@nocobase/app-cli-client 0.1.0-beta.4 → 0.1.0-beta.6

package/README.md

@@ -4,6 +4,10 @@ A command line for a NocoBase application, branded by the application: it signs
 
 Business commands render lists as tables and object responses as named fields. HTTP(S) URLs remain complete for copying. Ordinary text and structured fields retain their compact display. Use `--json` for complete nested results, including Projects invitation links, and for scripts instead of parsing the text layout.
 
+A branded package with `skills/nb-studio-cli/SKILL.md` also exposes `skills install` and `skills status`. These local commands require neither a login nor a network connection. Install selects detected Claude Code and Codex tools by default, or takes repeated `--tool claude|codex|all`; `--dry-run` computes actions without writing. Claude's destination is `<CLAUDE_CONFIG_DIR or ~/.claude>/skills/nb-studio-cli`; Codex's destination is `~/.agents/skills/nb-studio-cli` regardless of `CODEX_HOME`, following the [official user Skill directory](https://learn.chatgpt.com/docs/build-skills#where-codex-loads-local-skills). Tool detection uses each tool's configuration variable or directory, or its executable on PATH; the shared `.agents/skills` directory alone does not detect Codex. No detected tool yields `SKILLS_NO_TOOL` with explicit installation suggestions.
+
+Status compares sorted relative paths and file contents using SHA-256 and reports manual copies, legacy Codex copies in `<CODEX_HOME or ~/.codex>/skills/nb-studio-cli`, and previously registered paths. Only `nb-studio-cli` is managed; install does not create legacy copies. Successful installations are recorded in `<CLI state directory>/skills.json`. Self-update uses the newly installed package (tarball root or npm package root) to synchronize recorded destinations. Skill failures leave the CLI upgrade successful and appear in the update envelope's `warnings` and `result.skills`; manual copies prompt an installation reminder. External upgrades, including npm global installation, require running `skills install` again. Install refuses agent run contexts, while status remains available. See Studio's [static command reference](../../apps/studio/docs/cli/static-commands.md) for the result schema and filesystem constraints.
+
 ```ts
 import { runAppCli } from '@nocobase/app-cli-client';
 
@@ -20,6 +24,8 @@ await runAppCli(
 );
 ```
 
+`<bin> acp start` connects the computer it runs on to the signed-in person's agent sessions (`@nocobase/app-plugin-agent-sessions`), so the sessions they start in the application's pages run there with the coding agents installed there; it runs the bridge of `@nocobase/acp-bridge` until stopped with Ctrl+C. `<bin> acp service install` runs the same in the background from every login, as a launchd agent on macOS, a systemd user unit on Linux or a script in the Startup folder on Windows, and starts it again when it fails; it writes in the shell's PATH, the CLI's own variables, proxy and CA variables and the `--pass-env` names, since a service reads no shell configuration. `acp service status` says whether it is installed and connected and where its output goes; `acp service uninstall` removes it. One bridge runs per profile: a second one refuses to start. `--root` limits where sessions may work on this computer, repeated for several directories (the home directory by default), and the person chooses the folders among them in the application. `--name` is the computer's name in the application (its host name by default). The computer's id and key are kept per profile and server under `<home>/acp/`, readable by their owner only: the key, issued when the person first connects the computer, keeps it connected however long the sign-in lasts, until the computer is removed in the application. Connecting needs a person's sign-in: an agent run's credential is refused.
+
 An application whose install script (`/api/agents/dist/installScript` of `@nocobase/app-plugin-agents`) installs its CLI names `selfUpdate` in the configuration, with the root of the CLI's package as it runs (`packageRoot`). The CLI then has `<bin> update`, which asks the signed-in server for the newest version it serves for this platform (`selfUpdate.product`, the command name by default), downloads and checks its SHA-256, or, when the server serves no tarball and names the package on npm (`accept=npm`), installs that exact version with the machine's npm, and switches `<prefix>/current` to it, keeping the previous version; business commands and `login` say on stderr when a newer version is served, asking at most every 12 hours (`<state dir>/cache/update.json`). An installation the script made for the runner (`install.json` `mode: runner`) is the runner's, which updates itself, so `update` refuses it. `@nocobase/app-cli-client/install` is that installation layout (`<prefix>/versions/<version>`, `current`, `<prefix>/node`, `install.json`) and the update itself, without reading any CLI configuration, so a runner shares it. A version directory holds an unpacked tarball, or an npm install (`installNpmVersion`: `npm install --prefix <dir> --no-save --no-audit --no-fund --omit=optional <package>@<version>`, with npm from `NOCOBASE_NPM`, PATH or beside the Node) with the launcher `npmLauncherScript` at `bin/<bin>`, which starts `node_modules/.bin/<bin>` on `<prefix>/node` or the first Node.js 24 it finds; `detectInstallation` takes either root, the version directory or the package inside its `node_modules`, and `applyUpdate` installs an `UpdateTarget` of either kind.
 
