@excitedjs/dreamux 0.26.0-beta.265 → 0.26.0

package/dist/daemon/environment.js

@@ -0,0 +1,353 @@
+/**
+ * Managed-service launch environment: Node-binary selection for the pinned
+ * service Node, and PATH/launch-environment orchestration (the env vars and
+ * effective PATH persisted into the service unit, and the preflight that
+ * confirms the service can actually launch under them). Declares
+ * `ServiceInstallAnswers`, the resolved-answers shape both entry points
+ * render a unit from. `resolveManagedServiceAnswers` is the one install
+ * pipeline (fallback exec dirs → provider binary resolution → stable Node
+ * selection) `daemon install` (`daemon/install.ts`) and `dreamux onboard`
+ * (`onboard/run.ts`) both build a `ServiceInstallAnswers` from.
+ */
+import { constants } from 'node:fs';
+import { access, realpath } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { delimiter, dirname, isAbsolute, join, resolve } from 'node:path';
+import { errorMessage } from '@excitedjs/dreamux-utils';
+import { expandHome } from '../config/config.js';
+import { buildServicePath, dreamuxRoot, probeStandardExecDirs, withServicePath, } from '../platform/paths.js';
+import { providerBinChecksForConfig, } from '../provider-diagnostics.js';
+// ---------------------------------------------------------------------------
+// Service-Node selection
+// ---------------------------------------------------------------------------
+/**
+ * Minimum Node version the managed-service environment requires. The launchd
+ * plist and systemd user unit persist a stable Node binary; selection (see
+ * {@link selectServiceNodeBin}) refuses candidates below this version.
+ */
+export const MIN_SERVICE_NODE_VERSION = '22.7.0';
+/**
+ * Parse a `node --version` (or `v<major>.<minor>.<patch>`) string and decide
+ * whether it satisfies {@link MIN_SERVICE_NODE_VERSION}. Pure and side-effect
+ * free so selection and the launch doctor share one comparison.
+ */
+export function nodeVersionSatisfies(raw) {
+    const match = raw.trim().match(/^v?(\d+)\.(\d+)\.(\d+)/);
+    if (match === null)
+        return false;
+    const major = Number(match[1]);
+    const minor = Number(match[2]);
+    if (!Number.isInteger(major) || !Number.isInteger(minor))
+        return false;
+    if (major > 22)
+        return true;
+    return major === 22 && minor >= 7;
+}
+export const defaultServiceNodeProbe = {
+    realpath: (path) => realpath(path),
+    isExecutable: (path) => isExecutable(path),
+};
+// Markers matched (case-insensitively) against a Node binary's resolved path.
+// Each keeps a leading `/.<name>/` or segment anchor so a user dir like
+// `/home/volta/` never matches `/.volta/`. macOS fnm installs under
+// `~/Library/Application Support/fnm/`; dreamux supports launchd so cover it.
+const VERSION_MANAGER_MARKERS = [
+    { manager: 'nvm', markers: ['/.nvm/versions/node/'] },
+    {
+        manager: 'fnm',
+        markers: [
+            '/.fnm/',
+            'fnm_multishells',
+            '/.local/share/fnm/',
+            '/library/application support/fnm/',
+        ],
+    },
+    { manager: 'asdf', markers: ['/.asdf/installs/nodejs/', '/.asdf/shims/'] },
+    { manager: 'volta', markers: ['/.volta/'] },
+];
+/** Pure marker match on a single path; returns the manager name or null. */
+export function versionManagerOfPath(path) {
+    const needle = path.toLowerCase();
+    for (const entry of VERSION_MANAGER_MARKERS) {
+        if (entry.markers.some((marker) => needle.includes(marker))) {
+            return entry.manager;
+        }
+    }
+    return null;
+}
+/**
+ * Single async/injectable predicate selection and doctor share. Resolves
+ * symlinks first so a `/usr/local/bin/node` shim into nvm/fnm/asdf is caught;
+ * falls back to the raw path when realpath fails.
