@bytetrue/byspace 0.14.6 → 0.16.0

package/node_modules/@bytetrue/server/dist/server/web-ui/_expo/static/js/web/{indexeddb-attachment-store-d61d5dd974e90216cec99e62c343ffc7.js → indexeddb-attachment-store-a2e8491be0374dc2a52abfe002ecabe9.js}

@@ -1 +1 @@
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createIndexedDbAttachmentStore=function(){return{storageType:"web-indexeddb",async save(n){const o=n.id??(0,t.generateAttachmentId)(),s=Date.now(),{blob:c,mimeType:u}=await b(n),w=n.fileName??null,p=await l();try{await y(p,"readwrite",t=>t.put({id:o,blob:c,createdAt:s,fileName:w}))}finally{p.close()}return{id:o,mimeType:u,storageType:"web-indexeddb",storageKey:o,fileName:w,byteSize:c.size,createdAt:s}},async encodeBase64({attachment:n}){const o=await l();try{const s=await u(o,n.storageKey);return await(0,t.blobToBase64)(s)}finally{o.close()}},async resolvePreviewUrl({attachment:t}){const n=await l();try{const o=await u(n,t.storageKey);return URL.createObjectURL(o)}finally{n.close()}},async releasePreviewUrl({url:t}){URL.revokeObjectURL(t)},async delete({attachment:t}){const n=await l();try{await y(n,"readwrite",n=>n.delete(t.storageKey))}finally{n.close()}},async garbageCollect({referencedIds:t}){const n=await l();try{await new Promise((s,c)=>{const l=n.transaction(o,"readwrite"),y=l.objectStore(o).openCursor();y.addEventListener("error",()=>{c(y.error??new Error("Failed to iterate IndexedDB attachment store."))}),y.addEventListener("success",()=>{const n=y.result;if(!n)return void s();const o=String(n.key);t.has(o)||n.delete(),n.continue()}),l.addEventListener("error",()=>{c(l.error??new Error("Failed to garbage collect IndexedDB attachments."))})})}finally{n.close()}}}};var t=r(d[0]);const n="byspace-attachment-bytes",o="attachments",s=1;function c(){const t=globalThis.indexedDB;if(!t)throw new Error("IndexedDB is unavailable in this runtime.");return t}function l(){return new Promise((t,l)=>{const y=c().open(n,s);y.onupgradeneeded=()=>{const t=y.result;t.objectStoreNames.contains(o)||t.createObjectStore(o,{keyPath:"id"})},y.addEventListener("success",()=>{t(y.result)}),y.addEventListener("error",()=>{l(y.error??new Error("Failed to open attachment IndexedDB."))})})}function y(t,n,s){return new Promise((c,l)=>{const y=t.transaction(o,n),b=y.objectStore(o),u=s(b);u.addEventListener("success",()=>{c(u.result)}),u.addEventListener("error",()=>{l(u.error??new Error("IndexedDB transaction request failed."))}),y.addEventListener("error",()=>{l(y.error??new Error("IndexedDB transaction failed."))})})}async function b(n){const o=n.source;if("bytes"===o.kind){const s=(0,t.normalizeMimeType)(n.mimeType),c=new ArrayBuffer(o.bytes.byteLength);return new Uint8Array(c).set(o.bytes),{blob:new Blob([c],{type:s}),mimeType:s}}if("blob"===o.kind){const s=(0,t.normalizeMimeType)(n.mimeType??o.blob.type);return{blob:o.blob.type===s?o.blob:o.blob.slice(0,o.blob.size,s),mimeType:s}}if("data_url"===o.kind){const s=(0,t.parseDataUrl)(o.dataUrl),c=await fetch(o.dataUrl),l=await c.blob(),y=(0,t.normalizeMimeType)(n.mimeType??s.mimeType??l.type);return{blob:l.type===y?l:l.slice(0,l.size,y),mimeType:y}}const s=await fetch(o.uri),c=await s.blob(),l=(0,t.normalizeMimeType)(n.mimeType??c.type);return{blob:c.type===l?c:c.slice(0,c.size,l),mimeType:l}}async function u(t,n){const o=await y(t,"readonly",t=>t.get(n));if(!o?.blob)throw new Error(`Attachment ${n} was not found in IndexedDB.`);return o.blob}},4900,[4457]);
