@beeos-ai/device-agent 0.4.0

package/dist/fleet/installer/launchd-mac.js

@@ -0,0 +1,291 @@
+/**
+ * macOS-only launchd integration for `device-agent fleet enable / disable`.
+ *
+ * The fleet package intentionally does NOT depend on `@beeos/core` — that
+ * would pull the entire web monorepo into the runtime. Instead, this file
+ * mirrors the renderer + bootstrap sequence in `web/packages/core/src/services/launchd.ts`
+ * for the single label `ai.beeos.device-fleet` plus the migration sweep over
+ * legacy per-device labels.
+ *
+ * Restart policy: the rendered plist always sets `KeepAlive: true` —
+ * if the fleet process exits, every connected device goes silent, so
+ * we want unconditional restarts capped by `ThrottleInterval` (10s).
+ *
+ * Bootstrap sequence: same pattern as `web/packages/core` — `bootout`
+ * any prior copy, then `bootstrap gui/<uid>` and `kickstart -k`. We
+ * fall back to legacy `launchctl load -w` on macOS versions that
+ * lack `bootstrap`.
+ *
+ * `migrate-from-attach` removes EVERY plist that matches one of the
+ * legacy per-device prefixes (`ai.beeos.device-agent-` /
+ * `ai.beeos.scrcpy-bridge-`). Those were how `beeos device attach`
+ * used to register supervision before the fleet existed; once the
+ * user opts into fleet mode they MUST be removed or we'd double-spawn
+ * device-agent for every adb device.
+ */
+import { execFile } from "node:child_process";
+import * as fs from "node:fs/promises";
+import * as fsSync from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { promisify } from "node:util";
+const execFileP = promisify(execFile);
+const LAUNCH_AGENTS_DIR = path.join(os.homedir(), "Library", "LaunchAgents");
+/** Legacy per-device labels written by `beeos device attach` v0.3.x. */
+export const LEGACY_DEVICE_AGENT_PREFIX = "ai.beeos.device-agent-";
+export const LEGACY_SCRCPY_BRIDGE_PREFIX = "ai.beeos.scrcpy-bridge-";
+/**
+ * Render the plist file for a `FleetServiceSpec` and bootstrap it into
+ * the user's GUI session. Idempotent — calling twice in a row leaves
+ * the same loaded service running with the latest plist.
+ */
+export async function installFleetLaunchd(spec) {
+    if (process.platform !== "darwin") {
+        throw new Error(`installFleetLaunchd is macOS-only (platform=${process.platform}). ` +
+            "Linux / Windows fleet installation is not yet supported — run `device-agent fleet start` manually.");
+    }
+    const plistPath = path.join(LAUNCH_AGENTS_DIR, `${spec.label}.plist`);
+    await fs.mkdir(path.dirname(plistPath), { recursive: true });
+    await fs.mkdir(path.dirname(spec.logFile), { recursive: true });
+    await fs.writeFile(plistPath, renderFleetPlist(spec), { mode: 0o644 });
+    const warnings = [];
+    let bootstrapped = false;
+    const uid = process.getuid?.();
+    if (uid === undefined) {
+        warnings.push("process.getuid() unavailable; skipped launchctl bootstrap (plist still written).");
+        return { plistPath, bootstrapped: false, warnings };
+    }
+    // Bootstrap sequence: best-effort bootout (ignore "Service not loaded"),
+    // then bootstrap+kickstart. Mirrors web/packages/core/services/launchd.ts.
+    //
+    // macOS Sonoma+ caveat: `bootout` is asynchronous, so a `bootstrap`
+    // issued immediately after sometimes fails with `5: Input/output
+    // error` while launchd is still tearing down the previous service.
+    // We give launchd a tiny grace window then retry once before falling
+    // back to `load -w`.
+    try {
+        await execFileP("launchctl", ["bootout", `gui/${uid}/${spec.label}`]);
+    }
+    catch {
+        /* not previously loaded — fine */
+    }
+    const tryBootstrap = async () => {
+        try {
+            await execFileP("launchctl", ["bootstrap", `gui/${uid}`, plistPath]);
+            return { ok: true };
+        }
+        catch (e) {
+            return { ok: false, err: e instanceof Error ? e.message : String(e) };
+        }
+    };
+    let bootstrapResult = await tryBootstrap();
+    if (!bootstrapResult.ok && /Input\/output error/i.test(bootstrapResult.err)) {
+        // Known launchd race after bootout. Wait 250ms and retry once.
