@inoku/lepan 0.7.59 → 0.7.62

package/README.md

@@ -84,6 +84,8 @@ The Linux/macOS legacy browser-owner setup uses the built-in AV1 registration en
 
 LifeDrive requires Leither V0.24.11 or newer. Linux/macOS browser-owner setup creates a separate Ed25519 `sodiumv2` identity for the primary browser. Windows prints a private ten-minute invitation for the first paired phone; later users and devices are managed from a paired device.
 
+After successful npm setup, the installer saves a private `lepan-pairing-<id>.png` and prints its full path. It also displays the QR code when the terminal is wide enough. In the iPhone or Android app, open **Settings → Set up users → Scan QR code** and scan the terminal or the saved image. The PNG is saved in the Leither root on Linux/macOS and its private `.lifedrive-household` directory on Windows. Household invitations expire ten minutes after creation; legacy identity codes contain a device private key, so keep them private and delete the image after pairing. Legacy `--add-device` and `--upgrade` also produce a code when an identity is available; household upgrades preserve existing pairings without issuing new invitations.
+
 An existing installation is backed up before replacement. The explicit `--upgrade` path requires the saved application and key-auth owner state before changing files, synchronizes the same published application MID, and does not rerun device or domain setup. This release intentionally does not migrate the earlier password-owner prototype. Application files are active only after Leither advances the application from `cur` to `last`; a publication timeout leaves the prior `last` version serving users.
 
 Source code and design documentation are maintained separately. No device key, identity bundle, PPT, publisher key, or node-specific application MID is included in these release assets.

package/USER_MANUAL.md

@@ -150,10 +150,10 @@ like a key: do not post it, email it to others, or paste it anywhere public.
 
 Within ten minutes of the invitation being printed:
 
-1. Copy the whole invitation block from the terminal and send it to your phone, or copy it on a computer your phone shares a clipboard with.
+1. Keep the installer’s final QR code visible, or open the saved `lepan-pairing-<id>.png` using the path it prints. If you used the standalone shell installer, copy the whole invitation block instead.
 2. Open LifeDrive on the phone. The **Set up your LifeDrive** screen opens by itself (or open **Settings → Set up users**).
 3. Enter **Your name** and a name for this device.
-4. Tap **Paste node identity** (or **Choose identity file** if you saved the invitation as a file).
+4. Tap **Scan QR code** and point the phone at the terminal or saved image. You can also use **Paste node identity** or **Choose identity file**.
 
 The phone creates its own device key, claims the node, and opens your new, empty
 personal drive. You are now the node's first user and its **administrator**, and

package/bin/lifedrive.js

@@ -3,6 +3,8 @@
 
 const fs = require("node:fs");
 const path = require("node:path");
+const os = require("node:os");
+const { randomUUID } = require("node:crypto");
 const { spawnSync } = require("node:child_process");
 const { pathToFileURL } = require("node:url");
 
@@ -10,6 +12,75 @@ const distributionDirectory = path.resolve(__dirname, "..", "dist");
 const bundlePath = path.join(distributionDirectory, "lifedrive-bundle.tar.gz");
 const checksumPath = `${bundlePath}.sha256`;
 