 `@nocobase/app-cli-client/request` exports `fillRequest`, which turns a manifest command and the values of its parameters into the request it makes. It imports nothing else, so a server that calls its own routes the way the CLI does, such as an online agent's tools in `@nocobase/app-plugin-agents`, builds the same request.

package/dist/acp-service.d.ts

@@ -0,0 +1,39 @@
+export interface AcpServiceOptions {
+    /** The CLI's command name, such as `nb-studio`. */
+    readonly bin: string;
+    /** The program and arguments that start the CLI, such as [node, bin/run.js]. */
+    readonly command: readonly string[];
+    /** What follows `acp start --service`: the profile, the computer's name and its roots. */
+    readonly args: readonly string[];
+    /** Where the service's output goes, on macOS and Windows; systemd keeps it in the journal. */
+    readonly log: string;
+    /** The variables written into the service, with their values. */
+    readonly env: Readonly<Record<string, string>>;
+    /** Separates the services of several profiles. */
+    readonly profile?: string | undefined;
+    readonly platform?: NodeJS.Platform;
+    readonly home?: string;
+    readonly uid?: number;
+}
+export interface AcpServicePlan {
+    readonly platform: 'launchd' | 'systemd' | 'startup';
+    readonly label: string;
+    readonly file: string;
+    readonly content: string;
+    readonly install: readonly (readonly string[])[];
+    readonly uninstall: readonly (readonly string[])[];
+    /** Answers with exit code 0 while the service is loaded; none on Windows, where the file is the service. */
+    readonly status?: readonly string[];
+}
+/** The proxy and CA variables a service needs to reach the application as the shell does. */
+export declare const NETWORK_ENV: readonly string[];
+/** `names` with their values in `env`, those set; a value with NUL cannot be written into a service. */
+export declare function capture(env: NodeJS.ProcessEnv, names: readonly string[]): Record<string, string>;
+export declare function acpServicePlan(options: AcpServiceOptions): AcpServicePlan;
+/** Writes the service and starts it, replacing one installed before. */
+export declare function installAcpService(plan: AcpServicePlan): Promise<void>;
+/** Stops the service and removes it; on Windows the running bridge is stopped by the caller. */
+export declare function uninstallAcpService(plan: AcpServicePlan): Promise<void>;
+/** Whether the service is loaded (launchd, systemd); undefined where only its file says so. */
+export declare function acpServiceLoaded(plan: AcpServicePlan): Promise<boolean | undefined>;
+//# sourceMappingURL=acp-service.d.ts.map

package/dist/acp-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-service.d.ts","sourceRoot":"","sources":["../src/acp-service.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,0FAA0F;IAC1F,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,8FAA8F;IAC9F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IACnD,4GAA4G;IAC5G,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,6FAA6F;AAC7F,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAYxC,CAAC;AAEF,wGAAwG;AACxG,wBAAgB,OAAO,CACrB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUxB;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CAwEzE;AAED,wEAAwE;AACxE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC3E;AAED,gGAAgG;AAChG,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7E;AAED,+FAA+F;AAC/F,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAO9B"}