+ */
+export async function detectServiceNodeVersionManager(nodeBin, probe = defaultServiceNodeProbe) {
+    const raw = versionManagerOfPath(nodeBin);
+    if (raw !== null)
+        return raw;
+    let resolved;
+    try {
+        resolved = await probe.realpath(nodeBin);
+    }
+    catch {
+        return null;
+    }
+    return versionManagerOfPath(resolved);
+}
+/**
+ * Platform-aware stable Node candidates. macOS covers Homebrew (Apple Silicon
+ * and Intel prefixes); Linux covers standard system locations.
+ */
+export function stableNodeCandidates(platform) {
+    if (platform === 'darwin') {
+        return [
+            '/opt/homebrew/bin/node',
+            '/opt/homebrew/opt/node/bin/node',
+            '/opt/homebrew/opt/node@24/bin/node',
+            '/opt/homebrew/opt/node@22/bin/node',
+            '/usr/local/bin/node',
+            '/usr/local/opt/node/bin/node',
+            '/usr/local/opt/node@24/bin/node',
+            '/usr/local/opt/node@22/bin/node',
+            '/usr/bin/node',
+        ];
+    }
+    return ['/usr/local/bin/node', '/usr/bin/node', '/bin/node'];
+}
+/**
+ * Choose the Node binary persisted into the managed-service environment.
+ * Prefers a stable system Node (exists, not version-manager-bound, satisfies
+ * MIN_SERVICE_NODE_VERSION); falls back to the current Node otherwise.
+ */
+export async function selectServiceNodeBin(options) {
+    const probe = options.probe ?? defaultServiceNodeProbe;
+    for (const candidate of stableNodeCandidates(options.platform)) {
+        if (!(await probe.isExecutable(candidate)))
+            continue;
+        if ((await detectServiceNodeVersionManager(candidate, probe)) !== null) {
+            continue;
+        }
+        let version;
+        try {
+            version = await options.runner.capture(candidate, ['--version']);
+        }
+        catch {
+            continue;
+        }
+        if (!nodeVersionSatisfies(version))
+            continue;
+        // Persist the candidate path itself (a stable symlink), never its realpath,
+        // so a Homebrew symlink keeps the volatile Cellar path out of the service.
+        return candidate;
+    }
+    return stabilizeHomebrewCellarNode(options.currentNodeBin, options.platform, probe);
+}
+const HOMEBREW_PREFIXES = ['/opt/homebrew', '/usr/local'];
+function matchHomebrewCellar(path) {
+    for (const prefix of HOMEBREW_PREFIXES) {
+        const cellar = `${prefix}/Cellar/node`;
+        if (!path.startsWith(`${cellar}/`) && !path.startsWith(`${cellar}@`)) {
+            continue;
+        }
+        const major = path.slice(cellar.length).match(/^@(\d+)\//);
+        return { prefix, major: major === null ? null : major[1] };
+    }
+    return null;
+}
+/**
+ * Homebrew Cellar (`<prefix>/Cellar/node[@major]/<version>/bin/node`) is a
+ * version-pinned path unfit for a persistent service. Best-effort remap to the
+ * matching stable Homebrew symlink; no match returns the input unchanged and
+ * never throws. darwin-only.
+ */
+export async function stabilizeHomebrewCellarNode(nodeBin, platform, probe = defaultServiceNodeProbe) {
+    if (platform !== 'darwin')
+        return nodeBin;
+    let resolved;
+    try {
+        resolved = await probe.realpath(nodeBin);
+    }
+    catch {
+        resolved = nodeBin;
+    }
+    const cellar = matchHomebrewCellar(nodeBin) ?? matchHomebrewCellar(resolved);
+    if (cellar === null)
+        return nodeBin;
+    const links = [];
+    if (cellar.major !== null) {
+        links.push(`${cellar.prefix}/opt/node@${cellar.major}/bin/node`);
+    }
+    links.push(`${cellar.prefix}/opt/node/bin/node`, `${cellar.prefix}/bin/node`);
+    for (const link of links) {
+        if (!(await probe.isExecutable(link)))
+            continue;
+        try {
+            if ((await probe.realpath(link)) === resolved)
+                return link;
+        }
+        catch {
+            // ignore and try the next candidate symlink
+        }
+    }
+    return nodeBin;
+}
+/** True when `path` is executable by the current process; never throws. */
+export async function isExecutable(path) {
+    try {
+        await access(path, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// PATH / launch-environment orchestration
+// ---------------------------------------------------------------------------
+export function managedServiceEnvironment(answers) {
+    const home = answers.homeDir ?? homedir();
+    // Unit PATH: stable dirs → captured session PATH → fallbacks (see managedServicePath).