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createIndexedDbAttachmentStore=function(){return{storageType:"web-indexeddb",async save(n){const o=n.id??(0,t.generateAttachmentId)(),s=Date.now(),{blob:c,mimeType:u}=await b(n),w=n.fileName??null,p=await l();try{await y(p,"readwrite",t=>t.put({id:o,blob:c,createdAt:s,fileName:w}))}finally{p.close()}return{id:o,mimeType:u,storageType:"web-indexeddb",storageKey:o,fileName:w,byteSize:c.size,createdAt:s}},async encodeBase64({attachment:n}){const o=await l();try{const s=await u(o,n.storageKey);return await(0,t.blobToBase64)(s)}finally{o.close()}},async resolvePreviewUrl({attachment:t}){const n=await l();try{const o=await u(n,t.storageKey);return URL.createObjectURL(o)}finally{n.close()}},async releasePreviewUrl({url:t}){URL.revokeObjectURL(t)},async delete({attachment:t}){const n=await l();try{await y(n,"readwrite",n=>n.delete(t.storageKey))}finally{n.close()}},async garbageCollect({referencedIds:t}){const n=await l();try{await new Promise((s,c)=>{const l=n.transaction(o,"readwrite"),y=l.objectStore(o).openCursor();y.addEventListener("error",()=>{c(y.error??new Error("Failed to iterate IndexedDB attachment store."))}),y.addEventListener("success",()=>{const n=y.result;if(!n)return void s();const o=String(n.key);t.has(o)||n.delete(),n.continue()}),l.addEventListener("error",()=>{c(l.error??new Error("Failed to garbage collect IndexedDB attachments."))})})}finally{n.close()}}}};var t=r(d[0]);const n="byspace-attachment-bytes",o="attachments",s=1;function c(){const t=globalThis.indexedDB;if(!t)throw new Error("IndexedDB is unavailable in this runtime.");return t}function l(){return new Promise((t,l)=>{const y=c().open(n,s);y.onupgradeneeded=()=>{const t=y.result;t.objectStoreNames.contains(o)||t.createObjectStore(o,{keyPath:"id"})},y.addEventListener("success",()=>{t(y.result)}),y.addEventListener("error",()=>{l(y.error??new Error("Failed to open attachment IndexedDB."))})})}function y(t,n,s){return new Promise((c,l)=>{const y=t.transaction(o,n),b=y.objectStore(o),u=s(b);u.addEventListener("success",()=>{c(u.result)}),u.addEventListener("error",()=>{l(u.error??new Error("IndexedDB transaction request failed."))}),y.addEventListener("error",()=>{l(y.error??new Error("IndexedDB transaction failed."))})})}async function b(n){const o=n.source;if("bytes"===o.kind){const s=(0,t.normalizeMimeType)(n.mimeType),c=new ArrayBuffer(o.bytes.byteLength);return new Uint8Array(c).set(o.bytes),{blob:new Blob([c],{type:s}),mimeType:s}}if("blob"===o.kind){const s=(0,t.normalizeMimeType)(n.mimeType??o.blob.type);return{blob:o.blob.type===s?o.blob:o.blob.slice(0,o.blob.size,s),mimeType:s}}if("data_url"===o.kind){const s=(0,t.parseDataUrl)(o.dataUrl),c=await fetch(o.dataUrl),l=await c.blob(),y=(0,t.normalizeMimeType)(n.mimeType??s.mimeType??l.type);return{blob:l.type===y?l:l.slice(0,l.size,y),mimeType:y}}const s=await fetch(o.uri),c=await s.blob(),l=(0,t.normalizeMimeType)(n.mimeType??c.type);return{blob:c.type===l?c:c.slice(0,c.size,l),mimeType:l}}async function u(t,n){const o=await y(t,"readonly",t=>t.get(n));if(!o?.blob)throw new Error(`Attachment ${n} was not found in IndexedDB.`);return o.blob}},4902,[4458]);

