@amalgm/shell 0.1.162 → 0.1.164-main.34182640231

package/dist/service/cli.js

@@ -0,0 +1,237 @@
+/**
+ * `amalgm service …`: the verbs a person or an installer uses to put the
+ * runtime under OS care. Every verb resolves the same identity from
+ * `--user` (and the optional root/home/label selectors), then hands one
+ * owner one job. `keepalive` is the verb the OS itself runs.
+ */
+import { existsSync, readFileSync, rmSync } from "node:fs";
+import { CHILD_HEALTH_POLICY, CHILD_RESTART_POLICY, readyDeadlineMs } from '@amalgm/core/supervision';
+import { option, parseArguments } from "../cli-arguments.js";
+import { runKeepalive } from "./keepalive.js";
+import { controllerLeaseFile, controllerRequest, keepaliveStatus, stopKeepalive } from "./control.js";
+import { acquireProcessLease } from "../installation/lease.js";
+import { dirname, join, resolve } from "node:path";
+import { initializeBootstrap, retryBootstrap } from '../updates/bootstrap.js';
+import { runtimeAppOrigin, runtimeProxyOrigin } from "../installation/environment.js";
+import { resolveInvocationBinding } from "../installation/selection.js";
+import { ownerFor } from "./owner.js";
+import { portableEntrypoint } from "./portable.js";
+import { currentLauncher, detectBackend, readRegistration, registrationSatisfies, serviceIdentity, writeRegistration, registrationFile, } from "./registration.js";
+import { userSystemdAvailable } from "./systemd.js";
+const VERBS = new Set(["install", "start", "stop", "retry", "status", "uninstall", "keepalive"]);
+const ALL_BACKENDS = ["launchd", "systemd", "windows", "portable"];
+/** Options that shape the runtime; forwarded to `amalgm run` as well. */
+const RUNTIME_OPTIONS = ["app-url", "proxy-url", "wire-url", "port", "profile"];
+export async function runServiceCli(args, runtimeLabel = "main") {
+    const parsed = parseArguments(args);
+    if (parsed.command === "help" || parsed.options.help) {
+        process.stdout.write(helpText());
+        return 0;
+    }
+    if (!VERBS.has(parsed.command)) {
+        process.stderr.write(`Unknown service command: ${parsed.command}\n\n${helpText()}`);
+        return 2;
+    }
+    try {
+        const binding = resolveInvocationBinding(runtimeLabel, parsed);
+        const identity = serviceIdentity({
+            ...binding,
+            user: option(parsed, "user"),
+            home: option(parsed, "home") || undefined,
+            amalgmRoot: option(parsed, "amalgm-root") || undefined,
+        });
+        if (parsed.command === "keepalive")
+            return await runKeepalive(identity);
+        if (parsed.command === "install")
+            return await install(identity, parsed);
+        if (parsed.command === "status") {
+            process.stdout.write(`${JSON.stringify(await status(identity), null, 2)}\n`);
+            return 0;
+        }
+        if (parsed.command === "uninstall") {
+            await uninstall(identity);
+            report("uninstalled", { label: identity.label });
+            return 0;
+        }
+        const registration = readRegistration(identity);
+        if (!registration && parsed.command === "start")
+            return await install(identity, parsed);
+        if (!registration)
+            throw new Error(`No service is registered for ${identity.label}; run: amalgm service install --user ${identity.user}`);
+        const owner = ownerFor(registration.backend);
+        if (parsed.command === "retry") {
+            const state = await controllerRequest(identity, 'retry');
+            if (!state) {
+                if (!registration.files.bootstrap || !retryBootstrap(join(identity.serviceDir, 'updates.sqlite'))) {
+                    throw new Error('The runtime controller is unavailable or its managed handover requires recovery; its release intent was preserved.');
+                }
+                await owner.stop(identity);
+                await owner.start(identity, registration);
+                report('retried', { label: identity.label, phase: 'starting' });
+                return 0;
+            }
+            report("retried", { label: identity.label, phase: state.phase });
+            return 0;
+        }
+        if (parsed.command === "start")
+            await owner.start(identity, registration);