+    const env = {
+        DREAMUX_ROOT: dreamuxRoot(),
+        HOME: home,
+        DREAMUX_NODE_BIN: answers.nodeBin,
+        PATH: managedServicePath(answers),
+    };
+    return env;
+}
+export async function validateManagedServiceLaunch(answers, runner) {
+    const env = managedServiceEnvironment(answers);
+    const errors = [];
+    try {
+        const version = await runner.capture(answers.nodeBin, ['--version'], {
+            env,
+        });
+        if (!nodeVersionSatisfies(version)) {
+            errors.push(`managed service Node must be >=${MIN_SERVICE_NODE_VERSION}: ${answers.nodeBin} reported ${version.trim() || '<empty>'}`);
+        }
+    }
+    catch (err) {
+        errors.push(`managed service cannot execute Node at ${answers.nodeBin}: ${errorMessage(err)}`);
+    }
+    if (!(await runner.check(answers.dreamuxBin, ['--help'], { env }))) {
+        errors.push(`managed service cannot execute dreamux launcher at ${answers.dreamuxBin}`);
+    }
+    for (const check of answers.providerBinChecks) {
+        if (!(await runner.check(check.bin, check.args, { env }))) {
+            errors.push(`managed service cannot execute provider binary '${check.name}' at ${check.bin}`);
+        }
+    }
+    return {
+        ok: errors.length === 0,
+        errors,
+    };
+}
+export async function resolveServiceExecutable(command, env) {
+    const trimmed = command.trim();
+    if (trimmed === '') {
+        throw new Error('managed service executable path is empty');
+    }
+    if (trimmed.includes('/') || trimmed.startsWith('~')) {
+        const candidate = resolve(expandHome(trimmed));
+        await assertExecutable(candidate, command);
+        return candidate;
+    }
+    for (const dir of (env['PATH'] ?? '').split(delimiter)) {
+        if (dir === '')
+            continue;
+        const candidate = join(dir, trimmed);
+        if (await isExecutable(candidate))
+            return candidate;
+    }
+    throw new Error(`managed service cannot resolve executable '${command}' from PATH; pass an absolute path and rerun dreamux onboard`);
+}
+/**
+ * Builds the resolve-time effective PATH used to resolve bare provider/agent
+ * binaries during `onboard`/`daemon install`. Captured session PATH leads, then
+ * the caller's captured fresh-install fallback dirs.
+ * Stable Dreamux-owned dirs are added at service render time (see
+ * managedServicePath). Delegates to {@link withServicePath} in paths.ts. Never
+ * mutates env.
+ */
+export function withUserLocalBinPath(env, fallbackDirs) {
+    const sessionPath = env['PATH'] ?? '';
+    return withServicePath(env, { stableDirs: [], sessionPath, fallbackDirs });
+}
+function configuredProviderBinChecks(config, env, catalogs) {
+    return providerBinChecksForConfig({
+        config,
+        catalogs,
+        env,
+        scope: 'managedService',
+    });
+}
+/**
+ * The one "resolve fallback exec dirs → resolve provider binary paths →
+ * select a stable service Node" pipeline shared by `daemon install`
+ * (`daemon/install.ts`'s `runDaemonInstall`) and `dreamux onboard`
+ * (`onboard/run.ts`'s `runOnboard`). `config`/`catalogs` are nullable because
+ * onboard's dry run never writes (and so never reads back) a real config;
+ * `daemon install` always has one already on disk.
