@dsh-enhanced/lark-channel 0.1.48 → 0.1.53

package/lib/business-skill.js

@@ -0,0 +1,202 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { lstat, mkdir, readFile, readdir, rename, unlink, writeFile } from 'node:fs/promises';
+import { isAbsolute, join, parse, relative, resolve, sep, win32 } from 'node:path';
+import { parse as parseYaml, stringify } from 'yaml';
+import { LARK_BUSINESS_CLEARED_ENV } from './business-environment.js';
+const identifierPattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+const ownerPattern = /^ou_[A-Za-z0-9_-]{1,124}$/u;
+const appIdPattern = /^cli_[0-9a-fA-F]{16}$/u;
+const markerPrefix = '<!-- managed-by:@dsh-enhanced/lark-channel/business-skill:v1 ';
+function hasControlCharacter(value) {
+    return Array.from(value).some(char => {
+        const code = char.codePointAt(0) ?? 0;
+        return code < 32 || code === 127;
+    });
+}
+function requireIdentifier(value, field) {
+    if (typeof value !== 'string' || !identifierPattern.test(value)) {
+        throw new Error(`lark business skill: invalid ${field}`);
+    }
+    return value;
+}
+function requireBinding(input) {
+    const profile = requireIdentifier(input.profile, 'profile');
+    const account = requireIdentifier(input.account, 'account');
+    if (typeof input.ownerUserId !== 'string' || !ownerPattern.test(input.ownerUserId)) {
+        throw new Error('lark business skill: invalid ownerUserId');
+    }
+    if (typeof input.appId !== 'string' || !appIdPattern.test(input.appId)) {
+        throw new Error('lark business skill: invalid appId');
+    }
+    return { profile, account, appId: input.appId, ownerUserId: input.ownerUserId };
+}
+function requireAbsolutePath(value, field, platform) {
+    if (typeof value !== 'string' || hasControlCharacter(value)
+        || !(isAbsolute(value) || (platform === 'win32' && win32.isAbsolute(value)))) {
+        throw new Error(`lark business skill: ${field} must be an absolute path without control characters`);
+    }
+    return platform === 'win32' && win32.isAbsolute(value) && !isAbsolute(value)
+        ? win32.normalize(value) : resolve(value);
+}
+function validate(input) {
+    const platform = input.platform ?? process.platform;
+    const binding = requireBinding(input);
+    const cliProfile = requireIdentifier(input.cliProfile, 'cliProfile');
+    return {
+        dshHome: requireAbsolutePath(input.dshHome, 'dshHome', platform),
+        ...binding,
+        cliCommand: requireAbsolutePath(input.cliCommand, 'cliCommand', platform),
+        cliProfile,
+        cliConfigDir: requireAbsolutePath(input.cliConfigDir, 'cliConfigDir', platform),
+        cliDataDir: requireAbsolutePath(input.cliDataDir, 'cliDataDir', platform),
+        platform,
+    };
+}
+function shellQuote(value) {
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+function powershellQuote(value) {
+    return `'${value.replaceAll("'", "''")}'`;
+}
+function skillName(input) {
+    const hash = createHash('sha256').update(input.profile).update('\0').update(input.account).digest('hex').slice(0, 16);
+    return `lark-business-${hash}`;
+}
+export function renderLarkBusinessSkill(input) {
+    const checked = validate(input);
+    const name = skillName(checked);
+    const marker = `${markerPrefix}${name} -->`;
+    const cli = checked.platform === 'win32'
+        ? `${LARK_BUSINESS_CLEARED_ENV.map(name => `Remove-Item Env:${name} -ErrorAction SilentlyContinue;`).join(' ')} $env:LARKSUITE_CLI_CONFIG_DIR=${powershellQuote(checked.cliConfigDir)}; $env:LARKSUITE_CLI_DATA_DIR=${powershellQuote(checked.cliDataDir)}; $env:LARKSUITE_CLI_NO_UPDATE_NOTIFIER='1'; $env:LARKSUITE_CLI_NO_SKILLS_NOTIFIER='1'; & ${powershellQuote(checked.cliCommand)} --profile ${powershellQuote(checked.cliProfile)}`
+        : `env ${LARK_BUSINESS_CLEARED_ENV.map(name => `-u ${name}`).join(' ')} LARKSUITE_CLI_CONFIG_DIR=${shellQuote(checked.cliConfigDir)} LARKSUITE_CLI_DATA_DIR=${shellQuote(checked.cliDataDir)} LARKSUITE_CLI_NO_UPDATE_NOTIFIER=1 LARKSUITE_CLI_NO_SKILLS_NOTIFIER=1 ${shellQuote(checked.cliCommand)} --profile ${shellQuote(checked.cliProfile)}`;
+    const frontmatter = stringify({
+        name,
+        description: `Use the configured Lark CLI for owner-authorized documents, sheets, Base, calendar, tasks, mail, meetings, contacts, and approvals. Only for DSH profile ${checked.profile}, Lark account ${checked.account}, app ${checked.appId}, and owner ${checked.ownerUserId}; read current embedded official skills and schemas before acting.`,
+        metadata: { appId: checked.appId, ownerUserId: checked.ownerUserId,
+            profile: checked.profile, account: checked.account },
+    }).trimEnd();
+    const content = `---\n${frontmatter}\n---\n${marker}\n# Lark business operations\n\nThis skill belongs to DSH profile **${checked.profile}**, Lark account **${checked.account}**, application **${checked.appId}**, and owner open ID **${checked.ownerUserId}**. Use it only when the current DSH profile, channel account, application, and owner all match this binding. If any value differs, stop using this skill and rerun channel setup. These values identify this installation; they are not credentials. Never print tokens, secrets, or configuration contents.\n\nUse the native skill and shell tools for this task (${checked.platform === 'win32' ? 'PowerShell on Windows' : 'a POSIX shell on this platform'}). Do not start another Agent loop. Every CLI invocation must use the exact command prefix below, including its explicit profile and private configuration directory. Linux uses the private data directory for CLI token files; on macOS and Windows the CLI may use a system keychain shared by the OS account. Do not use an unbound CLI command or the machine's default CLI profile/configuration.\n\n    ${cli} skills list\n    ${cli} skills read lark-shared\n\nBefore each business operation, discover the current embedded official instructions with \`skills list\`, then \`skills read <relevant-skill>\`. Read its referenced files on demand with \`skills list <skill>/references\` and \`skills read <skill> <reference-path>\`. The embedded instructions and command schemas are the source of truth; do not rely on a copied catalogue. For example, a document task can start with:\n\n    ${cli} skills read lark-doc\n\nUse the operation's \`--help\` and \`schema <service.resource.method>\` when the exact arguments or risk level are unclear. Keep the same isolated prefix for these calls and for every subsequent business command. Select \`--as user\` for the owner's personal resources; use \`--as bot\` only for application/bot resources. The bot identity may not see the owner's resources.