package/dist/acp-service.js

@@ -0,0 +1,255 @@
+// `<bin> acp start` as a per-user service that starts at login and starts again when it fails: a launchd agent on
+// macOS, a systemd user unit on Linux, and on Windows a script in the Startup folder that runs it without a window. The
+// service runs `acp start --service`, which stops for good, exiting 0, when the application no longer accepts the
+// computer, rather than failing again and again. It gets the installing shell's PATH, the CLI's own variables, proxy and
+// CA variables and the `--pass-env` names with their values now, since a service reads no shell configuration; its
+// files are readable by their owner only. Each plan lists the file it writes and the commands it runs.
+import { execFile, spawn } from 'node:child_process';
+import { chmod, mkdir, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { promisify } from 'node:util';
+const run = promisify(execFile);
+/** The proxy and CA variables a service needs to reach the application as the shell does. */
+export const NETWORK_ENV = [
+    'HTTP_PROXY',
+    'HTTPS_PROXY',
+    'ALL_PROXY',
+    'NO_PROXY',
+    'http_proxy',
+    'https_proxy',
+    'all_proxy',
+    'no_proxy',
+    'SSL_CERT_FILE',
+    'SSL_CERT_DIR',
+    'NODE_EXTRA_CA_CERTS',
+];
+/** `names` with their values in `env`, those set; a value with NUL cannot be written into a service. */
+export function capture(env, names) {
+    const captured = {};
+    for (const name of names) {
+        const value = env[name];
+        if (value === undefined || value === '')
+            continue;
+        if (value.includes('\0'))
+            throw new Error(`Cannot write ${name} into a service: it holds NUL.`);
+        captured[name] = value;
+    }
+    return captured;
+}
+export function acpServicePlan(options) {
+    const platform = options.platform ?? process.platform;
+    const home = options.home ?? os.homedir();
+    const suffix = options.profile
+        ? `-${options.profile.replace(/[^A-Za-z0-9._-]/gu, '_')}`
+        : '';
+    const name = `${options.bin}-acp${suffix}`;
+    const args = [
+        ...options.command,
+        'acp',
+        'start',
+        '--service',
+        ...options.args,
+    ];
+    if (platform === 'darwin') {
+        const label = `com.nocobase.${name}`;
+        const file = path.join(home, 'Library', 'LaunchAgents', `${label}.plist`);
+        const domain = `gui/${options.uid ?? process.getuid?.() ?? 501}`;
+        return {
+            platform: 'launchd',
+            label,
+            file,
+            content: plist(label, args, options.env, options.log),
+            install: [
+                ['launchctl', 'bootout', `${domain}/${label}`],
+                ['launchctl', 'bootstrap', domain, file],
+            ],
+            uninstall: [['launchctl', 'bootout', `${domain}/${label}`]],
+            status: ['launchctl', 'print', `${domain}/${label}`],
+        };
+    }
+    if (platform === 'linux') {
+        const unit = `${name}.service`;
+        return {
+            platform: 'systemd',
+            label: unit,
+            file: path.join(home, '.config', 'systemd', 'user', unit),
+            content: systemdUnit(options.bin, args, options.env),
+            install: [
+                ['systemctl', '--user', 'daemon-reload'],
+                ['systemctl', '--user', 'enable', unit],
+                ['systemctl', '--user', 'restart', unit],
+            ],
+            uninstall: [
+                ['systemctl', '--user', 'disable', '--now', unit],
+                ['systemctl', '--user', 'daemon-reload'],
+            ],
+            status: ['systemctl', '--user', 'is-active', '--quiet', unit],
+        };
+    }
+    if (platform === 'win32') {
+        const appData = process.env.APPDATA ?? path.win32.join(home, 'AppData', 'Roaming');
+        const file = path.win32.join(appData, 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup', `${name}.vbs`);
+        return {
+            platform: 'startup',
+            label: name,
+            file,
+            content: startupScript(args, options.env, options.log),
+            install: [['wscript.exe', '//B', '//Nologo', file]],
+            uninstall: [],
+        };
+    }
+    throw new Error(`Running as a service is not supported on ${platform}.`);
+}
+/** Writes the service and starts it, replacing one installed before. */
+export async function installAcpService(plan) {
+    await mkdir(path.dirname(plan.file), { recursive: true });
+    // Only its owner reads it: the variables written into it may hold a proxy's password or a key.
+    await writeFile(plan.file, plan.content, { mode: 0o600 });
+    await chmod(plan.file, 0o600);
+    if (plan.platform === 'startup') {
+        // The script starts at the next login by itself; this starts it now, outliving this command.
+        const [command = '', ...args] = plan.install[0] ?? [];
