAmB,GAEpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAsDxD,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtH,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACxI,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO;QACL,GAAG,SAAS;QACZ,GAAG,OAAO;QACV,OAAO;QACP,IAAI;QACJ,IAAI;QACJ,UAAU;QACV,UAAU;QACV,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC9F,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAG5B,EAAE;IACJ,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CACb,+FAA+F;cAC7F,gCAAgC,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;IAChH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,KAAyE;IAEzE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAY,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC7D,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS;YACxC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;gBACjC,CAAC,CAAC,UAAU,CAAC;IACf,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,SAAS,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;WAC1D,CAAC,SAAS,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;WAC1D,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,yDAAyD,MAAM,GAAG,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAyB;IACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAyB;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAe,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;WAChE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU;WAC3E,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAyB,EAAE,YAA0B;IACrF,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAGD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA6B,EAC7B,MAAwG;IAExG,OAAO,QAAQ,KAAK,IAAI;WACnB,mBAAmB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE;YACzD,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9C,WAAW,EAAE,MAAM,CAAC,OAAO;SAC5B,CAAC;WACC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI;WACtC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,QAAQ,CAAC,GAAG;WACpC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;WACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/service/systemd-unit.d.ts

@@ -0,0 +1,7 @@
+/** systemd directives have distinct grammars; this module owns their encoding. */
+export interface SystemdUnitInput {
+    readonly command: readonly string[];
+    readonly environment: Readonly<Record<string, string>>;
+    readonly workingDirectory: string;
+}
+export declare function renderSystemdUnit(input: SystemdUnitInput): string;

package/dist/service/systemd-unit.js

@@ -0,0 +1,43 @@
+/** Quoted words use C escapes followed by systemd's percent-specifier expansion. */
+function word(value) {
+    if (value.includes('\0'))
+        throw new Error('A service argument or environment value cannot contain NUL');
+    return `"${value.replace(/[\x01-\x1f\x7f"\\%]/g, (character) => {
+        if (character === '%')
+            return '%%';
+        if (character === '"' || character === '\\')
+            return `\\${character}`;
+        return `\\x${character.charCodeAt(0).toString(16).padStart(2, '0')}`;
+    })}"`;
+}
+export function renderSystemdUnit(input) {
+    if (!input.command.length || !input.command[0].startsWith('/'))
+        throw new Error('A service requires an absolute executable');
+    if (!input.workingDirectory.startsWith('/'))
+        throw new Error('A service requires an absolute working directory');
+    // systemd trims WorkingDirectory again when serializing its execution context.
+    // GNU env changes directory from literal argv, then execs the same owned PID.
+    const command = ['/usr/bin/env', '--chdir', input.workingDirectory, '--', ...input.command];
+    const env = Object.entries(input.environment).map(([key, value]) => {
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            throw new Error('Invalid service environment name');
+        return `Environment=${word(`${key}=${value}`)}`;
+    }).join('\n');
+    return `[Unit]
+Description=Amalgm always-on runtime
+StartLimitIntervalSec=0
+
+[Service]
+Type=exec
+${env}
+ExecStart=:${command.map(word).join(' ')}
+Restart=on-failure
+RestartSec=5
+KillMode=mixed
+TimeoutStopSec=30
+
+[Install]
+WantedBy=default.target
+`;
+}
+//# sourceMappingURL=systemd-unit.js.map

package/dist/service/systemd-unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemd-unit.js","sourceRoot":"","sources":["../../src/service/systemd-unit.ts"],"names":[],"mappings":"AAOA,oFAAoF;AACpF,SAAS,IAAI,CAAC,KAAa;IACzB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACxG,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAAE,EAAE;QAC7D,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACrE,OAAO,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC,CAAC,GAAG,CAAC;AACR,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC7H,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjH,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACjE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC/F,OAAO,eAAe,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;;;;;;EAMP,GAAG;aACQ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;CAQvC,CAAC;AACF,CAAC"}

package/dist/service/systemd.d.ts

@@ -0,0 +1,5 @@
+import { type ServiceOwner } from "./adapter.js";
+export { renderSystemdUnit } from './systemd-unit.js';
+/** Does this login have a user manager to talk to? Containers and bare SSH often do not. */
+export declare function userSystemdAvailable(): boolean;
+export declare const systemdOwner: ServiceOwner;

