@ck123pm/paseo-server 0.1.80

package/dist/src/server/persisted-config.js

@@ -0,0 +1,398 @@
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+import { AgentProviderRuntimeSettingsMapSchema, migrateProviderSettings, ProviderOverrideSchema, } from "./agent/provider-launch-config.js";
+import { ensurePrivateFile, writePrivateFileSync } from "./private-files.js";
+export const LogLevelSchema = z.enum(["trace", "debug", "info", "warn", "error", "fatal"]);
+export const LogFormatSchema = z.enum(["pretty", "json"]);
+const PositiveIntegerSchema = z.number().int().positive();
+const LogConfigSchema = z
+    .object({
+    // Legacy global log settings (kept for backwards compatibility).
+    level: LogLevelSchema.optional(),
+    format: LogFormatSchema.optional(),
+    console: z
+        .object({
+        level: LogLevelSchema.optional(),
+        format: LogFormatSchema.optional(),
+    })
+        .strict()
+        .optional(),
+    file: z
+        .object({
+        level: LogLevelSchema.optional(),
+        path: z.string().min(1).optional(),
+        rotate: z
+            .object({
+            maxSize: z.string().min(1).optional(),
+            maxFiles: z.number().int().positive().optional(),
+        })
+            .strict()
+            .optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+const ProviderCredentialsSchema = z
+    .object({
+    apiKey: z.string().min(1).optional(),
+})
+    .strict();
+const LocalSpeechProviderSchema = z
+    .object({
+    modelsDir: z.string().min(1).optional(),
+})
+    .strict();
+const ProvidersSchema = z
+    .object({
+    openai: ProviderCredentialsSchema.optional(),
+    local: LocalSpeechProviderSchema.optional(),
+})
+    .strict();
+const BcryptHashSchema = z.string().regex(/^\$2[aby]\$\d{2}\$[./A-Za-z0-9]{53}$/, {
+    message: "Expected a bcrypt hash",
+});
+const DaemonAuthSchema = z
+    .object({
+    password: BcryptHashSchema.optional(),
+})
+    .strict();
+const DaemonWorkspaceGitConfigSchema = z
+    .object({
+    backgroundFetchIntervalMs: PositiveIntegerSchema.optional(),
+    selfHealIntervalMs: PositiveIntegerSchema.optional(),
+    workingTreeWatchFallbackRefreshMs: PositiveIntegerSchema.optional(),
+})
+    .strict();
+const DaemonWorkspaceConfigSchema = z
+    .object({
+    git: DaemonWorkspaceGitConfigSchema.optional(),
+    reconcileIntervalMs: PositiveIntegerSchema.optional(),
+})
+    .strict();
+const SpeechProviderIdSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .pipe(z.enum(["openai", "local"]));
+const FeatureDictationSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    stt: z
+        .object({
+        provider: SpeechProviderIdSchema.optional(),
+        model: z.string().min(1).optional(),
+        language: z.string().trim().min(1).optional(),
+        confidenceThreshold: z.number().optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+const FeatureVoiceModeSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    llm: z
+        .object({
+        provider: z.string().optional(),
+        model: z.string().min(1).optional(),
+    })
+        .strict()
+        .optional(),
+    stt: z
+        .object({
+        provider: SpeechProviderIdSchema.optional(),
+        model: z.string().min(1).optional(),
+        language: z.string().trim().min(1).optional(),
+    })
+        .strict()
+        .optional(),
+    turnDetection: z
+        .object({
+        provider: SpeechProviderIdSchema.optional(),
+    })
+        .strict()
+        .optional(),
+    tts: z
+        .object({
+        provider: SpeechProviderIdSchema.optional(),
+        model: z.string().min(1).optional(),
+        voice: z.enum(["alloy", "echo", "fable", "onyx", "nova", "shimmer"]).optional(),
+        speakerId: z.number().int().optional(),
+        speed: z.number().optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+const BUILTIN_PROVIDER_IDS = ["claude", "codex", "copilot", "opencode", "pi"];
+const PROVIDER_ID_PATTERN = /^[a-z][a-z0-9-]*$/;
+const ProviderOverridesSchema = z
+    .record(z.string(), ProviderOverrideSchema)
+    .superRefine((providers, ctx) => {
+    const builtinProviderIdSet = new Set(BUILTIN_PROVIDER_IDS);
+    const validExtendsValues = new Set([...BUILTIN_PROVIDER_IDS, "acp"]);
+    for (const [providerId, provider] of Object.entries(providers)) {
+        if (!PROVIDER_ID_PATTERN.test(providerId)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [providerId],
+                message: `Provider ID "${providerId}" must match ${PROVIDER_ID_PATTERN}.`,
+            });
+        }
+        const isBuiltinProvider = builtinProviderIdSet.has(providerId);
+        if (!isBuiltinProvider && !provider.extends) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [providerId, "extends"],
+                message: `Custom provider "${providerId}" must declare extends.`,