\n\nThe owner's current request authorizes the operations necessary to complete that task; do not ask again for an already authorized action. If a CLI command exits with code 10, add \`--yes\` only when the specific operation is already authorized by that request, then retry that command once. Otherwise request the missing authorization. Authentication, scope, and network failures are not approval gates: diagnose them, never turn them into a successful retry.\n\nKeep all subsequent examples and real invocations bound to this exact prefix, including explicit \`--profile\`. Do not disclose credentials in replies or logs.\n`;
+    return { name, content };
+}
+async function existingKind(path) {
+    try {
+        const stat = await lstat(path);
+        if (stat.isSymbolicLink())
+            return 'symlink';
+        if (stat.isDirectory())
+            return 'directory';
+        if (stat.isFile())
+            return 'file';
+        return 'other';
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return 'missing';
+        throw error;
+    }
+}
+async function ensureRealDirectory(path) {
+    const absolute = resolve(path);
+    const root = parse(absolute).root;
+    let current = root;
+    for (const segment of relative(root, absolute).split(sep).filter(Boolean)) {
+        current = join(current, segment);
+        const kind = await existingKind(current);
+        if (kind === 'missing')
+            await mkdir(current, { mode: 0o700 });
+        else if (kind !== 'directory')
+            throw new Error(`lark business skill: directory path is ${kind}: ${current}`);
+    }
+}
+async function hasExistingRealDirectory(path) {
+    const absolute = resolve(path);
+    const root = parse(absolute).root;
+    let current = root;
+    for (const segment of relative(root, absolute).split(sep).filter(Boolean)) {
+        current = join(current, segment);
+        const kind = await existingKind(current);
+        if (kind === 'missing')
+            return false;
+        if (kind !== 'directory')
+            throw new Error(`lark business skill: directory path is ${kind}: ${current}`);
+    }
+    return true;
+}
+function metadataBinding(content, name) {
+    const marker = `${markerPrefix}${name} -->`;
+    const separator = `\n---\n${marker}\n`;
+    const end = content.startsWith('---\n') ? content.indexOf(separator, 4) : -1;
+    if (end < 0)
+        throw new Error('lark business skill: existing SKILL.md is not managed by this installer');
+    try {
+        const document = parseYaml(content.slice(4, end));
+        if (typeof document !== 'object' || document === null || Array.isArray(document))
+            return undefined;
+        const metadata = document.metadata;
+        return typeof metadata === 'object' && metadata !== null && !Array.isArray(metadata)
+            ? metadata : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Remove a stale managed skill after owner/app rotation or explicit opt-out. */
+export async function reconcileLarkBusinessSkill(input) {
+    const binding = requireBinding(input);
+    if (typeof input.enabled !== 'boolean')
+        throw new Error('lark business skill: invalid enabled flag');
+    const dshHome = requireAbsolutePath(input.dshHome, 'dshHome', process.platform);
+    const previousAccount = input.previousAccount === undefined
+        ? undefined : requireIdentifier(input.previousAccount, 'previousAccount');
+    const reconcileName = async (name, removeRegardlessOfBinding) => {
+        const skillDir = join(dshHome, 'skills', name);
+        if (!await hasExistingRealDirectory(skillDir))
+            return;
+        const path = join(skillDir, 'SKILL.md');
+        const kind = await existingKind(path);
+        if (kind === 'missing')
+            return;
+        if (kind !== 'file')
+            throw new Error(`lark business skill: existing SKILL.md is ${kind}; refusing to replace it`);
+        const metadata = metadataBinding(await readFile(path, 'utf8'), name);
+        if (removeRegardlessOfBinding || !input.enabled || metadata?.appId !== binding.appId || metadata?.ownerUserId !== binding.ownerUserId
+            || metadata?.profile !== binding.profile || metadata?.account !== binding.account) {
+            await unlink(path);
+        }
+    };
+    if (previousAccount !== undefined && previousAccount !== binding.account) {
+        await reconcileName(skillName({ profile: binding.profile, account: previousAccount }), true);
+    }
+    await reconcileName(skillName(binding), false);
+}
+export async function installLarkBusinessSkill(input) {
+    const { name, content } = renderLarkBusinessSkill(input);
+    const dshHome = requireAbsolutePath(input.dshHome, 'dshHome', input.platform ?? process.platform);
+    const skillDir = join(dshHome, 'skills', name);
+    const path = join(skillDir, 'SKILL.md');
+    await ensureRealDirectory(skillDir);
+    const kind = await existingKind(path);
+    if (kind !== 'missing' && kind !== 'file') {
+        throw new Error(`lark business skill: existing SKILL.md is ${kind}; refusing to replace it`);
+    }
+    if (kind === 'file') {
+        const previous = await readFile(path, 'utf8');
+        metadataBinding(previous, name);
+        if (previous === content)
+            return { path, name };
+    }
+    else if ((await readdir(skillDir)).length !== 0) {
+        throw new Error('lark business skill: existing skill directory is not managed by this installer');
+    }
+    const temporary = join(skillDir, `.SKILL.md.${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporary, content, { encoding: 'utf8', flag: 'wx', mode: 0o600 });
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await unlink(temporary).catch(() => undefined);
+        throw error;
+    }
+    return { path, name };
+}
+//# sourceMappingURL=business-skill.js.map