package/dist/service/systemd.js

@@ -0,0 +1,72 @@
+import { stopKeepalive } from "./control.js";
+/**
+ * Linux: a systemd user unit. The user manager starts it at first login and
+ * stops it at last logout; `Restart=on-failure` with no start limit means a
+ * dying keepalive is always brought back, never parked as `failed`.
+ */
+import { existsSync, rmSync } from "node:fs";
+import { dirname } from "node:path";
+import { systemdUnavailableOutput, systemdUnitPath } from "@amalgm/core/supervision";
+import { atomicWrite, ensureUserDir } from "../filesystem.js";
+import { keepaliveCommand, osCommand, serviceEnvironment } from "./adapter.js";
+import { renderSystemdUnit } from './systemd-unit.js';
+export { renderSystemdUnit } from './systemd-unit.js';
+/** Does this login have a user manager to talk to? Containers and bare SSH often do not. */
+export function userSystemdAvailable() {
+    const probe = osCommand("systemctl", ["--user", "show-environment"], { tolerate: true });
+    return probe.ok && !systemdUnavailableOutput(`${probe.stdout}\n${probe.stderr}`);
+}
+function unit(identity) {
+    return systemdUnitPath(identity.home, identity.label);
+}
+function systemctl(args, tolerate = false) {
+    return osCommand("systemctl", ["--user", ...args], { tolerate });
+}
+export const systemdOwner = {
+    backend: "systemd",
+    files: (identity) => ({ unit: unit(identity) }),
+    async install(identity, launcher, keepaliveArgs) {
+        const description = renderSystemdUnit({
+            command: keepaliveCommand(launcher, keepaliveArgs),
+            environment: serviceEnvironment(identity),
+            workingDirectory: identity.home,
+        });
+        await stopKeepalive(identity);
+        const file = unit(identity);
+        ensureUserDir(dirname(file));
+        atomicWrite(file, description, 0o644);
+        systemctl(["daemon-reload"]);
+        // A selected data home need not be in the OS account's unit search path.
+        // Enabling the absolute file also links it into that account's user manager.
+        systemctl(["enable", file]);
+        systemctl(["restart", identity.label]);
+    },
+    start(identity) {
+        systemctl(["start", identity.label]);
+    },
+    async stop(identity) {
+        await stopKeepalive(identity);
+        systemctl(["stop", identity.label], true);
+    },
+    status(identity) {
+        const registered = existsSync(unit(identity));
+        const show = systemctl(["show", identity.label, "-p", "LoadState", "-p", "ActiveState", "-p", "SubState", "-p", "MainPID"], true);
+        const property = (name) => new RegExp(`^${name}=(.*)$`, "m").exec(show.stdout)?.[1]?.trim() ?? null;
+        const pid = Number(property("MainPID") ?? 0);
+        const active = property("ActiveState");
+        return {
+            registered,
+            loaded: show.ok ? property("LoadState") === "loaded" : null,
+            state: active && property("SubState") ? `${active}/${property("SubState")}` : active,
+            pid: pid > 0 ? pid : null,
+        };
+    },
+    async uninstall(identity) {
+        await stopKeepalive(identity);
+        systemctl(["disable", "--now", identity.label], true);
+        rmSync(unit(identity), { force: true });
+        systemctl(["daemon-reload"], true);
+        systemctl(["reset-failed", identity.label], true);
+    },
+};
+//# sourceMappingURL=systemd.js.map

package/dist/service/systemd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemd.js","sourceRoot":"","sources":["../../src/service/systemd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,kBAAkB,EAAuC,MAAM,cAAc,CAAC;AACpH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,EAAE,IAAI,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,IAAI,CAAC,QAAyB;IACrC,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB,EAAE,QAAQ,GAAG,KAAK;IAC1D,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/C,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa;QAC7C,MAAM,WAAW,GAAG,iBAAiB,CAAC;YACpC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC;YAClD,WAAW,EAAE,kBAAkB,CAAC,QAAQ,CAAC;YACzC,gBAAgB,EAAE,QAAQ,CAAC,IAAI;SAChC,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACtC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC7B,yEAAyE;QACzE,6EAA6E;QAC7E,SAAS,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5B,SAAS,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,SAAS,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAQ;QACjB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,SAAS,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,QAAQ;QACb,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAClI,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QAC5G,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;QACvC,OAAO;YACL,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC3D,KAAK,EAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;YACpF,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;SAC1B,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,QAAQ;QACtB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,SAAS,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,SAAS,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,SAAS,CAAC,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;CACF,CAAC"}