+            });
+        }
+        if (!isBuiltinProvider && !provider.label) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [providerId, "label"],
+                message: `Custom provider "${providerId}" must declare label.`,
+            });
+        }
+        if (provider.extends && !validExtendsValues.has(provider.extends)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [providerId, "extends"],
+                message: `Provider "${providerId}" extends unknown provider "${provider.extends}".`,
+            });
+        }
+        if (provider.extends === "acp" && !provider.command) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [providerId, "command"],
+                message: `Provider "${providerId}" extending "acp" must declare command.`,
+            });
+        }
+    }
+});
+function isLegacyProviderEntry(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return false;
+    }
+    const command = value.command;
+    if (!command || typeof command !== "object" || Array.isArray(command)) {
+        return false;
+    }
+    return typeof command.mode === "string";
+}
+function normalizeAgentProviders(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return value;
+    }
+    const rawProviders = value;
+    const hasLegacyEntries = Object.values(rawProviders).some((entry) => isLegacyProviderEntry(entry));
+    if (!hasLegacyEntries) {
+        return value;
+    }
+    const legacyEntries = {};
+    const normalizedEntries = {};
+    for (const [providerId, providerValue] of Object.entries(rawProviders)) {
+        if (isLegacyProviderEntry(providerValue)) {
+            legacyEntries[providerId] = providerValue;
+            continue;
+        }
+        normalizedEntries[providerId] = providerValue;
+    }
+    const parsedLegacyEntries = AgentProviderRuntimeSettingsMapSchema.safeParse(legacyEntries);
+    if (!parsedLegacyEntries.success) {
+        return value;
+    }
+    return {
+        ...normalizedEntries,
+        ...migrateProviderSettings(parsedLegacyEntries.data, [...BUILTIN_PROVIDER_IDS]),
+    };
+}
+export const PersistedConfigSchema = z
+    .object({
+    // v1 schema marker
+    version: z.literal(1).optional(),
+    // v1 config layout
+    daemon: z
+        .object({
+        listen: z.string().optional(),
+        hostnames: z.union([z.literal(true), z.array(z.string())]).optional(),
+        allowedHosts: z.union([z.literal(true), z.array(z.string())]).optional(),
+        mcp: z
+            .object({
+            enabled: z.boolean().optional(),
+            injectIntoAgents: z.boolean().optional(),
+        })
+            .passthrough()
+            .optional(),
+        autoArchiveAfterMerge: z.boolean().optional(),
+        appendSystemPrompt: z.string().optional(),
+        cors: z
+            .object({
+            allowedOrigins: z.array(z.string()).optional(),
+        })
+            .strict()
+            .optional(),
+        relay: z
+            .object({
+            enabled: z.boolean().optional(),
+            endpoint: z.string().optional(),
+            publicEndpoint: z.string().optional(),
+            useTls: z.boolean().optional(),
+            publicUseTls: z.boolean().optional(),
+        })
+            .strict()
+            .optional(),
+        auth: DaemonAuthSchema.optional(),
+        workspaces: DaemonWorkspaceConfigSchema.optional(),
+    })
+        .strict()
+        .transform(({ allowedHosts, ...daemon }) => {
+        const hostnames = daemon.hostnames ?? allowedHosts;
+        return hostnames === undefined ? daemon : { ...daemon, hostnames };
+    })
+        .optional(),
+    app: z
+        .object({
+        baseUrl: z.string().optional(),
+    })
+        .strict()
+        .optional(),
+    providers: ProvidersSchema.optional(),
+    agents: z
+        .object({
+        providers: z.preprocess(normalizeAgentProviders, ProviderOverridesSchema).optional(),
+    })
+        .strict()
+        .optional(),
+    features: z
+        .object({
+        dictation: FeatureDictationSchema.optional(),
+        voiceMode: FeatureVoiceModeSchema.optional(),
+    })
+        .strict()
+        .optional(),
+    log: LogConfigSchema.optional(),
+})
+    .strict();
+const CONFIG_FILENAME = "config.json";
+const DEFAULT_PERSISTED_CONFIG = PersistedConfigSchema.parse({
+    version: 1,
+    daemon: {
+        listen: "127.0.0.1:6767",
+        cors: {
+            allowedOrigins: ["https://app.paseo.sh"],
+        },
+        relay: {
+            enabled: true,
+        },
+        workspaces: {
+            git: {
+                backgroundFetchIntervalMs: 900000,
+                selfHealIntervalMs: 300000,
+                workingTreeWatchFallbackRefreshMs: 60000,
+            },
+            reconcileIntervalMs: 300000,
+        },
+    },
+    app: {