+        spawn(command, args, {
+            detached: true,
+            stdio: 'ignore',
+            windowsHide: true,
+        }).unref();
+        return;
+    }
+    for (const [index, [command = '', ...args]] of plan.install.entries()) {
+        // launchd's `bootout` of a service that is not loaded fails, which is fine; it may also still be removing the
+        // previous instance right after it, so `bootstrap` is tried again for a few seconds.
+        if (plan.platform === 'launchd' && index === 0) {
+            await run(command, args).catch(() => undefined);
+            continue;
+        }
+        for (let attempt = 1;; attempt += 1) {
+            try {
+                await run(command, args);
+                break;
+            }
+            catch (error) {
+                if (plan.platform !== 'launchd' || attempt >= 10)
+                    throw error;
+                await new Promise((resolve) => setTimeout(resolve, 500));
+            }
+        }
+    }
+}
+/** Stops the service and removes it; on Windows the running bridge is stopped by the caller. */
+export async function uninstallAcpService(plan) {
+    for (const [command = '', ...args] of plan.uninstall)
+        // Not loaded is fine: the goal is that it is not.
+        await run(command, args).catch(() => undefined);
+    await rm(plan.file, { force: true });
+}
+/** Whether the service is loaded (launchd, systemd); undefined where only its file says so. */
+export async function acpServiceLoaded(plan) {
+    if (!plan.status)
+        return undefined;
+    const [command = '', ...args] = plan.status;
+    return run(command, args).then(() => true, () => false);
+}
+function xml(value) {
+    return value
+        .replace(/&/gu, '&amp;')
+        .replace(/</gu, '&lt;')
+        .replace(/>/gu, '&gt;');
+}
+function plist(label, args, env, log) {
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${xml(label)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args.map((arg) => `    <string>${xml(arg)}</string>`).join('\n')}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${Object.entries(env)
+        .map(([key, value]) => `    <key>${xml(key)}</key>\n    <string>${xml(value)}</string>`)
+        .join('\n')}
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <dict>
+    <key>SuccessfulExit</key>
+    <false/>
+  </dict>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>StandardOutPath</key>
+  <string>${xml(log)}</string>
+  <key>StandardErrorPath</key>
+  <string>${xml(log)}</string>
+</dict>
+</plist>
+`;
+}
+function systemdQuote(value) {
+    return /[\s'"\\\p{Cc}]/u.test(value)
+        ? `"${value.replace(/[\\"\p{Cc}]/gu, (character) => {
+            if (character === '\\' || character === '"')
+                return `\\${character}`;
+            const code = character.charCodeAt(0);
+            return code < 128
+                ? `\\x${code.toString(16).padStart(2, '0')}`
+                : `\\u${code.toString(16).padStart(4, '0')}`;
+        })}"`
+        : value;
+}
+function systemdUnit(bin, args, env) {
+    return `[Unit]
+Description=${bin} agent sessions on this computer
+After=network-online.target
+
+[Service]
+ExecStart=${args.map(systemdQuote).join(' ')}
+${Object.entries(env)
+        // Quoted, with `%` doubled so systemd expands no specifier in it.
+        .map(([key, value]) => `Environment=${systemdQuote(`${key}=${value}`.replace(/%/gu, '%%'))}`)
+        .join('\n')}
+Restart=on-failure
+RestartSec=10
+KillMode=mixed
+
+[Install]
+WantedBy=default.target
+`;
+}
+/** `value` as one argument of a cmd.exe command line. */
+function cmdQuote(value) {
+    return /^[\w@+=:,./\\-]+$/u.test(value)
+        ? value
+        : `"${value.replace(/"/gu, '""')}"`;
+}
+/** `value` as a VBScript string literal. */
+function vbsString(value) {
+    return `"${value.replace(/"/gu, '""')}"`;
+}
+/**
+ * A script Windows runs at login from the Startup folder: it runs the CLI without a window, its output appended to the
+ * log, and again 10 seconds after it fails, until the CLI exits 0 or the script is removed.
+ */
+function startupScript(args, env, log) {
+    const line = `cmd.exe /d /s /c "${args.map(cmdQuote).join(' ')} >> ${cmdQuote(log)} 2>&1"`;
+    return [
+        "' Runs the agent sessions bridge at login, without a window; remove this file to stop it starting.",
+        'Set shell = CreateObject("WScript.Shell")',
+        'Set files = CreateObject("Scripting.FileSystemObject")',
+        'Set env = shell.Environment("Process")',
+        ...Object.entries(env).map(([key, value]) => `env(${vbsString(key)}) = ${vbsString(value)}`),
+        'Do',
+        `  code = shell.Run(${vbsString(line)}, 0, True)`,
+        '  If code = 0 Or Not files.FileExists(WScript.ScriptFullName) Then Exit Do',
+        '  WScript.Sleep 10000',
+        'Loop',
+        '',
+    ].join('\r\n');
+}
+//# sourceMappingURL=acp-service.js.map