package/lib/business-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-skill.js","sourceRoot":"","sources":["../src/business-skill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7F,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAClF,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAyBrE,MAAM,iBAAiB,GAAG,oCAAoC,CAAA;AAC9D,MAAM,YAAY,GAAG,4BAA4B,CAAA;AACjD,MAAM,YAAY,GAAG,wBAAwB,CAAA;AAC7C,MAAM,YAAY,GAAG,+DAA+D,CAAA;AAEpF,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrC,OAAO,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAoF;IAG1G,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC3D,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAA;AACjF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa,EAAE,QAAyB;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,KAAK,CAAC;WACtD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,sDAAsD,CAAC,CAAA;IACtG,CAAC;IACD,OAAO,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC1E,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAA6B;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;IACnD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IACpE,OAAO;QACL,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;QAChE,GAAG,OAAO;QACV,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC;QACzE,UAAU;QACV,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC;QAC/E,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC;QACzE,QAAQ;KACT,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAA;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAA;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAA0D;IAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrH,OAAO,iBAAiB,IAAI,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,MAAM,GAAG,GAAG,YAAY,GAAG,IAAI,MAAM,CAAA;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACtC,CAAC,CAAC,GAAG,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,IAAI,iCAAiC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,iCAAiC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,6FAA6F,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QAC5a,CAAC,CAAC,OAAO,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,2BAA2B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,0EAA0E,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAA;IACpV,MAAM,WAAW,GAAG,SAAS,CAAC;QAC5B,IAAI;QACJ,WAAW,EAAE,4JAA4J,OAAO,CAAC,OAAO,kBAAkB,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,KAAK,eAAe,OAAO,CAAC,WAAW,oEAAoE;QACrV,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW;YAChE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;KACvD,CAAC,CAAC,OAAO,EAAE,CAAA;IACZ,MAAM,OAAO,GAAG,QAAQ,WAAW,UAAU,MAAM,uEAAuE,OAAO,CAAC,OAAO,sBAAsB,OAAO,CAAC,OAAO,qBAAqB,OAAO,CAAC,KAAK,2BAA2B,OAAO,CAAC,WAAW,wWAAwW,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gCAAgC,kZAAkZ,GAAG,qBAAqB,GAAG,wcAAwc,GAAG,qgCAAqgC,CAAA;IAC5jF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,SAAS,CAAA;QAC3C,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAA;QAC1C,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,MAAM,CAAA;QAChC,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACxE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAA;IACjC,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;aACxD,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,KAAK,OAAO,EAAE,CAAC,CAAA;IAC9G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAA;IACjC,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACpC,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,KAAK,OAAO,EAAE,CAAC,CAAA;IACzG,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAY;IACpD,MAAM,MAAM,GAAG,GAAG,YAAY,GAAG,IAAI,MAAM,CAAA;IAC3C,MAAM,SAAS,GAAG,UAAU,MAAM,IAAI,CAAA;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5E,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IACvG,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAY,CAAA;QAC5D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAA;QAClG,MAAM,QAAQ,GAAI,QAAoC,CAAC,QAAQ,CAAA;QAC/D,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClF,CAAC,CAAC,QAAmC,CAAC,CAAC,CAAC,SAAS,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAsC;IACrF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACrC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACpG,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,KAAK,SAAS;QACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;IAC3E,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAE,yBAAkC,EAAiB,EAAE;QAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,wBAAwB,CAAC,QAAQ,CAAC;YAAE,OAAM;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAM;QAC9B,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,0BAA0B,CAAC,CAAA;QACjH,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;QACpE,IAAI,yBAAyB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW;eAChI,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACpF,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,CAAA;IACD,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACzE,MAAM,aAAa,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAA6B;IAC1E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;IACxD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IACvC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,0BAA0B,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC/B,IAAI,QAAQ,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACjD,CAAC;SAAM,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;IACnG,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,UAAU,EAAE,MAAM,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAClF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,KAAK,CAAA;IACb,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC"}

