@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/commands/service-units.js

@@ -0,0 +1,291 @@
+/**
+ * The OS supervisor definitions omnitron writes, as pure functions.
+ *
+ * Separated from `service.ts` so the units can be rendered and read without
+ * a machine: every input is an argument, nothing here consults `process` or
+ * the filesystem. The command layer supplies the facts.
+ *
+ * The distinction this file exists for is SCOPE.
+ *
+ * A `user` service belongs to the account that installed it. On macOS that is
+ * a LaunchAgent, on Linux a systemd user unit, and on both it is tied to a
+ * login session: the unit says `WantedBy=default.target`, and when the last
+ * session for that user ends, systemd stops it. For a workstation that is
+ * exactly right — the daemon is there while you are.
+ *
+ * A slave node is the opposite case. Its entire purpose is to be reachable
+ * when nobody is logged in, so a supervision mode whose default is "stops at
+ * logout" does not implement the role. `serviceInstall` had only that mode,
+ * and printed `Tip: loginctl enable-linger …` beside it. A printed tip is not
+ * a control: it changes nothing unless a human reads it, remembers, and runs
+ * it, and the failure it prevents shows up hours later as a node that was
+ * installed and is gone.
+ *
+ * So `system` scope: `/etc/systemd/system` and `WantedBy=multi-user.target`
+ * on Linux, `/Library/LaunchDaemons` on macOS. Both start at boot with no
+ * session involved.
+ *
+ * Root installs the unit; root does not run the daemon. The unit carries
+ * `User=` naming the account that owns `~/.omnitron`, because the daemon's
+ * unix socket IS its local authentication check — the whole local trust model
+ * is "whoever can open the socket is the owner". A daemon running as root
+ * with a socket anywhere shared redefines that silently, from "the owner" to
+ * "anyone on the box".
+ */
+export const LAUNCHD_LABEL = 'dev.omnitron.daemon';
+export const SYSTEMD_UNIT = 'omnitron-daemon.service';
+/** Where the definition file lives, for a scope and a home directory. */
+export function unitPathFor(platform, scope, home) {
+    if (platform === 'darwin') {
+        return scope === 'system'
+            ? `/Library/LaunchDaemons/${LAUNCHD_LABEL}.plist`
+            : `${home}/Library/LaunchAgents/${LAUNCHD_LABEL}.plist`;
+    }
+    return scope === 'system'
+        ? `/etc/systemd/system/${SYSTEMD_UNIT}`
+        : `${home}/.config/systemd/user/${SYSTEMD_UNIT}`;
+}
+function xmlEscape(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+/**
+ * A value as systemd will read it.
+ *
+ * Two things a unit file does to a value that look like nothing:
+ *
+ * **`%` is a specifier, not a character.** systemd expands `%h`, `%i`, `%n`
+ * and the rest everywhere — `ExecStart=`, `Environment=`,
+ * `WorkingDirectory=`. Measured on a live Ubuntu host, 2026-09-14:
+ *
+ *     WorkingDirectory=/tmp/a%hb   →  /tmp/a/rootb
+ *     Environment=X=/opt/a%hb      →  X=/opt/a/rootb
+ *     Environment=X=/opt/a%%hb     →  X=/opt/a%hb
+ *
+ * It does not fail; it substitutes. `%%` is the literal.
+ *
+ * ## What `systemd-analyze verify` proves, and what it does not
+ *
+ * It said nothing about the unit above. Not a warning — the substitution is
+ * not an error to systemd, it is the feature working.
+ *
+ * So a clean `verify` means the syntax parses and the files it names exist.
+ * It does NOT mean a value arrives the way it was written, and reading it
+ * that way is how these two defects survived a check that had already been
+ * run against this renderer and reported no findings.
+ *
+ * The question "did the value survive" has its own command:
+ *
+ *     systemctl show <unit> -p Environment -p WorkingDirectory -p ExecStart
+ *
+ * which prints what systemd actually holds. Both of the rules below were
+ * confirmed with it, and the one correction to them — that
+ * `WorkingDirectory=` must NOT be quoted — came from it too.
+ *
+ * **Whitespace splits.** `Environment=` takes a LIST of assignments separated
+ * by spaces, so a value with one in it is read as an assignment plus
+ * rubbish — measured on the same host:
+ *
+ *     Environment=X=/opt/a b/c     →  X=/opt/a
+ *                                     "Invalid environment assignment, ignoring: b/c"
+ *     Environment="X=/opt/a b/c"   →  X=/opt/a b/c
+ *
+ * The quotes go around the WHOLE assignment, which is why this function
+ * returns the value and `environmentLine` below composes the line: quoting
+ * only the right-hand side is a different thing to systemd.