package/dist/acp-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-service.js","sourceRoot":"","sources":["../src/acp-service.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,wHAAwH;AACxH,kHAAkH;AAClH,yHAAyH;AACzH,mHAAmH;AACnH,uGAAuG;AACvG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA+BhC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,YAAY;IACZ,aAAa;IACb,WAAW;IACX,UAAU;IACV,eAAe;IACf,cAAc;IACd,qBAAqB;CACtB,CAAC;AAEF,wGAAwG;AACxG,MAAM,UAAU,OAAO,CACrB,GAAsB,EACtB,KAAwB;IAExB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,gCAAgC,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA0B;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO;QAC5B,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE;QACzD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,OAAO,MAAM,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG;QACX,GAAG,OAAO,CAAC,OAAO;QAClB,KAAK;QACL,OAAO;QACP,WAAW;QACX,GAAG,OAAO,CAAC,IAAI;KAChB,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,gBAAgB,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;QACjE,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK;YACL,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;YACrD,OAAO,EAAE;gBACP,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC9C,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC;aACzC;YACD,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,IAAI,UAAU,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;YACzD,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;YACpD,OAAO,EAAE;gBACP,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;gBACxC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;gBACvC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC;aACzC;YACD,SAAS,EAAE;gBACT,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;gBACjD,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;aACzC;YACD,MAAM,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAC1B,OAAO,EACP,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,GAAG,IAAI,MAAM,CACd,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,IAAI;YACX,IAAI;YACJ,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;YACtD,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YACnD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAoB;IAC1D,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,+FAA+F;IAC/F,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,6FAA6F;QAC7F,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACnB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtE,8GAA8G;QAC9G,qFAAqF;QACrF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QACD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACzB,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,IAAI,EAAE;oBAAE,MAAM,KAAK,CAAC;gBAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAoB;IAC5D,KAAK,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;QAClD,kDAAkD;QAClD,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB;IAEpB,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK,CACZ,KAAa,EACb,IAAuB,EACvB,GAAqC,EACrC,GAAW;IAEX,OAAO;;;;;YAKG,GAAG,CAAC,KAAK,CAAC;;;EAGpB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;EAIhE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAClB,GAAG,CACF,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,YAAY,GAAG,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,KAAK,CAAC,WAAW,CACnE;SACA,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;YAYD,GAAG,CAAC,GAAG,CAAC;;YAER,GAAG,CAAC,GAAG,CAAC;;;CAGnB,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,SAAS,EAAE,EAAE;YAC/C,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,IAAI,GAAG,GAAG;gBACf,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACjD,CAAC,CAAC,GAAG;QACP,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAClB,GAAW,EACX,IAAuB,EACvB,GAAqC;IAErC,OAAO;cACK,GAAG;;;;YAIL,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;EAC1C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QACnB,kEAAkE;SACjE,GAAG,CACF,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,eAAe,YAAY,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CACxE;SACA,IAAI,CAAC,IAAI,CAAC;;;;;;;CAOZ,CAAC;AACF,CAAC;AAED,yDAAyD;AACzD,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QACrC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;AACxC,CAAC;AAED,4CAA4C;AAC5C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CACpB,IAAuB,EACvB,GAAqC,EACrC,GAAW;IAEX,MAAM,IAAI,GAAG,qBAAqB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3F,OAAO;QACL,oGAAoG;QACpG,2CAA2C;QAC3C,wDAAwD;QACxD,wCAAwC;QACxC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CACxB,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,KAAK,CAAC,EAAE,CACjE;QACD,IAAI;QACJ,sBAAsB,SAAS,CAAC,IAAI,CAAC,YAAY;QACjD,4EAA4E;QAC5E,uBAAuB;QACvB,MAAM;QACN,EAAE;KACH,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC"}