+        await new Promise((resolve) => setTimeout(resolve, 250));
+        bootstrapResult = await tryBootstrap();
+    }
+    if (bootstrapResult.ok) {
+        bootstrapped = true;
+    }
+    else {
+        warnings.push(`launchctl bootstrap failed: ${bootstrapResult.err}; trying legacy load -w`);
+        try {
+            await execFileP("launchctl", ["load", "-w", plistPath]);
+            bootstrapped = true;
+        }
+        catch (legacyErr) {
+            const legacyMsg = legacyErr instanceof Error ? legacyErr.message : String(legacyErr);
+            warnings.push(`launchctl load -w also failed: ${legacyMsg}`);
+        }
+    }
+    if (bootstrapped) {
+        try {
+            await execFileP("launchctl", ["kickstart", "-k", `gui/${uid}/${spec.label}`]);
+        }
+        catch {
+            /* harmless on first install */
+        }
+    }
+    return { plistPath, bootstrapped, warnings };
+}
+/**
+ * Stop and remove the `ai.beeos.device-fleet` plist. Returns
+ * `removed: false` when nothing was installed (idempotent).
+ */
+export async function uninstallFleetLaunchd(label) {
+    const plistPath = path.join(LAUNCH_AGENTS_DIR, `${label}.plist`);
+    const warnings = [];
+    const existed = fsSync.existsSync(plistPath);
+    const uid = process.getuid?.();
+    if (uid !== undefined) {
+        try {
+            await execFileP("launchctl", ["bootout", `gui/${uid}/${label}`]);
+        }
+        catch {
+            try {
+                await execFileP("launchctl", ["unload", "-w", plistPath]);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+    else {
+        try {
+            await execFileP("launchctl", ["unload", "-w", plistPath]);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    if (existed) {
+        try {
+            await fs.unlink(plistPath);
+        }
+        catch (e) {
+            warnings.push(`failed to delete ${plistPath}: ${e.message}`);
+        }
+    }
+    return { removed: existed, plistPath, warnings };
+}
+/**
+ * Sweep `~/Library/LaunchAgents/` for legacy per-device plists left
+ * behind by older `beeos device attach`, unload them via launchctl,
+ * and delete the files. The fleet supersedes them all.
+ *
+ * No-op when the directory doesn't exist (fresh install) or no
+ * matching files are found.
+ */
+export async function migrateFromAttach() {
+    const removedDeviceAgents = [];
+    const removedScrcpyBridges = [];
+    const warnings = [];
+    let entries;
+    try {
+        entries = await fs.readdir(LAUNCH_AGENTS_DIR);
+    }
+    catch (e) {
+        const code = e.code;
+        if (code === "ENOENT")
+            return { removedDeviceAgents, removedScrcpyBridges, warnings };
+        warnings.push(`could not list ${LAUNCH_AGENTS_DIR}: ${e.message}`);
+        return { removedDeviceAgents, removedScrcpyBridges, warnings };
+    }
+    const uid = process.getuid?.();
+    for (const file of entries) {
+        if (!file.endsWith(".plist"))
+            continue;
+        const label = file.slice(0, -".plist".length);
+        const isDeviceAgent = label.startsWith(LEGACY_DEVICE_AGENT_PREFIX);
+        const isScrcpyBridge = label.startsWith(LEGACY_SCRCPY_BRIDGE_PREFIX);
+        if (!isDeviceAgent && !isScrcpyBridge)
+            continue;
+        const plistPath = path.join(LAUNCH_AGENTS_DIR, file);
+        if (uid !== undefined) {
+            try {
+                await execFileP("launchctl", ["bootout", `gui/${uid}/${label}`]);
+            }
+            catch {
+                try {
+                    await execFileP("launchctl", ["unload", "-w", plistPath]);
+                }
+                catch {
+                    /* ignore — likely never loaded */
+                }
+            }
+        }
+        else {
+            try {
+                await execFileP("launchctl", ["unload", "-w", plistPath]);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        try {
+            await fs.unlink(plistPath);
+            if (isDeviceAgent)
+                removedDeviceAgents.push(label);
+            else
+                removedScrcpyBridges.push(label);
+        }
+        catch (e) {
+            warnings.push(`failed to delete ${plistPath}: ${e.message}`);
+        }
+    }
+    return { removedDeviceAgents, removedScrcpyBridges, warnings };
+}
+/**
+ * Render a launchd plist for a `FleetServiceSpec`.