+ *
+ * Raised by a colleague from the documentation, who could not test it —
+ * macOS has no systemd — and asked for the measurement. Both predictions
+ * held.
+ */
+export function escapeSpecifiers(value) {
+    return value.replace(/%/g, '%%');
+}
+/**
+ * A value for a directive that parses its argument as a LIST — `ExecStart=`'s
+ * command line, where whitespace separates arguments.
+ *
+ * Not every directive does. `WorkingDirectory=` takes one path and reads
+ * quotes as part of it; measured on the same host, quoting it produced
+ *
+ *     WorkingDirectory= path is not absolute: "/opt/my omnitron"
+ *     omni-escape-probe.service: Unit configuration has fatal error
+ *
+ * — a unit that will not start, from a fix for a value that did not need one.
+ * The escaping rule is per directive, and applying one rule to all of them
+ * trades a quiet defect for a loud one.
+ */
+export function unitValue(value) {
+    const escaped = escapeSpecifiers(value);
+    return /\s/.test(escaped) ? `"${escaped}"` : escaped;
+}
+/** One `Environment=` line, quoted as a whole assignment when it needs to be. */
+export function environmentLine(name, value) {
+    const assignment = `${name}=${value.replace(/%/g, '%%')}`;
+    return `Environment=${/\s/.test(assignment) ? `"${assignment}"` : assignment}`;
+}
+/**
+ * A systemd unit.
+ *
+ * `--import tsx/esm` is in the ExecStart because project configs are
+ * TypeScript. That loader is a declared runtime dependency of the package —
+ * it was a devDependency until 2026-09-14, which npm does not install, so a
+ * node prepared from the registry got a unit whose ExecStart could not
+ * resolve its own loader. Measured there: ERR_MODULE_NOT_FOUND.
+ */
+export function renderSystemdUnit(inputs) {
+    const exec = [inputs.execPath, '--import', 'tsx/esm', inputs.entryPath]
+        .map(unitValue)
+        .join(' ');
+    const system = inputs.scope === 'system';
+    if (system && !inputs.identity) {
+        throw new Error('A system unit must name the account it runs as.');
+    }
+    const id = inputs.identity;
+    const lines = [
+        '[Unit]',
+        'Description=Omnitron daemon — process supervisor and control plane',
+        'After=network.target docker.service',
+        '',
+        '[Service]',
+        'Type=simple',
+        `ExecStart=${exec}`,
+        // Escaped, not quoted: this directive takes a single path and would
+        // read the quotes as part of it.
+        `WorkingDirectory=${escapeSpecifiers(inputs.workdir)}`,
+    ];
+    if (system && id) {
+        // The daemon does not run as root. See the note at the top of this file:
+        // its unix socket is the authentication check.
+        lines.push(`User=${id.user}`, `Group=${id.user}`);
+        // HOME is stated, not inferred, and the reason is HOW it breaks rather
+        // than which systemd version derives it.
+        //
+        // `os.homedir()` decides where `~/.omnitron` is: the socket, the state
+        // database, the secrets. Get it wrong and nothing fails — the daemon
+        // creates a SECOND one and runs happily, while every client dials a
+        // socket that is not there. A silent divergence, for the value the local
+        // trust boundary is drawn around.
+        //
+        // PAM does not participate here: a service opens a PAM session only with
+        // `PAMName=`, and this unit does not set one. If somebody adds it, this
+        // decision needs revisiting — PAM can set HOME itself.
+        lines.push(environmentLine('HOME', id.home));
+    }
+    lines.push(environmentLine('OMNITRON_CWD', inputs.workdir), environmentLine('PATH', inputs.path), 'Restart=on-failure', 'RestartSec=10', 'TimeoutStopSec=30', '', '[Install]', 
+    // A user unit is wanted by the session; a system unit by the machine.
+    // `default.target` in a system unit is a unit that never starts at boot.
+    system ? 'WantedBy=multi-user.target' : 'WantedBy=default.target', '');
+    return lines.join('\n');
+}
+/**
+ * A launchd job — LaunchAgent for `user` scope, LaunchDaemon for `system`.
+ *
+ * `ProcessType` is `Interactive`. Without the key a job is `Standard`, which
+ * launchd.plist(5) describes as «light resource limits» on CPU and I/O —
+ * while anything started from a terminal has none. On a machine that also
+ * compiles, the control plane is the first thing the scheduler starves: on
+ * 2026-09-23 the dev master logged 139 stalls in 40 min at load 120 (another
+ * project's `rustc` and Python jobs), every one `off-cpu` — 1 to 4.6 s of a
+ * daemon that answered nothing, at 0 to 93 ms of CPU — and its mesh
+ * connection to the test node dropped under them. `Interactive` runs a job
+ * with the limits of an app, which is to say none. Not `Adaptive`: that moves
+ * a job between classes by its XPC transactions, and this daemon has none.