package/dist/acp.d.ts

@@ -0,0 +1,4 @@
+import { type Command } from '@oclif/core';
+import type { AppCliConfig } from './config.ts';
+export declare function acpCommands(app: AppCliConfig): Record<string, Command.Class>;
+//# sourceMappingURL=acp.d.ts.map

package/dist/acp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.d.ts","sourceRoot":"","sources":["../src/acp.ts"],"names":[],"mappings":"AAUA,OAAO,EAAS,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAclD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMhD,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CA2P5E"}

package/dist/acp.js

@@ -0,0 +1,302 @@
+// `<bin> acp start`: connects this computer to the signed-in person's agent sessions and keeps it connected until it
+// is stopped; `<bin> acp service install` does the same at every login, in the background (`acp-service.ts`). The
+// bridge itself is `@nocobase/acp-bridge`; this command hands it the server, the person's credentials and the file that
+// remembers this computer and its key for the profile, and keeps a second bridge for that profile from starting.
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { mkdir, open, readFile, rm } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { Flags } from '@oclif/core';
+import { BridgeStopped, runBridge } from '@nocobase/acp-bridge';
+import { EXIT_CODES } from '@nocobase/agent-protocol';
+import { acpServiceLoaded, acpServicePlan, capture, installAcpService, NETWORK_ENV, uninstallAcpService, } from "./acp-service.js";
+import { currentSession } from "./dynamic/session.js";
+import { detectInstallation } from "./install.js";
+import { AppCommand, UsageError } from "./lib/command.js";
+import { globalFlags } from "./lib/globals.js";
+export function acpCommands(app) {
+    const placeFlags = {
+        name: Flags.string({
+            description: "The computer's name in the application; its host name by default.",
+        }),
+        root: Flags.string({
+            description: 'A directory sessions may work in; repeat for several. Your home directory by default.',
+            multiple: true,
+        }),
+    };
+    /** The signed-in person, or a usage error saying to sign in. */
+    async function signedIn() {
+        const session = await currentSession();
+        if (session?.kind !== 'user') {
+            throw new UsageError(session
+                ? "An agent's run cannot connect a computer. Run this outside the run's working directory."
+                : `Not signed in. Run \`${app.bin} login\` first.`, EXIT_CODES.auth);
+        }
+        return session;
+    }
+    /**
+     * The service for the current profile, starting the CLI as it was started now (`root` is its package's); `hidden`
+     * leaves the values of the variables written into it out, for printing.
+     */
+    function servicePlan(root, home, flags, hidden = false) {
+        const profile = globalFlags().profile;
+        const prefix = app.envPrefix;
+        const env = {
+            PATH: process.env.PATH ?? '/usr/local/bin:/usr/bin:/bin',
+            ...capture(process.env, [
+                ...(app.homeEnv ? [app.homeEnv] : []),
+                ...(app.keychainEnv ? [app.keychainEnv] : []),
+                ...(prefix
+                    ? [`${prefix}_SERVER`, `${prefix}_API_KEY`, `${prefix}_PROFILE`]
+                    : []),
+                ...NETWORK_ENV,
+                ...(flags['pass-env'] ?? []),
+            ]),
+        };
+        return acpServicePlan({
+            bin: app.bin,
+            command: selfCommand(root),
+            args: [
+                ...(profile ? ['--profile', profile] : []),
+                ...(flags.name ? ['--name', flags.name] : []),
+                ...(flags.root ?? []).flatMap((root) => [
+                    '--root',
+                    path.resolve(expandHome(root)),
+                ]),
+            ],
+            log: path.join(home, 'acp', 'service.log'),
+            env: hidden
+                ? Object.fromEntries(Object.keys(env).map((name) => [name, '<hidden>']))
+                : env,
+            profile,
+        });
+    }
+    return {
+        'acp:start': class AcpStart extends AppCommand {
+            static summary = 'Run your agent sessions on this computer.';
+            static description = `Connects this computer to ${app.displayName} as the signed-in person, so the sessions you start there run ` +
+                'here with the coding agents installed here, in the directories you allow. It stays connected until you stop it ' +
+                `with Ctrl+C; stopping it stops the agents it started. To keep it running in the background from every login, ` +
+                `run \`${app.bin} acp service install\` instead.`;
+            static examples = [
+                `${app.bin} acp start`,
+                `${app.bin} acp start --name "Work laptop" --root ~/code`,
+            ];
+            static flags = {
+                ...placeFlags,
+                service: Flags.boolean({
+                    description: 'Run as the background service does: stop for good when the application no longer accepts this computer.',
+                    hidden: true,
+                }),
+            };
+            async run() {