+async function showPairingCode(resultPath) {
+  if (!fs.existsSync(resultPath)) return;
+  // The child writes this only after setup succeeds. Never scrape its output:
+  // it can contain node keys as well as the mobile device's pairing identity.
+  const pairing = JSON.parse(fs.readFileSync(resultPath, "utf8"));
+  if (pairing.version !== 1 || !["lifedrive-device-identity", "lifedrive-node-setup"].includes(pairing.type)) {
+    throw new Error("Unsupported pairing data");
+  }
+  const directory = fs.readFileSync(`${resultPath}.directory`, "utf8");
+  if (!path.isAbsolute(directory)) throw new Error("Invalid pairing image directory");
+  const QRCode = require("qrcode");
+  const payload = JSON.stringify(pairing);
+  const options = { errorCorrectionLevel: "M", margin: 4, scale: 8 };
+  const png = await QRCode.toBuffer(payload, options);
+  // Unique names and exclusive creation avoid overwriting another device's
+  // code or following a pre-existing symlink. Keep this outside the app bundle.
+  const imagePath = path.join(directory, `lepan-pairing-${randomUUID()}.png`);
+  fs.writeFileSync(imagePath, png, { flag: "wx", mode: 0o600 });
+  process.stdout.write(`\nPair your phone: open LePan → Settings → Set up users → Scan QR code.\n`);
+  process.stdout.write(`Pairing image saved: ${imagePath}\n`);
+  process.stdout.write(pairing.type === "lifedrive-node-setup"
+    ? "Keep this code private. The invitation expires ten minutes after creation.\n"
+    : "This code contains your device private key. Keep it private and delete the image after pairing.\n");
+  // Small terminal codes use half-height blocks. If the terminal would wrap,
+  // direct the user to the full-resolution PNG instead of a broken code.
+  const modules = QRCode.create(payload, options).modules;
+  const width = modules.size + options.margin * 2;
+  if (process.stdout.isTTY && (!process.stdout.columns || process.stdout.columns > width)) {
+    // Explicit colors and a four-module quiet zone work on light/dark themes.
+    const dark = (x, y) => x >= 0 && y >= 0 && x < modules.size && y < modules.size && modules.get(y, x);
+    let terminal = "";
+    for (let y = -options.margin; y < modules.size + options.margin; y += 2) {
+      terminal += "\x1b[30;47m";
+      for (let x = -options.margin; x < modules.size + options.margin; x += 1) {
+        terminal += dark(x, y) ? (dark(x, y + 1) ? "█" : "▀") : (dark(x, y + 1) ? "▄" : " ");
+      }
+      terminal += "\x1b[0m\n";
+    }
+    process.stdout.write(terminal);
+  } else {
+    process.stdout.write("Open the saved PNG on this computer to scan it.\n");
+  }
+}
+
+async function runInstaller(command, args) {
+  const work = fs.mkdtempSync(path.join(os.tmpdir(), "lepan-pairing-"));
+  const resultPath = path.join(work, "pairing.json");
+  try {
+    const result = spawnSync(command, args, {
+      stdio: "inherit",
+      env: { ...process.env, LIFEDRIVE_PAIRING_RESULT: resultPath },
+    });
+    if (result.error) throw result.error;
+    if (typeof result.status === "number") process.exitCode = result.status;
+    else if (result.signal === "SIGINT") process.exitCode = 130;
+    else if (result.signal === "SIGTERM") process.exitCode = 143;
+    else process.exitCode = 1;
+    if (process.exitCode === 0) {
+      try { await showPairingCode(resultPath); }
+      catch {
+        // Parser errors may contain identity text; never print them.
+        process.stderr.write("LePan is installed, but its pairing QR code could not be created. Use the identity file or invitation shown above.\n");
+      }
+    }
+  } finally {
+    fs.rmSync(work, { recursive: true, force: true });
+  }
+}
+
 function windowsArguments(values) {
   const valueOptions = new Map([
     ["--leither-root", "-LeitherRoot"],
@@ -41,21 +112,17 @@ function windowsArguments(values) {
   return translated;
 }
 
-function main() {
+async function main() {
   if (process.platform === "win32") {
     const installerPath = path.join(distributionDirectory, "lifedrive-install.ps1");
     if (![installerPath, bundlePath, checksumPath].every(candidate => fs.existsSync(candidate))) {
       throw new Error("The npm package is incomplete. Reinstall @inoku/lepan and try again.");
     }
-    const result = spawnSync(
+    await runInstaller(
       "powershell.exe",
       ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-File", installerPath,
-        "-PackageDirectory", distributionDirectory, ...windowsArguments(process.argv.slice(2))],
-      { stdio: "inherit", env: process.env }
+        "-PackageDirectory", distributionDirectory, ...windowsArguments(process.argv.slice(2))]
     );
-    if (result.error) throw result.error;
-    if (typeof result.status === "number") process.exitCode = result.status;
-    else process.exitCode = 1;
     return;
   }
 
@@ -71,21 +138,13 @@ function main() {
   }
 
   const localReleaseBase = pathToFileURL(distributionDirectory).href.replace(/\/$/, "");
-  const result = spawnSync(
+  await runInstaller(
     "/bin/bash",
-    [installerPath, "--release-base", localReleaseBase, ...process.argv.slice(2)],
-    { stdio: "inherit", env: process.env }
+    [installerPath, "--release-base", localReleaseBase, ...process.argv.slice(2)]
   );
-  if (result.error) throw result.error;
-  if (typeof result.status === "number") process.exitCode = result.status;
-  else if (result.signal === "SIGINT") process.exitCode = 130;
-  else if (result.signal === "SIGTERM") process.exitCode = 143;
-  else process.exitCode = 1;
 }
 
-try {
-  main();
-} catch (error) {
+main().catch(error => {
   process.stderr.write(`LePan installer stopped: ${error.message}\n`);
   process.exitCode = 1;
-}
+});

package/dist/lifedrive-bundle.tar.gz

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/lifedrive-bundle.tar.gz
-size: 40572222 bytes
-sha256: 05320977b19562ac0e8f1419597dd92def37f0f13ec85767e23514cfc8235e53
+size: 44093522 bytes
+sha256: 0e95b10584f5a20d11b7aee8fe3a1dc01310151d22864301865170a92ac71f30

package/dist/lifedrive-bundle.tar.gz.sha256

@@ -1 +1 @@
-05320977b19562ac0e8f1419597dd92def37f0f13ec85767e23514cfc8235e53  lifedrive-bundle.tar.gz
+0e95b10584f5a20d11b7aee8fe3a1dc01310151d22864301865170a92ac71f30  lifedrive-bundle.tar.gz

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inoku/lepan",
-  "version": "0.7.59",
+  "version": "0.7.62",
   "description": "Install LePan and its Leither runtime on Linux, macOS, or Windows",
   "os": [
     "linux",
@@ -22,6 +22,9 @@
   "engines": {
     "node": ">=18"
   },
+  "dependencies": {
+    "qrcode": "1.5.4"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cfa532/lifedrive-installer.git"