package/node_modules/@bytetrue/server/dist/server/web-ui/_expo/static/js/web/{native-file-attachment-store-df0c0ebe8d233a5a74eddb59a110f00b.js → native-file-attachment-store-6ba28513708667bbad7dd5434a0f8d5b.js}

@@ -1,3 +1,3 @@
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createNativeFileAttachmentStore=function(){return(0,s.createLocalFileAttachmentStore)({storageType:"native-file",baseDirectoryName:"byspace-native-attachments",fileSystem:(0,t.createExpoAttachmentFileSystem)(),resolvePreviewUrl:async t=>t.storageKey.startsWith("file://")?t.storageKey:(0,o.isAbsolutePath)(t.storageKey)?t.storageKey.startsWith("/")?`file://${t.storageKey}`:t.storageKey.startsWith("\\\\")?`file:${t.storageKey.replace(/\\/g,"/")}`:`file:///${t.storageKey.replace(/\\/g,"/")}`:t.storageKey})};var t=r(d[0]),s=r(d[1]),o=r(d[2])},4901,[4902,4903,3675]);
-__d(function(g,r,i,a,m,_e,_d){"use strict";Object.defineProperty(_e,'__esModule',{value:!0}),_e.createExpoAttachmentFileSystem=function(){return{cacheDirectory:t.cacheDirectory,async getInfo(e){const n=await t.getInfoAsync(e);if(!n.exists)return{exists:!1};const c="number"==typeof n.size?n.size:null;return{exists:!0,isDirectory:n.isDirectory??!1,size:c}},async makeDirectory(e,n){await t.makeDirectoryAsync(e,n)},async writeBytes(t,n){new e.File(t).write(n)},async copy(e){await t.copyAsync(e)},readAsBase64:async e=>await t.readAsStringAsync(e,{encoding:t.EncodingType.Base64}),async delete(e,n){await t.deleteAsync(e,n)},listDirectory:async e=>await t.readDirectoryAsync(e)}};var e=r(_d[0]),t=(function(e){if(e&&e.__esModule)return e;var t={};return e&&Object.keys(e).forEach(function(n){var c=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,c.get?c:{enumerable:!0,get:function(){return e[n]}})}),t.default=e,t})(r(_d[1]))},4902,[3830,3838]);
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createLocalFileAttachmentStore=function(n){const{fileSystem:o}=n,l=o.cacheDirectory?`${o.cacheDirectory}${n.baseDirectoryName}/`:null;async function u(n){if(!l)throw new Error("Attachment file-system cacheDirectory is unavailable.");await c(o,l);const y=n.id??(0,t.generateAttachmentId)();let f;f="data_url"===n.source.kind?(0,t.parseDataUrl)(n.source.dataUrl).mimeType:"blob"===n.source.kind?n.source.blob.type:void 0;const u=(0,t.normalizeMimeType)(n.mimeType??f),p=n.fileName??null,w=s({fileName:p,mimeType:u}),U=Date.now(),b=`${l}${y}${w}`;return{id:y,mimeType:u,fileName:p,createdAt:U,targetUri:b,storageKey:(0,t.fileUriToPath)(b)}}return Object.assign({storageType:n.storageType,async save(t){const s=await u(t);await y({fileSystem:o,source:t.source,targetUri:s.targetUri,mimeType:s.mimeType});const c=await o.getInfo(s.targetUri),l=c.exists?c.size:null;return{id:s.id,mimeType:s.mimeType,storageType:n.storageType,storageKey:s.storageKey,fileName:s.fileName,byteSize:l,createdAt:s.createdAt}},encodeBase64:async({attachment:t})=>await o.readAsBase64(f(t)),resolvePreviewUrl:async({attachment:t})=>await n.resolvePreviewUrl(t)},n.releasePreviewUrl?{async releasePreviewUrl(t){await(n.releasePreviewUrl?.(t))}}:{},{async delete({attachment:t}){await o.delete(f(t),{idempotent:!0})},async garbageCollect({referencedIds:t}){if(!l)return;await c(o,l);const n=await o.listDirectory(l);await Promise.all(n.map(async n=>{const s=n.split(".",1)[0]??"";s&&!t.has(s)&&await o.delete(`${l}${n}`,{idempotent:!0})}))}})};var t=r(d[0]);const n={"image/png":".png","image/jpeg":".jpg","image/jpg":".jpg","image/gif":".gif","image/webp":".webp","image/avif":".avif","image/heic":".heic","image/heif":".heif","image/tiff":".tiff","image/bmp":".bmp","image/svg+xml":".svg"};function s(s){const c=(0,t.getFileExtensionFromName)(s.fileName);return c||(n[s.mimeType]??".img")}async function c(t,n){const s=await t.getInfo(n);s.exists&&s.isDirectory||await t.makeDirectory(n,{intermediates:!0})}async function o(t){const n=await fetch(t);return new Uint8Array(await n.arrayBuffer())}async function l(t){return new Uint8Array(await t.arrayBuffer())}async function y(n){if("file_uri"===n.source.kind){const s=(0,t.pathToFileUri)(n.source.uri);if(s===n.targetUri)return;return void await n.fileSystem.copy({from:s,to:n.targetUri})}let s;s="data_url"===n.source.kind?await o(n.source.dataUrl):"blob"===n.source.kind?await l(n.source.blob):n.source.bytes,await n.fileSystem.writeBytes(n.targetUri,s)}function f(n){return(0,t.pathToFileUri)(n.storageKey)}},4903,[4457]);