+                const { flags } = await this.parse(AcpStart);
+                const session = await signedIn();
+                const stateFile = stateFileOf(this.paths.home, session);
+                const release = await holdLock(`${stateFile}.lock`, app.bin);
+                const stop = new AbortController();
+                const onSignal = () => stop.abort();
+                process.once('SIGINT', onSignal);
+                process.once('SIGTERM', onSignal);
+                try {
+                    await runBridge({
+                        server: session.server,
+                        headers: session.headers,
+                        client: { name: app.bin, version: this.config.version },
+                        stateFile,
+                        ...(flags.name ? { name: flags.name } : {}),
+                        ...(flags.root
+                            ? {
+                                roots: flags.root.map((root) => path.resolve(expandHome(root))),
+                            }
+                            : {}),
+                        reconnect: !flags.service,
+                        signal: stop.signal,
+                        log: (message) => this.log(flags.service ? `${timestamp()} ${message}` : message),
+                    });
+                    this.log('Disconnected.');
+                }
+                catch (error) {
+                    if (!(error instanceof BridgeStopped))
+                        throw error;
+                    // The service stops for good, exiting 0, rather than being started again to be refused again.
+                    if (flags.service) {
+                        this.log(`${timestamp()} ${error.message}`);
+                        return;
+                    }
+                    throw new UsageError(error.message, EXIT_CODES.auth);
+                }
+                finally {
+                    process.off('SIGINT', onSignal);
+                    process.off('SIGTERM', onSignal);
+                    await release();
+                }
+            }
+        },
+        'acp:service:install': class AcpServiceInstall extends AppCommand {
+            static summary = 'Keep this computer connected in the background, from every login.';
+            static description = `Installs \`${app.bin} acp start\` as a service of your user: a launchd agent on macOS, a systemd user unit on ` +
+                'Linux, a script in the Startup folder on Windows. It starts now and at every login, and again when it fails. ' +
+                "A service does not read your shell configuration, so this shell's PATH (where the agents are found), proxy and " +
+                'CA variables and the --pass-env names are written into it with their values now; install again after ' +
+                'changing one, or after installing an agent somewhere new.';
+            static supportsDryRun = true;
+            static examples = [
+                `${app.bin} acp service install`,
+                `${app.bin} acp service install --root ~/code --pass-env ANTHROPIC_API_KEY`,
+            ];
+            static flags = {
+                ...placeFlags,
+                'pass-env': Flags.string({
+                    description: 'An environment variable the agents need, such as an API key kept in your shell; repeat for several.',
+                    multiple: true,
+                }),
+            };
+            async run() {
+                const { flags } = await this.parse(AcpServiceInstall);
+                const session = await signedIn();
+                const plan = servicePlan(this.config.root, this.paths.home, flags);
+                if (this.dryRun) {
+                    this.log(`# ${plan.file}`);
+                    this.log(servicePlan(this.config.root, this.paths.home, flags, true).content);
+                    return { file: plan.file, installed: false };
+                }
+                const lock = `${stateFileOf(this.paths.home, session)}.lock`;
+                const running = await lockHolder(lock);
+                if (running !== undefined && !(await acpServiceLoaded(plan)))
+                    throw new UsageError(`This computer is already connected by \`${app.bin} acp start\` (process ${running}). Stop it first, then install the service.`);
+                if (plan.platform === 'startup')
+                    await stopHolder(lock);
+                await installAcpService(plan);
+                this.log(`Installed ${plan.file}: this computer stays connected from every login.`);
+                if (plan.platform === 'systemd')
+                    this.log('A user service stops when you log out; to keep it running then, run `loginctl enable-linger`.');
+                this.log(`See how it runs with \`${app.bin} acp service status\`; stop it with \`${app.bin} acp service uninstall\`.`);
+                return { file: plan.file, installed: true };
+            }
+        },
+        'acp:service:uninstall': class AcpServiceUninstall extends AppCommand {
+            static summary = 'Stop keeping this computer connected in the background.';
+            static description = 'Stops the service `acp service install` installed and removes it. The computer stays in the application, offline, until you remove it there or connect it again.';