+ */
+export async function resolveManagedServiceAnswers(input) {
+    const fallbackDirs = await probeStandardExecDirs({
+        platform: input.host.platform,
+        homeDir: input.host.homeDir,
+        env: input.env,
+    });
+    const resolveEnv = withUserLocalBinPath(input.env, fallbackDirs);
+    const providerBinChecks = input.config === null || input.catalogs === null
+        ? []
+        : await Promise.all(configuredProviderBinChecks(input.config, input.env, input.catalogs).map(async (check) => ({
+            ...check,
+            bin: input.dryRun
+                ? check.bin
+                : await resolveServiceExecutable(check.bin, resolveEnv),
+        })));
+    // Pin the managed service to a stable system Node (issue #83) rather than
+    // the current process Node — otherwise running onboard/daemon install from
+    // a version-manager Node would re-pin the service to that unstable Node.
+    const nodeBin = input.dryRun
+        ? process.execPath
+        : await selectServiceNodeBin({
+            platform: input.host.platform,
+            currentNodeBin: process.execPath,
+            runner: input.host.runner,
+            probe: input.nodeProbe,
+        });
+    return {
+        dreamuxBin: input.dreamuxBin,
+        nodeBin,
+        providerBinChecks,
+        startService: input.startService,
+        dryRun: input.dryRun,
+        homeDir: input.host.homeDir,
+        env: input.env,
+        fallbackDirs,
+    };
+}
+function managedServicePath(answers) {
+    // Service PATH order: stable Dreamux-owned dirs (Node bin, provider bin dirs,
+    // dreamux bin) → captured session PATH (original order) → fresh-install
+    // fallback dirs from paths.ts. De-duped via buildServicePath. Never reads
+    // process.env; platform/homeDir/env passed explicitly.
+    const stableDirs = [
+        dirname(answers.nodeBin),
+        ...answers.providerBinChecks.flatMap((check) => absoluteDir(check.bin)),
+        ...absoluteDir(answers.dreamuxBin),
+    ];
+    const sessionPath = answers.env?.['PATH'] ?? '';
+    return buildServicePath({
+        stableDirs,
+        sessionPath,
+        fallbackDirs: answers.fallbackDirs,
+    });
+}
+function absoluteDir(path) {
+    return isAbsolute(path) ? [dirname(path)] : [];
+}
+async function assertExecutable(path, label) {
+    if (await isExecutable(path))
+        return;
+    throw new Error(`managed service executable is not runnable: ${label}`);
+}
+//# sourceMappingURL=environment.js.map

package/dist/daemon/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/daemon/environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG1E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,UAAU,EAAsB,MAAM,qBAAqB,CAAC;AAErE,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AAqBpC,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;AACpC,CAAC;AAYD,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;CAC3C,CAAC;AAEF,8EAA8E;AAC9E,wEAAwE;AACxE,oEAAoE;AACpE,8EAA8E;AAC9E,MAAM,uBAAuB,GAAkD;IAC7E,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE;IACrD;QACE,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACP,QAAQ;YACR,iBAAiB;YACjB,oBAAoB;YACpB,mCAAmC;SACpC;KACF;IACD,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,yBAAyB,EAAE,eAAe,CAAC,EAAE;IAC1E,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE;CAC5C,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAe,EACf,QAA0B,uBAAuB;IAEjD,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAyB;IAC5D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO;YACL,wBAAwB;YACxB,iCAAiC;YACjC,oCAAoC;YACpC,oCAAoC;YACpC,qBAAqB;YACrB,8BAA8B;YAC9B,iCAAiC;YACjC,iCAAiC;YACjC,eAAe;SAChB,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,qBAAqB,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;AAC/D,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAiC;IAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,uBAAuB,CAAC;IACvD,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAAE,SAAS;QACrD,IAAI,CAAC,MAAM,+BAA+B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAAE,SAAS;QAC7C,4EAA4E;QAC5E,2EAA2E;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,2BAA2B,CAChC,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,QAAQ,EAChB,KAAK,CACN,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;AAO1D,SAAS,mBAAmB,CAAC,IAAY;IACvC,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAe,EACf,QAAyB,EACzB,QAA0B,uBAAuB;IAEjD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAEpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,EAAE,GAAG,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAE9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAChD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,UAAU,yBAAyB,CACvC,OAA8B;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,uFAAuF;IACvF,MAAM,GAAG,GAA2B;QAClC,YAAY,EAAE,WAAW,EAAE;QAC3B,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