@hanoilab/zk-bridge 0.1.4 → 0.1.6

package/README.md

@@ -1,43 +1,133 @@
-# @hanoilab/zk-bridge
+<p align="center">
+  <img src="https://img.shields.io/badge/ZK--Bridge-Attendance-007ACC?style=for-the-badge&logo=fingerprint&logoColor=white" alt="ZK-Bridge" />
+</p>
 
-LAN-side bridge for ZKTeco attendance devices. Polls a device over TCP and pushes events to your backend over HTTPS.
+<h1 align="center">ZK-Bridge</h1>
+
+<p align="center">
+  <strong>LAN-side bridge for ZKTeco attendance devices.</strong><br/>
+  Polls a ZKTeco fingerprint reader over TCP, pushes events to any HTTP backend.
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@hanoilab/zk-bridge">npm</a> &bull;
+  <a href="#quick-start">Quick Start</a> &bull;
+  <a href="#features">Features</a> &bull;
+  <a href="#how-it-works">How It Works</a> &bull;
+  <a href="#backend-contract">Backend Contract</a> &bull;
+  <a href="#self-hosting">Self-Hosting</a>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@hanoilab/zk-bridge"><img src="https://img.shields.io/npm/v/@hanoilab/zk-bridge?style=flat-square&color=cb3837&label=npm" alt="npm" /></a>
+  <img src="https://img.shields.io/badge/node-%3E%3D20.0.0-339933?style=flat-square&logo=node.js&logoColor=white" alt="node" />
+  <img src="https://img.shields.io/badge/sqlite-bundled-003B57?style=flat-square&logo=sqlite&logoColor=white" alt="sqlite" />
+  <img src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" alt="license" />
+</p>
+
+---
+
+## What is this?
+
+ZKTeco fingerprint readers don't speak HTTP — they only accept TCP connections from inside the LAN, and the C-HR / HRIS backend lives in the cloud. ZK-Bridge sits in the office, polls the device on a schedule, and pushes attendance events to any HTTP API you point it at.
+
+```
+ZKTeco device                ZK-Bridge                  Your backend
+┌─────────────────┐       ┌──────────────┐           ┌──────────────┐
+│ Fingerprint /   │ ◄─TCP─┤  CLI + UI    │ ◄──HTTPS──┤  /push       │
+│ face reader     │ 4370  │  SQLite      │           │  /ping       │
+│ 192.168.x.y     │       │  Local LAN   │           │  Cloud / VPS │
+└─────────────────┘       └──────────────┘           └──────────────┘
+                          Outbound only — no port
+                          forwarding or VPN needed
+```
+
+No vendor lock-in: any backend that exposes a JSON `POST` endpoint with a JWT auth header works. Bridge handles the LAN side.
 
 ## Quick Start
 
+### 1. Install globally
+
 ```bash
-# Install globally
 npm i -g @hanoilab/zk-bridge
+```
 
-# Start the bridge
+### 2. Run it
+
+```bash
 zk-bridge start
 ```
 
-That's it. You'll see:
-
 ```text
-[zk-bridge] data dir: ~/.local/share/zk-bridge
-[zk-bridge] UI listening on http://127.0.0.1:7000
-[scheduler] starting cron "*/5 * * * *" (every 5 min)
+[zk-bridge] started (PID 12345)
+  Logs:  ~/.local/share/zk-bridge/zk-bridge.log
+  Stop:  zk-bridge stop
+  Tail:  zk-bridge logs -f
 ```
 
-Open the admin UI, paste your backend's Push URL + a per-device JWT, and the bridge starts pushing on the next cycle.
+`start` detaches — closing the terminal won't stop the bridge. Useful one-liners:
 
-## Features
+```bash
+zk-bridge status                 # is it running?
+zk-bridge logs -f                # follow the log
+zk-bridge stop                   # stop it
+```
+
+### 3. Open the admin UI
 
-- **Web admin UI** — Single-user login, device list, scan LAN, view events
-- **LAN scan** — Auto-discover ZKTeco devices on your subnet (TCP 4370)
-- **Multi-device** — One bridge polls many devices on a schedule
-- **Offline tolerant** — Queues events when the backend is unreachable, drains on next cycle
-- **Idempotent push** — Backend dedupes by `(deviceId, eventLogId)`; safe to retry
-- **Auto-start on boot** — One-click systemd / Windows Task / launchd registration
-- **Cross-platform** — Linux, macOS, Windows
-- **Secure** — bcrypt admin login, signed-cookie sessions, JWT per-device tokens
+Visit **<http://localhost:7000>**, set the backend Push URL, paste the per-device JWT — bridge pushes attendance on the next cycle.
 