+            async run() {
+                const plan = servicePlan(this.config.root, this.paths.home, {});
+                await uninstallAcpService(plan);
+                const session = await currentSession();
+                // On Windows the file only starts the bridge; the bridge running now is stopped here.
+                if (plan.platform === 'startup' && session?.kind === 'user')
+                    await stopHolder(`${stateFileOf(this.paths.home, session)}.lock`);
+                this.log(`Removed ${plan.file}.`);
+                return { file: plan.file };
+            }
+        },
+        'acp:service:status': class AcpServiceStatus extends AppCommand {
+            static summary = 'Show whether this computer is connected in the background.';
+            async run() {
+                const plan = servicePlan(this.config.root, this.paths.home, {});
+                const session = await currentSession();
+                const installed = existsSync(plan.file);
+                const holder = session?.kind === 'user'
+                    ? await lockHolder(`${stateFileOf(this.paths.home, session)}.lock`)
+                    : undefined;
+                const loaded = installed ? await acpServiceLoaded(plan) : false;
+                const log = path.join(this.paths.home, 'acp', 'service.log');
+                this.log(installed
+                    ? `Installed: ${plan.file}${loaded === false ? ' (not loaded)' : ''}`
+                    : `Not installed. Install it with \`${app.bin} acp service install\`.`);
+                this.log(holder === undefined
+                    ? 'Not connected now.'
+                    : `Connected now (process ${holder}).`);
+                if (plan.platform === 'systemd')
+                    this.log(`Its output: journalctl --user -u ${plan.label}`);
+                else
+                    this.log(`Its output: ${log}`);
+                return {
+                    installed,
+                    running: holder !== undefined,
+                    file: plan.file,
+                    log,
+                };
+            }
+        },
+    };
+}
+/** Where the bridge remembers this computer and its key, for the profile and server. */
+function stateFileOf(home, session) {
+    return path.join(home, 'acp', `${createHash('sha256').update(session.cacheKey).update(session.server).digest('hex').slice(0, 16)}.json`);
+}
+/**
+ * Makes this process the one running the bridge for the state file `lock` stands beside, or refuses when another
+ * running process is; answers what lets go of it.
+ */
+async function holdLock(lock, bin) {
+    await mkdir(path.dirname(lock), { recursive: true, mode: 0o700 });
+    for (;;) {
+        try {
+            const handle = await open(lock, 'wx', 0o600);
+            await handle.writeFile(String(process.pid));
+            await handle.close();
+            return () => rm(lock, { force: true });
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+        const holder = await lockHolder(lock);
+        if (holder !== undefined)
+            throw new UsageError(`This computer is already connected (process ${holder}), in a terminal or by the background service (\`${bin} acp service status\`).`);
+        // Left behind by a bridge that did not stop cleanly.
+        await rm(lock, { force: true });
+    }
+}
+/** The running process holding `lock`, if any. */
+async function lockHolder(lock) {
+    const pid = Number(await readFile(lock, 'utf8').catch(() => ''));
+    if (!Number.isInteger(pid) || pid <= 0)
+        return undefined;
+    try {
+        process.kill(pid, 0);
+        return pid;
+    }
+    catch (error) {
+        return error.code === 'EPERM' ? pid : undefined;
+    }
+}
+/** Stops the bridge holding `lock`, with what it started. */
+async function stopHolder(lock) {
+    const pid = await lockHolder(lock);
+    if (pid === undefined)
+        return;
+    if (process.platform === 'win32') {
+        const { execFile } = await import('node:child_process');
+        await new Promise((resolve) => {
+            execFile('taskkill', ['/pid', String(pid), '/T', '/F'], { windowsHide: true }, () => resolve());
+        });
+    }
+    else
+        process.kill(pid, 'SIGTERM');
+}
+/**
+ * How a service starts this CLI: this Node and this entry, through `<prefix>/current` when the CLI was installed by
+ * the application's install script, so that the service runs whichever version an update made current.
+ */
+function selfCommand(root) {
+    const installation = detectInstallation(root);
+    const throughCurrent = (file) => installation && file.startsWith(installation.versionDir)
+        ? path.join(installation.current, file.slice(installation.versionDir.length))
+        : file;
+    return [
+        throughCurrent(process.execPath),
+        ...process.execArgv,
+        throughCurrent(process.argv[1] ?? ''),
+    ];
+}
+function timestamp() {
+    return new Date().toISOString();
+}
+function expandHome(dir) {
+    return dir === '~' || dir.startsWith('~/') || dir.startsWith('~\\')
+        ? path.join(os.homedir(), dir.slice(1))
+        : dir;
+}
+//# sourceMappingURL=acp.js.map