package/dist/service/windows-action.d.ts

@@ -0,0 +1,9 @@
+import { type ChildRestartPolicy } from '@amalgm/core/supervision';
+export declare const encodePowerShell: (source: string) => string;
+export declare function jsonExpression(value: unknown): string;
+export declare function powershellExecutable(env?: NodeJS.ProcessEnv): string;
+/** Microsoft argv quoting goes directly to ProcessStartInfo, without a shell. */
+export declare function quoteWindowsArgument(value: string): string;
+/** Scheduler owns this action's logged-in lifetime. Its launch-retry setting
+ * cannot observe controller exits, so this native port applies Core's policy. */
+export declare function windowsControllerAction(command: readonly string[], workingDirectory: string, restartPolicy?: ChildRestartPolicy): string;

package/dist/service/windows-action.js

@@ -0,0 +1,55 @@
+import { win32 } from 'node:path';
+import { CHILD_RESTART_POLICY } from '@amalgm/core/supervision';
+export const encodePowerShell = (source) => Buffer.from(source, 'utf16le').toString('base64');
+export function jsonExpression(value) {
+    return `ConvertFrom-Json ([Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${Buffer.from(JSON.stringify(value), 'utf8').toString('base64')}')))`;
+}
+export function powershellExecutable(env = process.env) {
+    return win32.join(env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+}
+/** Microsoft argv quoting goes directly to ProcessStartInfo, without a shell. */
+export function quoteWindowsArgument(value) {
+    if (value.includes('\0'))
+        throw new Error('A process argument cannot contain NUL.');
+    return `"${value.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, '$1$1')}"`;
+}
+/** Scheduler owns this action's logged-in lifetime. Its launch-retry setting
+ * cannot observe controller exits, so this native port applies Core's policy. */
+export function windowsControllerAction(command, workingDirectory, restartPolicy = CHILD_RESTART_POLICY) {
+    if (!command.length || !command[0])
+        throw new Error('The controller needs an executable.');
+    return encodePowerShell(`
+$ErrorActionPreference = 'Stop'
+$launch = ${jsonExpression({ executable: command[0], arguments: command.slice(1).map(quoteWindowsArgument).join(' '), workingDirectory })}
+$policy = ${jsonExpression(restartPolicy)}
+$start = New-Object System.Diagnostics.ProcessStartInfo
+$start.FileName = $launch.executable
+$start.Arguments = $launch.arguments
+$start.WorkingDirectory = $launch.workingDirectory
+$start.UseShellExecute = $false
+$start.CreateNoWindow = $true
+$clock = [Diagnostics.Stopwatch]::StartNew()
+$history = @()
+$delay = $policy.initialDelayMs
+while ($true) {
+  $started = $clock.ElapsedMilliseconds
+  $runtimeProcess = $null
+  $result = 1
+  try {
+    $runtimeProcess = [System.Diagnostics.Process]::Start($start)
+    $runtimeProcess.WaitForExit()
+    $result = $runtimeProcess.ExitCode
+  } catch { [Console]::Error.WriteLine($_.Exception.Message) }
+  finally { if ($runtimeProcess) { $runtimeProcess.Dispose() } }
+  if ($result -eq 0) { exit 0 }
+  $now = $clock.ElapsedMilliseconds
+  if ($now - $started -ge $policy.stableAfterMs) { $delay = $policy.initialDelayMs; $history = @() }
+  $history = @($history | Where-Object { $now - $_ -le $policy.windowMs })
+  if ($history.Count -ge $policy.maxRestarts) { exit $result }
+  $history += $now
+  Start-Sleep -Milliseconds $delay
+  $delay = [Math]::Min($delay * 2, $policy.maxDelayMs)
+}
+`);
+}
+//# sourceMappingURL=windows-action.js.map

package/dist/service/windows-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-action.js","sourceRoot":"","sources":["../../src/service/windows-action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAA2B,MAAM,0BAA0B,CAAC;AAEzF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC9G,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,kFAAkF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;AAC/J,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAChH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACpF,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;AAC9E,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,OAA0B,EAAE,gBAAwB,EAC1F,gBAAoC,oBAAoB;IACxD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3F,OAAO,gBAAgB,CAAC;;YAEd,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;YAC7H,cAAc,CAAC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BxC,CAAC,CAAC;AACH,CAAC"}