package/lib/launchd-control.d.ts

@@ -0,0 +1,24 @@
+import { inspectDshLaunchAgent } from './launchd.js';
+type ServiceInput = {
+    dshHome: string;
+    profile: string;
+};
+type ServiceState = Awaited<ReturnType<typeof inspectDshLaunchAgent>>;
+export type LaunchAgentAction = 'registered' | 'running' | 'restart' | 'restart-if-loaded';
+export interface LaunchAgentControlOptions {
+    platform?: NodeJS.Platform;
+    inspect?: (input: ServiceInput) => Promise<ServiceState>;
+    run?: (command: string, args: string[]) => {
+        status: number | null;
+        stderr?: string;
+    };
+    lock?: <T>(input: ServiceInput, operation: () => Promise<T>) => Promise<T>;
+    wait?: (milliseconds: number) => Promise<void>;
+    timeoutMs?: number;
+}
+/** Service-only operations never install a plist or run onboarding. */
+export declare function controlDshLaunchAgent(input: ServiceInput, action: LaunchAgentAction, options?: LaunchAgentControlOptions): Promise<boolean>;
+/** Internal installer dispatch, loaded through the selected Host's resolver. */
+export declare function runLaunchdControl(args: string[]): Promise<void>;
+export {};
+//# sourceMappingURL=launchd-control.d.ts.map

package/lib/launchd-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-control.d.ts","sourceRoot":"","sources":["../src/launchd-control.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAGpD,KAAK,YAAY,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AACxD,KAAK,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAA;AACrE,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAA;AAC1F,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;IACxD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrF,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IAC1E,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,uEAAuE;AACvE,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EACxF,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAoC3D;AAED,gFAAgF;AAChF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAarE"}

package/lib/launchd-control.js

@@ -0,0 +1,68 @@
+import { spawnSync } from 'node:child_process';
+import { isAbsolute } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { inspectDshLaunchAgent } from './launchd.js';
+import { withLaunchAgentTargetLock } from './launchd-target-lock.js';
+/** Service-only operations never install a plist or run onboarding. */
+export async function controlDshLaunchAgent(input, action, options = {}) {
+    if ((options.platform ?? process.platform) !== 'darwin')
+        throw new Error('launchd service control requires macOS');
+    if (!isAbsolute(input.dshHome) || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(input.profile)) {
+        throw new Error('invalid launchd service identity');
+    }
+    const inspect = options.inspect ?? inspectDshLaunchAgent;
+    if (action === 'registered' || action === 'running') {
+        const state = await inspect(input);
+        return state.registered && (action === 'registered' || state.running);
+    }
+    const run = options.run ?? ((command, args) => spawnSync(command, args, {
+        encoding: 'utf8', timeout: 10_000, maxBuffer: 262_144,
+        env: { PATH: '/usr/bin:/bin:/usr/sbin:/sbin' }, stdio: ['ignore', 'ignore', 'pipe'],
+    }));
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 60_000)
+        throw new Error('invalid launchd restart deadline');
+    return (options.lock ?? withLaunchAgentTargetLock)(input, async () => {
+        const before = await inspect(input);
+        if (!before.registered) {
+            if (action === 'restart-if-loaded')
+                return false;
+            throw new Error('launchd service is not registered for this DSH_HOME');
+        }
+        const result = run('/bin/launchctl', ['kickstart', '-k', before.target]);
+        if (result.status !== 0)
+            throw new Error(`launchd restart failed: ${result.stderr?.trim() || `exit ${result.status}`}`);
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            const current = await inspect(input);
+            if (current.target !== before.target || current.plistPath !== before.plistPath
+                || (current.registered && JSON.stringify(current.identity) !== JSON.stringify(before.identity))) {
+                throw new Error('launchd service identity changed during restart');
+            }
+            if (current.registered && current.running && current.pid !== before.pid)
+                return true;
+            if (Date.now() >= deadline)
+                throw new Error('launchd restart did not produce a new running Host');
+            await (options.wait ?? delay)(Math.min(100, deadline - Date.now()));
+        }
+    });
+}
+/** Internal installer dispatch, loaded through the selected Host's resolver. */
+export async function runLaunchdControl(args) {
+    const values = {};
+    for (let index = 0; index < args.length; index += 2) {
+        const name = args[index], value = args[index + 1];
+        if (!name || !['--profile', '--dsh-home', '--action'].includes(name) || values[name] !== undefined
+            || !value || value.startsWith('--'))
+            throw new Error('invalid launchd service control arguments');
+        values[name] = value;
+    }
+    const action = values['--action'];
+    if (!action || !['registered', 'running', 'restart', 'restart-if-loaded'].includes(action)
+        || !values['--profile'] || !values['--dsh-home'])
+        throw new Error('missing launchd service control arguments');
+    const present = await controlDshLaunchAgent({ dshHome: values['--dsh-home'], profile: values['--profile'] }, action);
+    if (!present && action !== 'restart-if-loaded')
+        process.exitCode = 3;
+}
+//# sourceMappingURL=launchd-control.js.map