-## CLI Commands
+## Features
+
+### Web Admin UI
+- Single-user login (bcrypt + signed-cookie session, 7-day TTL)
+- Configure backend Push / Ping URL + poll interval
+- Add devices manually or via LAN scan
+- Per-device events with cursor position + push status badge
+- Cycle history with status, timing, error message, filter by device
+
+### LAN Discovery
+- Auto-scan `/24` subnet for ZKTeco devices on TCP 4370
+- Identify each candidate over the ZK protocol (model, serial)
+- One-click "Add as device" pre-fills name + host
+
+### Multi-Device
+- One bridge polls many devices on a single schedule
+- Per-device cursor, queue, audit log, error state
+- Enable / disable individually without removing config
+
+### Offline Tolerance
+- Queues events to local SQLite when the backend is unreachable
+- Drains the queue on the next online cycle
+- Cursor advances even on partial failure — no data loss, no double-send
+
+### Idempotent Push
+- Backend dedupes by `(deviceId, eventLogId)` — replay is a no-op
+- Batches events at 200/request to stay under common body-parser limits
+- JWT version counter for revocation (regenerate on the backend → old JWTs rejected immediately)
+
+### Auto-Start on Boot
+- One-click toggle in the System page registers a:
+  - **systemd** unit (Linux)
+  - **Scheduled Task** (Windows)
+  - **launchd** plist (macOS)
+- `Restart=on-failure` so a crashed cycle never takes the bridge down
+
+### Cross-platform
+- Linux, macOS, Windows
+- Node 20+ — no native build needed (sqlite3 ships prebuilds)
+
+## CLI
 
 ```bash
-zk-bridge start                  # Start bridge (UI + scheduler) — default
-zk-bridge poll-once              # One cycle then exit
+zk-bridge start                  # Start as background daemon (writes PID + log)
+zk-bridge stop                   # Stop the daemon
+zk-bridge restart                # Stop + start
+zk-bridge status                 # PID, uptime, log path
+zk-bridge logs -f                # Follow the log
+zk-bridge logs -n 200            # Last 200 lines
+zk-bridge run                    # Run in the foreground (debug / systemd / Docker)
+zk-bridge poll-once              # Run a single cycle then exit
 zk-bridge reset-user             # Forgot-password recovery
 zk-bridge recent-events          # Print last N events from a device
 zk-bridge upgrade [tag]          # Self-update via npm
@@ -45,28 +135,17 @@ zk-bridge --help
 zk-bridge --version
 ```
 
-## Admin Panel
+`start` detaches from the launching shell — `Ctrl+C` in that terminal does NOT kill the daemon. Use `zk-bridge stop`. Logs go to `<DATA_DIR>/zk-bridge.log`.
 
-After `zk-bridge start`, open `http://localhost:7000` to:
+Environment overrides (otherwise default):
 
-- Set the backend Push URL + Ping URL + poll interval
-- Add devices (manual or via LAN scan)
-- View per-device events with cursor position, push status
-- Inspect cycle history, reset cursor, regenerate tokens
-- Toggle auto-start on boot
+```bash
+PORT=8080 BIND_HOST=0.0.0.0 zk-bridge start
+DATA_DIR=/var/lib/zk-bridge zk-bridge start
+```
 
 ## How It Works
 
-```text
-ZK device              zk-bridge              Your backend
-+----------+         +-----------+         +------------+
-|  ZKTeco  | <-----> |  bridge   | <-----> |  HTTP API  |
-| TCP 4370 |   ZK    | (this CLI)|  HTTPS  | /push      |
-+----------+         +-----------+         +------------+
-                        SQLite
-                     (config + queue)
-```
-
 Every cycle (default 5 min):
 
 1. List enabled devices in local SQLite.
@@ -74,20 +153,32 @@ Every cycle (default 5 min):
 3. Drain the offline queue, then push new events to the backend in batches of 200.
 4. Advance the cursor, write a `cycle_log` row.
 
-Backend dedupes by `(deviceId, eventLogId)` — replays are safe.
+State that lives locally:
+
+```
+~/.local/share/zk-bridge/zk-bridge.db   (Linux default)
+%APPDATA%\zk-bridge\zk-bridge.db        (Windows)
+~/Library/Application Support/zk-bridge/zk-bridge.db  (macOS)
+
+  ├── users          (single admin row)
+  ├── config         (push URL, ping URL, poll interval, session secret)
+  ├── devices        (host, port, JWT, cursor, last status)
+  ├── event_queue    (offline-pending events)
+  └── cycle_log      (per-device cycle history, rotated to last 1000)
+```
 
 ## Backend Contract
 
-The bridge POSTs to **two URLs** you configure:
+Two HTTP endpoints. Configure their full URLs in the UI — the bridge appends nothing.
 