+        baseUrl: "https://app.paseo.sh",
+    },
+});
+function getConfigPath(paseoHome) {
+    return path.join(paseoHome, CONFIG_FILENAME);
+}
+function getLogger(logger) {
+    return logger?.child({ module: "config" });
+}
+function stripDeprecatedLocalSpeechConfigFields(parsed) {
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return parsed;
+    }
+    const root = { ...parsed };
+    const providers = root.providers;
+    if (!providers || typeof providers !== "object" || Array.isArray(providers)) {
+        return root;
+    }
+    const providersRecord = { ...providers };
+    const local = providersRecord.local;
+    if (!local || typeof local !== "object" || Array.isArray(local)) {
+        root.providers = providersRecord;
+        return root;
+    }
+    const localRecord = { ...local };
+    if ("autoDownload" in localRecord) {
+        delete localRecord.autoDownload;
+    }
+    providersRecord.local = localRecord;
+    root.providers = providersRecord;
+    return root;
+}
+export function loadPersistedConfig(paseoHome, logger) {
+    const log = getLogger(logger);
+    const configPath = getConfigPath(paseoHome);
+    if (!existsSync(configPath)) {
+        try {
+            writePrivateFileSync(configPath, JSON.stringify(DEFAULT_PERSISTED_CONFIG, null, 2) + "\n");
+            log?.info(`Initialized config file at ${configPath}`);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            throw new Error(`[Config] Failed to initialize ${configPath}: ${message}`, { cause: err });
+        }
+    }
+    let raw;
+    try {
+        ensurePrivateFile(configPath);
+        raw = readFileSync(configPath, "utf-8");
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`[Config] Failed to read ${configPath}: ${message}`, {
+            cause: err,
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`[Config] Invalid JSON in ${configPath}: ${message}`, {
+            cause: err,
+        });
+    }
+    const migrated = stripDeprecatedLocalSpeechConfigFields(parsed);
+    const result = PersistedConfigSchema.safeParse(migrated);
+    if (!result.success) {
+        const issues = result.error.issues
+            .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
+            .join("\n");
+        throw new Error(`[Config] Invalid config in ${configPath}:\n${issues}`);
+    }
+    log?.info(`Loaded from ${configPath}`);
+    return result.data;
+}
+export function savePersistedConfig(paseoHome, config, logger) {
+    const log = getLogger(logger);
+    const configPath = getConfigPath(paseoHome);
+    const result = PersistedConfigSchema.safeParse(config);
+    if (!result.success) {
+        const issues = result.error.issues
+            .map((i) => `  - ${i.path.join(".")}: ${i.message}`)
+            .join("\n");
+        throw new Error(`[Config] Invalid config to save:\n${issues}`);
+    }
+    try {
+        writePrivateFileSync(configPath, JSON.stringify(result.data, null, 2) + "\n");
+        log?.info(`Saved to ${configPath}`);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`[Config] Failed to write ${configPath}: ${message}`, {
+            cause: err,
+        });
+    }
+}
+//# sourceMappingURL=persisted-config.js.map

package/dist/src/server/persisted-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persisted-config.js","sourceRoot":"","sources":["../../../src/server/persisted-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE1D,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,iEAAiE;IACjE,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;IAElC,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAEb,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC;aACN,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SACjD,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,EAAE;IAChF,OAAO,EAAE,wBAAwB;CAClC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,8BAA8B,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,yBAAyB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3D,kBAAkB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACpD,iCAAiC,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CACpE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,2BAA2B,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,GAAG,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IAC9C,mBAAmB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;KACb,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAErC,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;QAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;QAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC9C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;QAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAU,CAAC;AACvF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC;KAC1C,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;IAC9B,