package/lib/launchd-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-control.js","sourceRoot":"","sources":["../src/launchd-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AAcpE,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAmB,EAAE,MAAyB,EACxF,UAAqC,EAAE;IACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAClH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAA;IACxD,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO;QACrD,GAAG,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KACpF,CAAC,CAAC,CAAA;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAChI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,MAAM,KAAK,mBAAmB;gBAAE,OAAO,KAAK,CAAA;YAChD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACxE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACvH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACvC,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;mBACzE,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAClG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;YACpE,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAA;YACpF,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;YACjG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACrE,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAc;IACpD,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;eAC7F,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QACnG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;WACrF,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAChH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,MAA2B,CAAC,CAAA;IACzI,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,mBAAmB;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtE,CAAC"}

package/lib/launchd-identity.d.ts

@@ -0,0 +1,34 @@
+export interface NativeLaunchdIdentity {
+    dshHome: string;
+    profile: string;
+    home?: string;
+    uid?: number;
+    nodePath?: string;
+    dshPath?: string;
+    dshSha256?: string;
+}
+export interface NativeLaunchdState {
+    registered: boolean;
+    pid: number;
+}
+export interface NativeLaunchdDetail extends NativeLaunchdState {
+    running: boolean;
+    state: string | null;
+    lastExitCode: string | null;
+}
+export interface NativeLaunchdCommandResult {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+}
+export type NativeLaunchdCommand = (command: string, args: string[]) => NativeLaunchdCommandResult;
+/** A missing job is distinct from a failed launchctl query. Never stop a job
+ * belonging to another Home just because its profile label is the same. */
+export declare function inspectNativeLaunchdDetail(input: NativeLaunchdIdentity, command?: NativeLaunchdCommand): NativeLaunchdDetail;
+export declare function inspectNativeLaunchd(input: NativeLaunchdIdentity, command?: NativeLaunchdCommand): NativeLaunchdState;
+/** Validate an existing plist before recording it for rollback. The loaded job
+ * is independently checked by inspectNativeLaunchd. */
+export declare function assertNativeLaunchdPlist(bytes: string, input: NativeLaunchdIdentity, command?: NativeLaunchdCommand): void;
+export declare function stopNativeLaunchd(input: NativeLaunchdIdentity, signal: AbortSignal, command?: NativeLaunchdCommand): Promise<void>;
+export declare function startNativeLaunchd(input: NativeLaunchdIdentity, signal: AbortSignal, command?: NativeLaunchdCommand): Promise<void>;
+//# sourceMappingURL=launchd-identity.d.ts.map

package/lib/launchd-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-identity.d.ts","sourceRoot":"","sources":["../src/launchd-identity.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CACxD;AACD,MAAM,WAAW,kBAAkB;IAAG,UAAU,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACxE,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACpE;AACD,MAAM,WAAW,0BAA0B;IAAG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACrG,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,0BAA0B,CAAA;AA0DlG;2EAC2E;AAC3E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,qBAAqB,EAAE,OAAO,GAAE,oBAA0B,GAAG,mBAAmB,CAqBjI;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,EAAE,OAAO,GAAE,oBAA0B,GAAG,kBAAkB,CAG1H;AAED;uDACuD;AACvD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAClF,OAAO,GAAE,oBAA0B,GAAG,IAAI,CA4B3C;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,WAAW,EACvF,OAAO,GAAE,oBAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBpD;AACD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,WAAW,EACxF,OAAO,GAAE,oBAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAYpD"}