-**Push URL** (required)
+### Push (required)
 
 ```http
 POST <push-url>
 Content-Type: application/json
 
 {
-  "token": "<JWT>",
+  "token": "<JWT signed by backend>",
   "events": [
     {
       "eventLogId": "12345",
@@ -99,7 +190,16 @@ Content-Type: application/json
 }
 ```
 
-**Ping URL** (optional — used by the *Connect* button)
+The backend should:
+
+- Verify the JWT (signature + expiry / version).
+- Resolve the device row from the JWT payload.
+- Dedupe by `(deviceId, eventLogId)` — replays are safe.
+- Persist or normalize the events as needed.
+
+Response shape isn't enforced — bridge only checks the HTTP status (2xx = success, anything else = retry / queue).
+
+### Ping (optional)
 
 ```http
 POST <ping-url>
@@ -108,100 +208,93 @@ Content-Type: application/json
 { "token": "<JWT>" }
 ```
 
-If you don't expose a separate ping endpoint, leave the field empty — the bridge falls back to a push with an empty events array.
-
-The backend is responsible for: verifying the JWT, resolving devices, deduping by `(deviceId, eventLogId)`, and storing or normalizing events.
-
-## Requirements
+Used by the **Connect** button to verify the JWT + URL without sending events. If you don't expose a separate ping endpoint, leave the field blank — the bridge falls back to a push with an empty `events` array (your backend should respond 4xx for that case, which the bridge interprets as "auth + URL OK").
 
-- Node.js 20+
-- macOS, Linux, or Windows
-- Network reach: bridge host must see the ZK device on LAN AND the backend over HTTP(S)
+### Reference implementation
 
-## Configuration
+See [c-hr backend](https://github.com/nguyendinhphongdx/c-hr) — `apps/backend/src/apps/attendance/attendance-device/` is a NestJS module that implements the contract end-to-end, including JWT version revocation and orphan-event reconcile.
 
-Settings live in a local SQLite DB and are edited through the web UI. Only paths and bind come from env:
+## Self-Hosting
 
-| Env | Default | Purpose |
-| --- | --- | --- |
-| `DATA_DIR` | OS-standard (see below) | Where SQLite + admin login live |
-| `PORT` | `7000` | UI HTTP port |
-| `BIND_HOST` | `127.0.0.1` | Listen address. Set `0.0.0.0` for LAN access |
-
-**Data dir resolution:**
-
-- `DATA_DIR` env (always wins)
-- `./data/` next to cwd, if it exists (Docker bind mount, dev workflow)
-- Globally installed: OS-standard user data dir
-  - Linux: `~/.local/share/zk-bridge`
-  - macOS: `~/Library/Application Support/zk-bridge`
-  - Windows: `%APPDATA%\zk-bridge`
+```bash
+git clone https://github.com/nguyendinhphongdx/zkteco-bridge.git
+cd zkteco-bridge
+pnpm install
+pnpm build
+pnpm start
+```
 
-Boot prints the chosen path:
+Or install your local checkout as the global CLI:
 