+ *
+ * Exported for unit tests — the full byte-for-byte XML is the contract
+ * we ship to launchd, so any change MUST surface as a test diff.
+ */
+export function renderFleetPlist(spec) {
+    const args = [spec.command, ...spec.args]
+        .map((a) => `    <string>${escapeXml(a)}</string>`)
+        .join("\n");
+    const env = spec.env ?? {};
+    const envEntries = Object.entries(env);
+    // Thread a known-good macOS PATH through the plist so launchd-spawned
+    // children can resolve `node` (when `command` itself is absolute, the
+    // children we spawn — adb, scrcpy-bridge — still need a sane PATH).
+    const baseMacPath = "/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin";
+    if (!envEntries.some(([k]) => k === "PATH")) {
+        envEntries.unshift(["PATH", baseMacPath]);
+    }
+    const envXml = envEntries
+        .map(([k, v]) => `    <key>${escapeXml(k)}</key>\n    <string>${escapeXml(v)}</string>`)
+        .join("\n");
+    const restart = spec.restart ?? "on-failure";
+    let keepAliveXml = "";
+    if (restart === "always") {
+        keepAliveXml = "  <key>KeepAlive</key>\n  <true/>\n";
+    }
+    else if (restart === "on-failure") {
+        keepAliveXml =
+            "  <key>KeepAlive</key>\n  <dict>\n    <key>SuccessfulExit</key>\n    <false/>\n  </dict>\n";
+    }
+    const cwdXml = spec.cwd
+        ? `  <key>WorkingDirectory</key>\n  <string>${escapeXml(spec.cwd)}</string>\n`
+        : "";
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${escapeXml(spec.label)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args}
+  </array>
+  <key>RunAtLoad</key>
+  <true/>
+${keepAliveXml}  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>ProcessType</key>
+  <string>Background</string>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(spec.logFile)}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(spec.logFile)}</string>
+${cwdXml}  <key>EnvironmentVariables</key>
+  <dict>
+${envXml}
+  </dict>
+</dict>
+</plist>
+`;
+}
+function escapeXml(s) {
+    return s
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+/** Path that `installFleetLaunchd` writes to. Exported for tests / `fleet logs`. */
+export function fleetPlistPath(label) {
+    return path.join(LAUNCH_AGENTS_DIR, `${label}.plist`);
+}
+//# sourceMappingURL=launchd-mac.js.map

package/dist/fleet/installer/launchd-mac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-mac.js","sourceRoot":"","sources":["../../../src/fleet/installer/launchd-mac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEtC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAE7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AACnE,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAoBrE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAsB;IAEtB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,+CAA+C,OAAO,CAAC,QAAQ,KAAK;YAClE,oGAAoG,CACvG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC;IACtE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CACX,kFAAkF,CACnF,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACtD,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,EAAE;IACF,oEAAoE;IACpE,iEAAiE;IACjE,mEAAmE;IACnE,qEAAqE;IACrE,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,IAAwD,EAAE;QAClF,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,eAAe,GAAG,MAAM,YAAY,EAAE,CAAC;IAC3C,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,+DAA+D;QAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/D,eAAe,GAAG,MAAM,YAAY,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;QACvB,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CACX,+BAA+B,eAAe,CAAC,GAAG,yBAAyB,CAC5E,CAAC;QACF,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YACxD,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,SAAkB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,kCAAkC,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAE/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,oBAAoB,SAAS,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;QACtF,QAAQ,CAAC,IAAI,CAAC,kBAAkB,iBAAiB,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QACrE,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc;YAAE,SAAS;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAErD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,kCAAkC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,aAAa;gBAAE,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAC9C,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,oBAAoB,SAAS,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAsB;IACrD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;SAClD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,WAAW,GAAG,gDAAgD,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;QAC5C,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,MAAM,GAAG,UAAU;SACtB,GAAG,CACF,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,YAAY,SAAS,CAAC,CAAC,CAAC,uBAAuB,SAAS,CAAC,CAAC,CAAC,WAAW,CACzE;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC7C,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,YAAY,GAAG,qCAAqC,CAAC;IACvD,CAAC;SAAM,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QACpC,YAAY;YACV,4FAA4F,CAAC;IACjG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;QACrB,CAAC,CAAC,4CAA4C,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa;QAC9E,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;YAKG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;;;EAG/B,IAAI;;;;EAIJ,YAAY;;;;;YAKF,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;;YAEvB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;EACjC,MAAM;;EAEN,MAAM;;;;CAIP,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;AACxD,CAAC"}

package/dist/fleet/installer/service-spec.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Fleet OS-service spec — input to `installer/install.ts`.