package/lib/launchd-identity.js

@@ -0,0 +1,184 @@
+import { spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { readFileSync, realpathSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { launchAgentPaths } from './launchd.js';
+const run = (command, args) => {
+    const result = spawnSync(command, args, { encoding: 'utf8', timeout: 10_000, maxBuffer: 262_144,
+        env: { PATH: '/usr/bin:/bin:/usr/sbin:/sbin' }, stdio: ['ignore', 'pipe', 'pipe'] });
+    return { status: result.status, stdout: result.stdout ?? '', stderr: result.stderr ?? '' };
+};
+function fail(message) { throw new Error(`rsi native launchd: ${message}`); }
+function identity(input) {
+    const uid = input.uid ?? process.getuid?.();
+    if (!Number.isSafeInteger(uid) || uid === undefined || uid < 1)
+        fail('a non-root GUI user is required');
+    const paths = launchAgentPaths(input), domain = `gui/${uid}`;
+    return { ...paths, domain, target: `${domain}/${paths.label}`, cwd: join(input.dshHome, 'profiles', input.profile) };
+}
+function scalar(text, key, separator = ' = ') {
+    const prefix = `${key}${separator}`;
+    const matches = text.split('\n').map(line => line.trim()).filter(line => line.startsWith(prefix));
+    if (matches.length !== 1)
+        return undefined;
+    return matches[0].slice(prefix.length);
+}
+function rootScalar(text, target, key) {
+    const lines = text.split('\n'), values = [];
+    let depth = 0, rootDepth = 0, first = true, wrapped = false;
+    for (const line of lines) {
+        const value = line.trim();
+        if (value === '')
+            continue;
+        if (first) {
+            first = false;
+            if (value.endsWith(' = {')) {
+                if (value !== `${target} = {`)
+                    return undefined;
+                depth = 1;
+                rootDepth = 1;
+                wrapped = true;
+                continue;
+            }
+        }
+        if (wrapped && depth === 0)
+            return undefined;
+        if (value === '}') {
+            if (depth === 0)
+                return undefined;
+            depth -= 1;
+            continue;
+        }
+        const prefix = `${key} = `;
+        if (depth === rootDepth && value.startsWith(prefix))
+            values.push(value.slice(prefix.length));
+        if (value.endsWith(' = {'))
+            depth += 1;
+    }
+    return depth === 0 && values.length === 1 ? values[0] : undefined;
+}
+function assertArguments(args, input) {
+    if (!input.nodePath || !input.dshPath || !input.dshSha256 || !Array.isArray(args)
+        || !args.every(arg => typeof arg === 'string'))
+        fail('service executable identity is missing');
+    const offset = args[1] === '--disable-warning=ExperimentalWarning' ? 2 : 1;
+    const node = args[0], dsh = args[offset];
+    if (args.length !== offset + 4 || typeof node !== 'string' || typeof dsh !== 'string' || !isAbsolute(node) || !isAbsolute(dsh)
+        || realpathSync(node) !== input.nodePath || realpathSync(dsh) !== input.dshPath
+        || args[offset + 1] !== '--profile' || args[offset + 2] !== input.profile || args[offset + 3] !== '--no-open'
+        || createHash('sha256').update(readFileSync(input.dshPath)).digest('hex') !== input.dshSha256) {
+        fail('service command differs from the selected Node and DSH installation');
+    }
+}
+/** A missing job is distinct from a failed launchctl query. Never stop a job
+ * belonging to another Home just because its profile label is the same. */
+export function inspectNativeLaunchdDetail(input, command = run) {
+    const expected = identity(input), result = command('/bin/launchctl', ['print', expected.target]);
+    if (result.status !== 0) {
+        if (result.status === 113 && /Could not find service/iu.test(result.stderr)) {
+            return { registered: false, pid: 0, running: false, state: null, lastExitCode: null };
+        }
+        fail('cannot inspect the user service');
+    }
+    if (scalar(result.stdout, 'path') !== expected.plistPath || scalar(result.stdout, 'working directory') !== expected.cwd
+        || scalar(result.stdout, 'DSH_HOME', ' => ') !== input.dshHome)
+        fail('loaded service belongs to another installation');
+    if (/^\s*(?:NODE_OPTIONS|NODE_PATH|DYLD_[A-Z_]+|LD_PRELOAD|LD_LIBRARY_PATH) =>/mu.test(result.stdout)) {
+        fail('loaded service has an unexpected execution environment');
+    }
+    const argumentsBlock = /^\s*arguments = \{\n([\s\S]*?)^\s*\}/mu.exec(result.stdout);
+    assertArguments(argumentsBlock?.[1]?.split('\n').map(line => line.trim()).filter(Boolean), input);
+    if (realpathSync(scalar(result.stdout, 'program') ?? '') !== input.nodePath)
+        fail('loaded service program differs');
+    const raw = scalar(result.stdout, 'pid'), pid = raw === undefined ? 0 : Number(raw);
+    if (!Number.isSafeInteger(pid) || pid < 0 || pid === 1)
+        fail('invalid service process identity');
+    const state = rootScalar(result.stdout, expected.target, 'state') ?? null;