-```text
-[2026-05-07T08:23:45.123Z] [zk-bridge] data dir: ~/.local/share/zk-bridge
+```bash
+npm install -g .
+zk-bridge start
 ```
 
-## Auto-start on Host
+### Auto-start (production)
 
-Three options — pick one:
+Three options — pick **one**, otherwise two processes will fight for port 7000:
 
-- **Built-in toggle** (recommended): *System → Auto-start on boot* in the web UI registers a systemd unit / Windows Scheduled Task / launchd plist with `Restart=on-failure`.
-- **PM2**:
+- **Built-in toggle** (recommended) — *System → Auto-start on boot* registers a systemd / Windows Task / launchd entry pointing at the global CLI binary.
+- **PM2** —
 
   ```bash
   pm2 start "$(which zk-bridge)" --name zk-bridge -- start
   pm2 startup && pm2 save
   ```
 
-- **Docker** — see [`docker-compose.yml`](docker-compose.yml). Bind-mount `./data:/app/data` to persist state.
+- **Docker** — see [`docker-compose.yml`](docker-compose.yml). Bind-mount `./data:/app/data` to persist SQLite across rebuilds.
 
-Don't enable two methods at once — they'll fight for port 7000.
+## Environment Variables
 
-## Self-upgrade
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `PORT` | `7000` | Admin UI HTTP port |
+| `BIND_HOST` | `127.0.0.1` | Listen address. Set `0.0.0.0` to allow LAN access |
+| `DATA_DIR` | OS-standard user data dir | Override SQLite + admin login location |
+| `PUSH_URL` | _(none)_ | First-run seed only — bridge stores it in SQLite then ignores env |
+| `PING_URL` | _(none)_ | First-run seed only |
+| `POLL_INTERVAL_MIN` | `5` | First-run seed only — minutes between cycles |
 
-```bash
-zk-bridge upgrade
-sudo systemctl restart zk-bridge   # or pm2 restart zk-bridge / docker compose pull
-```
+`DATA_DIR` resolution order on every start:
 
-`zk-bridge upgrade` runs `npm install -g <pkg>@latest` under the hood. Restart the host service afterwards so the running process picks up new code.
+1. `DATA_DIR` env var (always wins)
+2. `./data/` next to cwd, if it exists (Docker bind mount, dev workflow)
+3. **Globally installed:** OS-standard user data dir
+4. `./data/` next to cwd (dev fallback)
 
 ## Troubleshooting
 
 | Symptom | Likely cause / fix |
-| --- | --- |
-| `ETIMEDOUT <ip>:<port>` on Connect | Bridge can't reach the backend Push URL from this host. `curl <url>` from the host should work. |
-| `HTTP 401 Invalid token` | JWT was regenerated on the backend or device deleted. Re-paste the token. |
+|---------|-------------------|
+| `ETIMEDOUT <ip>:<port>` on Connect | Bridge can't reach the backend Push URL. `curl <url>` from the bridge host should work. |
+| `HTTP 401 Invalid token` | JWT was regenerated on the backend, or the device row was deleted. Re-paste the token. |
 | `Socket closed unexpectedly` | The ZK device only allows 1 active connection — another tool / cycle is holding it. Wait for the next cycle. |
-| `port open but ZK probe fail` in scan | Same — device is busy. Try Add → Connect after a minute. |
+| `port open but ZK probe fail` in scan | Same — device is busy. Try **Add** → **Connect** after a minute. |
 | Dashboard shows "never run" | Push URL not set, or no devices configured. Check *API settings* + *Devices*. |
-| Events arrive late | Lower the poll interval in *API settings* (min 1 min). |
+| Events arrive late | Lower the *poll interval* in *API settings* (min 1 min). |
 
-Every console line is prefixed with an ISO timestamp:
+Every console line is prefixed with an ISO timestamp so logs from `pm2 logs` / `journalctl -u zk-bridge` / `docker compose logs` line up:
 