+        else
+            await owner.stop(identity);
+        report(parsed.command === "start" ? "started" : "stopped", { label: identity.label, backend: registration.backend });
+        return 0;
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        return 1;
+    }
+}
+async function install(identity, parsed) {
+    const file = join(identity.home, '.amalgm', 'owners', `service-install-${identity.labelScope}.sqlite`);
+    const deadline = Date.now() + 15_000;
+    let lease = acquireProcessLease(file);
+    while (!lease && Date.now() < deadline) {
+        await new Promise((resolve) => setTimeout(resolve, 50));
+        lease = acquireProcessLease(file);
+    }
+    if (!lease)
+        throw new Error('Another setup owns this runtime installation; retry after it completes.');
+    try {
+        return await installOwned(identity, parsed);
+    }
+    finally {
+        lease.close();
+    }
+}
+async function installOwned(identity, parsed) {
+    const appUrl = runtimeAppOrigin(identity.binding, option(parsed, "app-url") || undefined);
+    runtimeProxyOrigin(identity.binding, appUrl, option(parsed, "proxy-url") || undefined);
+    let launcher = currentLauncher();
+    const backend = detectBackend(option(parsed, "mode") || "auto", {
+        platform: process.platform,
+        userSystemd: userSystemdAvailable,
+    });
+    const prefix = identity.binding.runtimeLabel === 'main' ? [] : [identity.binding.runtimeLabel === 'preview' ? 'preview' : 'dev'];
+    const selectors = selectorArguments(identity);
+    const keepaliveArgs = [...prefix, 'service', 'keepalive', ...selectors];
+    const runArgs = [...prefix, 'run', ...selectors, '--app-url', appUrl, ...forwarded(parsed, RUNTIME_OPTIONS.filter((key) => key !== 'app-url'))];
+    const existing = readRegistration(identity);
+    const owner = ownerFor(backend);
+    const metadata = JSON.parse(readFileSync(join(launcher.packageRoot, 'package.json'), 'utf8'));
+    const managed = backend !== 'portable' && identity.binding.runtimeLabel !== 'local' && metadata.name === 'amalgm'
+        && metadata.amalgmSource?.repository === 'amalgm-inc/amalgm-shell' && metadata.amalgmSource.branch === identity.binding.branch
+        && /^[a-f0-9]{40}$/.test(metadata.amalgmSource.commit) && metadata.amalgmRuntime?.schema === 1;
+    const bootstrap = managed ? initializeBootstrap({ serviceDir: identity.serviceDir, controllerLease: controllerLeaseFile(identity),
+        current: { node: launcher.node, bin: launcher.bin, args: keepaliveArgs }, limits: {
+            maxAttempts: CHILD_RESTART_POLICY.maxRestarts + 1, initialDelayMs: CHILD_RESTART_POLICY.initialDelayMs,
+            maxDelayMs: CHILD_RESTART_POLICY.maxDelayMs, stableAfterMs: CHILD_RESTART_POLICY.stableAfterMs,
+            readyTimeoutMs: readyDeadlineMs(CHILD_HEALTH_POLICY), healthIntervalMs: CHILD_HEALTH_POLICY.intervalMs,
+            healthTimeoutMs: CHILD_HEALTH_POLICY.timeoutMs, maxHealthFailures: CHILD_HEALTH_POLICY.maxFailures, stopGraceMs: 30_000,
+        } }) : null;
+    if (bootstrap) {
+        // A reinstall through an older compatible CLI cannot replace an already
+        // selected managed controller with that CLI's immutable package generation.
+        const packageRoot = resolve(dirname(bootstrap.current.bin), '..');
+        const selected = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8'));
+        if (selected.name !== 'amalgm' || selected.amalgmSource?.branch !== identity.binding.branch)
+            throw new Error('The selected controller belongs to another managed package');
+        launcher = { node: bootstrap.current.node, bin: bootstrap.current.bin, packageRoot, packageVersion: selected.version };
+    }
+    if (existing && existing.backend === backend && (!bootstrap || existing.files.bootstrap === bootstrap.bin)
+        && registrationSatisfies(existing, { launcher, backend, run_args: runArgs })) {
+        if (backend !== "portable")
+            await owner.start(identity, existing);
+        report("installed", { label: identity.label, backend, unchanged: true, files: existing.files });
+    }
+    else {
+        if (existing && existing.backend !== backend)
+            await ownerFor(existing.backend).uninstall(identity);