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createNativeFileAttachmentStore=function(){return(0,s.createLocalFileAttachmentStore)({storageType:"native-file",baseDirectoryName:"byspace-native-attachments",fileSystem:(0,t.createExpoAttachmentFileSystem)(),resolvePreviewUrl:async t=>t.storageKey.startsWith("file://")?t.storageKey:(0,o.isAbsolutePath)(t.storageKey)?t.storageKey.startsWith("/")?`file://${t.storageKey}`:t.storageKey.startsWith("\\\\")?`file:${t.storageKey.replace(/\\/g,"/")}`:`file:///${t.storageKey.replace(/\\/g,"/")}`:t.storageKey})};var t=r(d[0]),s=r(d[1]),o=r(d[2])},4903,[4904,4905,3675]);
+__d(function(g,r,i,a,m,_e,_d){"use strict";Object.defineProperty(_e,'__esModule',{value:!0}),_e.createExpoAttachmentFileSystem=function(){return{cacheDirectory:t.cacheDirectory,async getInfo(e){const n=await t.getInfoAsync(e);if(!n.exists)return{exists:!1};const c="number"==typeof n.size?n.size:null;return{exists:!0,isDirectory:n.isDirectory??!1,size:c}},async makeDirectory(e,n){await t.makeDirectoryAsync(e,n)},async writeBytes(t,n){new e.File(t).write(n)},async copy(e){await t.copyAsync(e)},readAsBase64:async e=>await t.readAsStringAsync(e,{encoding:t.EncodingType.Base64}),async delete(e,n){await t.deleteAsync(e,n)},listDirectory:async e=>await t.readDirectoryAsync(e)}};var e=r(_d[0]),t=(function(e){if(e&&e.__esModule)return e;var t={};return e&&Object.keys(e).forEach(function(n){var c=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,c.get?c:{enumerable:!0,get:function(){return e[n]}})}),t.default=e,t})(r(_d[1]))},4904,[3830,3838]);
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createLocalFileAttachmentStore=function(n){const{fileSystem:o}=n,l=o.cacheDirectory?`${o.cacheDirectory}${n.baseDirectoryName}/`:null;async function u(n){if(!l)throw new Error("Attachment file-system cacheDirectory is unavailable.");await c(o,l);const y=n.id??(0,t.generateAttachmentId)();let f;f="data_url"===n.source.kind?(0,t.parseDataUrl)(n.source.dataUrl).mimeType:"blob"===n.source.kind?n.source.blob.type:void 0;const u=(0,t.normalizeMimeType)(n.mimeType??f),p=n.fileName??null,w=s({fileName:p,mimeType:u}),U=Date.now(),b=`${l}${y}${w}`;return{id:y,mimeType:u,fileName:p,createdAt:U,targetUri:b,storageKey:(0,t.fileUriToPath)(b)}}return Object.assign({storageType:n.storageType,async save(t){const s=await u(t);await y({fileSystem:o,source:t.source,targetUri:s.targetUri,mimeType:s.mimeType});const c=await o.getInfo(s.targetUri),l=c.exists?c.size:null;return{id:s.id,mimeType:s.mimeType,storageType:n.storageType,storageKey:s.storageKey,fileName:s.fileName,byteSize:l,createdAt:s.createdAt}},encodeBase64:async({attachment:t})=>await o.readAsBase64(f(t)),resolvePreviewUrl:async({attachment:t})=>await n.resolvePreviewUrl(t)},n.releasePreviewUrl?{async releasePreviewUrl(t){await(n.releasePreviewUrl?.(t))}}:{},{async delete({attachment:t}){await o.delete(f(t),{idempotent:!0})},async garbageCollect({referencedIds:t}){if(!l)return;await c(o,l);const n=await o.listDirectory(l);await Promise.all(n.map(async n=>{const s=n.split(".",1)[0]??"";s&&!t.has(s)&&await o.delete(`${l}${n}`,{idempotent:!0})}))}})};var t=r(d[0]);const n={"image/png":".png","image/jpeg":".jpg","image/jpg":".jpg","image/gif":".gif","image/webp":".webp","image/avif":".avif","image/heic":".heic","image/heif":".heif","image/tiff":".tiff","image/bmp":".bmp","image/svg+xml":".svg"};function s(s){const c=(0,t.getFileExtensionFromName)(s.fileName);return c||(n[s.mimeType]??".img")}async function c(t,n){const s=await t.getInfo(n);s.exists&&s.isDirectory||await t.makeDirectory(n,{intermediates:!0})}async function o(t){const n=await fetch(t);return new Uint8Array(await n.arrayBuffer())}async function l(t){return new Uint8Array(await t.arrayBuffer())}async function y(n){if("file_uri"===n.source.kind){const s=(0,t.pathToFileUri)(n.source.uri);if(s===n.targetUri)return;return void await n.fileSystem.copy({from:s,to:n.targetUri})}let s;s="data_url"===n.source.kind?await o(n.source.dataUrl):"blob"===n.source.kind?await l(n.source.blob):n.source.bytes,await n.fileSystem.writeBytes(n.targetUri,s)}function f(n){return(0,t.pathToFileUri)(n.storageKey)}},4905,[4458]);