 ```text
 [2026-05-07T08:23:50.747Z] [poll] "Front gate" pulled 2915 from ZK in 5291ms
 ```
 
-## Develop from source
-
-```bash
-git clone https://github.com/nguyendinhphongdx/c-hr.git
-cd c-hr/services/zk-bridge
-pnpm install
-pnpm build
-pnpm start
-```
-
-The package is standalone — it has its own `pnpm-workspace.yaml` and `pnpm-lock.yaml`, separate from any parent monorepo. Install your local copy as the global CLI:
+## Tech Stack
 
-```bash
-npm install -g .
-zk-bridge start
-```
+| Layer | Technology |
+|-------|-----------|
+| Runtime | [Node.js 20+](https://nodejs.org/) |
+| Local DB | [SQLite](https://www.sqlite.org/) via [sqlite3](https://github.com/TryGhost/node-sqlite3) + [Sequelize](https://sequelize.org/) |
+| HTTP server | [Hono](https://hono.dev/) + [@hono/node-server](https://github.com/honojs/node-server) |
+| ZK protocol | Custom client (`src/zklib`) — TCP raw, chunked streaming for large logs |
+| Auth | [bcryptjs](https://github.com/dcodeIO/bcrypt.js) (admin) + JWT (per-device) |
+| HTTP client | [axios](https://axios-http.com/) |
+| Scheduler | [node-cron](https://github.com/node-cron/node-cron) |
+| Build | [TypeScript](https://www.typescriptlang.org/) |
 
 ## License
 
-MIT
+MIT &copy; [HanoiLab](mailto:opencode@hanoilab.vn)
+
+---

package/dist/cli/daemon.js

@@ -0,0 +1,229 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startDaemon = startDaemon;
+exports.stopDaemon = stopDaemon;
+exports.statusDaemon = statusDaemon;
+exports.tailLog = tailLog;
+exports.formatUptime = formatUptime;
+const node_child_process_1 = require("node:child_process");
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const env_1 = require("../config/env");
+const PID_FILE = 'zk-bridge.pid';
+const LOG_FILE = 'zk-bridge.log';
+function paths() {
+    const { dataDir } = (0, env_1.loadBootEnv)();
+    fs.mkdirSync(dataDir, { recursive: true });
+    return {
+        dataDir,
+        pid: path.join(dataDir, PID_FILE),
+        log: path.join(dataDir, LOG_FILE),
+    };
+}
+function isAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function readPid() {
+    const p = paths();
+    if (!fs.existsSync(p.pid))
+        return null;
+    const n = parseInt(fs.readFileSync(p.pid, 'utf8').trim(), 10);
+    if (!Number.isFinite(n) || !isAlive(n)) {
+        try {
+            fs.unlinkSync(p.pid);
+        }
+        catch {
+            // best-effort
+        }
+        return null;
+    }
+    return n;
+}
+/**
+ * Spawn the bridge as a detached background child writing to a log file.
+ * Parent exits immediately — Ctrl+C in the launching shell does NOT kill
+ * the daemon (it's in a separate process group).
+ */
+function startDaemon() {
+    const existing = readPid();
+    if (existing) {
+        throw new Error(`Already running (PID ${existing}). Use 'zk-bridge stop' or 'zk-bridge restart' first.`);
+    }
+    const p = paths();
+    const fd = fs.openSync(p.log, 'a');
+    const node = process.execPath;
+    // dist/index.js — same entry `zk-bridge run` invokes, but spawned detached.
+    const entry = path.resolve(__dirname, '..', 'index.js');
+    const child = (0, node_child_process_1.spawn)(node, [entry], {
+        detached: true,
+        stdio: ['ignore', fd, fd],
+        env: process.env,
+    });
+    child.unref();
+    if (!child.pid)
+        throw new Error('Failed to spawn child process.');
+    fs.writeFileSync(p.pid, String(child.pid));
+    fs.closeSync(fd);
+    return { pid: child.pid, logPath: p.log, dataDir: p.dataDir };
+}
+function stopDaemon() {
+    const pid = readPid();
+    if (!pid)
+        return null;
+    try {
+        process.kill(pid, 'SIGTERM');
+    }
+    catch {
+        // already dead — fall through to PID cleanup
+    }
+    // Wait a moment for graceful shutdown, then verify.
+    const deadline = Date.now() + 5_000;
+    while (Date.now() < deadline && isAlive(pid)) {
+        // busy-wait short; the kill is async
+        sleepSync(100);
+    }
+    if (isAlive(pid)) {
+        try {
+            process.kill(pid, 'SIGKILL');
+        }
+        catch {
+            // ignore
+        }
+    }
+    const p = paths();
+    try {
+        fs.unlinkSync(p.pid);
+    }
+    catch {
+        // ignore
+    }
+    return { pid };
+}
+function statusDaemon() {
+    const p = paths();
+    const pid = readPid();
+    if (!pid) {
+        return { running: false, logPath: p.log, dataDir: p.dataDir };
+    }
+    let uptimeMs;
+    try {
+        const stat = fs.statSync(p.pid);
+        uptimeMs = Date.now() - stat.mtimeMs;
+    }
+    catch {
+        // ignore
+    }
+    return { running: true, pid, logPath: p.log, dataDir: p.dataDir, uptimeMs };
+}
+/**
+ * Print last N lines of the log file, optionally follow new appends.
+ * Cross-platform tail — doesn't shell out.
+ */
+function tailLog(follow, lines) {
+    const p = paths();
+    if (!fs.existsSync(p.log)) {
+        console.log('(no log yet — daemon has not started.)');
+        return;
+    }
+    const initial = readLastLines(p.log, lines);
+    process.stdout.write(initial);
+    if (!follow)
+        return;