+ *
+ * This is a deliberately tiny structural type: the device-agent
+ * package does NOT depend on `@beeos/core`'s richer `ServiceSpec`
+ * shape because that would pull the entire web monorepo into the
+ * fleet runtime. Both shapes converge on the same plist, but we own
+ * the rendering inside `installer/launchd-mac.ts` so the fleet stays
+ * a closed, single-purpose package.
+ *
+ * Fields:
+ *   - `label`: launchd label written to the plist `<key>Label</key>` and
+ *     also used as the filename (`<label>.plist`).
+ *   - `command` / `args`: ProgramArguments. `command` MUST be an absolute
+ *     path or a bare name resolvable on the user's PATH at install time.
+ *     We do **not** auto-absolutize here — the install flow does, so
+ *     tests can keep using bare names.
+ *   - `env`: optional env vars merged into `EnvironmentVariables`.
+ *   - `restart`: `"always"` keeps the process alive across normal exits;
+ *     `"on-failure"` (default) only restarts on non-zero exit.
+ *   - `logFile`: absolute path for both stdout and stderr (single file —
+ *     launchd merges them when both keys point at the same path).
+ *   - `cwd`: optional working directory.
+ */
+export type FleetServiceLabel = `ai.beeos.${string}`;
+export type FleetRestartPolicy = "always" | "on-failure" | "never";
+export interface FleetServiceSpec {
+    label: FleetServiceLabel;
+    command: string;
+    args: string[];
+    env?: Record<string, string>;
+    restart?: FleetRestartPolicy;
+    logFile: string;
+    cwd?: string;
+}
+export declare const FLEET_LABEL: FleetServiceLabel;
+export interface BuildFleetSpecInput {
+    /**
+     * Absolute path to the node binary (or any wrapper) we ask launchd
+     * to invoke. Defaults to `process.execPath` — the very binary that's
+     * running the `fleet enable` command — so the daemon is guaranteed
+     * to use a node version compatible with the installed sources.
+     */
+    nodeBin?: string;
+    /**
+     * Absolute path to the device-agent CLI entrypoint. Required so the
+     * plist doesn't depend on the user's PATH at launchd boot time
+     * (which differs from a login shell on macOS).
+     */
+    cliEntry: string;
+    /**
+     * Extra env vars to inject — typically just `AGENT_GATEWAY_URL` and
+     * the fleet tuning knobs (`FLEET_ADB_GRACE_MS`, etc.) that the user
+     * passed on the command line.
+     */
+    env?: Record<string, string>;
+    /** Override log path (defaults to `~/.beeos/logs/device-fleet.log`). */
+    logFile?: string;
+    /** Override `~/.beeos` location (mirrors what the daemon honours via `BEEOS_HOME`). */
+    beeosHome?: string;
+}
+/**
+ * Build the canonical `ai.beeos.device-fleet` spec.
+ *
+ * Why `restart: "always"`: the fleet daemon owns ALL device-agent
+ * supervision now — if it stays down, every connected device goes
+ * silent. launchd's `KeepAlive: true` is the simplest watchdog that
+ * matches the BFD-style failure model we want.
+ */
+export declare function buildFleetServiceSpec(input: BuildFleetSpecInput): FleetServiceSpec;

package/dist/fleet/installer/service-spec.js

@@ -0,0 +1,43 @@
+import * as os from "node:os";
+import * as path from "node:path";
+export const FLEET_LABEL = "ai.beeos.device-fleet";
+/**
+ * Resolve `~/.beeos`, honouring the same `BEEOS_HOME` override the
+ * daemon uses. Kept inline so the installer doesn't import the
+ * supervisor barrel (which would pull in adb sources etc.).