+        const registration = {
+            binding: identity.binding, user: identity.user, amalgm_root: identity.amalgmRoot,
+            backend,
+            label: identity.label,
+            package_root: launcher.packageRoot,
+            package_version: launcher.packageVersion,
+            node: launcher.node,
+            bin: launcher.bin,
+            runtime_host: "node",
+            local_only: false,
+            files: { ...owner.files(identity), ...(bootstrap ? { bootstrap: bootstrap.bin } : {}) },
+            keepalive_args: keepaliveArgs,
+            run_args: runArgs,
+            installed_at: new Date().toISOString(),
+        };
+        writeRegistration(identity, registration);
+        await owner.install(identity, bootstrap ? { ...launcher, node: bootstrap.node, bin: bootstrap.bin } : launcher, bootstrap ? bootstrap.args : keepaliveArgs);
+        report("installed", { label: identity.label, backend, unchanged: false, files: registration.files });
+    }
+    if (backend === "portable") {
+        process.stdout.write(`Portable mode has no OS owner. Run this in the foreground as your entrypoint:\n  ${portableEntrypoint(identity, keepaliveArgs)}\n`);
+    }
+    return 0;
+}
+async function status(identity) {
+    const registration = readRegistration(identity);
+    return {
+        label: identity.label,
+        backend: registration?.backend ?? null,
+        registered: registration !== null,
+        launcher: registration ? {
+            node: registration.node,
+            nodeExists: existsSync(registration.node),
+            bin: registration.bin,
+            binExists: existsSync(registration.bin),
+            version: registration.package_version,
+        } : null,
+        owner: registration ? await ownerFor(registration.backend).status(identity) : null,
+        keepalive: await keepaliveStatus(identity),
+        serviceDir: identity.serviceDir,
+    };
+}
+/** Remove OS launch registration, retaining logs and durable lease files. */
+async function uninstall(identity) {
+    const registration = readRegistration(identity);
+    if (registration)
+        await ownerFor(registration.backend).uninstall(identity);
+    for (const backend of ALL_BACKENDS) {
+        const owner = ownerFor(backend);
+        if (Object.values(owner.files(identity)).some((file) => existsSync(file)))
+            await owner.uninstall(identity);
+    }
+    await stopKeepalive(identity);
+    rmSync(registrationFile(identity), { force: true });
+}
+function selectorArguments(identity) {
+    const args = ['--user', identity.user, '--home', identity.home, '--amalgm-root', identity.amalgmRoot, '--branch', identity.binding.branch];
+    if (identity.binding.localSession)
+        args.push('--local-session', identity.binding.localSession);
+    return args;
+}
+function forwarded(parsed, keys) {
+    return keys.flatMap((key) => (option(parsed, key) ? [`--${key}`, option(parsed, key)] : []));
+}
+function report(event, details) {
+    process.stdout.write(`AMALGM_SERVICE ${JSON.stringify({ event, ...details })}\n`);
+}
+function helpText() {
+    return `amalgm service — keep the runtime running whenever you are logged in
+
+Usage:
+  amalgm service install   --user EMAIL [--mode auto|launchd|systemd|windows|portable]
+  amalgm service start     --user EMAIL
+  amalgm service stop      --user EMAIL
+  amalgm service retry     --user EMAIL     (resume a parked runtime)
+  amalgm service status    --user EMAIL
+  amalgm service uninstall --user EMAIL
+  amalgm service keepalive --user EMAIL     (what the OS runs; the foreground entrypoint in portable mode)
+
+install registers one keepalive with the OS and starts it: a LaunchAgent on
+macOS, a systemd user unit on Linux, a per-user Task Scheduler owner on
+Windows. The keepalive runs "amalgm run", retries crashes with capped backoff,
+and parks repeated failures while status and control remain available.
+Sustained ready health resets the allowance. Start and reinstall preserve it;
+retry explicitly grants a parked runtime a fresh allowance.
+Options given to install (--runtime-label, --home, --amalgm-root, --app-url,
+--branch, --proxy-url, --port) are the options the service will run with.
+`;
+}
+//# sourceMappingURL=cli.js.map