+    let pos = fs.statSync(p.log).size;
+    const watcher = fs.watch(p.log, () => {
+        let stat;
+        try {
+            stat = fs.statSync(p.log);
+        }
+        catch {
+            return;
+        }
+        if (stat.size > pos) {
+            const fd = fs.openSync(p.log, 'r');
+            const buf = Buffer.alloc(stat.size - pos);
+            fs.readSync(fd, buf, 0, buf.length, pos);
+            fs.closeSync(fd);
+            process.stdout.write(buf.toString('utf8'));
+            pos = stat.size;
+        }
+        else if (stat.size < pos) {
+            pos = 0;
+        }
+    });
+    process.on('SIGINT', () => {
+        watcher.close();
+        process.exit(0);
+    });
+    // Keep the event loop alive.
+    setInterval(() => undefined, 1 << 30);
+}
+function readLastLines(file, lines) {
+    const content = fs.readFileSync(file, 'utf8');
+    const arr = content.split('\n');
+    // Trim trailing empty line caused by final newline.
+    if (arr[arr.length - 1] === '')
+        arr.pop();
+    const slice = arr.slice(-lines);
+    return slice.join('\n') + (slice.length > 0 ? '\n' : '');
+}
+function formatUptime(ms) {
+    const s = Math.floor(ms / 1000);
+    if (s < 60)
+        return `${s}s`;
+    const m = Math.floor(s / 60);
+    if (m < 60)
+        return `${m}m ${s % 60}s`;
+    const h = Math.floor(m / 60);
+    if (h < 24)
+        return `${h}h ${m % 60}m`;
+    const d = Math.floor(h / 24);
+    return `${d}d ${h % 24}h`;
+}
+function sleepSync(ms) {
+    // Atomics.wait on a SharedArrayBuffer would be precise but heavy; this
+    // ~100ms granularity is fine for stop's grace-period polling.
+    const end = Date.now() + ms;
+    while (Date.now() < end) {
+        // spin
+    }
+}
+//# sourceMappingURL=daemon.js.map

package/dist/cli/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/cli/daemon.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,kCAsBC;AAMD,gCA4BC;AAWD,oCAcC;AAMD,0BAoCC;AAWD,oCASC;AA3MD,2DAA2C;AAC3C,4CAA8B;AAC9B,gDAAkC;AAElC,uCAA4C;AAE5C,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,QAAQ,GAAG,eAAe,CAAC;AAQjC,SAAS,KAAK;IACZ,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,iBAAW,GAAE,CAAC;IAClC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,OAAO;QACP,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAQD;;;;GAIG;AACH,SAAgB,WAAW;IACzB,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;IAC3B,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,uDAAuD,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,4EAA4E;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QACjC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;QACzB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AAChE,CAAC;AAMD,SAAgB,UAAU;IACxB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,oDAAoD;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,qCAAqC;QACrC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,CAAC;AACjB,CAAC;AAWD,SAAgB,YAAY;IAC1B,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CAAC,MAAe,EAAE,KAAa;IACpD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE;QACnC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YAC1C,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACzC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3C,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;YAC3B,GAAG,GAAG,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,6BAA6B;IAC7B,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,oDAAoD;IACpD,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAgB,YAAY,CAAC,EAAU;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;AACH,CAAC"}

package/dist/cli/zk-bridge.js

@@ -44,13 +44,19 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 const node_child_process_1 = require("node:child_process");
 const path = __importStar(require("node:path"));
+const daemon_1 = require("./daemon");
 const command = process.argv[2];
 function help() {
     // eslint-disable-next-line no-console
     console.log(`Usage: zk-bridge <command> [options]
 
 Commands:
-  start                    Start bridge (UI + scheduler) — default if no command given
+  start                    Start bridge in the background (writes PID + log)
+  stop                     Stop the running daemon
+  restart                  Stop + start
+  status                   Show daemon state (PID, uptime, log path)
+  logs [-f] [-n N]         Print last N log lines (default 50). -f to follow.
+  run                      Run in the foreground (debug / systemd / Docker)
   poll-once                Run a single poll cycle then exit (no UI server)
   reset-user               Reset the local admin user (forgot password recovery)
   recent-events            Print recent events from a device
@@ -60,18 +66,18 @@ Commands:
   version, --version, -v   Show package version
 
 Environment:
-  DATA_DIR=./data          Where SQLite + admin credentials live
+  DATA_DIR                 Where SQLite + admin credentials + log live
+                           (default: OS user data dir)
   PORT=7000                UI HTTP port
   BIND_HOST=127.0.0.1      Bind address. Set 0.0.0.0 to allow LAN access
 