+    return { registered: true, pid, running: state === 'running' && pid > 1, state,
+        lastExitCode: rootScalar(result.stdout, expected.target, 'last exit code') ?? null };
+}
+export function inspectNativeLaunchd(input, command = run) {
+    const { registered, pid } = inspectNativeLaunchdDetail(input, command);
+    return { registered, pid };
+}
+/** Validate an existing plist before recording it for rollback. The loaded job
+ * is independently checked by inspectNativeLaunchd. */
+export function assertNativeLaunchdPlist(bytes, input, command = run) {
+    // plutil receives the already-read bytes via an argument-free stdin call in
+    // production; tests may supply a parsed response without executing launchd.
+    const result = command === run ? (() => {
+        const child = spawnSync('/usr/bin/plutil', ['-convert', 'json', '-o', '-', '--', '-'], { input: bytes, encoding: 'utf8', timeout: 10_000, maxBuffer: 262_144, env: { PATH: '/usr/bin:/bin' } });
+        return { status: child.status, stdout: child.stdout ?? '', stderr: child.stderr ?? '' };
+    })() : command('/usr/bin/plutil', ['-convert', 'json', '-o', '-', '--', '-']);
+    if (result.status !== 0)
+        fail('invalid LaunchAgent plist');
+    const value = JSON.parse(result.stdout), expected = identity(input);
+    const fields = new Set(['Label', 'ProgramArguments', 'EnvironmentVariables', 'WorkingDirectory',
+        'StandardOutPath', 'StandardErrorPath', 'LimitLoadToSessionType', 'ProcessType', 'RunAtLoad',
+        'KeepAlive', 'ThrottleInterval', 'ExitTimeOut', 'Umask']);
+    // Program overrides argv[0]; other launchd keys can change the executable's
+    // filesystem or inherited authority. Only our generated execution shape is
+    // safe to record as a rollback target.
+    if (!value || typeof value !== 'object' || Array.isArray(value) || Object.keys(value).some(key => !fields.has(key))
+        || !value.EnvironmentVariables || typeof value.EnvironmentVariables !== 'object'
+        || Object.keys(value.EnvironmentVariables).sort().join(',') !== 'DSH_HOME,PATH'
+        || typeof value.EnvironmentVariables.PATH !== 'string'
+        || !value.EnvironmentVariables.PATH.split(':').every((path) => isAbsolute(path) && !/[\p{Cc}]/u.test(path))
+        || value.StandardOutPath !== expected.stdoutPath || value.StandardErrorPath !== expected.stderrPath
+        || value.LimitLoadToSessionType !== 'Aqua' || value.ProcessType !== 'Background'
+        || value.RunAtLoad !== true || value.KeepAlive !== true || value.ThrottleInterval !== 10
+        || value.ExitTimeOut !== 30 || value.Umask !== 63)
+        fail('plist execution settings differ from the managed LaunchAgent');
+    if (value.Label !== expected.label || value.WorkingDirectory !== expected.cwd
+        || value.EnvironmentVariables?.DSH_HOME !== input.dshHome)
+        fail('plist belongs to another installation');
+    assertArguments(value.ProgramArguments, input);
+}
+export async function stopNativeLaunchd(input, signal, command = run) {
+    const expected = identity(input);
+    const initial = inspectNativeLaunchd(input, command);
+    if (!initial.registered)
+        return;
+    const stopped = command('/bin/launchctl', ['bootout', expected.target]);
+    // bootout can report a racing removal, but the job must actually disappear.
+    for (let attempt = 0; attempt < 400; attempt++) {
+        signal.throwIfAborted();
+        if (!inspectNativeLaunchd(input, command).registered) {
+            // Registry removal alone is insufficient: launchd may still be waiting
+            // for the old process to exit. A reused PID conservatively blocks setup.
+            if (initial.pid === 0)
+                return;
+            try {
+                process.kill(initial.pid, 0);
+            }
+            catch (error) {
+                if (error.code === 'ESRCH')
+                    return;
+                throw error;
+            }
+        }
+        if (stopped.status !== 0)
+            fail('service did not stop');
+        await delay(100, undefined, { signal });
+    }
+    fail('service remained registered after bootout');
+}
+export async function startNativeLaunchd(input, signal, command = run) {
+    const expected = identity(input);
+    if (inspectNativeLaunchd(input, command).registered)
+        fail('service is still registered before bootstrap');
+    if (command('/bin/launchctl', ['enable', expected.target]).status !== 0)
+        fail('cannot enable user service');
+    for (let attempt = 0; attempt < 3; attempt++) {
+        signal.throwIfAborted();
+        const result = command('/bin/launchctl', ['bootstrap', expected.domain, expected.plistPath]);
+        if (result.status !== 0 && result.status !== 5)
+            fail('cannot bootstrap user service');
+        if (inspectNativeLaunchd(input, command).registered)
+            return;
+        await delay(250, undefined, { signal });
+    }
+    fail('bootstrap did not register the service');
+}
+//# sourceMappingURL=launchd-identity.js.map