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;IACnE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC;IAE7E,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,gBAAgB,UAAU,gBAAgB,mBAAmB,GAAG;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;gBAC7B,OAAO,EAAE,oBAAoB,UAAU,yBAAyB;aACjE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;gBAC3B,OAAO,EAAE,oBAAoB,UAAU,uBAAuB;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;gBAC7B,OAAO,EAAE,aAAa,UAAU,+BAA+B,QAAQ,CAAC,OAAO,IAAI;aACpF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;gBAC7B,OAAO,EAAE,aAAa,UAAU,yCAAyC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAI,KAAiC,CAAC,OAAO,CAAC;IAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAQ,OAAmC,CAAC,IAAI,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,KAAgC,CAAC;IACtD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAClE,qBAAqB,CAAC,KAAK,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,MAAM,iBAAiB,GAA4B,EAAE,CAAC;IAEtD,KAAK,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACvE,IAAI,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,aAAa,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,iBAAiB,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC;IAChD,CAAC;IAED,MAAM,mBAAmB,GAAG,qCAAqC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3F,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,GAAG,iBAAiB;QACpB,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,GAAG,oBAAoB,CAAC,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,mBAAmB;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEhC,mBAAmB;IACnB,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxE,GAAG,EAAE,CAAC;aACH,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACzC,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACb,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzC,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC;YACN,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC/C,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,KAAK,EAAE,CAAC;aACL,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC9B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACrC,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QACjC,UAAU,EAAE,2BAA2B,CAAC,QAAQ,EAAE;KACnD,CAAC;SACD,MAAM,EAAE;SACR,SAAS,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,YAAY,CAAC;QACnD,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;IACrE,CAAC,CAAC;SACD,QAAQ,EAAE;IAEb,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAEb,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KACrF,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,SAAS,EAAE,sBAAsB,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,sBAAsB,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAEb,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC,KAAK,CAAC;IAC3D,OAAO,EAAE,CAAC;IACV,MAAM,EAAE;QACN,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE;YACJ,cAAc,EAAE,CAAC,sBAAsB,CAAC;SACzC;QACD,KAAK,EAAE;YACL,OAAO,EAAE,IAAI;SACd;QACD,UAAU,EAAE;YACV,GAAG,EAAE;gBACH,yBAAyB,EAAE,MAAO;gBAClC,kBAAkB,EAAE,MAAO;gBAC3B,iCAAiC,EAAE,KAAM;aAC1C;YACD,mBAAmB,EAAE,MAAO;SAC7B;KACF;IACD,GAAG,EAAE;QACH,OAAO,EAAE,sBAAsB;KAChC;CACF,CAAoB,CAAC;AAOtB,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,MAA8B;IAC/C,OAAO,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,sCAAsC,CAAC,MAAe;IAC7D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,EAAE,GAAI,SAAqC,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,EAAE,GAAI,KAAiC,EAAE,CAAC;IAC9D,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC,YAAY,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,KAAK,GAAG,WAAW,CAAC;IACpC,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAmB;IACxE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3F,GAAG,EAAE,IAAI,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,KAAK,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9B,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,KAAK,OAAO,EAAE,EAAE;YACnE,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,KAAK,OAAO,EAAE,EAAE;YACpE,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,sCAAsC,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,MAAM,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,GAAG,EAAE,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,IAAuB,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,MAAuB,EACvB,MAAmB;IAEnB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC;QACH,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,GAAG,EAAE,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,KAAK,OAAO,EAAE,EAAE;YACpE,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/src/server/pid-lock.js

@@ -0,0 +1,170 @@
+import { open, readFile, unlink, mkdir } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { hostname } from "node:os";
+import { z } from "zod";
+export const pidLockInfoSchema = z.object({
+    pid: z.number(),