 Examples:
-  zk-bridge start
-  PORT=8080 zk-bridge start
-  zk-bridge poll-once
-  zk-bridge reset-user
-  zk-bridge upgrade
-  zk-bridge upgrade next
-  zk-bridge recent-events --device "Cửa chính" -n 30
+  zk-bridge start                    # daemonize
+  zk-bridge status                   # is it running?
+  zk-bridge logs -f                  # follow logs
+  zk-bridge stop                     # stop the daemon
+  PORT=8080 zk-bridge run            # foreground on a custom port
+  zk-bridge recent-events --device "Front gate" -n 30
 `);
 }
 function version() {
@@ -121,19 +127,87 @@ async function upgrade(tag = 'latest') {
     });
     // eslint-disable-next-line no-console
     console.log(`[zk-bridge] ✓ upgraded ${target}.\n` +
-        'Restart the running bridge process to pick up the new code:\n' +
-        '  systemd:        sudo systemctl restart zk-bridge\n' +
-        '  Windows Task:   schtasks /End /TN "ZK-Bridge (zk-bridge)" && schtasks /Run /TN "ZK-Bridge (zk-bridge)"\n' +
-        '  launchd:        launchctl kickstart -k gui/$UID/com.chr.zk-bridge\n' +
-        '  pm2:            pm2 restart zk-bridge\n' +
-        '  docker compose: docker compose pull && docker compose up -d\n' +
-        '  manual:         Ctrl+C the foreground process, then `zk-bridge start` again');
+        'Restart the daemon to pick up the new code:\n' +
+        '  zk-bridge restart');
+}
+function parseLogsArgs() {
+    const argv = process.argv.slice(3);
+    const follow = argv.includes('-f') || argv.includes('--follow');
+    const nIdx = argv.findIndex((a) => a === '-n' || a === '--lines');
+    const lines = nIdx >= 0 ? Number(argv[nIdx + 1]) : 50;
+    return { follow, lines: Number.isFinite(lines) && lines > 0 ? lines : 50 };
+}
+function cmdStart() {
+    try {
+        const r = (0, daemon_1.startDaemon)();
+        // eslint-disable-next-line no-console
+        console.log(`[zk-bridge] started (PID ${r.pid})\n` +
+            `  Logs:  ${r.logPath}\n` +
+            `  Stop:  zk-bridge stop\n` +
+            `  Tail:  zk-bridge logs -f`);
+    }
+    catch (err) {
+        // eslint-disable-next-line no-console
+        console.error(`[zk-bridge] ${err instanceof Error ? err.message : err}`);
+        process.exit(1);
+    }
+}
+function cmdStop() {
+    const r = (0, daemon_1.stopDaemon)();
+    if (!r) {
+        // eslint-disable-next-line no-console
+        console.log('[zk-bridge] not running.');
+        return;
+    }
+    // eslint-disable-next-line no-console
+    console.log(`[zk-bridge] stopped (PID ${r.pid}).`);
+}
+async function cmdRestart() {
+    cmdStop();
+    await new Promise((r) => setTimeout(r, 600));
+    cmdStart();
+}
+function cmdStatus() {
+    const s = (0, daemon_1.statusDaemon)();
+    if (!s.running) {
+        // eslint-disable-next-line no-console
+        console.log(`[zk-bridge] not running.\n` +
+            `  Data dir: ${s.dataDir}\n` +
+            `  Logs:     ${s.logPath} (last run, if any)`);
+        return;
+    }
+    const up = s.uptimeMs !== undefined ? (0, daemon_1.formatUptime)(s.uptimeMs) : 'unknown';
+    // eslint-disable-next-line no-console
+    console.log(`[zk-bridge] running.\n` +
+        `  PID:      ${s.pid}\n` +
+        `  Uptime:   ${up}\n` +
+        `  Data dir: ${s.dataDir}\n` +
+        `  Logs:     ${s.logPath}`);
 }
 async function main() {
     switch (command) {
+        // ── daemon control ───────────────────────────────────────────────────
         case undefined:
         case 'start':
-            // Strip the subcommand so the underlying entry sees a clean argv.
+            cmdStart();
+            return;
+        case 'stop':
+            cmdStop();
+            return;
+        case 'restart':
+            await cmdRestart();
+            return;
+        case 'status':
+            cmdStatus();
+            return;
+        case 'logs': {
+            const { follow, lines } = parseLogsArgs();
+            (0, daemon_1.tailLog)(follow, lines);
+            return;
+        }
+        // ── foreground / one-shot ────────────────────────────────────────────
+        case 'run':
+            // Foreground mode — what daemons / Docker / systemd should call.
             process.argv.splice(2, 1);
             await Promise.resolve().then(() => __importStar(require('../index')));
             return;
@@ -149,11 +223,12 @@ async function main() {
             process.argv.splice(2, 1);
             await Promise.resolve().then(() => __importStar(require('./recent-events')));
             return;
+        // ── self-update ──────────────────────────────────────────────────────
         case 'upgrade':
         case 'update':
-            // Optional next arg = npm dist-tag (e.g. `next`). Default `latest`.
             await upgrade(process.argv[3] ?? 'latest');
             return;
+        // ── meta ─────────────────────────────────────────────────────────────
         case 'help':
         case '--help':
         case '-h':