package/lib/launchd-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-identity.js","sourceRoot":"","sources":["../src/launchd-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAY/C,MAAM,GAAG,GAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO;QAC7F,GAAG,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IACtF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAA;AAC5F,CAAC,CAAA;AACD,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AAC3F,SAAS,QAAQ,CAAC,KAA4B;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACvG,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,EAAE,CAAA;IAC5D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;AACtH,CAAC;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW,EAAE,SAAS,GAAG,KAAK;IAC1D,MAAM,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACjG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1C,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC;AACD,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc,EAAE,GAAW;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAa,EAAE,CAAA;IACrD,IAAI,KAAK,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,GAAG,KAAK,CAAA;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACzB,IAAI,KAAK,KAAK,EAAE;YAAE,SAAQ;QAC1B,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,GAAG,KAAK,CAAA;YACb,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,IAAI,KAAK,KAAK,GAAG,MAAM,MAAM;oBAAE,OAAO,SAAS,CAAA;gBAC/C,KAAK,GAAG,CAAC,CAAC;gBAAC,SAAS,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAA;gBACxC,SAAQ;YACV,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC5C,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjC,KAAK,IAAI,CAAC,CAAA;YACV,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,GAAG,KAAK,CAAA;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5F,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,KAAK,IAAI,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACnE,CAAC;AACD,SAAS,eAAe,CAAC,IAAa,EAAE,KAA4B;IAClE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;WAC5E,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,uCAAuC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;WACzH,YAAY,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO;WAC5E,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,WAAW;WAC1G,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAChG,IAAI,CAAC,qEAAqE,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,0BAA0B,CAAC,KAA4B,EAAE,UAAgC,GAAG;IAC1G,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAChG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QACvF,CAAC;QACD,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,KAAK,QAAQ,CAAC,GAAG;WAClH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,OAAO;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAA;IACxH,IAAI,6EAA6E,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtG,IAAI,CAAC,wDAAwD,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,cAAc,GAAG,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnF,eAAe,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAA;IACjG,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IACnH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACnF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAChG,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAA;IACzE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,KAAK;QAC5E,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAA;AACxF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA4B,EAAE,UAAgC,GAAG;IACpG,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACtE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;AAC5B,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,KAA4B,EAClF,UAAgC,GAAG;IACnC,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,EACnF,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;QAC1G,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAA;IACzF,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAwB,EAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB;QAC7F,iBAAiB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,aAAa,EAAE,WAAW;QAC5F,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3D,4EAA4E;IAC5E,2EAA2E;IAC3E,uCAAuC;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;WAC9G,CAAC,KAAK,CAAC,oBAAoB,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ;WAC7E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,eAAe;WAC5E,OAAO,KAAK,CAAC,oBAAoB,CAAC,IAAI,KAAK,QAAQ;WACnD,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;WAChH,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,UAAU;WAChG,KAAK,CAAC,sBAAsB,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY;WAC7E,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE;WACrF,KAAK,CAAC,WAAW,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;QAAE,IAAI,CAAC,8DAA8D,CAAC,CAAA;IACzH,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,GAAG;WACxE,KAAK,CAAC,oBAAoB,EAAE,QAAQ,KAAK,KAAK,CAAC,OAAO;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC1G,eAAe,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA4B,EAAE,MAAmB,EACvF,UAAgC,GAAG;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACpD,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAM;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACvE,4EAA4E;IAC5E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;YACrD,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC;gBAAE,OAAM;YAC7B,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAAC,CAAC;YACpC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;oBAAE,OAAO;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;QAC9F,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,sBAAsB,CAAC,CAAA;QACtD,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,2CAA2C,CAAC,CAAA;AACnD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA4B,EAAE,MAAmB,EACxF,UAAgC,GAAG;IACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;IACzG,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC3G,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;QACrF,IAAI,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU;YAAE,OAAM;QAC3D,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,wCAAwC,CAAC,CAAA;AAChD,CAAC"}

package/lib/launchd-target-lock.d.ts

@@ -0,0 +1,6 @@
+/** The launchd label is shared by every DSH_HOME for this GUI user. */
+export declare function withLaunchAgentTargetLock<T>(input: {
+    profile: string;
+    uid?: number;
+}, operation: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=launchd-target-lock.d.ts.map

package/lib/launchd-target-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd-target-lock.d.ts","sourceRoot":"","sources":["../src/launchd-target-lock.ts"],"names":[],"mappings":"AAMA,uEAAuE;AACvE,wBAAsB,yBAAyB,CAAC,CAAC,EAC/C,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpE,OAAO,CAAC,CAAC,CAAC,CAuCZ"}