package/node_modules/@bytetrue/server/dist/server/web-ui/index.html

@@ -86,6 +86,6 @@
   <body>
     <noscript>You need to enable JavaScript to run this app.</noscript>
     <div id="root"></div>
-  <script src="/_expo/static/js/web/index-679e8946b965f52a7a27dc9c54f59a4c.js" defer></script>
+  <script src="/_expo/static/js/web/index-eade2661e21bbc08a50d56f1c6b0917a.js" defer></script>
 </body>
 </html>

package/node_modules/@bytetrue/server/dist/server/web-ui/manifest.json

@@ -15,13 +15,25 @@
       "src": "/pwa-icon-192.png",
       "sizes": "192x192",
       "type": "image/png",
-      "purpose": "any maskable"
+      "purpose": "any"
     },
     {
       "src": "/pwa-icon-512.png",
       "sizes": "512x512",
       "type": "image/png",
-      "purpose": "any maskable"
+      "purpose": "any"
+    },
+    {
+      "src": "/pwa-maskable-192.png",
+      "sizes": "192x192",
+      "type": "image/png",
+      "purpose": "maskable"
+    },
+    {
+      "src": "/pwa-maskable-512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "maskable"
     }
   ]
 }

package/node_modules/@bytetrue/server/dist/src/server/byspace-env.js

@@ -1,5 +1,7 @@
 const BYSPACE_NODE_ENV = "BYSPACE_NODE_ENV";
 const ELECTRON_RUN_AS_NODE = "ELECTRON_RUN_AS_NODE";
+// Shared with the installed Pi extension (which cannot import from here).
+export const PI_TERMINAL_HOOK_OWNER_PID_ENV_KEY = "BYSPACE_PI_TERMINAL_HOOK_OWNER_PID";
 const RUNTIME_CONTROL_ENV_KEYS = [
     BYSPACE_NODE_ENV,
     "BYSPACE_DESKTOP_MANAGED",
@@ -7,6 +9,13 @@ const RUNTIME_CONTROL_ENV_KEYS = [
     ELECTRON_RUN_AS_NODE,
     "ELECTRON_NO_ATTACH_CONSOLE",
     "ESBUILD_BINARY_PATH",
+    // Written into `process.env` by the Pi terminal-activity extension so child Pi
+    // processes do not register a second reporter for the same terminal. If it
+    // survives into a fresh terminal or agent, that Pi process sees a marker whose
+    // value is a stale pid, concludes it is an inherited child, and registers no
+    // handlers at all — the terminal then never reports running/idle. It is
+    // per-process state, never inherited. See docs/terminal-activity.md.
+    PI_TERMINAL_HOOK_OWNER_PID_ENV_KEY,
 ];
 function buildInternalProcessEnv(baseEnv) {
     return { ...baseEnv };

package/node_modules/@bytetrue/server/dist/src/server/daemon-config-store.js

@@ -1,5 +1,7 @@
 import { loadPersistedConfig, savePersistedConfig, } from "./persisted-config.js";
 import { hashDaemonPassword } from "./auth.js";
+import { DAEMON_SERVICE_LABEL, queryDaemonServiceView, validateServiceOriginSync, } from "./session/daemon/daemon-service-manager.js";
+import { buildServerServiceSpec, installLaunchdServiceServer, installSystemdServiceServer, uninstallLaunchdServiceServer, uninstallSystemdServiceServer, uninstallWindowsTaskServer, } from "./session/daemon/daemon-service-install.js";
 import { isLanListenString } from "./hostnames.js";
 import { ProviderOverrideSchema } from "./agent/provider-launch-config.js";
 import { MutableDaemonConfigSchema, MutableDaemonConfigPatchSchema, TERMINAL_AGENT_HOOK_LEGACY_GLOBAL_PROVIDER_IDS, TERMINAL_AGENT_HOOK_PROVIDER_IDS, } from "@bytetrue/protocol/messages";
@@ -183,6 +185,7 @@ function pickSupportedPatchFields(patch) {
         ...(patch.pluginsEnabled !== undefined ? { pluginsEnabled: patch.pluginsEnabled } : {}),
         ...(patch.plugins !== undefined ? { plugins: patch.plugins } : {}),
         ...pickNetworkAuthPatchFields(patch),
+        ...(patch.service !== undefined ? { service: patch.service } : {}),
     };
 }
 function pickNetworkAuthPatchFields(patch) {
@@ -285,6 +288,9 @@ export class DaemonConfigStore {
         this.startupPersisted =
             options.startupPersisted ?? loadPersistedConfig(byspaceHome, this.logger);
         this.lastKnownPersisted = this.startupPersisted;
+        // Service view is probed, not persisted: refresh it once at construction so the
+        // first server_info carries a real state, then again after each service patch.