package/dist/service/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/service/cli.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEtG,OAAO,EAAE,MAAM,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,GAIjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AACjG,MAAM,YAAY,GAAuB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACvF,yEAAyE;AACzE,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAEzF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB,EAAE,eAA6B,MAAM;IAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,OAAO,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,GAAG,OAAO;YACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,SAAS;YACzC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,SAAS;SACvD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;YAAE,OAAO,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,MAAM,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,MAAM,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxF,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,KAAK,wCAAwC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1I,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;oBAClG,MAAM,IAAI,KAAK,CAAC,oHAAoH,CAAC,CAAC;gBACxI,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAC1C,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAChE,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;;YACrE,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QACrH,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAyB,EAAE,MAAuB;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,QAAQ,CAAC,UAAU,SAAS,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACvG,IAAI,CAAC;QAAC,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;YAC5C,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAyB,EAAE,MAAuB;IAC5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,CAAC;IAC1F,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC;IACvF,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE;QAC9D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,oBAAoB;KAClC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjI,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,OAAO,KAAK,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;WAC5G,QAAQ,CAAC,YAAY,EAAE,UAAU,KAAK,yBAAyB,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;WAC3H,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE,MAAM,KAAK,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,mBAAmB,CAAC,QAAQ,CAAC;QAC/H,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE;YAChF,WAAW,EAAE,oBAAoB,CAAC,WAAW,GAAG,CAAC,EAAE,cAAc,EAAE,oBAAoB,CAAC,cAAc;YACtG,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,aAAa,EAAE,oBAAoB,CAAC,aAAa;YAC9F,cAAc,EAAE,eAAe,CAAC,mBAAmB,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,UAAU;YACtG,eAAe,EAAE,mBAAmB,CAAC,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM;SACxH,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACd,IAAI,SAAS,EAAE,CAAC;QACd,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3K,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,GAAG,CAAC;WACrG,qBAAqB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/E,IAAI,OAAO,KAAK,UAAU;YAAE,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnG,MAAM,YAAY,GAAiB;YACjC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU;YAChF,OAAO;YACP,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,YAAY,EAAE,QAAQ,CAAC,WAAW;YAClC,eAAe,EAAE,QAAQ,CAAC,cAAc;YACxC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACvF,cAAc,EAAE,aAAa;YAC7B,QAAQ,EAAE,OAAO;YACjB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;QACF,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAC5G,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oFAAoF,kBAAkB,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5J,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAyB;IAC7C,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,IAAI;QACtC,UAAU,EAAE,YAAY,KAAK,IAAI;QACjC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC;YACzC,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC;YACvC,OAAO,EAAE,YAAY,CAAC,eAAe;SACtC,CAAC,CAAC,CAAC,IAAI;QACR,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAClF,SAAS,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC;QAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,SAAS,CAAC,QAAyB;IAChD,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,YAAY;QAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3E,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAyB;IAClD,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3I,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,MAAuB,EAAE,IAAuB;IACjE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,OAA0C;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,QAAQ;IACf,OAAO;;;;;;;;;;;;;;;;;;;CAmBR,CAAC;AACF,CAAC"}