,OAAO,CAAC,OAAO;QACjC,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC;KAClC,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAA8B,EAC9B,MAAqB;IAErB,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;YACnE,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,kCAAkC,wBAAwB,KAAK,OAAO,CAAC,OAAO,aAAa,OAAO,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CACzH,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,0CAA0C,OAAO,CAAC,OAAO,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CACT,sDAAsD,OAAO,CAAC,UAAU,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CACT,mDAAmD,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,GAAG,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe,EACf,GAAsB;IAEtB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,IAAI,GAAG,KAAK,EAAE;YAAE,SAAS;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACtD,CAAC;IAED,MAAM,IAAI,KAAK,CACb,8CAA8C,OAAO,8DAA8D,CACpH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,YAAsB;IAEtB,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtC,OAAO,eAAe,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAqB,EACrB,GAAsB,EACtB,QAAoC;IAEpC,OAAO,0BAA0B,CAAC;QAChC,MAAM;QACN,QAAQ;QACR,GAAG;QACH,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAC;AACL,CAAC;AAeD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAwC;IAExC,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC;QAC/C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QAC3B,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjE,MAAM,iBAAiB,GACrB,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAC9C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CACf,2BAA2B,CACzB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,QAAQ,CACf,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACtB,GAAG,KAAK;YACR,GAAG,EAAE,KAAK,CAAC,MAAM;gBACf,CAAC,CAAC,KAAK,CAAC,GAAG;gBACX,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC;SAC1D,CAAC,CAAC,CACJ,CAAC;IACR,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM;QAC1B,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,MAAM,oBAAoB,CAAC;YACzB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;YAC7B,cAAc,EAAE,OAAO,CAAC,QAAQ;YAChC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;YACzB,KAAK,EAAE,KAAK,CAAC,SAAS;SACvB,CAAC,CAAC;IACP,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,iBAAiB;QACjB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QAC3B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA8B;IACxD,8EAA8E;IAC9E,wEAAwE;IACxE,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvE,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;KACnC,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,gBAAgB,CAAC;QACtB,UAAU;QACV,WAAW;QACX,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACzD,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO;IACrC,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/daemon/host.js

@@ -0,0 +1,16 @@
+import { homedir } from 'node:os';
+import { ExecaCommandRunner, } from '../platform/command-runner.js';
+/**
+ * Resolve a `ServiceHost` from caller-supplied overrides (tests pass a fake
+ * runner/probe; production CLI entry points pass nothing and get the real
+ * shell runner, current platform, home dir, and uid).
+ */
+export function createServiceHost(overrides = {}) {
+    return {
+        runner: overrides.runner ?? new ExecaCommandRunner(),
+        platform: overrides.platform ?? process.platform,
+        homeDir: overrides.homeDir ?? homedir(),
+        uid: overrides.uid ?? process.getuid?.(),
+    };
+}
+//# sourceMappingURL=host.js.map

package/dist/daemon/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/daemon/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EACL,kBAAkB,GAEnB,MAAM,+BAA+B,CAAC;AAiBvC;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAkC,EAAE;IAEpC,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI,kBAAkB,EAAE;QACpD,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAChD,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,OAAO,EAAE;QACvC,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE;KACzC,CAAC;AACJ,CAAC"}

package/dist/daemon/install.js

@@ -1,41 +1,38 @@
 /**
- * `dreamux daemon install` / `daemon uninstall`.
+ * `daemon/` owns the managed-service lifecycle end to end: rendering and
+ * installing the launchd/systemd unit (`installUserService`,
+ * `registerLaunchd`, `registerSystemd`, `enableSystemdLinger`), and removing
+ * it (`removeUserService`).
  *
- * `install` re-registers the user-level service from the already-written
- * dreamux config (it does not collect onboarding answers). It reuses the exact
- * service slice onboard uses — `installUserService` — so linger handling and
- * the unit contents stay single-sourced. `uninstall` removes only the service
- * unit (never config / state / logs); that is the boundary against the
- * top-level `dreamux uninstall`.