+        this.refreshServiceRuntimeState();
     }
     get() {
         return this.current;
@@ -303,7 +309,14 @@ export class DaemonConfigStore {
         // The network/auth patch never lands in the mutable view verbatim: the
         // plaintext password and listen semantics are translated below, and only
         // the derived view fields (allowLanAccess / passwordSet) surface to clients.
-        const { removeProviders = [], network: networkPatch, auth: authPatch, ...rawConfigPatch } = parsedPatch;
+        const { removeProviders = [], network: networkPatch, auth: authPatch, service: servicePatch, ...rawConfigPatch } = parsedPatch;
+        // Service install is a side effect, not config state: it runs the OS service
+        // registration and the resulting view refresh arrives via the service probe.
+        if (servicePatch?.install !== undefined) {
+            this.applyServicePatch(servicePatch.install);
+            // Re-probe after the side effect so the response carries the new state.
+            this.refreshServiceRuntimeState();
+        }
         let daemonPersistedPatch = null;
         let networkViewPatch = {};
         const resolved = this.resolveDaemonNetworkPatch(networkPatch, authPatch);
@@ -417,6 +430,63 @@ export class DaemonConfigStore {
         });
         this.applyReplacement(next, { removedProviders: [] });
     }
+    /**
+     * Re-probe the OS service manager and refresh the derived service view. Never
+     * persists: the service state is a property of the host, not of config.json.
+     */
+    refreshServiceRuntimeState() {
+        let view;
+        try {
+            view = queryDaemonServiceView();
+        }
+        catch {
+            // The service-manager probe is host-dependent (launchctl/systemctl may be
+            // absent, e.g. unit tests or containers); leave the view out rather than
+            // failing every config operation.
+            return;
+        }
+        const next = MutableDaemonConfigSchema.parse({
+            ...this.current,
+            service: view,
+        });
+        if (JSON.stringify(next) === JSON.stringify(this.current))
+            return;
+        this.applyReplacement(next, { removedProviders: [] });
+    }
+    /**
+     * Execute a service install/uninstall (issue 043). Install/uninstall are side
+     * effects on the OS service manager, never config state: the mutable view stays
+     * untouched and the service view is re-probed on demand.
+     */
+    applyServicePatch(install) {
+        if (install) {
+            // The same npm-global guard the CLI enforces: a service must point at the
+            // published install, not a dev checkout or container filesystem. The daemon
+            // process runs the check because it owns the install-origin context.
+            const originError = validateServiceOriginSync();
+            if (originError)
+                throw new Error(originError);
+            const spec = buildServerServiceSpec(this.byspaceHome);
+            if (process.platform === "darwin") {
+                installLaunchdServiceServer(spec);
+            }
+            else if (process.platform === "linux") {
+                installSystemdServiceServer(spec);
+            }
+            else {
+                throw new Error("Service installation is not supported on this platform (expected macOS or Linux).");
+            }
+        }
+        else if (process.platform === "darwin") {
+            uninstallLaunchdServiceServer(DAEMON_SERVICE_LABEL);
+        }
+        else if (process.platform === "linux") {
+            uninstallSystemdServiceServer(DAEMON_SERVICE_LABEL);
+        }
+        else if (process.platform === "win32") {
+            uninstallWindowsTaskServer(DAEMON_SERVICE_LABEL);
+        }
+    }
     reload() {
         if (!this.reloadSource) {
             throw new Error("Daemon config reload is unavailable for this daemon instance");