package/dist/service/windows-task.d.ts

@@ -0,0 +1,9 @@
+export { encodePowerShell, powershellExecutable, quoteWindowsArgument, windowsControllerAction } from './windows-action.js';
+export type WindowsTaskOperation = 'install' | 'start' | 'disable' | 'stop' | 'status' | 'uninstall';
+/** All interpolated input is encoded JSON data. Task Scheduler runs under the
+ * current account's interactive token and never stores an account password. */
+export declare function windowsTaskOperation(input: {
+    readonly operation: WindowsTaskOperation;
+    readonly name: string;
+    readonly action?: string;
+}): string;

package/dist/service/windows-task.js

@@ -0,0 +1,46 @@
+import { CHILD_RESTART_POLICY } from '@amalgm/core/supervision';
+import { encodePowerShell, jsonExpression, powershellExecutable } from './windows-action.js';
+export { encodePowerShell, powershellExecutable, quoteWindowsArgument, windowsControllerAction } from './windows-action.js';
+/** All interpolated input is encoded JSON data. Task Scheduler runs under the
+ * current account's interactive token and never stores an account password. */
+export function windowsTaskOperation(input) {
+    const request = { ...input, executable: powershellExecutable(),
+        restartCount: CHILD_RESTART_POLICY.maxRestarts,
+        // MS-TSCH 2.5.4.2: these retries cover failure to start an action, not its exit.
+        // https://learn.microsoft.com/openspecs/windows_protocols/ms-tsch/2ff4aa5a-7bc4-449f-bbb1-27475645867f
+        // Task Scheduler's supported minimum is one minute.
+        // https://learn.microsoft.com/windows/win32/taskschd/taskschedulerschema-restarttype-complextype
+        restartIntervalMs: Math.max(60_000, CHILD_RESTART_POLICY.initialDelayMs) };
+    return encodePowerShell(`
+$ErrorActionPreference = 'Stop'
+$request = ${jsonExpression(request)}
+$task = Get-ScheduledTask -TaskPath '\\' | Where-Object { $_.TaskName -ceq $request.name } | Select-Object -First 1
+switch ($request.operation) {
+  'install' {
+    $sid = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+    $principal = New-ScheduledTaskPrincipal -UserId $sid -LogonType Interactive -RunLevel Limited
+    $trigger = New-ScheduledTaskTrigger -AtLogOn -User $sid
+    $action = New-ScheduledTaskAction -Execute $request.executable -Argument ('-NoProfile -NonInteractive -WindowStyle Hidden -EncodedCommand ' + $request.action)
+    $settings = New-ScheduledTaskSettingsSet -MultipleInstances IgnoreNew -StartWhenAvailable -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit ([TimeSpan]::Zero) -RestartCount $request.restartCount -RestartInterval ([TimeSpan]::FromMilliseconds($request.restartIntervalMs)) -Hidden
+    Register-ScheduledTask -TaskPath '\\' -TaskName $request.name -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null
+    Start-ScheduledTask -TaskPath '\\' -TaskName $request.name
+  }
+  'start' {
+    if (-not $task) { throw 'The Amalgm runtime task is not registered.' }
+    Enable-ScheduledTask -InputObject $task | Out-Null
+    Start-ScheduledTask -InputObject $task
+  }
+  'disable' { if ($task) { Disable-ScheduledTask -InputObject $task | Out-Null } }
+  'stop' { if ($task) { Stop-ScheduledTask -InputObject $task } }
+  'uninstall' { if ($task) { Unregister-ScheduledTask -InputObject $task -Confirm:$false } }
+  'status' {
+    if ($task) {
+      $info = Get-ScheduledTaskInfo -InputObject $task
+      @{ registered = $true; state = [string]$task.State; lastResult = $info.LastTaskResult } | ConvertTo-Json -Compress
+    } else { @{ registered = $false } | ConvertTo-Json -Compress }
+  }
+  default { throw 'Unknown runtime task operation.' }
+}
+`);
+}
+//# sourceMappingURL=windows-task.js.map

package/dist/service/windows-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-task.js","sourceRoot":"","sources":["../../src/service/windows-task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAI5H;+EAC+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,KAIpC;IACC,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE;QAC5D,YAAY,EAAE,oBAAoB,CAAC,WAAW;QAC9C,iFAAiF;QACjF,uGAAuG;QACvG,oDAAoD;QACpD,iGAAiG;QACjG,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,cAAc,CAAC,EAAE,CAAC;IAC7E,OAAO,gBAAgB,CAAC;;aAEb,cAAc,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BnC,CAAC,CAAC;AACH,CAAC"}

package/dist/service/windows.d.ts

@@ -0,0 +1,2 @@
+import { type ServiceOwner } from './adapter.js';
+export declare const windowsOwner: ServiceOwner;