@decentnetwork/lan 0.1.301 → 0.1.302

package/dist/daemon/server.js

@@ -945,11 +945,17 @@ export class DaemonServer {
                     // (INBOX 2026-08-22 #2). Detect systemd by the env it stamps on
                     // every unit (sudo's env_reset strips these, so an interactive
                     // `sudo agentnet up` still takes the spawn path).
-                    const underSystemd = process.platform === "linux" &&
-                        Boolean(process.env.INVOCATION_ID || process.env.JOURNAL_STREAM);
+                    //
+                    // launchd is the same trap on macOS: the replacement is not
+                    // launchd's job, so the KeepAlive job keeps starting its own copy,
+                    // which refuses the identity every ~10 s, forever (mac-dev
+                    // 2026-09-14, 20934 runs). See supervisor.ts.
+                    const { restartSupervisor } = await import("./supervisor.js");
+                    const supervisor = restartSupervisor();
+                    const underSupervisor = supervisor !== null;
                     setExitReason("selfRestart via IPC");
-                    this.logger.info(underSystemd
-                        ? "Self-restart requested via IPC — running under systemd, will exit non-zero for the supervisor to relaunch"
+                    this.logger.info(underSupervisor
+                        ? `Self-restart requested via IPC — running under ${supervisor}, will exit non-zero for the supervisor to relaunch`
                         : `Self-restart requested via IPC — relaunching ${node} ${argv.join(" ")}`);
                     // Schedule shutdown for after the IPC response goes out. The
                     // 50ms timeout lets the response leave before cleanup closes IPC.
@@ -980,7 +986,7 @@ export class DaemonServer {
                                         child.unref();
                                     }
                                 }
-                                else if (!underSystemd) {
+                                else if (!underSupervisor) {
                                     // sh -c so we can shell-quote argv safely and use sleep.
                                     // Node's detached flag reparents the relauncher to PID 1.
                                     // At this point stop() has released IPC, TUN and the pidfile;
@@ -1000,7 +1006,7 @@ export class DaemonServer {
                             // Non-zero under systemd so Restart=on-failure (and =always)
                             // relaunches us; zero elsewhere — the detached child is the
                             // replacement and a supervisor must not also start one.
-                            setTimeout(() => process.exit(underSystemd ? 70 : 0), 200);
+                            setTimeout(() => process.exit(underSupervisor ? 70 : 0), 200);
                         })();
                     }, 50);
                     return { scheduledMs: 1500, argv: [node, ...argv] };

package/dist/daemon/supervisor.d.ts

@@ -0,0 +1,4 @@
+export type RestartSupervisor = "systemd" | "launchd" | null;
+/** The launchd label `agentnet service install` writes. */
+export declare const LAUNCHD_LABEL = "com.decentlan.agentnet";
+export declare function restartSupervisor(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): RestartSupervisor;

package/dist/daemon/supervisor.js

@@ -0,0 +1,25 @@
+// supervisor.ts — who brings this daemon back after it exits?
+//
+// selfRestart re-execs a detached replacement everywhere except under a
+// supervisor. Under systemd that replacement dies with the cgroup (INBOX
+// 2026-08-22 #2). Under launchd it survives but is not launchd's job: it is
+// reparented to pid 1, and the KeepAlive job keeps starting its own copy,
+// which refuses the identity ("Another decentlan daemon is already running")
+// every ~10 s, forever — 20934 runs on mac-dev by 2026-09-14, with
+// /var/log/agentnet.log growing without bound. Under either supervisor the
+// right restart is to exit and let the supervisor start the new code.
+/** The launchd label `agentnet service install` writes. */
+export const LAUNCHD_LABEL = "com.decentlan.agentnet";
+export function restartSupervisor(platform = process.platform, env = process.env) {
+    // systemd stamps these on every unit; sudo's env_reset strips them, so an
+    // interactive `sudo agentnet up` still takes the spawn path.
+    if (platform === "linux" && (env.INVOCATION_ID || env.JOURNAL_STREAM))
+        return "systemd";
+    // launchd sets XPC_SERVICE_NAME to the job's label. A shell has "0" or its
+    // terminal app's name there, so only the installed job matches. A
+    // replacement an older build re-exec'd inherited it too — and exiting is
+    // right for that orphan as well: launchd's job takes the identity back.
+    if (platform === "darwin" && env.XPC_SERVICE_NAME === LAUNCHD_LABEL)
+        return "launchd";
+    return null;
+}

package/dist/ui/desktop/app.js

@@ -1,4 +1,4 @@
-window.__DK_UI_VERSION="0.1.301";
+window.__DK_UI_VERSION="0.1.302";
 const ICON_PATHS = {
   // ---- tab bar (the four must feel like one set) ----
   users: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/>',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decentnetwork/lan",
-  "version": "0.1.301",
+  "version": "0.1.302",
   "description": "Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.",
   "type": "module",
   "main": "./dist/index.js",