package/node_modules/@bytetrue/server/dist/src/server/session/daemon/daemon-service-install.js

@@ -0,0 +1,182 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { resolveBySpaceHome } from "../../byspace-home.js";
+export function buildServerServiceSpec(home) {
+    const env = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (key.startsWith("BYSPACE_") && value !== undefined)
+            env[key] = value;
+    }
+    env.PATH = process.env.PATH ?? "/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin";
+    return {
+        label: "cc.cd.byspace.daemon",
+        nodePath: process.execPath,
+        // The running daemon knows its own entry: the supervisor entry resolved this
+        // process. Use the daemon-worker path via the server package root.
+        runnerEntry: resolveSelfRunnerEntry(),
+        logPath: path.join(home, "daemon.log"),
+        env,
+    };
+}
+function resolveSelfRunnerEntry() {
+    // Walk up from this module to the @bytetrue/server package root (name-checked, so
+    // it works under both src/ (tsx) and dist/ (compiled) tree shapes), then locate the
+    // supervisor entrypoint the way the CLI's resolveDaemonRunnerEntry does.
+    const here = import.meta.dirname ?? path.dirname(fileURLToPath(import.meta.url));
+    let dir = here;
+    let packageRoot = null;
+    for (let i = 0; i < 12; i += 1) {
+        const pkgPath = path.join(dir, "package.json");
+        if (existsSync(pkgPath)) {
+            const parsed = JSON.parse(readFileSync(pkgPath, "utf8"));
+            if (parsed.name === "@bytetrue/server") {
+                packageRoot = dir;
+                break;
+            }
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    if (!packageRoot) {
+        throw new Error("Unable to locate the @bytetrue/server package root from the daemon module");
+    }
+    const distRunner = path.join(packageRoot, "dist", "scripts", "supervisor-entrypoint.js");
+    if (existsSync(distRunner))
+        return distRunner;
+    const srcRunner = path.join(packageRoot, "scripts", "supervisor-entrypoint.ts");
+    if (existsSync(srcRunner))
+        return srcRunner;
+    throw new Error("Unable to locate the supervisor entrypoint in the server package");
+}
+function escapeXml(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+export function renderLaunchdPlist(spec) {
+    const programArgs = [spec.nodePath, spec.runnerEntry];
+    const args = programArgs.map((a) => `    <string>${escapeXml(a)}</string>`).join("\n");
+    const envEntries = Object.entries(spec.env)
+        .map(([key, value]) => `    <key>${escapeXml(key)}</key>\n    <string>${escapeXml(value)}</string>`)
+        .join("\n");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${escapeXml(spec.label)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${envEntries}
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <false/>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(spec.logPath)}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(spec.logPath)}</string>
+  <key>ProcessType</key>
+  <string>Background</string>
+</dict>
+</plist>
+`;
+}
+function launchctl(args) {
+    const result = spawnSync("launchctl", args, { encoding: "utf8", timeout: 15000 });
+    const output = `${result.stdout ?? ""}${result.stderr ?? ""}`.trim();
+    return { ok: result.status === 0, output };
+}
+/** Write the plist and load it. The daemon exits after install; launchd takes over. */
+export function installLaunchdServiceServer(spec) {
+    const home = resolveBySpaceHome();
+    const plistPath = path.join(home, "Library", "LaunchAgents", `${spec.label}.plist`);
+    mkdirSync(path.dirname(plistPath), { recursive: true });
+    writeFileSync(plistPath, renderLaunchdPlist(spec), { mode: 0o644 });
+    const uid = process.getuid?.();
+    if (uid === undefined)
+        throw new Error("cannot resolve uid for launchctl bootstrap");
+    launchctl(["bootout", `gui/${uid}/${spec.label}`]);
+    const boot = launchctl(["bootstrap", `gui/${String(uid)}`, plistPath]);
+    if (!boot.ok) {
+        throw new Error(`launchctl bootstrap failed: ${boot.output}`);
+    }
+}
+/** Stop and remove the service definition. The daemon keeps running until stopped. */
+export function uninstallLaunchdServiceServer(label) {
+    const uid = process.getuid?.();
+    if (uid !== undefined) {
+        launchctl(["bootout", `gui/${uid}/${label}`]);
+    }
+    const home = resolveBySpaceHome();
+    rmSync(path.join(home, "Library", "LaunchAgents", `${label}.plist`), { force: true });
+}
+export function installSystemdServiceServer(spec) {
+    const configHome = process.env.XDG_CONFIG_HOME ?? path.join(process.env.HOME ?? "", ".config");
+    const unitPath = path.join(configHome, "systemd", "user", `${spec.label}.service`);
+    mkdirSync(path.dirname(unitPath), { recursive: true });
+    writeFileSync(unitPath, renderSystemdUnit(spec), { mode: 0o644 });
+    const run = (args) => {
+        const result = spawnSync("systemctl", ["--user", ...args], {
+            encoding: "utf8",
+            timeout: 20000,
+        });
+        if (result.status !== 0) {
+            throw new Error(`systemctl --user ${args[0]} failed: ${result.stderr ?? result.stdout ?? ""}`);
+        }
+    };
+    run(["daemon-reload"]);
+    run(["enable", "--now", `${spec.label}.service`]);
+}
+function renderSystemdUnit(spec) {
+    const execStart = [spec.nodePath, spec.runnerEntry]
+        .map((part) => part.replace(/([\\"])/g, "\\$1"))
+        .join(" ");
+    const envLines = Object.entries(spec.env)
+        .map(([key, value]) => `Environment="${key}=${value.replace(/([\\"])/g, "\\$1")}"`)
+        .join("\n");
+    return `# Generated by the BySpace daemon (install-service). Edits are overwritten on reinstall.
+[Unit]
+Description=BySpace daemon
+After=network-online.target
+
+[Service]
+Type=exec
+ExecStart=${execStart}
+${envLines}
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=default.target
+`;
+}
+export function uninstallSystemdServiceServer(label) {
+    const run = (args) => {
+        spawnSync("systemctl", ["--user", ...args], { encoding: "utf8", timeout: 20000 });
+    };
+    run(["disable", "--now", `${label}.service`]);
+    const configHome = process.env.XDG_CONFIG_HOME ?? path.join(process.env.HOME ?? "", ".config");
+    rmSync(path.join(configHome, "systemd", "user", `${label}.service`), { force: true });
+    run(["daemon-reload"]);
+}
+export function uninstallWindowsTaskServer(label) {
+    spawnSync("powershell.exe", [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `Unregister-ScheduledTask -TaskPath '\\BySpace\\' -TaskName '${label}' -Confirm:$false -ErrorAction SilentlyContinue`,
+    ], { encoding: "utf8", timeout: 30000 });
+}
+//# sourceMappingURL=daemon-service-install.js.map

package/node_modules/@bytetrue/server/dist/src/server/session/daemon/daemon-service-manager.js