+ * `dreamux daemon install` / `daemon uninstall` (`runDaemonInstall` /
+ * `runDaemonUninstall` below) re-register or remove the service from the
+ * already-written dreamux config; they do not collect onboarding answers.
+ * `dreamux onboard` (`onboard/run.ts`) is the other caller of
+ * `installUserService`, so linger handling and unit contents stay
+ * single-sourced across both entry points. `daemon uninstall` removes only
+ * the service unit (never config / state / logs); that is the boundary
+ * against the top-level `dreamux uninstall`.
  */
-import { ExecaCommandRunner } from '../onboard/commands.js';
-import { homedir } from 'node:os';
-import { installUserService, removeUserService, resolveServiceExecutable, selectServiceNodeBin, validateManagedServiceLaunch, withUserLocalBinPath, } from '../onboard/service.js';
-import { TransparentFileLedger } from '../onboard/ledger.js';
-import { globalConfigDir, loadConfig, } from '../config/config.js';
+import { rm } from 'node:fs/promises';
+import { join } from 'node:path';
 import { AgentRuntimeProviderCatalog } from '../agent-runtime/catalog.js';
 import { ChannelProviderCatalog } from '../channel/catalog.js';
-import { providerBinChecksForConfig, } from '../provider-diagnostics.js';
+import { loadConfig } from '../config/load.js';
+import { ensureDirectory, ensureTextFile, TransparentFileLedger, writeTextFile, } from '../platform/file-ledger.js';
+import { pathExists } from '../platform/fs-errors.js';
 import { dreamuxBinPath } from '../platform/package-bin.js';
-import { probeStandardExecDirs, setRuntimeConfig, } from '../platform/paths.js';
-function serviceProviderBinChecks(config, env, catalogs) {
-    return providerBinChecksForConfig({
-        config,
-        catalogs,
-        env,
-        scope: 'managedService',
-    });
-}
+import { logsRoot, stateRoot } from '../platform/paths.js';
+import { resolveManagedServiceAnswers, validateManagedServiceLaunch, } from './environment.js';
+import { createServiceHost } from './host.js';
+import { launchdTarget, renderLaunchdPlist, renderSystemdUnit, serviceUnitPath, SYSTEMD_UNIT, } from './unit.js';
 export async function runDaemonInstall(options = {}) {
-    const runner = options.runner ?? new ExecaCommandRunner();
+    const host = createServiceHost(options);
     const env = options.env ?? process.env;
-    const platform = options.platform ?? process.platform;
-    const homeDir = options.homeDir ?? homedir();
     const dryRun = options.dryRun ?? false;
     const startService = options.startService ?? true;
     // Fail loudly when the operator has not run onboard yet — daemon install
     // re-registers an existing setup, it does not create one.
-    const loaded = await loadConfig({ configDir: globalConfigDir() });
+    const loaded = await loadConfig();
     const { config } = loaded;
     const catalogs = {
         agentRuntime: new AgentRuntimeProviderCatalog({
@@ -45,44 +42,23 @@ export async function runDaemonInstall(options = {}) {
             registry: loaded.providerRegistry,
         }),
     };
-    setRuntimeConfig(config);
-    const fallbackDirs = await probeStandardExecDirs({ platform, homeDir, env }, options.execDirProbe);
-    const resolveEnv = withUserLocalBinPath(env, fallbackDirs);
-    const providerBinChecks = await Promise.all(serviceProviderBinChecks(config, env, catalogs).map(async (check) => ({
-        ...check,
-        bin: dryRun
-            ? check.bin
-            : await resolveServiceExecutable(check.bin, resolveEnv),
-    })));
-    // Pin the managed service to a stable system Node (issue #83) rather than the
-    // current process Node — otherwise running `daemon install` from a
-    // version-manager Node would re-pin the service to that unstable Node.