package/dist/service/control.d.ts

@@ -0,0 +1,38 @@
+import { type RuntimeBinding } from '@amalgm/core/binding';
+import type { ServiceIdentity } from './registration.js';
+import type { RecoveryState } from './recovery.js';
+export interface ControllerState {
+    readonly binding: RuntimeBinding;
+    readonly user: string;
+    readonly instanceId: string;
+    readonly pid: number;
+    readonly bootstrapPid?: number | null;
+    readonly update?: unknown;
+    readonly port: number;
+    readonly token: string;
+    readonly childPid: number | null;
+    readonly restarts: number;
+    readonly phase: 'starting' | 'running' | 'backoff' | 'parked' | 'stopping';
+    readonly recovery: RecoveryState;
+}
+export declare const controllerStateFile: (identity: ServiceIdentity) => string;
+export declare const controllerLeaseFile: (identity: ServiceIdentity) => string;
+/** A recorded port/PID is an address, not proof. Authenticate the live owner. */
+export declare function controllerRequest(identity: ServiceIdentity, action: 'status' | 'stop' | 'retry'): Promise<ControllerState | null>;
+export declare function keepaliveStatus(identity: ServiceIdentity): Promise<{
+    alive: boolean;
+    binding: RuntimeBinding;
+    user: string;
+    instanceId: string;
+    pid: number;
+    bootstrapPid?: number | null;
+    update?: unknown;
+    port: number;
+    token: string;
+    childPid: number | null;
+    restarts: number;
+    phase: "starting" | "running" | "backoff" | "parked" | "stopping";
+    recovery: RecoveryState;
+} | null>;
+/** Stop only the authenticated owner. Never signal a remembered PID. */
+export declare function stopKeepalive(identity: ServiceIdentity, timeoutMs?: number): Promise<void>;

package/dist/service/control.js

@@ -0,0 +1,68 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { runtimeBindingsMatch } from '@amalgm/core/binding';
+import { readJson } from '../filesystem.js';
+import { processLeaseHeld } from '../installation/lease.js';
+export const controllerStateFile = (identity) => join(identity.serviceDir, 'controller.json');
+export const controllerLeaseFile = (identity) => join(identity.home, '.amalgm', 'owners', `service-${identity.labelScope}.sqlite`);
+/** A recorded port/PID is an address, not proof. Authenticate the live owner. */
+export async function controllerRequest(identity, action) {
+    const state = readJson(controllerStateFile(identity));
+    if (!state || !runtimeBindingsMatch(state.binding, identity.binding) || state.user !== identity.user
+        || !Number.isInteger(state.port) || state.port < 1 || state.port > 65535
+        || typeof state.token !== 'string' || state.token.length < 32 || typeof state.instanceId !== 'string')
+        return null;
+    try {
+        const response = await fetch(`http://127.0.0.1:${state.port}/${action}`, {
+            method: action === 'status' ? 'GET' : 'POST',
+            headers: { authorization: `Bearer ${state.token}`,
+                'x-amalgm-controller-identity': JSON.stringify({ instanceId: state.instanceId, user: identity.user, binding: identity.binding }) },
+            signal: AbortSignal.timeout(2_000), redirect: 'error',
+        });
+        if (!response.ok) {
+            await response.body?.cancel();
+            return null;
+        }
+        if (!response.body)
+            return null;
+        const chunks = [];
+        let size = 0;
+        const reader = response.body.getReader();
+        for (;;) {
+            const { value, done } = await reader.read();
+            if (done)
+                break;
+            size += value.length;
+            if (size > 16_384) {
+                await reader.cancel();
+                return null;
+            }
+            chunks.push(value);
+        }
+        const live = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        return live.instanceId === state.instanceId && live.user === state.user
+            && runtimeBindingsMatch(live.binding, identity.binding) ? { ...live, token: '' } : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function keepaliveStatus(identity) {
+    const state = await controllerRequest(identity, 'status');
+    return state ? { ...state, alive: true } : null;
+}
+/** Stop only the authenticated owner. Never signal a remembered PID. */
+export async function stopKeepalive(identity, timeoutMs = 30_000) {
+    const leaseFile = controllerLeaseFile(identity);
+    if (!existsSync(leaseFile) || !processLeaseHeld(leaseFile))
+        return;
+    if (!await controllerRequest(identity, 'stop'))
+        throw new Error('The runtime controller is occupied but unavailable; ownership was not changed.');
+    const deadline = Date.now() + timeoutMs;
+    while (processLeaseHeld(leaseFile)) {
+        if (Date.now() >= deadline)
+            throw new Error('The runtime controller did not finish stopping; ownership was not changed.');
+        await new Promise((resolve) => setTimeout(resolve, 50));
+    }
+}
+//# sourceMappingURL=control.js.map