@@ -0,0 +1,154 @@
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { BYSPACE_CLI_PACKAGE } from "./npm-global-cli.js";
+import path from "node:path";
+import { validateDaemonInstallOrigin, daemonInstallOriginRuntime } from "./install-origin.js";
+/**
+ * Daemon-side OS service management (issue 043). The daemon manages its own service
+ * registration because install requires the daemon's install-origin context — the
+ * npm-global verification and the runner entry resolution live in this process.
+ *
+ * KeepAlive/Restart is deliberately not "always": `byspace daemon stop` must stay a
+ * real stop. The supervisor's own crash-restart handles worker failures.
+ */
+export const DAEMON_SERVICE_LABEL = "cc.cd.byspace.daemon";
+function launchdProbe(home) {
+    const plistPath = path.join(home, "Library", "LaunchAgents", `${DAEMON_SERVICE_LABEL}.plist`);
+    return {
+        definitionExists: () => existsSync(plistPath),
+        servicePid: () => {
+            try {
+                const uid = process.getuid?.();
+                if (uid === undefined)
+                    return null;
+                const output = execFileSync("launchctl", ["print", `gui/${uid}/${DAEMON_SERVICE_LABEL}`], {
+                    encoding: "utf8",
+                    timeout: 10000,
+                });
+                const match = output.match(/^\s*pid\s*=\s*(\d+)/m);
+                return match ? Number(match[1]) : null;
+            }
+            catch {
+                return null;
+            }
+        },
+        viewFlags: () => ({}),
+    };
+}
+function systemdProbe() {
+    const configHome = process.env.XDG_CONFIG_HOME ?? path.join(process.env.HOME ?? "", ".config");
+    const unitPath = path.join(configHome, "systemd", "user", `${DAEMON_SERVICE_LABEL}.service`);
+    return {
+        definitionExists: () => existsSync(unitPath),
+        servicePid: () => {
+            try {
+                const output = execFileSync("systemctl", ["--user", "show", `${DAEMON_SERVICE_LABEL}.service`, "--property", "MainPID"], { encoding: "utf8", timeout: 10000 });
+                const match = output.match(/^MainPID=(\d+)$/m);
+                const pid = match ? Number(match[1]) : 0;
+                return pid > 0 ? pid : null;
+            }
+            catch {
+                return null;
+            }
+        },
+        viewFlags: () => {
+            try {
+                const output = execFileSync("loginctl", ["show-user", process.env.USER ?? "", "--property", "Linger"], { encoding: "utf8", timeout: 10000 });
+                return { linger: /Linger=yes/.test(output) };
+            }
+            catch {
+                return {};
+            }
+        },
+    };
+}
+function windowsProbe() {
+    return {
+        definitionExists: () => {
+            try {
+                const output = execFileSync("powershell.exe", [
+                    "-NoProfile",
+                    "-NonInteractive",
+                    "-Command",
+                    `(Get-ScheduledTask -TaskPath '\\BySpace\\' -TaskName '${DAEMON_SERVICE_LABEL}' -ErrorAction SilentlyContinue) -ne $null`,
+                ], { encoding: "utf8", timeout: 15000 });
+                return output.trim() === "True";
+            }
+            catch {
+                return false;
+            }
+        },
+        servicePid: () => null,
+        viewFlags: () => ({}),
+    };
+}
+function probeForPlatform() {
+    switch (process.platform) {
+        case "darwin":
+            return launchdProbe(resolveBySpaceHomeForService());
+        case "linux":
+            return systemdProbe();
+        case "win32":
+            return windowsProbe();
+        default:
+            return null;
+    }
+}
+function resolveBySpaceHomeForService() {
+    return process.env.BYSPACE_HOME ?? path.join(process.env.HOME ?? "", ".byspace");
+}
+/** Guard: only a daemon from the published npm global install may self-register. */
+export function validateServiceOriginSync() {
+    if (existsSync("/.dockerenv") || existsSync("/run/.containerenv")) {
+        return "Registering a service is not supported inside Docker. Use the container runtime's restart policy instead.";
+    }
+    // The npm -g listing is the authoritative origin: it proves the published install
+    // exists on this host. validateDaemonInstallOrigin then checks that THIS daemon
+    // process actually runs from it — a dev checkout parses fine but fails the
+    // package-root containment check, which is exactly the guard that matters here.
+    try {
+        const npmPrefix = execFileSync("npm", ["prefix", "-g"], {
+            encoding: "utf8",
+            timeout: 15000,
+        }).trim();
+        const packagePath = path.join(npmPrefix, "lib", "node_modules", "@bytetrue", "byspace");
+        const pkgJsonPath = path.join(packagePath, "package.json");
+        if (!existsSync(pkgJsonPath)) {
+            return `${BYSPACE_CLI_PACKAGE} is not installed with npm -g on this host`;
+        }
+        const version = JSON.parse(readFileSync(pkgJsonPath, "utf8")).version ?? "";
+        const install = {
+            version,
+            packagePath,
+            globalRootPath: npmPrefix,
+            isLinked: false,
+        };
+        return validateDaemonInstallOrigin(install, process.env.npm_package_version ?? version, daemonInstallOriginRuntime);
+    }
+    catch (error) {
+        return error instanceof Error ? error.message : String(error);
+    }
+}
+/** Query the current service view. Never caches: each call re-probes the manager. */
+export function queryDaemonServiceView() {
+    const probe = probeForPlatform();
+    if (!probe) {
+        return { state: "unknown", label: DAEMON_SERVICE_LABEL };
+    }
+    if (!probe.definitionExists()) {
+        return { state: "not-installed", label: DAEMON_SERVICE_LABEL, ...probe.viewFlags() };
+    }
+    const servicePid = probe.servicePid();
+    if (servicePid === null) {
+        return { state: "installed-stopped", label: DAEMON_SERVICE_LABEL, ...probe.viewFlags() };
+    }
+    if (servicePid === process.pid) {
+        return { state: "managed-by-service", label: DAEMON_SERVICE_LABEL, ...probe.viewFlags() };
+    }
+    return {
+        state: "installed-running-not-this-process",
+        label: DAEMON_SERVICE_LABEL,
+        ...probe.viewFlags(),
+    };
+}
+//# sourceMappingURL=daemon-service-manager.js.map