package/dist/cli/zk-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"zk-bridge.js","sourceRoot":"","sources":["../../src/cli/zk-bridge.ts"],"names":[],"mappings":";;AAEA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2DAA2C;AAC3C,gDAAkC;AAElC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEhC,SAAS,IAAI;IACX,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;CAyBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,OAAO;IACd,gDAAgD;IAChD,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,OAAO,CAAC,GAAG,GAAG,QAAQ;IACnC,MAAM,eAAe,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,KAAK,CACX,mEAAmE;YACjE,yFAAyF,CAC5F,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAChC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,MAAM,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QACpD,KAAK,EAAE,SAAS;QAChB,4DAA4D;QAC5D,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,0BAA0B,MAAM,KAAK;QACnC,+DAA+D;QAC/D,sDAAsD;QACtD,4GAA4G;QAC5G,uEAAuE;QACvE,2CAA2C;QAC3C,iEAAiE;QACjE,+EAA+E,CAClF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,OAAO;YACV,kEAAkE;YAClE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,wDAAa,UAAU,GAAC,CAAC;YACzB,OAAO;QAET,KAAK,WAAW;YACd,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpC,wDAAa,UAAU,GAAC,CAAC;YACzB,OAAO;QAET,KAAK,YAAY;YACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,wDAAa,cAAc,GAAC,CAAC;YAC7B,OAAO;QAET,KAAK,eAAe;YAClB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,wDAAa,iBAAiB,GAAC,CAAC;YAChC,OAAO;QAET,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,oEAAoE;YACpE,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;YAC3C,OAAO;QAET,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,IAAI,EAAE,CAAC;YACP,OAAO;QAET,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,EAAE,CAAC;YACV,OAAO;QAET;YACE,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;YAC/C,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"zk-bridge.js","sourceRoot":"","sources":["../../src/cli/zk-bridge.ts"],"names":[],"mappings":";;AAEA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2DAA2C;AAC3C,gDAAkC;AAElC,qCAMkB;AAElB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEhC,SAAS,IAAI;IACX,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Bb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,OAAO;IACd,gDAAgD;IAChD,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,OAAO,CAAC,GAAG,GAAG,QAAQ;IACnC,MAAM,eAAe,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,KAAK,CACX,mEAAmE;YACjE,yFAAyF,CAC5F,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAChC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,MAAM,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QACpD,KAAK,EAAE,SAAS;QAChB,4DAA4D;QAC5D,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,0BAA0B,MAAM,KAAK;QACnC,+CAA+C;QAC/C,qBAAqB,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAA,oBAAW,GAAE,CAAC;QACxB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,4BAA4B,CAAC,CAAC,GAAG,KAAK;YACpC,YAAY,CAAC,CAAC,OAAO,IAAI;YACzB,2BAA2B;YAC3B,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,IAAA,mBAAU,GAAE,CAAC;IACvB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,OAAO,EAAE,CAAC;IACV,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,QAAQ,EAAE,CAAC;AACb,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,GAAG,IAAA,qBAAY,GAAE,CAAC;IACzB,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACf,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,4BAA4B;YAC1B,eAAe,CAAC,CAAC,OAAO,IAAI;YAC5B,eAAe,CAAC,CAAC,OAAO,qBAAqB,CAChD,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,qBAAY,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,wBAAwB;QACtB,eAAe,CAAC,CAAC,GAAG,IAAI;QACxB,eAAe,EAAE,IAAI;QACrB,eAAe,CAAC,CAAC,OAAO,IAAI;QAC5B,eAAe,CAAC,CAAC,OAAO,EAAE,CAC7B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,QAAQ,OAAO,EAAE,CAAC;QAChB,wEAAwE;QACxE,KAAK,SAAS,CAAC;QACf,KAAK,OAAO;YACV,QAAQ,EAAE,CAAC;YACX,OAAO;QAET,KAAK,MAAM;YACT,OAAO,EAAE,CAAC;YACV,OAAO;QAET,KAAK,SAAS;YACZ,MAAM,UAAU,EAAE,CAAC;YACnB,OAAO;QAET,KAAK,QAAQ;YACX,SAAS,EAAE,CAAC;YACZ,OAAO;QAET,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,EAAE,CAAC;YAC1C,IAAA,gBAAO,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,KAAK,KAAK;YACR,iEAAiE;YACjE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,wDAAa,UAAU,GAAC,CAAC;YACzB,OAAO;QAET,KAAK,WAAW;YACd,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpC,wDAAa,UAAU,GAAC,CAAC;YACzB,OAAO;QAET,KAAK,YAAY;YACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,wDAAa,cAAc,GAAC,CAAC;YAC7B,OAAO;QAET,KAAK,eAAe;YAClB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,wDAAa,iBAAiB,GAAC,CAAC;YAChC,OAAO;QAET,wEAAwE;QACxE,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;YAC3C,OAAO;QAET,wEAAwE;QACxE,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,IAAI,EAAE,CAAC;YACP,OAAO;QAET,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,EAAE,CAAC;YACV,OAAO;QAET;YACE,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;YAC/C,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanoilab/zk-bridge",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "private": false,
   "description": "Pull-side bridge for ZKTeco attendance devices — polls over LAN and pushes events to any HTTP backend",
   "keywords": [