+ */
+function resolveBeeosHome(override) {
+    if (override && override.length > 0)
+        return override;
+    const env = process.env.BEEOS_HOME;
+    if (env && env.length > 0)
+        return env;
+    return path.join(os.homedir(), ".beeos");
+}
+/**
+ * Build the canonical `ai.beeos.device-fleet` spec.
+ *
+ * Why `restart: "always"`: the fleet daemon owns ALL device-agent
+ * supervision now — if it stays down, every connected device goes
+ * silent. launchd's `KeepAlive: true` is the simplest watchdog that
+ * matches the BFD-style failure model we want.
+ */
+export function buildFleetServiceSpec(input) {
+    const beeosHome = resolveBeeosHome(input.beeosHome);
+    const logFile = input.logFile ?? path.join(beeosHome, "logs", "device-fleet.log");
+    return {
+        label: FLEET_LABEL,
+        command: input.nodeBin ?? process.execPath,
+        args: [input.cliEntry, "fleet", "start"],
+        env: {
+            // Always thread BEEOS_HOME so the daemon resolves the same set of
+            // files (devices.json, fleet.json, key files) regardless of which
+            // user opened launchd's login session.
+            BEEOS_HOME: beeosHome,
+            ...(input.env ?? {}),
+        },
+        restart: "always",
+        logFile,
+    };
+}
+//# sourceMappingURL=service-spec.js.map

package/dist/fleet/installer/service-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-spec.js","sourceRoot":"","sources":["../../../src/fleet/installer/service-spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAyClC,MAAM,CAAC,MAAM,WAAW,GAAsB,uBAAuB,CAAC;AAgCtE;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACnC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA0B;IAC9D,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAClF,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ;QAC1C,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QACxC,GAAG,EAAE;YACH,kEAAkE;YAClE,kEAAkE;YAClE,uCAAuC;YACvC,UAAU,EAAE,SAAS;YACrB,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;SACrB;QACD,OAAO,EAAE,QAAQ;QACjB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/fleet/installer/spawn-env.d.ts

@@ -0,0 +1,45 @@
+export interface DeriveSpawnEnvOptions {
+    /** Absolute path to the device-agent CLI entry that the fleet plist will exec. */
+    cliEntry: string;
+    /** Override `~/.beeos` (matches the daemon's `BEEOS_HOME` semantics). */
+    beeosHome?: string;
+    /** Inject explicit env vars (CLI flags) — these take precedence over discovery. */
+    overrides?: Record<string, string | undefined>;
+    /** Snapshot of the current shell environment (defaults to `process.env`). */
+    currentEnv?: NodeJS.ProcessEnv;
+    /** Test hooks. */
+    fileExists?: (p: string) => Promise<boolean>;
+    whichBin?: (name: string) => Promise<string | null>;
+    readConfigToml?: (cfgPath: string) => Promise<ConfigToml | null>;
+}
+export interface ConfigToml {
+    agentGatewayUrl?: string;
+    bridgeUrl?: string;
+}
+/**
+ * Derive the env vars that should be threaded into the launchd
+ * `EnvironmentVariables` block for the fleet plist.
+ *
+ * Returns ONLY the keys that have a value — `installFleetLaunchd` will
+ * merge them with `BEEOS_HOME` (always) and `PATH` (defaulted to the
+ * minimal mac PATH if neither operator nor this function provides one).
+ */
+export declare function deriveFleetSpawnEnv(opts: DeriveSpawnEnvOptions): Promise<{
+    env: Record<string, string>;
+    warnings: string[];
+}>;
+/**
+ * Minimal `~/.beeos/config.toml` reader — only extracts the two keys
+ * we care about (`platform.agent_gateway_url`, `platform.bridge_url`).
+ *
+ * Keeping this inline avoids pulling `smol-toml` (or any other parser)
+ * into the device-agent runtime — `config.toml` is shaped exactly as
+ * the BeeOS CLI writes it: a single `[platform]` section with bare
+ * `key = "value"` lines. Comments and arrays are not supported here
+ * because they are not part of the file we own.
+ */
+export declare function defaultReadConfigToml(cfgPath: string): Promise<ConfigToml | null>;
+/**
+ * Pure parser exported for unit tests — operates on the file body text.
+ */
+export declare function parseConfigToml(text: string): ConfigToml;