+ */
+export function renderLaunchdPlist(inputs) {
+    const args = [inputs.execPath, '--import', 'tsx/esm', inputs.entryPath];
+    const argsXml = args.map((a) => `    <string>${xmlEscape(a)}</string>`).join('\n');
+    const system = inputs.scope === 'system';
+    if (system && !inputs.identity) {
+        throw new Error('A system unit must name the account it runs as.');
+    }
+    const id = inputs.identity;
+    // A LaunchDaemon runs as root unless told otherwise, which is the same
+    // hazard the systemd branch avoids with `User=`.
+    const identityKeys = system && id
+        ? `  <key>UserName</key>\n  <string>${xmlEscape(id.user)}</string>\n`
+        : '';
+    const homeEnv = system && id ? `    <key>HOME</key>\n    <string>${xmlEscape(id.home)}</string>\n` : '';
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${LAUNCHD_LABEL}</string>
+${identityKeys}  <key>ProgramArguments</key>
+  <array>
+${argsXml}
+  </array>
+  <key>WorkingDirectory</key>
+  <string>${xmlEscape(inputs.workdir)}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+${homeEnv}    <key>OMNITRON_CWD</key>
+    <string>${xmlEscape(inputs.workdir)}</string>
+    <key>PATH</key>
+    <string>${xmlEscape(inputs.path)}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <dict>
+    <key>SuccessfulExit</key>
+    <false/>
+  </dict>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>ExitTimeOut</key>
+  <integer>30</integer>
+  <key>ProcessType</key>
+  <string>Interactive</string>
+  <key>StandardOutPath</key>
+  <string>/dev/null</string>
+  <key>StandardErrorPath</key>
+  <string>${xmlEscape(inputs.stderrLog)}</string>
+</dict>
+</plist>
+`;
+}
+/**
+ * Decide which supervision scope to install, or refuse and say why.
+ *
+ * The refusal is the point. Installing a user unit on a slave because root
+ * was unavailable produces something that looks installed, reports installed,
+ * and stops the moment the operator logs out — a failure that arrives later
+ * and elsewhere, with nothing linking it back to this decision.
+ */
+export function decideScope(inputs) {
+    const wantsSystem = inputs.requested === 'system' || (inputs.requested == null && inputs.role === 'slave');
+    if (!wantsSystem) {
+        return {
+            scope: 'user',
+            because: inputs.requested === 'user'
+                ? 'requested'
+                : 'this daemon is a master, and a master is supervised for the account that runs it',
+        };
+    }
+    if (inputs.isRoot) {
+        return {
+            scope: 'system',
+            because: inputs.role === 'slave' && inputs.requested == null
+                ? 'this daemon is a slave, and a slave must be reachable with nobody logged in'
+                : 'requested',
+        };
+    }
+    // Not root. A user unit still survives a logout IF linger is on for the
+    // account — so it is an answer, but only once that has been verified true.
+    if (inputs.platform === 'linux' && inputs.lingerEnabled) {
+        return {
+            scope: 'user',
+            because: 'not root, but lingering is enabled for this account, so a user unit survives logout',
+        };
+    }
+    return {
+        scope: 'user',
+        because: 'not root',
+        refusal: inputs.platform === 'linux'
+            ? 'A slave must stay up with nobody logged in. Install as root for a system unit, or enable lingering ' +
+                'for this account (`sudo loginctl enable-linger $USER`) and run this again.'