-    const nodeBin = dryRun
-        ? process.execPath
-        : await selectServiceNodeBin({
-            platform,
-            currentNodeBin: process.execPath,
-            runner,
-            ...(options.nodeProbe !== undefined ? { probe: options.nodeProbe } : {}),
-        });
     // Persist the effective env/homeDir and captured fallback dirs (not the
     // optional raw option values) so managedServicePath renders the same PATH
     // used by provider resolution. In normal CLI use options.env is undefined, so
     // env falls back to process.env — that ambient PATH must be persisted into
     // the service unit.
-    const answers = {
-        configDir: globalConfigDir(),
+    const answers = await resolveManagedServiceAnswers({
+        config,
+        catalogs,
         dreamuxBin: dreamuxBinPath(env),
-        nodeBin,
-        providerBinChecks,
         startService,
         dryRun,
-        homeDir,
+        host,
         env,
-        fallbackDirs,
-    };
+        nodeProbe: options.nodeProbe,
+    });
     if (!dryRun) {
-        const launch = await validateManagedServiceLaunch(answers, runner);
+        const launch = await validateManagedServiceLaunch(answers, host.runner);
         if (!launch.ok) {
             throw new Error([
                 'dreamux managed service launch environment is not ready',
@@ -92,24 +68,146 @@ export async function runDaemonInstall(options = {}) {
         }
     }
     const ledger = new TransparentFileLedger();
-    const service = await installUserService({
-        answers,
-        ledger,
-        runner,
-        platform,
-        homeDir,
-        uid: options.uid,
-    });
+    const service = await installUserService({ answers, ledger, host });
     return { service, files: ledger.entries() };
 }
 export async function runDaemonUninstall(options = {}) {
-    const runner = options.runner ?? new ExecaCommandRunner();
-    return removeUserService({
-        runner,
-        platform: options.platform,
-        homeDir: options.homeDir,
-        uid: options.uid,
-        dryRun: options.dryRun ?? false,
+    const host = createServiceHost(options);
+    return removeUserService({ host, dryRun: options.dryRun ?? false });
+}
+export async function installUserService(options) {
+    const unit = serviceUnitPath(options.host.platform, options.host.homeDir);
+    const workingDir = stateRoot();
+    const logDir = logsRoot();
+    const stdoutLog = join(logDir, 'daemon.stdout.log');
+    const stderrLog = join(logDir, 'daemon.stderr.log');
+    await ensureDirectory(workingDir, options.ledger, 'managed service working directory', { dryRun: options.answers.dryRun });
+    await ensureDirectory(logDir, options.ledger, 'daemon log directory', {
+        dryRun: options.answers.dryRun,
+    });
+    await ensureTextFile(stdoutLog, '', options.ledger, 'daemon stdout log', {
+        mode: 0o600,
+        dryRun: options.answers.dryRun,
+    });
+    await ensureTextFile(stderrLog, '', options.ledger, 'daemon stderr log', {
+        mode: 0o600,
+        dryRun: options.answers.dryRun,
+    });
+    const content = unit.platform === 'launchd'
+        ? renderLaunchdPlist(options.answers, stdoutLog, stderrLog)
+        : renderSystemdUnit(options.answers, stdoutLog, stderrLog);
+    const unitStatus = await writeTextFile(unit.path, content, options.ledger, `${unit.platform} unit`, {
+        mode: 0o600,
+        dryRun: options.answers.dryRun,
+    });
+    let lingerEnabled = null;
+    const warnings = [];
+    if (unit.platform === 'launchd') {
+        await registerLaunchd(unit.path, unitStatus, options);
+    }
+    else {
+        const systemd = await registerSystemd(unit.path, options);
+        lingerEnabled = systemd.lingerEnabled;
+        warnings.push(...systemd.warnings);
+    }
+    return {
+        platform: unit.platform,
+        unitPath: unit.path,
+        registered: true,
+        started: options.answers.startService,
+        lingerEnabled,
+        warnings,
+    };
+}
+async function registerLaunchd(unitPath, unitStatus, options) {
+    const serviceTarget = launchdTarget(options.host.uid);