+    startedAt: z.string(),
+    hostname: z.string(),
+    uid: z.number(),
+    listen: z.string().nullable(),
+    desktopManaged: z.boolean().optional(),
+});
+function parsePidLockInfo(raw) {
+    const result = pidLockInfoSchema.safeParse(raw);
+    return result.success ? result.data : null;
+}
+function isErrnoException(err) {
+    return err instanceof Error && "code" in err;
+}
+export class PidLockError extends Error {
+    constructor(message, existingLock) {
+        super(message);
+        this.existingLock = existingLock;
+        this.name = "PidLockError";
+    }
+}
+function isPidRunning(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function getPidFilePath(paseoHome) {
+    return join(paseoHome, "paseo.pid");
+}
+function resolveOwnerPid(ownerPid) {
+    if (typeof ownerPid === "number" && Number.isInteger(ownerPid) && ownerPid > 0) {
+        return ownerPid;
+    }
+    return process.pid;
+}
+export async function acquirePidLock(paseoHome, listen, options) {
+    const pidPath = getPidFilePath(paseoHome);
+    // Ensure paseoHome directory exists
+    if (!existsSync(paseoHome)) {
+        await mkdir(paseoHome, { recursive: true });
+    }
+    // Try to read existing lock
+    let existingLock = null;
+    try {
+        const content = await readFile(pidPath, "utf-8");
+        existingLock = parsePidLockInfo(JSON.parse(content));
+    }
+    catch {
+        // No existing lock or invalid JSON - that's fine
+    }
+    // Check if existing lock is stale
+    const lockOwnerPid = resolveOwnerPid(options?.ownerPid);
+    if (existingLock) {
+        if (isPidRunning(existingLock.pid)) {
+            if (existingLock.pid === lockOwnerPid) {
+                return;
+            }
+            throw new PidLockError(`Another Paseo daemon is already running (PID ${existingLock.pid}, started ${existingLock.startedAt})`, existingLock);
+        }
+        // Stale lock - remove it
+        await unlink(pidPath).catch(() => { });
+    }
+    // Create new lock with exclusive flag
+    const lockInfo = {
+        pid: lockOwnerPid,
+        startedAt: new Date().toISOString(),
+        hostname: hostname(),
+        uid: process.getuid?.() ?? 0,
+        listen,
+        ...(process.env.PASEO_DESKTOP_MANAGED === "1" ? { desktopManaged: true } : {}),
+    };
+    let fd;
+    try {
+        fd = await open(pidPath, "wx");
+        await fd.write(JSON.stringify(lockInfo));
+    }
+    catch (err) {
+        if (isErrnoException(err) && err.code === "EEXIST") {
+            // Race condition - another process created the file
+            // Re-read and check
+            try {
+                const content = await readFile(pidPath, "utf-8");
+                const raceLock = parsePidLockInfo(JSON.parse(content));
+                if (raceLock) {
+                    throw new PidLockError(`Another Paseo daemon is already running (PID ${raceLock.pid})`, raceLock);
+                }
+                throw new PidLockError("Failed to acquire PID lock due to race condition");
+            }
+            catch (innerErr) {
+                if (innerErr instanceof PidLockError)
+                    throw innerErr;
+                throw new PidLockError("Failed to acquire PID lock due to race condition");
+            }
+        }
+        throw err;
+    }
+    finally {
+        await fd?.close();
+    }
+}
+export async function updatePidLock(paseoHome, patch, options) {
+    const pidPath = getPidFilePath(paseoHome);
+    const lockOwnerPid = resolveOwnerPid(options?.ownerPid);
+    const content = await readFile(pidPath, "utf-8");
+    const existingLock = parsePidLockInfo(JSON.parse(content));
+    if (!existingLock) {
+        throw new PidLockError("Cannot update PID lock: invalid lock file");
+    }
+    if (existingLock.pid !== lockOwnerPid) {
+        throw new PidLockError(`Cannot update PID lock owned by PID ${existingLock.pid}`, existingLock);
+    }
+    const updatedLock = {
+        ...existingLock,
+        ...patch,
+    };
+    const fd = await open(pidPath, "r+");
+    try {
+        await fd.truncate(0);
+        await fd.writeFile(JSON.stringify(updatedLock));
+    }
+    finally {
+        await fd.close();
+    }
+}
+export async function releasePidLock(paseoHome, options) {
+    const pidPath = getPidFilePath(paseoHome);
+    const lockOwnerPid = resolveOwnerPid(options?.ownerPid);
+    try {
+        // Only remove if it's our lock
+        const content = await readFile(pidPath, "utf-8");
+        const lock = parsePidLockInfo(JSON.parse(content));
+        if (lock?.pid === lockOwnerPid) {
+            await unlink(pidPath);
+        }
+    }
+    catch {
+        // Ignore errors - lock may already be gone
+    }
+}
+export async function getPidLockInfo(paseoHome) {
+    const pidPath = getPidFilePath(paseoHome);
+    try {