+            : 'A slave must stay up with nobody logged in. Install as root so the job can be a LaunchDaemon.',
+    };
+}
+//# sourceMappingURL=service-units.js.map

package/dist/commands/service-units.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-units.js","sourceRoot":"","sources":["../../src/commands/service-units.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AA4BH,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAEtD,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,QAAyB,EAAE,KAAmB,EAAE,IAAY;IACtF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,0BAA0B,aAAa,QAAQ;YACjD,CAAC,CAAC,GAAG,IAAI,yBAAyB,aAAa,QAAQ,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,uBAAuB,YAAY,EAAE;QACvC,CAAC,CAAC,GAAG,IAAI,yBAAyB,YAAY,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,UAAU,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1D,OAAO,eAAe,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;SACpE,GAAG,CAAC,SAAS,CAAC;SACd,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;IACzC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAE3B,MAAM,KAAK,GAAG;QACZ,QAAQ;QACR,oEAAoE;QACpE,qCAAqC;QACrC,EAAE;QACF,WAAW;QACX,aAAa;QACb,aAAa,IAAI,EAAE;QACnB,oEAAoE;QACpE,iCAAiC;QACjC,oBAAoB,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;KACvD,CAAC;IAEF,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjB,yEAAyE;QACzE,+CAA+C;QAC/C,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,uEAAuE;QACvE,yCAAyC;QACzC,EAAE;QACF,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,yEAAyE;QACzE,kCAAkC;QAClC,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,uDAAuD;QACvD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAI,CACR,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,EAC/C,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EACpC,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,EAAE,EACF,WAAW;IACX,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,EACjE,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;IACzC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAE3B,uEAAuE;IACvE,iDAAiD;IACjD,MAAM,YAAY,GAAG,MAAM,IAAI,EAAE;QAC/B,CAAC,CAAC,oCAAoC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa;QACrE,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,oCAAoC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAExG,OAAO;;;;;YAKG,aAAa;EACvB,YAAY;;EAEZ,OAAO;;;YAGG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;;;EAGnC,OAAO;cACK,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;;cAEzB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;YAkBxB,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;;;CAGtC,CAAC;AACF,CAAC;AA0BD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAE3G,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EACL,MAAM,CAAC,SAAS,KAAK,MAAM;gBACzB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,kFAAkF;SACzF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,OAAO,EACL,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;gBACjD,CAAC,CAAC,6EAA6E;gBAC/E,CAAC,CAAC,WAAW;SAClB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,qFAAqF;SAC/F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,UAAU;QACnB,OAAO,EACL,MAAM,CAAC,QAAQ,KAAK,OAAO;YACzB,CAAC,CAAC,qGAAqG;gBACrG,4EAA4E;YAC9E,CAAC,CAAC,+FAA+F;KACtG,CAAC;AACJ,CAAC"}

package/dist/commands/service.d.ts

@@ -0,0 +1,39 @@
+/**
+ * omnitron service install|uninstall|status — OS-level daemon supervision.
+ *
+ * Closes the last supervision gap: omnitron supervises apps and infra, but
+ * nothing supervised the daemon itself — a daemon crash (disk-full, load
+ * spike, dockerd hiccup) left every managed app down until a human ran
+ * `omnitron up`. This registers the daemon with the OS supervisor so it is
+ * resurrected automatically:
+ *
+ *   - macOS: LaunchAgent (~/Library/LaunchAgents/dev.omnitron.daemon.plist)
+ *   - Linux: systemd user unit (~/.config/systemd/user/omnitron-daemon.service)
+ *
+ * Layering stays intact — the OS owns the daemon lifecycle, the daemon owns
+ * app/stack lifecycle (boot-time stack resume via project enabledStacks).
+ *
+ * Restart semantics are crash-only (`KeepAlive={SuccessfulExit:false}` /
+ * `Restart=on-failure`): a graceful `omnitron down` exits 0 and STAYS down;
+ * a crash or SIGKILL exits abnormally and is respawned. This keeps the
+ * existing up/down semantics working unchanged with the service installed.
+ *
+ * The supervisor execs the same dist/daemon/daemon-entry.js that `omnitron
+ * up` forks — one daemon codepath, two launchers. daemon-entry carries a
+ * single-instance pid guard so the two launchers can never double-bind.
+ */
+import { type ServiceScope } from './service-units.js';
+/** True when the current platform's service definition file exists. */
+export declare function isServiceInstalled(): boolean;
+/** Load (or reload) the service with the supervisor and start it. */
+export declare function serviceBootstrap(scope?: ServiceScope): void;
+/** Unload the service (stops the daemon via supervisor SIGTERM). */
+export declare function serviceBootout(scope?: ServiceScope): void;
+/** Ask the supervisor to start the (already loaded) service now. */
+export declare function serviceKickstart(scope?: ServiceScope): void;
+export declare function serviceInstall(options?: {
+    scope?: ServiceScope;
+}): Promise<void>;
+export declare function serviceUninstall(): Promise<void>;
+export declare function serviceStatus(): Promise<void>;
+//# sourceMappingURL=service.d.ts.map

package/dist/commands/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/commands/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAWH,OAAO,EAOL,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AA6C5B,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,OAAO,CAQ5C;AAiHD,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,YAA6B,GAAG,IAAI,CAW3E;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,KAAK,GAAE,YAA6B,GAAG,IAAI,CAMzE;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,YAA6B,GAAG,IAAI,CAa3E;AAED,wBAAsB,cAAc,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,YAAY,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA8D1F;AA0BD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAsBtD;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CA4BnD"}