+    const domain = `gui/${options.host.uid}`;
+    const loaded = await options.host.runner.check('launchctl', ['print', serviceTarget], { dryRun: options.answers.dryRun });
+    if (!loaded) {
+        await options.host.runner.run('launchctl', ['bootstrap', domain, unitPath], {
+            dryRun: options.answers.dryRun,
+        });
+    }
+    else if (unitStatus !== 'unchanged') {
+        await options.host.runner.run('launchctl', ['bootout', serviceTarget], {
+            dryRun: options.answers.dryRun,
+        });
+        await options.host.runner.run('launchctl', ['bootstrap', domain, unitPath], {
+            dryRun: options.answers.dryRun,
+        });
+    }
+    if (options.answers.startService) {
+        await options.host.runner.run('launchctl', ['kickstart', '-k', serviceTarget], { dryRun: options.answers.dryRun });
+    }
+}
+async function registerSystemd(unitPath, options) {
+    await options.host.runner.run('systemctl', ['--user', 'daemon-reload'], {
+        dryRun: options.answers.dryRun,
     });
+    const enableArgs = options.answers.startService
+        ? ['--user', 'enable', '--now', SYSTEMD_UNIT]
+        : ['--user', 'enable', SYSTEMD_UNIT];
+    await options.host.runner.run('systemctl', enableArgs, {
+        dryRun: options.answers.dryRun,
+    });
+    options.ledger.record(unitPath, 'unchanged', 'systemd user service registered');
+    // `systemctl --user enable` only schedules the service for an active login
+    // session. `loginctl enable-linger` makes a user service boot without a login;
+    // without it "enabled" silently fails to autostart on reboot. Best-effort: a
+    // strict polkit / non-root setup may deny it, but that must not fail onboard.
+    const { lingerEnabled, warnings } = await enableSystemdLinger(options);
+    return { lingerEnabled, warnings };
+}
+/** Enable systemd user lingering, best-effort. Skipped (null) on dry run. */
+export async function enableSystemdLinger(options) {
+    if (options.answers.dryRun)
+        return { lingerEnabled: null, warnings: [] };
+    const ok = await options.host.runner.check('loginctl', ['enable-linger']);
+    if (ok)
+        return { lingerEnabled: true, warnings: [] };
+    return {
+        lingerEnabled: false,
+        warnings: [
+            'could not enable systemd lingering (loginctl enable-linger); the service ' +
+                'will not start at boot until you log in. Enable it manually with: ' +
+                'loginctl enable-linger',
+        ],
+    };
+}
+/**
+ * Unregister and remove the user-level service unit only. Shared by
+ * `dreamux uninstall` (also recursively removes DREAMUX_ROOT) and
+ * `daemon uninstall` (removes nothing else). Unit-file removal is authoritative.
+ */
+export async function removeUserService(options) {
+    const unit = serviceUnitPath(options.host.platform, options.host.homeDir);
+    const dryRun = options.dryRun ?? false;
+    if (unit.platform === 'launchd') {
+        const serviceTarget = launchdTarget(options.host.uid);
+        const loaded = await options.host.runner.check('launchctl', ['print', serviceTarget], {
+            dryRun,
+        });
+        if (loaded) {
+            await runServiceBestEffort(options.host.runner, 'launchctl', ['bootout', serviceTarget], dryRun);
+        }
+    }
+    else {
+        await runServiceBestEffort(options.host.runner, 'systemctl', ['--user', 'disable', '--now', SYSTEMD_UNIT], dryRun);
+    }
+    const existed = await pathExists(unit.path);
+    if (existed && !dryRun)
+        await rm(unit.path, { force: true });
+    if (unit.platform === 'systemd') {
+        await runServiceBestEffort(options.host.runner, 'systemctl', ['--user', 'daemon-reload'], dryRun);
+    }
+    return { platform: unit.platform, unitPath: unit.path, removed: existed };
+}
+async function runServiceBestEffort(runner, command, args, dryRun) {
+    try {
+        await runner.run(command, args, { dryRun });
+    }
+    catch {
+        /* The unit may already be absent or stopped; file removal is authoritative. */
+    }
 }
 //# sourceMappingURL=install.js.map