package/dist/service/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/service/control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAmB5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAyB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAyB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,QAAQ,CAAC,UAAU,SAAS,CAAC,CAAC;AAEpJ,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAyB,EAAE,MAAmC;IACpG,MAAM,KAAK,GAAG,QAAQ,CAAkB,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;WAC/F,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK;WACrE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,KAAK,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE;YACvE,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE;gBAC/C,8BAA8B,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE;YACpI,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoB,CAAC;QACnF,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eAClE,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAyB;IAC7D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAyB,EAAE,SAAS,GAAG,MAAM;IAC/E,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO;IACnE,IAAI,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAClJ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAC1H,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/service/index.d.ts

@@ -0,0 +1,9 @@
+/** OS adapters start one leased controller; it owns one independent runtime.
+ * UI shutdown never stops that controller. Status and stop authenticate the
+ * live controller; lock age and remembered PIDs never authorize takeover. */
+export { runServiceCli } from './cli.js';
+export { serviceIdentity, detectBackend, currentLauncher } from './registration.js';
+export { keepaliveStatus, stopKeepalive } from './control.js';
+export { renderLaunchdPlist } from './launchd.js';
+export { renderSystemdUnit } from './systemd.js';
+export { windowsControllerAction } from './windows-task.js';

package/dist/service/index.js

@@ -0,0 +1,10 @@
+/** OS adapters start one leased controller; it owns one independent runtime.
+ * UI shutdown never stops that controller. Status and stop authenticate the
+ * live controller; lock age and remembered PIDs never authorize takeover. */
+export { runServiceCli } from './cli.js';
+export { serviceIdentity, detectBackend, currentLauncher } from './registration.js';
+export { keepaliveStatus, stopKeepalive } from './control.js';
+export { renderLaunchdPlist } from './launchd.js';
+export { renderSystemdUnit } from './systemd.js';
+export { windowsControllerAction } from './windows-task.js';
+//# sourceMappingURL=index.js.map

package/dist/service/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":"AAAA;;6EAE6E;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/service/keepalive.d.ts

@@ -0,0 +1,18 @@
+import { type ChildHealthPolicy, type ChildRestartPolicy } from '@amalgm/core/supervision';
+import { type ServiceIdentity } from './registration.js';
+export declare const STOP_GRACE_MS = 25000;
+export declare const LOG_LIMIT_BYTES: number;
+interface ControllerPolicy {
+    readonly restart?: ChildRestartPolicy;
+    readonly health?: ChildHealthPolicy;
+    readonly stopGraceMs?: number;
+}
+/** One leased controller supervises one runtime over IPC. The optional policy
+ * lets process examinations use short clocks; the CLI always uses Core defaults. */
+export declare function runKeepalive(identity: ServiceIdentity, policy?: ControllerPolicy): Promise<number>;
+/** Two bounded log files; even a single oversized write obeys the limit. */
+export declare function openRotatingLog(file: string, limitBytes: number): {
+    write(chunk: Buffer | string): void;
+    close(): void;
+};
+export {};