+        const content = await readFile(pidPath, "utf-8");
+        return parsePidLockInfo(JSON.parse(content));
+    }
+    catch {
+        return null;
+    }
+}
+export async function isLocked(paseoHome) {
+    const info = await getPidLockInfo(paseoHome);
+    if (!info) {
+        return { locked: false };
+    }
+    if (!isPidRunning(info.pid)) {
+        return { locked: false, info };
+    }
+    return { locked: true, info };
+}
+//# sourceMappingURL=pid-lock.js.map

package/dist/src/server/pid-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid-lock.js","sourceRoot":"","sources":["../../../src/server/pid-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,CAAC;AAC/C,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YACE,OAAe,EACC,YAA0B;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,iBAAY,GAAZ,YAAY,CAAc;QAG1C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,OAAO,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,QAAiB;IACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,MAAqB,EACrB,OAA+B;IAE/B,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE1C,oCAAoC;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,4BAA4B;IAC5B,IAAI,YAAY,GAAuB,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IAED,kCAAkC;IAClC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,YAAY,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,MAAM,IAAI,YAAY,CACpB,gDAAgD,YAAY,CAAC,GAAG,aAAa,YAAY,CAAC,SAAS,GAAG,EACtG,YAAY,CACb,CAAC;QACJ,CAAC;QACD,yBAAyB;QACzB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAgB;QAC5B,GAAG,EAAE,YAAY;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,QAAQ,EAAE;QACpB,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC;QAC5B,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;IAEF,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,oDAAoD;YACpD,oBAAoB;YACpB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,YAAY,CACpB,gDAAgD,QAAQ,CAAC,GAAG,GAAG,EAC/D,QAAQ,CACT,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,YAAY,CAAC,kDAAkD,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,IAAI,QAAQ,YAAY,YAAY;oBAAE,MAAM,QAAQ,CAAC;gBACrD,MAAM,IAAI,YAAY,CAAC,kDAAkD,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,KAAyB,EACzB,OAA+B;IAE/B,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,YAAY,CAAC,2CAA2C,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,YAAY,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CAAC,uCAAuC,YAAY,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,WAAW,GAAgB;QAC/B,GAAG,YAAY;QACf,GAAG,KAAK;KACT,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,OAA+B;IAE/B,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,GAAG,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC"}

package/dist/src/server/private-files.js

@@ -0,0 +1,42 @@
+import { chmodSync, mkdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import path from "node:path";
+export const PRIVATE_DIRECTORY_MODE = 0o700;
+export const PRIVATE_FILE_MODE = 0o600;
+function chmodBestEffort(targetPath, mode) {
+    if (process.platform === "win32") {
+        return;
+    }
+    try {
+        chmodSync(targetPath, mode);
+    }
+    catch {
+        // Keep startup resilient if the filesystem does not support POSIX modes.
+    }
+}
+export function ensurePrivateDirectory(directoryPath) {
+    mkdirSync(directoryPath, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });
+    chmodBestEffort(directoryPath, PRIVATE_DIRECTORY_MODE);
+}
+export function ensurePrivateFile(filePath) {
+    chmodBestEffort(filePath, PRIVATE_FILE_MODE);
+}
+export function writePrivateFileSync(filePath, data) {
+    ensurePrivateDirectory(path.dirname(filePath));
+    writeFileSync(filePath, data, { mode: PRIVATE_FILE_MODE });
+    ensurePrivateFile(filePath);
+}
+export function writePrivateFileAtomicSync(filePath, data) {
+    ensurePrivateDirectory(path.dirname(filePath));
+    const tmpPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`);
+    try {
+        writeFileSync(tmpPath, data, { mode: PRIVATE_FILE_MODE });
+        renameSync(tmpPath, filePath);
+        ensurePrivateFile(filePath);
+    }
+    catch (error) {
+        rmSync(tmpPath, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=private-files.js.map

package/dist/src/server/private-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../../src/server/private-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,SAAS,eAAe,CAAC,UAAkB,EAAE,IAAY;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC5E,eAAe,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,IAAqC;IAErC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,IAAqC;IAErC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CACjE,CAAC;IACF,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1D,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9B,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}